x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) (fail_nth: 1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1577.395203] CPU: 1 PID: 9829 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1577.397050] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.398097] Call Trace: [ 1577.398446] dump_stack+0x107/0x167 [ 1577.398927] should_fail.cold+0x5/0xa [ 1577.399430] ? create_object.isra.0+0x3a/0xa20 [ 1577.400034] should_failslab+0x5/0x20 [ 1577.400554] kmem_cache_alloc+0x5b/0x310 [ 1577.401093] create_object.isra.0+0x3a/0xa20 [ 1577.401667] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1577.402337] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1577.402994] ? alloc_skb_with_frags+0x92/0x570 [ 1577.403595] __alloc_skb+0xb1/0x5b0 [ 1577.403640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.404046] alloc_skb_with_frags+0x92/0x570 [ 1577.405621] ? lock_chain_count+0x20/0x20 [ 1577.406174] sock_alloc_send_pskb+0x7af/0x930 [ 1577.406771] ? sk_alloc+0x350/0x350 [ 1577.407259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1577.407947] ? lock_downgrade+0x6d0/0x6d0 [ 1577.408511] __ip_append_data+0x1628/0x3310 [ 1577.409089] ? fib_select_path+0x293/0x1de0 [ 1577.409659] ? ip_frag_init+0x350/0x350 [ 1577.410192] ? ip_finish_output+0x330/0x330 [ 1577.410755] ? ip_route_output_key_hash+0x19c/0x340 [ 1577.411402] ? ipv4_mtu+0x1ed/0x2c0 [ 1577.411884] ip_make_skb+0x22a/0x2a0 [ 1577.412373] ? ip_frag_init+0x350/0x350 [ 1577.412386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.412873] ? ip_flush_pending_frames+0x20/0x20 [ 1577.412894] ? lock_downgrade+0x6d0/0x6d0 [ 1577.412912] ? xfrm_lookup_route+0x65/0x210 [ 1577.415591] udp_sendmsg+0x1940/0x2160 [ 1577.415942] FAULT_INJECTION: forcing a failure. [ 1577.415942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1577.416099] ? ip_frag_init+0x350/0x350 [ 1577.416117] ? udp_setsockopt+0xc0/0xc0 [ 1577.416136] ? mark_lock+0xf5/0x2df0 [ 1577.416152] ? lock_chain_count+0x20/0x20 [ 1577.419598] ? mark_lock+0xf5/0x2df0 [ 1577.420068] ? mark_lock+0xf5/0x2df0 [ 1577.420545] ? lock_chain_count+0x20/0x20 [ 1577.421147] ? lock_chain_count+0x20/0x20 [ 1577.421759] ? prep_new_page+0x16d/0x1d0 [ 1577.422347] ? lock_chain_count+0x20/0x20 [ 1577.422964] ? __lock_acquire+0x1657/0x5b00 [ 1577.423601] udpv6_sendmsg+0x1b30/0x2ad0 [ 1577.424201] ? __lock_acquire+0x1657/0x5b00 [ 1577.424801] ? udp_v6_push_pending_frames+0x360/0x360 [ 1577.425433] ? trace_hardirqs_on+0x5b/0x180 [ 1577.425982] ? lock_acquire+0x197/0x470 [ 1577.426466] ? find_held_lock+0x2c/0x110 [ 1577.426983] ? lock_acquire+0x197/0x470 [ 1577.427466] ? find_held_lock+0x2c/0x110 [ 1577.427982] ? __might_fault+0xd3/0x180 [ 1577.428479] ? lock_downgrade+0x6d0/0x6d0 [ 1577.429057] ? sock_has_perm+0x1ea/0x280 [ 1577.429666] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1577.430403] ? __import_iovec+0x458/0x590 [ 1577.430969] ? udp_v6_push_pending_frames+0x360/0x360 [ 1577.431631] inet6_sendmsg+0x105/0x140 [ 1577.432190] ? inet6_compat_ioctl+0x320/0x320 [ 1577.432800] __sock_sendmsg+0xf2/0x190 [ 1577.433277] ____sys_sendmsg+0x334/0x870 [ 1577.433790] ? sock_write_iter+0x3d0/0x3d0 [ 1577.434304] ? do_recvmmsg+0x6d0/0x6d0 [ 1577.434797] ? __lock_acquire+0x1657/0x5b00 [ 1577.435331] ___sys_sendmsg+0xf3/0x170 [ 1577.435824] ? sendmsg_copy_msghdr+0x160/0x160 [ 1577.436380] ? vmacache_find+0x55/0x2a0 [ 1577.436963] ? lock_acquire+0x197/0x470 [ 1577.437529] ? find_held_lock+0x2c/0x110 [ 1577.438122] ? __might_fault+0xd3/0x180 [ 1577.438699] ? lock_downgrade+0x6d0/0x6d0 [ 1577.439291] ? asm_exc_page_fault+0x1e/0x30 [ 1577.439926] __sys_sendmmsg+0x195/0x470 [ 1577.440506] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1577.441139] ? lock_downgrade+0x6d0/0x6d0 [ 1577.441767] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1577.442467] ? wait_for_completion_io+0x270/0x270 [ 1577.443175] ? rcu_read_lock_any_held+0x75/0xa0 [ 1577.443850] ? vfs_write+0x354/0xb10 [ 1577.444386] ? fput_many+0x2f/0x1a0 [ 1577.444912] ? ksys_write+0x1a9/0x260 [ 1577.445465] ? __ia32_sys_read+0xb0/0xb0 [ 1577.446065] __x64_sys_sendmmsg+0x99/0x100 [ 1577.446688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.447433] do_syscall_64+0x33/0x40 [ 1577.447980] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.448699] RIP: 0033:0x7fec4fe72b19 [ 1577.449160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1577.451419] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1577.452362] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1577.453257] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1577.454135] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.455013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1577.455890] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1577.456799] CPU: 0 PID: 9832 Comm: syz-executor.0 Not tainted 5.10.228 #1 [ 1577.457687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1577.458747] Call Trace: [ 1577.459094] dump_stack+0x107/0x167 [ 1577.459573] should_fail.cold+0x5/0xa [ 1577.460080] _copy_to_user+0x2e/0x180 [ 1577.460598] simple_read_from_buffer+0xcc/0x160 [ 1577.461206] proc_fail_nth_read+0x198/0x230 [ 1577.461773] ? proc_sessionid_read+0x230/0x230 [ 1577.462371] ? security_file_permission+0xb1/0xe0 [ 1577.463007] ? proc_sessionid_read+0x230/0x230 [ 1577.463591] vfs_read+0x228/0x620 [ 1577.464051] ksys_read+0x12d/0x260 [ 1577.464537] ? vfs_write+0xb10/0xb10 [ 1577.465028] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1577.465708] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1577.466386] do_syscall_64+0x33/0x40 [ 1577.466869] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1577.467537] RIP: 0033:0x7f46a4efb69c [ 1577.468021] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1577.470397] RSP: 002b:00007f46a24be170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1577.471383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f46a4efb69c [ 1577.472302] RDX: 000000000000000f RSI: 00007f46a24be1e0 RDI: 0000000000000004 [ 1577.473238] RBP: 00007f46a24be1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.474155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.475039] R13: 00007ffddc89e37f R14: 00007f46a24be300 R15: 0000000000022000 03:55:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0xedc000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:22 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r1, &(0x7f0000000040)={0x2002}, r0}, 0x2be) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) [ 1577.484927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:55:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1577.618696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1577.619956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:55:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 37) 03:55:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:55:36 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, 0x0, 0x0) 03:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x2, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:55:36 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x8000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000040)={0x8, 0x1}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf25510000000000cdd4ebe59c510100000a0006000802110000000000000000000000002b0000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001a00210c00000000000000000a00000008000000", @ANYRES32, @ANYBLOB="25cc1a0062ea659ee94a0000007a00000000"], 0x28}}, 0x0) [ 1591.581933] __nla_validate_parse: 2 callbacks suppressed [ 1591.581942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:55:36 executing program 1: r0 = syz_io_uring_setup(0x6c75, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x402}, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x368c, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r3, 0x5306, 0x19cd, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) accept(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x44) io_uring_enter(r0, 0x5837, 0x0, 0x3, &(0x7f0000000280)={[0x3c33]}, 0x8) pipe2(&(0x7f0000000540), 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/icmp\x00') r4 = syz_io_uring_setup(0x1fe5, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:55:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x1020, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1591.585309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9858 comm=syz-executor.2 [ 1591.588289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1591.601051] FAULT_INJECTION: forcing a failure. [ 1591.601051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1591.602656] CPU: 1 PID: 9859 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1591.603544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.604617] Call Trace: [ 1591.604982] dump_stack+0x107/0x167 [ 1591.605470] should_fail.cold+0x5/0xa [ 1591.605978] _copy_from_user+0x2e/0x1b0 [ 1591.606503] __copy_msghdr_from_user+0x91/0x4b0 [ 1591.607110] ? __ia32_sys_shutdown+0x80/0x80 [ 1591.607690] ? udp_v6_push_pending_frames+0x360/0x360 [ 1591.608371] ? inet6_sendmsg+0xbd/0x140 [ 1591.608898] ? inet6_compat_ioctl+0x320/0x320 [ 1591.609494] ? __sock_sendmsg+0x55/0x190 [ 1591.610033] sendmsg_copy_msghdr+0xa1/0x160 [ 1591.610597] ? do_recvmmsg+0x6d0/0x6d0 [ 1591.611109] ? __lock_acquire+0x1657/0x5b00 [ 1591.611684] ___sys_sendmsg+0xc6/0x170 [ 1591.612194] ? sendmsg_copy_msghdr+0x160/0x160 [ 1591.612794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1591.613496] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1591.614075] ? trace_hardirqs_on+0x5b/0x180 [ 1591.614640] ? lock_acquire+0x197/0x470 [ 1591.615159] ? find_held_lock+0x2c/0x110 [ 1591.615699] ? __might_fault+0xd3/0x180 [ 1591.616228] ? lock_downgrade+0x6d0/0x6d0 [ 1591.616776] ? io_schedule_timeout+0x140/0x140 [ 1591.617402] __sys_sendmmsg+0x195/0x470 [ 1591.617927] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1591.618492] ? lock_downgrade+0x6d0/0x6d0 [ 1591.619056] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1591.619692] ? wait_for_completion_io+0x270/0x270 [ 1591.620326] ? rcu_read_lock_any_held+0x75/0xa0 [ 1591.620933] ? vfs_write+0x354/0xb10 [ 1591.621437] ? fput_many+0x2f/0x1a0 [ 1591.621916] ? ksys_write+0x1a9/0x260 [ 1591.622418] ? __ia32_sys_read+0xb0/0xb0 [ 1591.622963] __x64_sys_sendmmsg+0x99/0x100 [ 1591.623521] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.624191] do_syscall_64+0x33/0x40 [ 1591.624675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.625363] RIP: 0033:0x7fec4fe72b19 [ 1591.625848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.628219] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1591.629225] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1591.630155] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1591.631075] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.632002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.632933] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1591.641727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1591.646421] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9866 comm=syz-executor.2 03:55:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x3, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:55:36 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x100000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:55:36 executing program 2: bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x2}, 0xc) 03:55:36 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x200000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000140)=']\x00', 0x0, &(0x7f0000000300)='security.capability\x00'], 0x0, 0x1000) ftruncate(r0, 0x1000003) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) write(0xffffffffffffffff, &(0x7f0000000200)="8b7876f31d04c964fa152d1f0d027a59e65dcc3a4fadec7a224e944bf39adf7d75e5163d473e1008f7300e2ffdcbcd73b569090e80415268326395e509a1cb3935a83c558bdcd0fa56006a5a3debe3c3c90ff414baa9bd893de667905d4c2b254b9475fbc380b4d96412cd1a", 0x6c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x3, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x9a) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0xe, 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{}, {0x8000000, 0x3}]}, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x5c, 0xffbfffff80000000}, 0x1, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 03:55:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 38) [ 1591.827542] FAULT_INJECTION: forcing a failure. [ 1591.827542] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.829096] CPU: 0 PID: 9892 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1591.829992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1591.831054] Call Trace: [ 1591.831411] dump_stack+0x107/0x167 [ 1591.831897] should_fail.cold+0x5/0xa [ 1591.832406] ? __alloc_skb+0x6d/0x5b0 [ 1591.832912] should_failslab+0x5/0x20 [ 1591.833442] kmem_cache_alloc_node+0x55/0x330 [ 1591.834036] __alloc_skb+0x6d/0x5b0 [ 1591.834527] alloc_skb_with_frags+0x92/0x570 [ 1591.835116] ? lock_chain_count+0x20/0x20 [ 1591.835669] sock_alloc_send_pskb+0x7af/0x930 [ 1591.836268] ? sk_alloc+0x350/0x350 [ 1591.836752] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1591.837459] ? lock_downgrade+0x6d0/0x6d0 [ 1591.838018] __ip_append_data+0x1628/0x3310 [ 1591.838596] ? fib_select_path+0x293/0x1de0 [ 1591.839259] ? ip_frag_init+0x350/0x350 [ 1591.839804] ? ip_finish_output+0x330/0x330 [ 1591.840383] ? ip_route_output_key_hash+0x19c/0x340 [ 1591.841055] ? ipv4_mtu+0x1ed/0x2c0 [ 1591.841618] ip_make_skb+0x22a/0x2a0 [ 1591.842108] ? ip_frag_init+0x350/0x350 [ 1591.842643] ? ip_flush_pending_frames+0x20/0x20 [ 1591.843279] ? lock_downgrade+0x6d0/0x6d0 [ 1591.843857] ? xfrm_lookup_route+0x65/0x210 [ 1591.844428] udp_sendmsg+0x1940/0x2160 [ 1591.844967] ? ip_frag_init+0x350/0x350 [ 1591.845518] ? udp_setsockopt+0xc0/0xc0 [ 1591.846062] ? mark_lock+0xf5/0x2df0 [ 1591.846556] ? lock_chain_count+0x20/0x20 [ 1591.847129] ? mark_lock+0xf5/0x2df0 [ 1591.847628] ? mark_lock+0xf5/0x2df0 [ 1591.848137] ? lock_chain_count+0x20/0x20 [ 1591.848688] ? lock_chain_count+0x20/0x20 [ 1591.849260] ? prep_new_page+0x16d/0x1d0 [ 1591.849790] ? lock_chain_count+0x20/0x20 [ 1591.850365] ? __lock_acquire+0x1657/0x5b00 [ 1591.850937] udpv6_sendmsg+0x1b30/0x2ad0 [ 1591.851493] ? __lock_acquire+0x1657/0x5b00 [ 1591.852063] ? udp_v6_push_pending_frames+0x360/0x360 [ 1591.852758] ? trace_hardirqs_on+0x5b/0x180 [ 1591.853340] ? lock_acquire+0x197/0x470 [ 1591.853884] ? find_held_lock+0x2c/0x110 [ 1591.854422] ? lock_acquire+0x197/0x470 [ 1591.854965] ? find_held_lock+0x2c/0x110 [ 1591.855495] ? __might_fault+0xd3/0x180 [ 1591.856050] ? lock_downgrade+0x6d0/0x6d0 [ 1591.856596] ? sock_has_perm+0x1ea/0x280 [ 1591.857177] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1591.857890] ? __import_iovec+0x458/0x590 [ 1591.858446] ? udp_v6_push_pending_frames+0x360/0x360 [ 1591.859155] inet6_sendmsg+0x105/0x140 [ 1591.859662] ? inet6_compat_ioctl+0x320/0x320 [ 1591.860282] __sock_sendmsg+0xf2/0x190 [ 1591.860794] ____sys_sendmsg+0x334/0x870 [ 1591.861384] ? sock_write_iter+0x3d0/0x3d0 [ 1591.861934] ? do_recvmmsg+0x6d0/0x6d0 [ 1591.862468] ? __lock_acquire+0x1657/0x5b00 [ 1591.863045] ___sys_sendmsg+0xf3/0x170 [ 1591.863557] ? sendmsg_copy_msghdr+0x160/0x160 [ 1591.864150] ? vmacache_find+0x55/0x2a0 [ 1591.864683] ? lock_acquire+0x197/0x470 [ 1591.865221] ? find_held_lock+0x2c/0x110 [ 1591.865756] ? __might_fault+0xd3/0x180 [ 1591.866280] ? lock_downgrade+0x6d0/0x6d0 [ 1591.866828] ? asm_exc_page_fault+0x1e/0x30 [ 1591.867419] __sys_sendmmsg+0x195/0x470 [ 1591.867948] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1591.868521] ? lock_downgrade+0x6d0/0x6d0 [ 1591.869103] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1591.869755] ? wait_for_completion_io+0x270/0x270 [ 1591.870395] ? rcu_read_lock_any_held+0x75/0xa0 [ 1591.871002] ? vfs_write+0x354/0xb10 [ 1591.871506] ? fput_many+0x2f/0x1a0 [ 1591.871982] ? ksys_write+0x1a9/0x260 [ 1591.872483] ? __ia32_sys_read+0xb0/0xb0 [ 1591.873039] __x64_sys_sendmmsg+0x99/0x100 [ 1591.873617] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1591.874303] do_syscall_64+0x33/0x40 [ 1591.874791] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1591.875465] RIP: 0033:0x7fec4fe72b19 [ 1591.875961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.878334] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1591.879332] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1591.880266] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1591.881220] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.882151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1591.883091] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:55:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x300000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:51 executing program 1: unshare(0x28020600) semget$private(0x0, 0x4, 0x100) unshare(0x4000400) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000008000000000076da76c4e4f082c1048dcc22006b31f3c8f0cb3949f8e9ccfd62c5cd5a3d3529c729dea673951fd9f47eef68869bd87eb9f92a2e3dbfd87e33bfa61489c7740f139df0e8ab708cb3c4ff274f3a1d34ef8e4ccc48"]) unshare(0x48020200) 03:55:51 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x1d) 03:55:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 39) 03:55:51 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3014}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r3) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="5452f75d", @ANYRES16=r5, @ANYBLOB="100025bd7000fcdbdf252800000008002c0002000000060006000100000006000400ffff000005002b000000000006000400435d000005002b000000000008002c00040000000600060002000000"], 0x54}}, 0x40) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c5a703519f1000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010900000800010000000000080002000100000018000880140007800800050000000000080006000000000019a467c23eba8d8150617ae40bad42d73b3a7e66e710f365226f617ffdffa61febad614f10124605ba9603b83c8887eb6c8c53cf5ebf2f8e03177250283c61239815ee3775ade22b40e081dbfb5704e963164a99c3a1ab6d378e3bea9b50bbf85a958fad84294e312fbe23006cf73160e6f9d2e6dc115f09c17ec914a8fb7b4b0d69eed0917279064ed8318d0bab984eb554eec4dc8d4e7d4dccdc7cf043ad3fcf43cacddb16cdefcd1ee435b7c7a198d2d37251ce38bb6b3443f4"], 0x3c}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x80d0) r7 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) execveat(r7, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)=',^^!%\x00', &(0x7f0000000240)='nl802154\x00'], &(0x7f00000005c0)=[&(0x7f00000002c0)='802.15.4 MAC\x00'], 0x1000) mkdirat(r8, &(0x7f0000000180)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe9a, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="29cf87b4", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000000000000c0005000000000000000000"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 03:55:51 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:55:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x4, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2010, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1606.464802] FAULT_INJECTION: forcing a failure. [ 1606.464802] name failslab, interval 1, probability 0, space 0, times 0 [ 1606.466444] CPU: 0 PID: 9916 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1606.467342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1606.468427] Call Trace: [ 1606.468783] dump_stack+0x107/0x167 [ 1606.469268] should_fail.cold+0x5/0xa [ 1606.469791] ? create_object.isra.0+0x3a/0xa20 [ 1606.470393] should_failslab+0x5/0x20 [ 1606.470892] kmem_cache_alloc+0x5b/0x310 [ 1606.471434] create_object.isra.0+0x3a/0xa20 [ 1606.472005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1606.472674] kmem_cache_alloc_node+0x169/0x330 [ 1606.473280] __alloc_skb+0x6d/0x5b0 [ 1606.473782] alloc_skb_with_frags+0x92/0x570 [ 1606.474366] ? lock_chain_count+0x20/0x20 [ 1606.474913] sock_alloc_send_pskb+0x7af/0x930 [ 1606.475511] ? sk_alloc+0x350/0x350 [ 1606.475998] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1606.476685] ? lock_downgrade+0x6d0/0x6d0 [ 1606.477239] __ip_append_data+0x1628/0x3310 [ 1606.477835] ? fib_select_path+0x293/0x1de0 [ 1606.478404] ? ip_frag_init+0x350/0x350 [ 1606.478939] ? ip_finish_output+0x330/0x330 [ 1606.479507] ? ip_route_output_key_hash+0x19c/0x340 [ 1606.480154] ? ipv4_mtu+0x1ed/0x2c0 [ 1606.480642] ip_make_skb+0x22a/0x2a0 [ 1606.481136] ? ip_frag_init+0x350/0x350 [ 1606.481676] ? ip_flush_pending_frames+0x20/0x20 [ 1606.482307] ? lock_downgrade+0x6d0/0x6d0 [ 1606.482860] ? xfrm_lookup_route+0x65/0x210 [ 1606.483436] udp_sendmsg+0x1940/0x2160 [ 1606.483950] ? ip_frag_init+0x350/0x350 [ 1606.484479] ? udp_setsockopt+0xc0/0xc0 [ 1606.485011] ? mark_lock+0xf5/0x2df0 [ 1606.485505] ? mark_lock+0xf5/0x2df0 [ 1606.486009] ? lock_chain_count+0x20/0x20 [ 1606.486548] ? lock_chain_count+0x20/0x20 [ 1606.487104] ? __lock_acquire+0x1657/0x5b00 [ 1606.487674] udpv6_sendmsg+0x1b30/0x2ad0 [ 1606.488207] ? __lock_acquire+0x1657/0x5b00 [ 1606.488780] ? udp_v6_push_pending_frames+0x360/0x360 [ 1606.489469] ? lock_acquire+0x197/0x470 [ 1606.490013] ? find_held_lock+0x2c/0x110 [ 1606.490553] ? lock_acquire+0x197/0x470 [ 1606.491071] ? find_held_lock+0x2c/0x110 [ 1606.491606] ? __might_fault+0xd3/0x180 [ 1606.492124] ? lock_downgrade+0x6d0/0x6d0 [ 1606.492669] ? lock_chain_count+0x20/0x20 [ 1606.493213] ? sock_has_perm+0x1ea/0x280 [ 1606.493767] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1606.494457] ? __import_iovec+0x458/0x590 [ 1606.494998] ? udp_v6_push_pending_frames+0x360/0x360 [ 1606.495671] inet6_sendmsg+0x105/0x140 [ 1606.496186] ? inet6_compat_ioctl+0x320/0x320 [ 1606.496777] __sock_sendmsg+0xf2/0x190 [ 1606.497286] ____sys_sendmsg+0x334/0x870 [ 1606.497846] ? sock_write_iter+0x3d0/0x3d0 [ 1606.498395] ? do_recvmmsg+0x6d0/0x6d0 [ 1606.498906] ? __lock_acquire+0x1657/0x5b00 [ 1606.499487] ___sys_sendmsg+0xf3/0x170 [ 1606.500000] ? sendmsg_copy_msghdr+0x160/0x160 [ 1606.500600] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1606.501284] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1606.501893] ? trace_hardirqs_on+0x5b/0x180 [ 1606.502463] ? lock_acquire+0x197/0x470 [ 1606.502987] ? find_held_lock+0x2c/0x110 [ 1606.503523] ? __might_fault+0xd3/0x180 [ 1606.504045] ? lock_downgrade+0x6d0/0x6d0 [ 1606.504586] ? io_schedule_timeout+0x140/0x140 [ 1606.505190] __sys_sendmmsg+0x195/0x470 [ 1606.505740] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1606.506302] ? lock_downgrade+0x6d0/0x6d0 [ 1606.506860] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1606.507489] ? wait_for_completion_io+0x270/0x270 [ 1606.508125] ? rcu_read_lock_any_held+0x75/0xa0 [ 1606.508740] ? vfs_write+0x354/0xb10 [ 1606.509226] ? fput_many+0x2f/0x1a0 [ 1606.509720] ? ksys_write+0x1a9/0x260 [ 1606.510217] ? __ia32_sys_read+0xb0/0xb0 [ 1606.510756] __x64_sys_sendmmsg+0x99/0x100 [ 1606.511311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1606.511989] do_syscall_64+0x33/0x40 [ 1606.512476] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1606.513146] RIP: 0033:0x7fec4fe72b19 [ 1606.513654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1606.516027] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1606.517020] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1606.517959] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1606.518891] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1606.519821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1606.520748] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:55:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x5, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xedc0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:55:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x700000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:51 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, "77004a6efdff0000000008002600"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth1\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup2(r1, r1) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000140)={'filter\x00', 0x0, [0x1, 0x5, 0x4c, 0x5, 0x4]}, &(0x7f0000000200)=0x54) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/class/rtc', 0x4800, 0x40) io_uring_enter(r3, 0x39c6, 0x1cfe, 0x3, &(0x7f0000000040)={[0x8]}, 0x8) ioctl$int_out(r2, 0x5460, &(0x7f0000000040)) 03:55:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xff00, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:55:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x800000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:55:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x6, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:05 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000200007b6a7912d700"/28], 0x1c}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x440100, 0x0) sendfile(r1, r2, &(0x7f0000000040)=0x3, 0x3) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x945c146c2fc886e3) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000001c0)={0x3, 0x1}) read(r0, &(0x7f00000000c0)=""/153, 0x99) 03:56:05 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x1d) 03:56:05 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101800, 0x0) openat(r4, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) 03:56:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 40) 03:56:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x900000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x7, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 1621.208969] FAULT_INJECTION: forcing a failure. [ 1621.208969] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.209834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1621.210537] CPU: 0 PID: 9953 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1621.213316] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.214483] Call Trace: [ 1621.214811] dump_stack+0x107/0x167 [ 1621.215257] should_fail.cold+0x5/0xa [ 1621.215726] ? __alloc_skb+0x6d/0x5b0 [ 1621.216197] should_failslab+0x5/0x20 [ 1621.216665] kmem_cache_alloc_node+0x55/0x330 [ 1621.217216] __alloc_skb+0x6d/0x5b0 [ 1621.217665] alloc_skb_with_frags+0x92/0x570 [ 1621.218225] ? lock_chain_count+0x20/0x20 [ 1621.218838] sock_alloc_send_pskb+0x7af/0x930 [ 1621.219505] ? sk_alloc+0x350/0x350 [ 1621.220046] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1621.220814] ? lock_downgrade+0x6d0/0x6d0 [ 1621.221433] __ip_append_data+0x1628/0x3310 [ 1621.222074] ? fib_select_path+0x293/0x1de0 [ 1621.222679] ? ip_frag_init+0x350/0x350 [ 1621.223220] ? ip_finish_output+0x330/0x330 [ 1621.223808] ? ip_route_output_key_hash+0x19c/0x340 [ 1621.224486] ? ipv4_mtu+0x1ed/0x2c0 [ 1621.224982] ip_make_skb+0x22a/0x2a0 [ 1621.225487] ? ip_frag_init+0x350/0x350 [ 1621.226019] ? ip_flush_pending_frames+0x20/0x20 [ 1621.226672] ? lock_downgrade+0x6d0/0x6d0 [ 1621.227286] ? xfrm_lookup_route+0x65/0x210 [ 1621.227922] udp_sendmsg+0x1940/0x2160 [ 1621.228492] ? ip_frag_init+0x350/0x350 [ 1621.229078] ? udp_setsockopt+0xc0/0xc0 [ 1621.229659] ? mark_lock+0xf5/0x2df0 [ 1621.230211] ? lock_chain_count+0x20/0x20 [ 1621.230823] ? mark_lock+0xf5/0x2df0 [ 1621.231371] ? mark_lock+0xf5/0x2df0 [ 1621.231922] ? lock_chain_count+0x20/0x20 [ 1621.232532] ? lock_chain_count+0x20/0x20 [ 1621.233141] ? prep_new_page+0x16d/0x1d0 [ 1621.233702] ? lock_chain_count+0x20/0x20 [ 1621.234226] ? __lock_acquire+0x1657/0x5b00 [ 1621.234756] udpv6_sendmsg+0x1b30/0x2ad0 [ 1621.235252] ? __lock_acquire+0x1657/0x5b00 [ 1621.235784] ? udp_v6_push_pending_frames+0x360/0x360 [ 1621.236412] ? trace_hardirqs_on+0x5b/0x180 [ 1621.236941] ? lock_acquire+0x197/0x470 [ 1621.237425] ? find_held_lock+0x2c/0x110 [ 1621.237924] ? lock_acquire+0x197/0x470 [ 1621.238415] ? find_held_lock+0x2c/0x110 [ 1621.238919] ? __might_fault+0xd3/0x180 [ 1621.239405] ? lock_downgrade+0x6d0/0x6d0 [ 1621.239912] ? sock_has_perm+0x1ea/0x280 [ 1621.240406] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1621.241049] ? __import_iovec+0x458/0x590 [ 1621.241555] ? udp_v6_push_pending_frames+0x360/0x360 [ 1621.242199] inet6_sendmsg+0x105/0x140 [ 1621.242771] ? inet6_compat_ioctl+0x320/0x320 [ 1621.243430] __sock_sendmsg+0xf2/0x190 [ 1621.244000] ____sys_sendmsg+0x334/0x870 [ 1621.244596] ? sock_write_iter+0x3d0/0x3d0 [ 1621.245217] ? do_recvmmsg+0x6d0/0x6d0 [ 1621.245789] ? __lock_acquire+0x1657/0x5b00 [ 1621.246385] ___sys_sendmsg+0xf3/0x170 [ 1621.246862] ? sendmsg_copy_msghdr+0x160/0x160 [ 1621.247415] ? vmacache_find+0x55/0x2a0 [ 1621.247913] ? lock_acquire+0x197/0x470 [ 1621.248396] ? find_held_lock+0x2c/0x110 [ 1621.248894] ? __might_fault+0xd3/0x180 [ 1621.249378] ? lock_downgrade+0x6d0/0x6d0 [ 1621.249884] ? asm_exc_page_fault+0x1e/0x30 [ 1621.250481] __sys_sendmmsg+0x195/0x470 [ 1621.251069] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1621.251706] ? lock_downgrade+0x6d0/0x6d0 [ 1621.252308] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1621.252969] ? wait_for_completion_io+0x270/0x270 [ 1621.253631] ? rcu_read_lock_any_held+0x75/0xa0 [ 1621.254272] ? vfs_write+0x354/0xb10 [ 1621.254818] ? fput_many+0x2f/0x1a0 [ 1621.255351] ? ksys_write+0x1a9/0x260 [ 1621.255908] ? __ia32_sys_read+0xb0/0xb0 [ 1621.256505] __x64_sys_sendmmsg+0x99/0x100 [ 1621.257123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.257878] do_syscall_64+0x33/0x40 [ 1621.258406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1621.259160] RIP: 0033:0x7fec4fe72b19 [ 1621.259709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.262280] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1621.263402] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1621.264441] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1621.265309] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.266183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.267055] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:06 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0xa00000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x1000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1621.311925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:56:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x8, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 41) 03:56:06 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r0, 0x800000000081) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='syz', 0xffffffffffffffff) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) r3 = signalfd4(r2, &(0x7f0000000040), 0x8, 0x1800) close(r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x60494cd1, 0x0, 0x0, 0x0, 0x0, "318648e2fdec35f1d1df1df2c9c2fa60b6665d"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x2, 0x0, 0x1, 0x0, 0x3, 0x4018, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xbab, 0x4, @perf_config_ext={0x1f, 0x9}, 0x1382, 0x200, 0x9, 0x2, 0x3f, 0x81, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, r4, 0x7, 0xffffffffffffffff, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) 03:56:06 executing program 1: set_mempolicy(0x2, &(0x7f0000000100)=0x3, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x719}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() 03:56:06 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0xb00000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1621.425186] FAULT_INJECTION: forcing a failure. [ 1621.425186] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.428425] CPU: 1 PID: 9994 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1621.430256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.432439] Call Trace: [ 1621.433125] dump_stack+0x107/0x167 [ 1621.434080] should_fail.cold+0x5/0xa [ 1621.435248] ? create_object.isra.0+0x3a/0xa20 [ 1621.436440] should_failslab+0x5/0x20 [ 1621.437437] kmem_cache_alloc+0x5b/0x310 [ 1621.438334] create_object.isra.0+0x3a/0xa20 [ 1621.438908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1621.439576] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1621.440237] ? alloc_skb_with_frags+0x92/0x570 [ 1621.440838] __alloc_skb+0xb1/0x5b0 [ 1621.441316] alloc_skb_with_frags+0x92/0x570 [ 1621.441897] ? lock_chain_count+0x20/0x20 [ 1621.442892] sock_alloc_send_pskb+0x7af/0x930 [ 1621.444071] ? sk_alloc+0x350/0x350 [ 1621.445022] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1621.446440] ? lock_downgrade+0x6d0/0x6d0 [ 1621.447526] __ip_append_data+0x1628/0x3310 [ 1621.448657] ? fib_select_path+0x293/0x1de0 [ 1621.449782] ? ip_frag_init+0x350/0x350 [ 1621.450967] ? ip_finish_output+0x330/0x330 [ 1621.452090] ? ip_route_output_key_hash+0x19c/0x340 [ 1621.453383] ? ipv4_mtu+0x1ed/0x2c0 [ 1621.454400] ip_make_skb+0x22a/0x2a0 [ 1621.455368] ? ip_frag_init+0x350/0x350 [ 1621.456404] ? ip_flush_pending_frames+0x20/0x20 [ 1621.457644] ? lock_downgrade+0x6d0/0x6d0 [ 1621.458846] ? xfrm_lookup_route+0x65/0x210 [ 1621.459975] udp_sendmsg+0x1940/0x2160 [ 1621.460991] ? ip_frag_init+0x350/0x350 [ 1621.462030] ? udp_setsockopt+0xc0/0xc0 [ 1621.463232] ? mark_lock+0xf5/0x2df0 [ 1621.464202] ? lock_chain_count+0x20/0x20 [ 1621.465280] ? mark_lock+0xf5/0x2df0 [ 1621.466295] ? mark_lock+0xf5/0x2df0 [ 1621.467259] ? lock_chain_count+0x20/0x20 [ 1621.468330] ? lock_chain_count+0x20/0x20 [ 1621.469410] ? prep_new_page+0x16d/0x1d0 [ 1621.470309] ? lock_chain_count+0x20/0x20 [ 1621.470861] ? __lock_acquire+0x1657/0x5b00 [ 1621.471430] udpv6_sendmsg+0x1b30/0x2ad0 [ 1621.471964] ? __lock_acquire+0x1657/0x5b00 [ 1621.472540] ? udp_v6_push_pending_frames+0x360/0x360 [ 1621.473212] ? trace_hardirqs_on+0x5b/0x180 [ 1621.473784] ? lock_acquire+0x197/0x470 [ 1621.474325] ? find_held_lock+0x2c/0x110 [ 1621.474865] ? lock_acquire+0x197/0x470 [ 1621.475383] ? find_held_lock+0x2c/0x110 [ 1621.475919] ? __might_fault+0xd3/0x180 [ 1621.476440] ? lock_downgrade+0x6d0/0x6d0 [ 1621.476982] ? lock_chain_count+0x20/0x20 [ 1621.477524] ? sock_has_perm+0x1ea/0x280 [ 1621.478060] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1621.478765] ? __import_iovec+0x458/0x590 [ 1621.479310] ? udp_v6_push_pending_frames+0x360/0x360 [ 1621.479984] inet6_sendmsg+0x105/0x140 [ 1621.480494] ? inet6_compat_ioctl+0x320/0x320 [ 1621.481080] __sock_sendmsg+0xf2/0x190 [ 1621.481591] ____sys_sendmsg+0x334/0x870 [ 1621.482137] ? sock_write_iter+0x3d0/0x3d0 [ 1621.482693] ? do_recvmmsg+0x6d0/0x6d0 [ 1621.483207] ? __lock_acquire+0x1657/0x5b00 [ 1621.483783] ___sys_sendmsg+0xf3/0x170 [ 1621.484294] ? sendmsg_copy_msghdr+0x160/0x160 [ 1621.484894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1621.485580] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1621.486171] ? trace_hardirqs_on+0x5b/0x180 [ 1621.486745] ? lock_acquire+0x197/0x470 [ 1621.487268] ? find_held_lock+0x2c/0x110 [ 1621.487806] ? __might_fault+0xd3/0x180 [ 1621.488328] ? lock_downgrade+0x6d0/0x6d0 [ 1621.488868] ? io_schedule_timeout+0x140/0x140 [ 1621.489474] __sys_sendmmsg+0x195/0x470 [ 1621.490003] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1621.490537] ? lock_downgrade+0x6d0/0x6d0 [ 1621.491045] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1621.491622] ? wait_for_completion_io+0x270/0x270 [ 1621.492198] ? rcu_read_lock_any_held+0x75/0xa0 [ 1621.492751] ? vfs_write+0x354/0xb10 [ 1621.493195] ? fput_many+0x2f/0x1a0 [ 1621.493630] ? ksys_write+0x1a9/0x260 [ 1621.494086] ? __ia32_sys_read+0xb0/0xb0 [ 1621.494592] __x64_sys_sendmmsg+0x99/0x100 [ 1621.495097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.495711] do_syscall_64+0x33/0x40 [ 1621.496155] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1621.496767] RIP: 0033:0x7fec4fe72b19 [ 1621.497214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.499422] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1621.500330] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1621.501180] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1621.502029] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.502966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.503892] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:06 executing program 2: add_key$keyring(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x48, 0xfffffffffffffff9) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x2e}, 0x48, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', r1) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee42efaf0b6b073f3a14d9e238c09055c6a9d62c9625f46fbacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x80000015}, 0x48, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', 0x0) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x1}, 0x0) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) add_key$keyring(&(0x7f00000006c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:56:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 42) 03:56:21 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x1d) 03:56:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x9, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x1000000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:21 executing program 1: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x20004844) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) fork() 03:56:21 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x58, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x2800018, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0xffffff7f}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)=ANY=[]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x8000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x6) r6 = syz_open_dev$rtc(&(0x7f0000000300), 0x3c1fc0000000000, 0x100) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x5, {0x0, r0}, 0x5, 0x7, 0x1, {0x0, r5, r6}}, 0xfffffff9) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000001c0)={0x0, r0, 0x6, 0x3, 0x2, 0x8}) sendfile(r1, r2, 0x0, 0x100000001) [ 1637.120609] FAULT_INJECTION: forcing a failure. [ 1637.120609] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.122174] CPU: 1 PID: 10028 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1637.123091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.124145] Call Trace: [ 1637.124500] dump_stack+0x107/0x167 [ 1637.124989] should_fail.cold+0x5/0xa [ 1637.125491] ? create_object.isra.0+0x3a/0xa20 [ 1637.126096] should_failslab+0x5/0x20 [ 1637.126596] kmem_cache_alloc+0x5b/0x310 [ 1637.127153] create_object.isra.0+0x3a/0xa20 [ 1637.127723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1637.128389] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1637.129053] ? alloc_skb_with_frags+0x92/0x570 [ 1637.129644] __alloc_skb+0xb1/0x5b0 [ 1637.130111] alloc_skb_with_frags+0x92/0x570 [ 1637.130708] ? lock_chain_count+0x20/0x20 [ 1637.131872] sock_alloc_send_pskb+0x7af/0x930 [ 1637.133061] ? sk_alloc+0x350/0x350 [ 1637.134020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1637.135506] ? lock_downgrade+0x6d0/0x6d0 [ 1637.136591] __ip_append_data+0x1628/0x3310 [ 1637.137720] ? fib_select_path+0x293/0x1de0 [ 1637.138894] ? ip_frag_init+0x350/0x350 [ 1637.139945] ? ip_finish_output+0x330/0x330 [ 1637.141071] ? ip_route_output_key_hash+0x19c/0x340 [ 1637.142383] ? ipv4_mtu+0x1ed/0x2c0 [ 1637.143450] ip_make_skb+0x22a/0x2a0 [ 1637.144427] ? ip_frag_init+0x350/0x350 [ 1637.145492] ? ip_flush_pending_frames+0x20/0x20 [ 1637.146775] ? lock_downgrade+0x6d0/0x6d0 [ 1637.148044] ? xfrm_lookup_route+0x65/0x210 [ 1637.149171] udp_sendmsg+0x1940/0x2160 [ 1637.150208] ? ip_frag_init+0x350/0x350 [ 1637.151362] ? udp_setsockopt+0xc0/0xc0 [ 1637.152443] ? mark_lock+0xf5/0x2df0 [ 1637.153437] ? lock_chain_count+0x20/0x20 [ 1637.154520] ? mark_lock+0xf5/0x2df0 [ 1637.155628] ? mark_lock+0xf5/0x2df0 [ 1637.156618] ? lock_chain_count+0x20/0x20 [ 1637.157730] ? lock_chain_count+0x20/0x20 [ 1637.158838] ? prep_new_page+0x16d/0x1d0 [ 1637.159881] ? lock_chain_count+0x20/0x20 [ 1637.161001] ? __lock_acquire+0x1657/0x5b00 [ 1637.162143] udpv6_sendmsg+0x1b30/0x2ad0 [ 1637.163332] ? __lock_acquire+0x1657/0x5b00 [ 1637.164503] ? udp_v6_push_pending_frames+0x360/0x360 [ 1637.165892] ? trace_hardirqs_on+0x5b/0x180 [ 1637.167131] ? lock_acquire+0x197/0x470 [ 1637.168184] ? find_held_lock+0x2c/0x110 [ 1637.169287] ? lock_acquire+0x197/0x470 [ 1637.170355] ? find_held_lock+0x2c/0x110 [ 1637.171765] ? __might_fault+0xd3/0x180 [ 1637.172824] ? lock_downgrade+0x6d0/0x6d0 [ 1637.173870] ? lock_chain_count+0x20/0x20 [ 1637.175001] ? sock_has_perm+0x1ea/0x280 [ 1637.176134] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1637.177576] ? __import_iovec+0x458/0x590 [ 1637.178765] ? udp_v6_push_pending_frames+0x360/0x360 [ 1637.180362] inet6_sendmsg+0x105/0x140 [ 1637.181402] ? inet6_compat_ioctl+0x320/0x320 [ 1637.182644] __sock_sendmsg+0xf2/0x190 [ 1637.183198] ____sys_sendmsg+0x334/0x870 [ 1637.183746] ? sock_write_iter+0x3d0/0x3d0 [ 1637.184293] ? do_recvmmsg+0x6d0/0x6d0 [ 1637.184812] ? find_held_lock+0x2c/0x110 [ 1637.185358] ___sys_sendmsg+0xf3/0x170 [ 1637.185870] ? sendmsg_copy_msghdr+0x160/0x160 [ 1637.186470] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1637.187794] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1637.189000] ? trace_hardirqs_on+0x5b/0x180 [ 1637.190170] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1637.191543] ? finish_task_switch+0x126/0x5d0 [ 1637.192753] ? finish_task_switch+0xef/0x5d0 [ 1637.193964] ? __switch_to+0x572/0xf70 [ 1637.195133] ? __switch_to_asm+0x3a/0x60 [ 1637.196259] ? __switch_to_asm+0x34/0x60 [ 1637.197360] ? __schedule+0x82c/0x1ea0 [ 1637.198465] ? io_schedule_timeout+0x140/0x140 [ 1637.199939] __sys_sendmmsg+0x195/0x470 [ 1637.201054] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1637.202274] ? lock_downgrade+0x6d0/0x6d0 [ 1637.203574] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.204958] ? wait_for_completion_io+0x270/0x270 [ 1637.206337] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.207826] ? vfs_write+0x354/0xb10 [ 1637.208831] ? fput_many+0x2f/0x1a0 [ 1637.209350] ? ksys_write+0x1a9/0x260 [ 1637.209888] ? __ia32_sys_read+0xb0/0xb0 [ 1637.210473] __x64_sys_sendmmsg+0x99/0x100 [ 1637.211089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.211815] do_syscall_64+0x33/0x40 [ 1637.212344] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.213071] RIP: 0033:0x7fec4fe72b19 [ 1637.213599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.216230] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1637.217316] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1637.218335] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1637.219355] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.220367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1637.221383] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x2000000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800210c0000000000000008000002000800ff0000000000"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={{r2, r3/1000+10000}, {0x77359400}}) r4 = openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x543, 0x100) r5 = open(&(0x7f0000000000)='./file1\x00', 0xa500, 0x0) close(r0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x5}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, r7, 0x2, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) clone3(&(0x7f00000008c0)={0x120a2d000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0xffffffffffffff95, 0x0, 0x0}, 0x24) fcntl$dupfd(r6, 0x406, r5) r8 = epoll_create1(0x0) inotify_add_watch(r5, &(0x7f0000000380)='./file1\x00', 0x80000044) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d145392f5b7d90866ee461d74ad58563896b469dcbf6d3d27afaf85adaed7661acb2d63311240327b70740985ffad07c0b008d79665629a8851db2df9be38f6b4140f10703ff544dcdc48123af962e7ac235bc14f690e89e79805c41a231983239658b941067f39ccfd887d4fc533f957c1a71be7c26420c878d417acdfd8e175bb47e44fc4b7f2fcd68772b2ed219a6d5b", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 03:56:22 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x2010000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:22 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) pidfd_getfd(r0, r1, 0x0) 03:56:22 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) (fail_nth: 1) 03:56:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xa, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r1, 0x1, 0xfffffffd}, 0x14}}, 0x40) [ 1637.375339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1637.379925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:56:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 43) 03:56:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xb, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1637.449164] FAULT_INJECTION: forcing a failure. [ 1637.449164] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.450716] CPU: 0 PID: 10063 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1637.451629] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1637.452699] Call Trace: [ 1637.453053] dump_stack+0x107/0x167 [ 1637.453533] should_fail.cold+0x5/0xa [ 1637.454038] ? __alloc_skb+0x6d/0x5b0 [ 1637.454539] should_failslab+0x5/0x20 [ 1637.455062] kmem_cache_alloc_node+0x55/0x330 [ 1637.455649] __alloc_skb+0x6d/0x5b0 [ 1637.456132] alloc_skb_with_frags+0x92/0x570 [ 1637.456714] ? lock_chain_count+0x20/0x20 [ 1637.457258] sock_alloc_send_pskb+0x7af/0x930 [ 1637.457852] ? sk_alloc+0x350/0x350 [ 1637.458335] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1637.459031] ? lock_downgrade+0x6d0/0x6d0 [ 1637.459587] __ip_append_data+0x1628/0x3310 [ 1637.460159] ? fib_select_path+0x293/0x1de0 [ 1637.460719] ? ip_frag_init+0x350/0x350 [ 1637.461251] ? ip_finish_output+0x330/0x330 [ 1637.461816] ? ip_route_output_key_hash+0x19c/0x340 [ 1637.462460] ? ipv4_mtu+0x1ed/0x2c0 [ 1637.462973] ip_make_skb+0x22a/0x2a0 [ 1637.463459] ? ip_frag_init+0x350/0x350 [ 1637.464003] ? ip_flush_pending_frames+0x20/0x20 [ 1637.464586] ? lock_downgrade+0x6d0/0x6d0 [ 1637.465140] ? xfrm_lookup_route+0x65/0x210 [ 1637.465709] udp_sendmsg+0x1940/0x2160 [ 1637.466244] ? ip_frag_init+0x350/0x350 [ 1637.466801] ? udp_setsockopt+0xc0/0xc0 [ 1637.467343] ? mark_lock+0xf5/0x2df0 [ 1637.467836] ? lock_chain_count+0x20/0x20 [ 1637.468391] ? mark_lock+0xf5/0x2df0 [ 1637.468885] ? mark_lock+0xf5/0x2df0 [ 1637.469376] ? lock_chain_count+0x20/0x20 [ 1637.469919] ? lock_chain_count+0x20/0x20 [ 1637.470482] ? prep_new_page+0x16d/0x1d0 [ 1637.471030] ? lock_chain_count+0x20/0x20 [ 1637.471587] ? __lock_acquire+0x1657/0x5b00 [ 1637.472158] udpv6_sendmsg+0x1b30/0x2ad0 [ 1637.472694] ? __lock_acquire+0x1657/0x5b00 [ 1637.473266] ? udp_v6_push_pending_frames+0x360/0x360 [ 1637.473935] ? trace_hardirqs_on+0x5b/0x180 [ 1637.474508] ? lock_acquire+0x197/0x470 [ 1637.475048] ? find_held_lock+0x2c/0x110 [ 1637.475590] ? lock_acquire+0x197/0x470 [ 1637.476106] ? find_held_lock+0x2c/0x110 [ 1637.476644] ? __might_fault+0xd3/0x180 [ 1637.477161] ? lock_downgrade+0x6d0/0x6d0 [ 1637.477714] ? sock_has_perm+0x1ea/0x280 [ 1637.478247] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1637.478960] ? __import_iovec+0x458/0x590 [ 1637.479505] ? udp_v6_push_pending_frames+0x360/0x360 [ 1637.480185] inet6_sendmsg+0x105/0x140 [ 1637.480696] ? inet6_compat_ioctl+0x320/0x320 [ 1637.481285] __sock_sendmsg+0xf2/0x190 [ 1637.481798] ____sys_sendmsg+0x334/0x870 [ 1637.482331] ? sock_write_iter+0x3d0/0x3d0 [ 1637.482899] ? do_recvmmsg+0x6d0/0x6d0 [ 1637.483388] ? __lock_acquire+0x1657/0x5b00 [ 1637.483934] ___sys_sendmsg+0xf3/0x170 [ 1637.484455] ? sendmsg_copy_msghdr+0x160/0x160 [ 1637.485048] ? vmacache_find+0x55/0x2a0 [ 1637.485585] ? lock_acquire+0x197/0x470 [ 1637.486109] ? find_held_lock+0x2c/0x110 [ 1637.486605] ? __might_fault+0xd3/0x180 [ 1637.487059] ? lock_downgrade+0x6d0/0x6d0 [ 1637.487504] ? asm_exc_page_fault+0x1e/0x30 [ 1637.487998] __sys_sendmmsg+0x195/0x470 [ 1637.488421] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1637.488905] ? lock_downgrade+0x6d0/0x6d0 [ 1637.489353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1637.489917] ? wait_for_completion_io+0x270/0x270 [ 1637.490428] ? rcu_read_lock_any_held+0x75/0xa0 [ 1637.490974] ? vfs_write+0x354/0xb10 [ 1637.491366] ? fput_many+0x2f/0x1a0 [ 1637.491765] ? ksys_write+0x1a9/0x260 [ 1637.492190] ? __ia32_sys_read+0xb0/0xb0 [ 1637.492630] __x64_sys_sendmmsg+0x99/0x100 [ 1637.493089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1637.493651] do_syscall_64+0x33/0x40 [ 1637.494046] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1637.494613] RIP: 0033:0x7fec4fe72b19 [ 1637.495032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1637.497136] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1637.498182] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1637.499188] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1637.500123] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1637.501061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1637.502003] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000000)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 1652.197217] FAULT_INJECTION: forcing a failure. [ 1652.197217] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.200424] CPU: 1 PID: 10082 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1652.202103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.204309] Call Trace: [ 1652.204920] dump_stack+0x107/0x167 [ 1652.205766] should_fail.cold+0x5/0xa 03:56:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x7000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:36 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 03:56:36 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x8cffffff00000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:36 executing program 1: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) fstatfs(0xffffffffffffffff, &(0x7f00000004c0)=""/176) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) socket$inet_udplite(0x2, 0x2, 0x88) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040), 0x5, 0x4001c0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x110, r3, 0x8000000) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x102000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002480), 0x800, 0x0) ioctl$CDROMREADAUDIO(r5, 0x530e, &(0x7f0000000ac0)={@msf, 0x1, 0x1, &(0x7f0000000a80)=""/1}) dup3(0xffffffffffffffff, r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 03:56:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xc, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 44) [ 1652.206657] ? __alloc_skb+0x6d/0x5b0 [ 1652.219409] should_failslab+0x5/0x20 [ 1652.219423] kmem_cache_alloc_node+0x55/0x330 [ 1652.219438] __alloc_skb+0x6d/0x5b0 [ 1652.219453] alloc_skb_with_frags+0x92/0x570 [ 1652.219469] ? lock_chain_count+0x20/0x20 [ 1652.219483] sock_alloc_send_pskb+0x7af/0x930 [ 1652.219500] ? sk_alloc+0x350/0x350 [ 1652.219517] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1652.219527] ? lock_downgrade+0x6d0/0x6d0 [ 1652.219545] __ip_append_data+0x1628/0x3310 [ 1652.219564] ? fib_select_path+0x293/0x1de0 [ 1652.219577] ? ip_frag_init+0x350/0x350 [ 1652.219595] ? ip_finish_output+0x330/0x330 [ 1652.219607] ? ip_route_output_key_hash+0x19c/0x340 [ 1652.219616] ? ipv4_mtu+0x1ed/0x2c0 [ 1652.219632] ip_make_skb+0x22a/0x2a0 [ 1652.219646] ? ip_frag_init+0x350/0x350 [ 1652.228118] ? ip_flush_pending_frames+0x20/0x20 [ 1652.228135] ? lock_downgrade+0x6d0/0x6d0 [ 1652.228151] ? xfrm_lookup_route+0x65/0x210 [ 1652.228167] udp_sendmsg+0x1940/0x2160 [ 1652.228183] ? ip_frag_init+0x350/0x350 [ 1652.230687] ? udp_setsockopt+0xc0/0xc0 [ 1652.231168] ? mark_lock+0xf5/0x2df0 [ 1652.231642] ? lock_chain_count+0x20/0x20 [ 1652.232146] ? mark_lock+0xf5/0x2df0 [ 1652.232602] ? mark_lock+0xf5/0x2df0 [ 1652.233178] ? lock_chain_count+0x20/0x20 [ 1652.233680] ? lock_chain_count+0x20/0x20 [ 1652.234187] ? prep_new_page+0x16d/0x1d0 [ 1652.234681] ? lock_chain_count+0x20/0x20 [ 1652.235192] ? __lock_acquire+0x1657/0x5b00 [ 1652.235728] udpv6_sendmsg+0x1b30/0x2ad0 [ 1652.236231] ? __lock_acquire+0x1657/0x5b00 [ 1652.236761] ? udp_v6_push_pending_frames+0x360/0x360 [ 1652.237394] ? trace_hardirqs_on+0x5b/0x180 [ 1652.237921] ? lock_acquire+0x197/0x470 [ 1652.238403] ? find_held_lock+0x2c/0x110 [ 1652.238902] ? lock_acquire+0x197/0x470 [ 1652.239394] ? find_held_lock+0x2c/0x110 [ 1652.239891] ? __might_fault+0xd3/0x180 [ 1652.240372] ? lock_downgrade+0x6d0/0x6d0 [ 1652.240877] ? sock_has_perm+0x1ea/0x280 [ 1652.241369] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1652.242005] ? __import_iovec+0x458/0x590 [ 1652.242509] ? udp_v6_push_pending_frames+0x360/0x360 [ 1652.243137] inet6_sendmsg+0x105/0x140 [ 1652.247665] ? inet6_compat_ioctl+0x320/0x320 [ 1652.248209] __sock_sendmsg+0xf2/0x190 [ 1652.248682] ____sys_sendmsg+0x334/0x870 [ 1652.249176] ? sock_write_iter+0x3d0/0x3d0 [ 1652.249688] ? do_recvmmsg+0x6d0/0x6d0 [ 1652.250163] ? __lock_acquire+0x1657/0x5b00 [ 1652.250694] ___sys_sendmsg+0xf3/0x170 [ 1652.251173] ? sendmsg_copy_msghdr+0x160/0x160 [ 1652.251741] ? vmacache_find+0x55/0x2a0 [ 1652.252230] ? lock_acquire+0x197/0x470 [ 1652.252711] ? find_held_lock+0x2c/0x110 [ 1652.253206] ? __might_fault+0xd3/0x180 [ 1652.253688] ? lock_downgrade+0x6d0/0x6d0 [ 1652.254190] ? asm_exc_page_fault+0x1e/0x30 [ 1652.254724] __sys_sendmmsg+0x195/0x470 [ 1652.255215] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1652.255750] ? lock_downgrade+0x6d0/0x6d0 [ 1652.256264] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1652.256851] ? wait_for_completion_io+0x270/0x270 [ 1652.257438] ? rcu_read_lock_any_held+0x75/0xa0 [ 1652.258001] ? vfs_write+0x354/0xb10 [ 1652.258453] ? fput_many+0x2f/0x1a0 [ 1652.258896] ? ksys_write+0x1a9/0x260 [ 1652.259372] ? __ia32_sys_read+0xb0/0xb0 [ 1652.259869] __x64_sys_sendmmsg+0x99/0x100 [ 1652.260383] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1652.261007] do_syscall_64+0x33/0x40 [ 1652.261456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1652.262077] RIP: 0033:0x7fec4fe72b19 [ 1652.262527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.264777] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1652.265702] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1652.266569] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1652.267457] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.268321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1652.269182] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xd, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:37 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x0, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xe, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:56:37 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="2c0000001900210c000000000000000002000000080000930000000008001e000300000008000080296a324b"], 0x2c}}, 0x0) mkdirat(r2, &(0x7f0000005700)='./file0\x00', 0x59) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x505400, 0x0) sendfile(r3, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x10000}}, './file0\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x109000, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r5, 0x0, 0x80000001) 03:56:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 45) 03:56:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 1652.460678] FAULT_INJECTION: forcing a failure. [ 1652.460678] name failslab, interval 1, probability 0, space 0, times 0 [ 1652.462063] CPU: 1 PID: 10113 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1652.462899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1652.463924] Call Trace: [ 1652.464251] dump_stack+0x107/0x167 [ 1652.464695] should_fail.cold+0x5/0xa [ 1652.465164] should_failslab+0x5/0x20 [ 1652.465630] __kmalloc_node_track_caller+0x74/0x3b0 [ 1652.466241] ? alloc_skb_with_frags+0x92/0x570 [ 1652.466797] __alloc_skb+0xb1/0x5b0 [ 1652.467241] alloc_skb_with_frags+0x92/0x570 [ 1652.467852] ? lock_chain_count+0x20/0x20 [ 1652.468357] sock_alloc_send_pskb+0x7af/0x930 [ 1652.468908] ? sk_alloc+0x350/0x350 [ 1652.469355] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1652.469990] ? lock_downgrade+0x6d0/0x6d0 [ 1652.470500] __ip_append_data+0x1628/0x3310 [ 1652.471029] ? fib_select_path+0x293/0x1de0 [ 1652.471575] ? ip_frag_init+0x350/0x350 [ 1652.472065] ? ip_finish_output+0x330/0x330 [ 1652.472595] ? ip_route_output_key_hash+0x19c/0x340 [ 1652.473199] ? ipv4_mtu+0x1ed/0x2c0 [ 1652.473645] ip_make_skb+0x22a/0x2a0 [ 1652.474098] ? ip_frag_init+0x350/0x350 [ 1652.474582] ? ip_flush_pending_frames+0x20/0x20 [ 1652.475165] ? lock_downgrade+0x6d0/0x6d0 [ 1652.475700] ? xfrm_lookup_route+0x65/0x210 [ 1652.476229] udp_sendmsg+0x1940/0x2160 [ 1652.476707] ? ip_frag_init+0x350/0x350 [ 1652.477196] ? udp_setsockopt+0xc0/0xc0 [ 1652.477677] ? mark_lock+0xf5/0x2df0 [ 1652.478134] ? lock_chain_count+0x20/0x20 [ 1652.478639] ? mark_lock+0xf5/0x2df0 [ 1652.479095] ? mark_lock+0xf5/0x2df0 [ 1652.479574] ? lock_chain_count+0x20/0x20 [ 1652.480078] ? lock_chain_count+0x20/0x20 [ 1652.480584] ? prep_new_page+0x16d/0x1d0 [ 1652.481079] ? lock_chain_count+0x20/0x20 [ 1652.481591] ? __lock_acquire+0x1657/0x5b00 [ 1652.482121] udpv6_sendmsg+0x1b30/0x2ad0 [ 1652.482624] ? __lock_acquire+0x1657/0x5b00 [ 1652.483155] ? udp_v6_push_pending_frames+0x360/0x360 [ 1652.483796] ? trace_hardirqs_on+0x5b/0x180 [ 1652.484326] ? lock_acquire+0x197/0x470 [ 1652.484808] ? find_held_lock+0x2c/0x110 [ 1652.485307] ? lock_acquire+0x197/0x470 [ 1652.485789] ? find_held_lock+0x2c/0x110 [ 1652.486287] ? __might_fault+0xd3/0x180 [ 1652.486771] ? lock_downgrade+0x6d0/0x6d0 [ 1652.487274] ? lock_chain_count+0x20/0x20 [ 1652.487797] ? sock_has_perm+0x1ea/0x280 [ 1652.488298] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1652.488938] ? __import_iovec+0x458/0x590 [ 1652.489440] ? udp_v6_push_pending_frames+0x360/0x360 [ 1652.490070] inet6_sendmsg+0x105/0x140 [ 1652.490546] ? inet6_compat_ioctl+0x320/0x320 [ 1652.491090] __sock_sendmsg+0xf2/0x190 [ 1652.491579] ____sys_sendmsg+0x334/0x870 [ 1652.492074] ? sock_write_iter+0x3d0/0x3d0 [ 1652.492587] ? do_recvmmsg+0x6d0/0x6d0 [ 1652.493061] ? __lock_acquire+0x1657/0x5b00 [ 1652.493594] ___sys_sendmsg+0xf3/0x170 [ 1652.494068] ? sendmsg_copy_msghdr+0x160/0x160 [ 1652.494626] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1652.495263] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1652.495826] ? trace_hardirqs_on+0x5b/0x180 [ 1652.496355] ? lock_acquire+0x197/0x470 [ 1652.496837] ? find_held_lock+0x2c/0x110 [ 1652.497341] ? __might_fault+0xd3/0x180 [ 1652.497824] ? lock_downgrade+0x6d0/0x6d0 [ 1652.498332] ? io_schedule_timeout+0x140/0x140 [ 1652.498896] __sys_sendmmsg+0x195/0x470 [ 1652.499398] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1652.499923] ? lock_downgrade+0x6d0/0x6d0 [ 1652.500438] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1652.501026] ? wait_for_completion_io+0x270/0x270 [ 1652.501622] ? rcu_read_lock_any_held+0x75/0xa0 [ 1652.502188] ? vfs_write+0x354/0xb10 [ 1652.502641] ? fput_many+0x2f/0x1a0 [ 1652.503085] ? ksys_write+0x1a9/0x260 [ 1652.503567] ? __ia32_sys_read+0xb0/0xb0 [ 1652.504066] __x64_sys_sendmmsg+0x99/0x100 [ 1652.504586] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1652.505211] do_syscall_64+0x33/0x40 [ 1652.505663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1652.506286] RIP: 0033:0x7fec4fe72b19 [ 1652.506740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1652.508996] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1652.509921] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1652.510787] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1652.511673] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1652.512540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1652.513413] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0xffff000000000000, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:56:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 46) [ 1666.833333] FAULT_INJECTION: forcing a failure. [ 1666.833333] name failslab, interval 1, probability 0, space 0, times 0 [ 1666.834834] CPU: 0 PID: 10127 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1666.835736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1666.836830] Call Trace: [ 1666.837183] dump_stack+0x107/0x167 [ 1666.837660] should_fail.cold+0x5/0xa [ 1666.838165] should_failslab+0x5/0x20 [ 1666.838664] __kmalloc_node_track_caller+0x74/0x3b0 [ 1666.839310] ? alloc_skb_with_frags+0x92/0x570 [ 1666.839928] __alloc_skb+0xb1/0x5b0 [ 1666.840407] alloc_skb_with_frags+0x92/0x570 [ 1666.840983] ? lock_chain_count+0x20/0x20 [ 1666.841528] sock_alloc_send_pskb+0x7af/0x930 [ 1666.842121] ? sk_alloc+0x350/0x350 [ 1666.842610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1666.843294] ? lock_downgrade+0x6d0/0x6d0 [ 1666.843857] __ip_append_data+0x1628/0x3310 [ 1666.844433] ? fib_select_path+0x293/0x1de0 [ 1666.851984] ? ip_frag_init+0x350/0x350 [ 1666.852005] ? ip_finish_output+0x330/0x330 [ 1666.852019] ? ip_route_output_key_hash+0x19c/0x340 [ 1666.852029] ? ipv4_mtu+0x1ed/0x2c0 [ 1666.852047] ip_make_skb+0x22a/0x2a0 [ 1666.852063] ? ip_frag_init+0x350/0x350 [ 1666.852078] ? ip_flush_pending_frames+0x20/0x20 [ 1666.852096] ? lock_downgrade+0x6d0/0x6d0 [ 1666.852113] ? xfrm_lookup_route+0x65/0x210 [ 1666.852130] udp_sendmsg+0x1940/0x2160 [ 1666.852148] ? ip_frag_init+0x350/0x350 [ 1666.852167] ? udp_setsockopt+0xc0/0xc0 [ 1666.852178] ? mark_lock+0xf5/0x2df0 [ 1666.852195] ? lock_chain_count+0x20/0x20 [ 1666.852208] ? mark_lock+0xf5/0x2df0 [ 1666.852223] ? mark_lock+0xf5/0x2df0 [ 1666.852235] ? lock_chain_count+0x20/0x20 [ 1666.852248] ? lock_chain_count+0x20/0x20 [ 1666.852262] ? prep_new_page+0x16d/0x1d0 [ 1666.852275] ? lock_chain_count+0x20/0x20 03:56:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:56:51 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x46}, @NL80211_ATTR_IE={0xd, 0x2a, [@challenge={0x10, 0x1, 0x35}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x4, 0xb2, 0x2c}}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3f}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x1000}, 0x54) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000380)={0x0, 0x80, 0x1, [0x1, 0x5, 0xffffffffffffffff, 0x2390, 0x10000], [0x3f, 0x5, 0x1, 0xffffffff80000000, 0x80, 0x7f, 0x1000, 0x8001, 0x1, 0x100000001, 0x5754, 0xffff, 0x6d, 0x0, 0x7, 0xfffffffffffffff7, 0x80, 0x8001, 0x80000000, 0x8e2, 0x8, 0x800, 0xaefb, 0x5, 0x5, 0x81, 0x5, 0x7, 0x55, 0x7, 0x3, 0xfffffffffffffc01, 0xfffffffffffffffb, 0x80000000, 0x7, 0x6f, 0x6, 0x0, 0x0, 0x3, 0x100000000, 0x660, 0x8, 0x2, 0x1, 0xffffffff00000001, 0x50, 0x332527de, 0x9, 0x6, 0x5e3, 0xffffffffffffff00, 0xfffffffffffffffd, 0x79, 0x4, 0x2, 0x3e0, 0x0, 0xff, 0x9, 0x4, 0x7fff, 0x3ff, 0x5, 0x3, 0x6, 0x200, 0x1, 0xffff, 0x3ff, 0x7, 0x3, 0x0, 0x4, 0x5, 0x3, 0x7, 0x8, 0xeb2, 0xa0, 0xfff, 0x100000001, 0x7, 0x100000005, 0x5, 0x0, 0x6, 0x6, 0x5, 0x2, 0xfff, 0x2, 0x7aa7e5b6, 0x4, 0x24d0, 0x5, 0x81, 0x1, 0x48a, 0x4000000000000000, 0x1ff, 0xa1, 0x5, 0x860, 0x4, 0x6, 0x7, 0x3, 0x9, 0xffffffff, 0x5084, 0xffffffffffffffff, 0x4, 0xff, 0x0, 0x8001, 0x401, 0x13, 0x9273, 0x81, 0x1000]}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000007c0)={r1, "154839cd536d4f39553ccb0d3151e121"}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x20000000, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) 03:56:51 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x0, 0x2, &(0x7f00000003c0)=[{0x0, 0x0, 0x3ff}, {&(0x7f0000000300)="98bcdd2f73c706d9f1e7", 0xa, 0x5}], 0x0, &(0x7f0000000000)={[{@rodir}]}) 03:56:51 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:56:51 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x2, './file0\x00'}, 0x1d) 03:56:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x10, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1666.852296] ? __lock_acquire+0x1657/0x5b00 [ 1666.852315] udpv6_sendmsg+0x1b30/0x2ad0 [ 1666.852329] ? __lock_acquire+0x1657/0x5b00 [ 1666.852349] ? udp_v6_push_pending_frames+0x360/0x360 [ 1666.852361] ? trace_hardirqs_on+0x5b/0x180 [ 1666.852379] ? lock_acquire+0x197/0x470 [ 1666.852391] ? find_held_lock+0x2c/0x110 [ 1666.852409] ? lock_acquire+0x197/0x470 [ 1666.852420] ? find_held_lock+0x2c/0x110 [ 1666.852437] ? __might_fault+0xd3/0x180 [ 1666.852450] ? lock_downgrade+0x6d0/0x6d0 03:56:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1666.852464] ? sock_has_perm+0x1ea/0x280 [ 1666.852477] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1666.852505] ? __import_iovec+0x458/0x590 03:56:51 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) sendfile(r1, r2, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r3}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2001000, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}], [{@euid_eq}, {@dont_hash}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, '@'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@euid_lt}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_eq={'uid', 0x3d, r3}}]}}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000006a00274e0000000000000000000200007b6a7912d7001b0070379be8f37fdd47b2da91911209e48e00c50cdba9a7cf35c37bf8b7898294fb4ca9b86e91b709df3d43adb003434a4e8cdd187ecc5eb002bf5c85d87e532a1579949c2bb15858eda72f38b7666e12c214943024208a40201f7b903b9a72510bde697a47f64811"], 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x20, 0x30, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic='\x00', @typed={0x4, 0x4a}]}]}, 0x20}}, 0x4841) [ 1666.852519] ? udp_v6_push_pending_frames+0x360/0x360 03:56:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 47) 03:56:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x11, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1666.852535] inet6_sendmsg+0x105/0x140 [ 1666.852549] ? inet6_compat_ioctl+0x320/0x320 [ 1666.852561] __sock_sendmsg+0xf2/0x190 [ 1666.852575] ____sys_sendmsg+0x334/0x870 [ 1666.852590] ? sock_write_iter+0x3d0/0x3d0 [ 1666.852601] ? do_recvmmsg+0x6d0/0x6d0 [ 1666.852616] ? __lock_acquire+0x1657/0x5b00 [ 1666.852637] ___sys_sendmsg+0xf3/0x170 [ 1666.852652] ? sendmsg_copy_msghdr+0x160/0x160 [ 1666.852662] ? vmacache_find+0x55/0x2a0 [ 1666.852683] ? lock_acquire+0x197/0x470 [ 1666.852695] ? find_held_lock+0x2c/0x110 [ 1666.852710] ? __might_fault+0xd3/0x180 [ 1666.852723] ? lock_downgrade+0x6d0/0x6d0 [ 1666.852735] ? asm_exc_page_fault+0x1e/0x30 [ 1666.852761] __sys_sendmmsg+0x195/0x470 [ 1666.852778] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1666.852790] ? lock_downgrade+0x6d0/0x6d0 [ 1666.852816] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1666.852832] ? wait_for_completion_io+0x270/0x270 [ 1666.852848] ? rcu_read_lock_any_held+0x75/0xa0 [ 1666.852860] ? vfs_write+0x354/0xb10 [ 1666.852873] ? fput_many+0x2f/0x1a0 [ 1666.852886] ? ksys_write+0x1a9/0x260 [ 1666.852899] ? __ia32_sys_read+0xb0/0xb0 [ 1666.852917] __x64_sys_sendmmsg+0x99/0x100 [ 1666.852930] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1666.852941] do_syscall_64+0x33/0x40 [ 1666.852953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1666.852962] RIP: 0033:0x7fec4fe72b19 [ 1666.852974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1666.852982] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1666.852996] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1666.853003] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1666.853011] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1666.853018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.853025] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1666.978810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1666.984857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1666.997792] FAULT_INJECTION: forcing a failure. [ 1666.997792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.999354] CPU: 0 PID: 10152 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1667.000271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1667.001350] Call Trace: [ 1667.001700] dump_stack+0x107/0x167 [ 1667.002179] should_fail.cold+0x5/0xa [ 1667.002685] _copy_from_user+0x2e/0x1b0 [ 1667.003218] __copy_msghdr_from_user+0x91/0x4b0 [ 1667.003827] ? __ia32_sys_shutdown+0x80/0x80 [ 1667.004452] ? udp_v6_push_pending_frames+0x360/0x360 [ 1667.005116] ? inet6_sendmsg+0xbd/0x140 [ 1667.005638] ? inet6_compat_ioctl+0x320/0x320 [ 1667.006228] ? __sock_sendmsg+0x55/0x190 [ 1667.006758] sendmsg_copy_msghdr+0xa1/0x160 [ 1667.007322] ? do_recvmmsg+0x6d0/0x6d0 [ 1667.007855] ? __lock_acquire+0x1657/0x5b00 [ 1667.008434] ___sys_sendmsg+0xc6/0x170 [ 1667.008957] ? sendmsg_copy_msghdr+0x160/0x160 [ 1667.009556] ? vmacache_find+0x55/0x2a0 [ 1667.010092] ? lock_acquire+0x197/0x470 [ 1667.010614] ? find_held_lock+0x2c/0x110 [ 1667.011155] ? __might_fault+0xd3/0x180 [ 1667.011676] ? lock_downgrade+0x6d0/0x6d0 [ 1667.012246] ? asm_exc_page_fault+0x1e/0x30 [ 1667.012824] __sys_sendmmsg+0x195/0x470 [ 1667.013355] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1667.013924] ? lock_downgrade+0x6d0/0x6d0 [ 1667.014487] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1667.015123] ? wait_for_completion_io+0x270/0x270 [ 1667.015759] ? rcu_read_lock_any_held+0x75/0xa0 [ 1667.016380] ? vfs_write+0x354/0xb10 [ 1667.016878] ? fput_many+0x2f/0x1a0 [ 1667.017350] ? ksys_write+0x1a9/0x260 [ 1667.017848] ? __ia32_sys_read+0xb0/0xb0 [ 1667.018391] __x64_sys_sendmmsg+0x99/0x100 [ 1667.018947] ? syscall_enter_from_user_mode+0x1d/0x50 03:56:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x12, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1667.019618] do_syscall_64+0x33/0x40 [ 1667.020142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1667.020825] RIP: 0033:0x7fec4fe72b19 [ 1667.021319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1667.023807] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1667.024812] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1667.025738] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1667.026667] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1667.027598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1667.028551] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:56:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x1c93, 0x5203, 0x2, &(0x7f00000001c0)={[0x7]}, 0x8) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_enter(0xffffffffffffffff, 0xe59, 0xc508, 0x0, &(0x7f0000000180), 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)='./file0/file0\x00', 0xe, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:56:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001600)=ANY=[@ANYBLOB="280000002000210c00000000000000000200000008000000c96b6c19da98a57d7f311571c1f3cac051f5e43ded818f5b10b1c634b5db50a5583953975198ea4454fffc9c494ea3398153bb400e12f94259f914611c2cb67f0db991ffd669522948de9249bb23ab5743d2d5ee85eedc1a657dafc32030282bb4b2cd90c34aa6f404073c", @ANYRES32=0x0, @ANYBLOB="3439e946a4dfa6ccef91100000000000000000"], 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001300)=""/112, 0x70}, {&(0x7f0000001380)=""/178, 0xb2}, {&(0x7f0000001440)=""/201, 0xc9}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x4, 0xfc, 0x10001) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8001, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x3d}, {0x6}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, 0xa, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_TIMEOUT={0xc}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x40) add_key$keyring(&(0x7f0000000040), &(0x7f00000016c0)={'syz', 0x3}, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) [ 1667.128819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1667.208215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=10165 comm=syz-executor.1 [ 1667.280407] audit: type=1326 audit(2000001412.006:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10162 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c75db19 code=0x0 [ 1667.396382] audit: type=1326 audit(2000001412.122:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10162 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c75db19 code=0x0 [ 1667.446453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2570 sclass=netlink_route_socket pid=10166 comm=syz-executor.1 03:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 48) 03:57:07 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x3, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1682.523043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:57:07 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x4, './file0\x00'}, 0x1d) 03:57:07 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\'-[\x00', 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000040)=""/82, 0x52, 0x2, 0x8}) 03:57:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x13, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:07 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000880)=""/4096, 0x1000) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000002100)={{r0}, "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"}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) fallocate(r1, 0x20, 0x0, 0x8000) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x21000000) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x800, 0x9b) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') pread64(r3, &(0x7f0000001100)=""/4095, 0xfff, 0x21000000) pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0xfff, 0x21000000) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) 03:57:07 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:57:07 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x9000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1682.523753] FAULT_INJECTION: forcing a failure. [ 1682.523753] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.525502] CPU: 1 PID: 10175 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1682.525510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1682.527356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.528364] Call Trace: [ 1682.532723] dump_stack+0x107/0x167 [ 1682.533167] should_fail.cold+0x5/0xa [ 1682.533633] ? __alloc_skb+0x6d/0x5b0 [ 1682.534098] should_failslab+0x5/0x20 [ 1682.534564] kmem_cache_alloc_node+0x55/0x330 [ 1682.535108] __alloc_skb+0x6d/0x5b0 [ 1682.535555] alloc_skb_with_frags+0x92/0x570 [ 1682.536093] ? lock_chain_count+0x20/0x20 [ 1682.536613] sock_alloc_send_pskb+0x7af/0x930 [ 1682.537166] ? sk_alloc+0x350/0x350 [ 1682.537614] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1682.538251] ? lock_downgrade+0x6d0/0x6d0 [ 1682.538768] __ip_append_data+0x1628/0x3310 [ 1682.539300] ? fib_select_path+0x293/0x1de0 [ 1682.539826] ? ip_frag_init+0x350/0x350 [ 1682.540316] ? ip_finish_output+0x330/0x330 [ 1682.540857] ? ip_route_output_key_hash+0x19c/0x340 [ 1682.541461] ? ipv4_mtu+0x1ed/0x2c0 [ 1682.541912] ip_make_skb+0x22a/0x2a0 [ 1682.542369] ? ip_frag_init+0x350/0x350 [ 1682.542855] ? ip_flush_pending_frames+0x20/0x20 [ 1682.543436] ? lock_downgrade+0x6d0/0x6d0 [ 1682.543945] ? xfrm_lookup_route+0x65/0x210 [ 1682.544483] udp_sendmsg+0x1940/0x2160 [ 1682.544966] ? ip_frag_init+0x350/0x350 [ 1682.545456] ? udp_setsockopt+0xc0/0xc0 [ 1682.545950] ? mark_lock+0xf5/0x2df0 [ 1682.546408] ? lock_chain_count+0x20/0x20 [ 1682.546913] ? mark_lock+0xf5/0x2df0 [ 1682.547369] ? mark_lock+0xf5/0x2df0 [ 1682.547821] ? lock_chain_count+0x20/0x20 [ 1682.548322] ? lock_chain_count+0x20/0x20 [ 1682.548845] ? prep_new_page+0x16d/0x1d0 [ 1682.549340] ? lock_chain_count+0x20/0x20 [ 1682.549851] ? __lock_acquire+0x1657/0x5b00 [ 1682.550379] udpv6_sendmsg+0x1b30/0x2ad0 [ 1682.550875] ? __lock_acquire+0x1657/0x5b00 [ 1682.551405] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.552031] ? trace_hardirqs_on+0x5b/0x180 [ 1682.552572] ? lock_acquire+0x197/0x470 [ 1682.553054] ? find_held_lock+0x2c/0x110 [ 1682.553555] ? lock_acquire+0x197/0x470 [ 1682.554037] ? find_held_lock+0x2c/0x110 [ 1682.554535] ? __might_fault+0xd3/0x180 [ 1682.555019] ? lock_downgrade+0x6d0/0x6d0 [ 1682.555526] ? sock_has_perm+0x1ea/0x280 [ 1682.556022] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1682.556674] ? __import_iovec+0x458/0x590 [ 1682.557179] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.557809] inet6_sendmsg+0x105/0x140 [ 1682.558285] ? inet6_compat_ioctl+0x320/0x320 [ 1682.558834] __sock_sendmsg+0xf2/0x190 [ 1682.559308] ____sys_sendmsg+0x334/0x870 [ 1682.559810] ? sock_write_iter+0x3d0/0x3d0 [ 1682.560323] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.564825] ? __lock_acquire+0x1657/0x5b00 [ 1682.565357] ___sys_sendmsg+0xf3/0x170 [ 1682.565829] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.566382] ? vmacache_find+0x55/0x2a0 [ 1682.566873] ? lock_acquire+0x197/0x470 [ 1682.567356] ? find_held_lock+0x2c/0x110 [ 1682.567855] ? __might_fault+0xd3/0x180 [ 1682.568340] ? lock_downgrade+0x6d0/0x6d0 [ 1682.568859] ? asm_exc_page_fault+0x1e/0x30 [ 1682.569393] __sys_sendmmsg+0x195/0x470 [ 1682.569882] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1682.570405] ? lock_downgrade+0x6d0/0x6d0 [ 1682.570925] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1682.571515] ? wait_for_completion_io+0x270/0x270 [ 1682.572103] ? rcu_read_lock_any_held+0x75/0xa0 [ 1682.572677] ? vfs_write+0x354/0xb10 [ 1682.573130] ? fput_many+0x2f/0x1a0 [ 1682.573573] ? ksys_write+0x1a9/0x260 [ 1682.574036] ? __ia32_sys_read+0xb0/0xb0 [ 1682.574533] __x64_sys_sendmmsg+0x99/0x100 [ 1682.575048] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.575674] do_syscall_64+0x33/0x40 [ 1682.576126] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.576761] RIP: 0033:0x7fec4fe72b19 [ 1682.577213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.579448] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1682.580380] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1682.581256] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1682.582120] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.582987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.583851] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c66a3b572734f9f2960489bcfd1baa89d409e4b00ba17439ba84201bd4ee5ec6fa3255c411066d8d4158cb9c5c939f34cece2183a114d70870", 0x42}, {&(0x7f0000000140)="c45fe57fc5227a6ba124175ecea7f5534e60c08fd6656f86455f2e572fc0c681678fc3d6f12026ab6644dceeab6c983047ca7a98955070ca1726cf3be53a66648300bb8a73cbc9a3285786d539e3e34d1297f3a608264794938435e89fa881b504eac76ce3efe367bc1409ddde11685a28ef0ec772ca9a42d833931d92997091e90f8b30e1ed129eba55f2314410ff0a5df9ab3713c31efb23f6af3428d48b56da610449492714f546595805f5b50b33f0de6d2dfd5ca6f1fcc325c65bf596e71b054962337659f5cffeada93e99f3834757537fde383f954f1cd4378d705d7d4073a329782f668c234f3f56a8486a7a81b4076597941ab639897243301b5c352bbda7e2c7449f56fc8236f4f7e0a862da983771f1477f5c2c1bd7323b3674d5d34dec606c94a49ef87fdec2b7b13b91c2ae7e2d8304748f454bee29c4494853625618b7e40fa6b93894091f710c4d43fcdbc8ed1d9885212831923e191a2fae41ba36c334cee460e8201adfd22d53d1c65b33fac241c929c07ff2edaf1aa9106795a17f00e69239ca38d156ee14c379d02b5818ee8f06d065df9ef5eda9cf1eea9ba326032ec9c23a0db1bbca6f56c7e483802fe0f449d3e3f2a875eb3103bc0d5b54a94fca45f8254209c5597ffee28caff097df4c0c7893c6383dfd99a6c615c8985f9a2c13c5acd05f7e94b76c6cd05344227c1d712bb067fda8943427d38460fd2995f9dff1c1386bc798ab82af4eedd3a4108eba0e963f74f6a502ea1c452f4afddb2c9ea690250d6d36c5f372f17ed7c16a5144af406cb89946d8cd0f802074785fd9c98596b2d82f818fe6a5e7028ae685059248cd109c7a43991011a3e25a8e0f97032645408f61e50f6d7e0e02490d28a4542ac01677499f98aeba618a32251ae9ed306e9c6d9d59474af0dbe22d37d071b1a9609973b790557847798cb5cce4b8332e28ebb5d8d9d0f7e2b6de41ab4d4ac25c4770f550634c255ab2acf0631ec35c06e7edcf8687538c2cab1c22c673e90c1d2cb8609c5ec910e8f218dfd285f1eac6cd86f77c4efda404c0c1ffac23b92737bb5c0587521f0d46cdd49d8e4a9112b885096cf25e9f6717b1f28efa863bebdbb4e6fec6bc2f939db59850071a69838a0d43e8b3909985327498af28361ac2edc3645c9bde944233e594a850f0d0de68ff7fc360e1b0524ec387860c0c7a8f020f08f6084bdec411638ee4522a255c8fca0305945aebfcebaada534bd58ef32f411d73cb985ae441ccfb62b6a1cd434da99fd82ffbda2a7069dfb7b5298f78327b5cc631e6a29bad46f39a1246762aea3d69b8e5c4dd997422427ad26469da5b5fbb2acef2097f389ceda1767932abaa7d624fc87db61eecb6e6a7b2a4e7ec1d85d9da7ea13064f3c14d9c22ad0523d756fd0e4fb02242e1134a30ce618cc150a66c7be5261e1c8e9f63e803daec7c61446c17cff7a8e7f2ca4d037d839464f6aa2d7f5824625c7573069bddc4cc33101dbeac5845bb121f4ca5302f5327e117504681e64c37609bfa0df84a5449df6ebe22e2f1524a0012872ab7256d62fc8fcffd2857950884d7afc0b11b05ec6b513b7acf8fb4cd8e13ff3733f4e0e533f2ce3ffaaa964508411af4d82f78743583544f8baa908bcdd5c0a3bdcd07e67d83b961381f07c8eaaa90dd57178ef2140ee5548c48c1cd4883b0d1da2018d8bef7fad9e4fb7fd5ef3c567cd0896a678f209cef1c10de60878e3ae5fac91bcd5c6cc1f4acef612b717f76e80bc19c91185bb9f37733c6ec2140d6ef846c945faf8370c9b49ea4286abc6ec816148794baea3c5b4555b61e00d26ce10f354e9c49c3d13abc7b1c1d03999fbab02241e09a4be379b406abb08e079195cc0fc7d1ea60c87e5b0b2156a304372c77b5203eedaf9d48c2cfe3f03b215cfab91b037c809acac3aa35105f91cee724b801b6801a81983cf087f7fc2036c93dbb3857f0c720373a418cbe476b43ab4f3e4e5e646f4135b7f28b441c777dd9ca1d0e4a3a62f9e8b1ea693fd2beb26a68f3ad9ee64e7d037dc21ad05a16ad3216e964921ef52417db5cd72686deab1294230545746889fbff6d3ee77bc09917aac8a6185d97d13d10bab46bc2a2548a9d9b9b975e1a060b9a23a7ca8b9cda5e2e9d355015c493b77f245ed6629a67337002cbe3be49eced29af797c3d9d8cfee89b7a7e61f01aa6672a385e35579dc00d578868f947c625210339323a0ab980466d55092efd1f25bef8563710a44f552db87a14eaa8405dd6cd0c2e6438b64f67fbd842e28e941c192de9ee007fdb8445fd93077fdec507e292a1ddf7525b1beaa23c961a77c4af189414e95372933c651b80048b01e5dfe4928747d166b8e8dc7f9275407bc087b69d3ec3a5b7728ad21472582aa8201ccaa33db43fe546dd218d61109a751d7a2cd557235532c56ee432ef50fd6f309ee66a11a4b599dde3458904ea796736c8f6aa0484f0bcdb8eefda401a4ee0ec20c9ba4b3f389862f8476aa38114e2d46844b92b70b4362cb8b6462c286523a9e743c7e62b1ee54a390d901aa4a1b643c6d1252e4e6b79f409ce7205e20d818d09c2780898e5c39282bad77356c46608bad1106465a4b981a28c0809e72189b6129cf2be4258507a3fda9a4cd9c46e190a127571359821a67f657c826dfccdcaef626ee307eed2ebbc947a4b305042afffc35dafbfe191f116cc0ce41c30665a3d641e40c4775b04290974e252eeebc9633aefb4ddebd59ee46092a0d062ef18084a86812ffec6146c44ed17eed9c573e3c6ffb39c450dcc6a962343e22a1c0e5a6bb3cd54448bfb03291c89df181ea76ae073295810f8452d2293e7685aba9deeba82ee20fc6d96a6acfe247b7d47c89d0b32fa1efeeb02caecf50889d092e5522a5e8a8586616843a21ad84a1d893a84441aee6c09caf8de5d12d68f0c2ab24334100da90f05909ed1758a6379dfbe9dc477e3cb3b3a4e2f1e566fd171ca72a2de79dbf0017f18af40c1581eabb5413537fac821dcc084eb41a57d0b23b05b43b98bf1aed2251f8e1be0fae35d1673321a9acc195e8b92f9141ce245781668d102fc8feac99b12378321161219508b1935ba555069c7b132e18489cdfb2e48a030461d1815a22406df39d4835ff70c3235347481aeda4a5969d8f597cc9ecc557668ddabefa129b70dd2b95e59eecc26ee7f9c21c6d8c8611faa2015e0fefd8bfc67bbfabfc8e121adb40827e31a42538bf94593d76ef768ba1e564e249d64934148e73a0344c824584d05a3ffed0c12288282dfb84ccf4c76916bd5ba4e2821ef55bfa306e7ad3d6761fd4ff643f2a8ed3895fd66eb948078128fd94365ff87580fb71c639d32959ac2d784b44632b65c0ae98f262e37cef56ce9be42549d84fd1e25e60726f9917c5b4a1fc166772d69e8da5c28c72eee0021c20864ea2036aa2233b2ddf00e4dd18873a7ab80d139e2676233a34a3d9e3f8c08389ccf62270bf4fdaea1e4068bcc2d5e4d3b14385b15a17cb53abc228a8261a6d05029e66fa0193b63549a97dfd4b50846da7c9e8fb22527bf3de0b7f5c4f1eee9c5b42c30452f44147ccb01d2d502fc0e00aa61387bb044a7d05eac42b34d856b17fc228dda0d28445aecdb3c56d20d301397802a93f4e52d48d0af5f479c302fbf0e4877c5f5d7c66bb350f968007184f461b8089519aecf9c4b15d0d14ec9570a9431ad2adc58916bfc91407e9d8d0c210c030bba522eb60866681e8aa34ca8169a985d15e69070f18e72dae9cdb707487dd9e19feb8b2fb0ff0556a452eb564973aaab3e7692ea62b96500638b843be72388e5ae8eee6eec2b202da3405ae4721d23b0b2bd5763b2bcfa7e6098abb4eedd059a22d316d96e25cf4731493881fe9758f2e706504eda594a3d6a7d4504e7c45c00096d329aeee793acfbb6fa815c424da18c420ff15a4f173b17da04083950cd62eb9b80addb2efde2565ecff73c494a917f98c95a49f4648c7b87d0e462232e57c24e8ed71ea54545144b69d9cee0edf79271a0d4ce7187bc3101fb891e8c3437f762169e9e33146fa389155282f1edb56f50136e977d6cc285da75ad714de7bda66f70300063654b5fd5ecb1aa85a04453a28c31fad08ac06c90474b9523acc1e098c548bcc0dbe86b55a37255709fc9375e8e91175e3d6cb8a2a2e29a3c1c97e3d374f8d5f639de12f365c8a1e7abe1f465aa520c1ec0bbef7bc40e2ba4d480bb9c4d7d92ea8aefeb4a56ee098b6202b948ba1d0068b74ca37b69fae875c5c1dbc263791509484b5e2d86a9ef08fa06233d1f0f8bfd3464346f5ea6022e7c3008ee76b33b98ee57c82013a0d89c78d957e8492192e2b9c90fb4ac0b0c75a55f33fb4e04176b7fe7ed2158210e4992cf71feb1e371b68419fa1d9143566d6fa01dba30ddb486674bae1febc03d4abc7a663c769369a005ea71a09716fce3296865b4f7e3cc43c0200f0a458ca994dac2caceb3ca1ddb9fbb1d6c0500492baf333839cfd401a92fd15d9cc0065ade9a71b6b75e31fc0dba44e8ddd997d40e7834e2e52e2adc2c2e0ebb81f9ac76ccea46743c65e0f56637b87ca00086d5a4f26533231bb2b8753d4b5e3b23daa8c402ea664b0c3e0c04c473bda3519f6be36c01ed44786b1d05be5c9f8ed2b36e922003386dacc5337b09acd7e2696dcc77eda89411ac0c3bac2ad7a58e54d0c425df2fed5f52286f35164ef073d4017ddd379bad6dc2b7476129eb134835aaa264688c65844a295d62a8ea6533263fe56a4a9c3ca398a0ca056280d0f59eee86a40efce22dab8a2dccc17e26b22824110bada715e6e952c166825c494197d4604775a9012f0f41d831d03ba7e0efa8b0d8ec9c1059a6d26f6220b4078746d4e0362242a4d90d9e46896661d35825df938f1592d3cd55fd64117c5dcdfe2f5c89c1c3e885f654c5a849eeb3e8302e6bf95e8990b6e46d65435ab1978e6851ab0b75e84607c05416834336a9dca587b9fd5485e2822c93c8ffe8ec2fc96115a70f0aaca3607cd58fc95a7276fe41706df08a2904d6ad6581bc6d5a1c9f3cab0a557859e20e3f64b82bfb671a53699d7f7599a69acb3bdde412fa2502984761de8ce0e0f1e4678ac21fffaecd667c421e1f6826444ec9fe6032a6ad0717ebdc1547df716dd95cb3249efe6a97ef2e9ba01d02d416ea58e0e7231c24899e395200c18ae404905e087b347b309210f54ca44a05a6a9a44f3326ac5818bd5dff01fdf243a85d9bc23c1788f37c1ad199cb9d4150d63ffcd5b7c224add41481be18632a4f097cce4a60bf9d6afbeefd65142c3fb329289c7dda21096869febe2ebdd8ffd420545e6aaf8a41e316cf0493689bd6bba9217fd79556c0b31593459cace29798c53b99e15d90d5b92cd50da2f8e9b5883f8f898ea6b1bcf8692df8f8eee639dad19e413c8d5be7f425d7bca0c280ae47dd8c0529f11d2d6847c6567644454377830ce5d779e9e8d76ee3a5eae6cdc1f9e1ce355cd2a8c8de5b4d5b392fb0b0406b5fb1fa8e31dc3c5285ea8159a98d3588057f8569eed0c9d60f2543ff60c6fc31c2763c81501c3a6b14fd723bd0ddf9259171521650dd5e6643db46a0ef08b3920c2eee79918855427ef0833fe7683cdfe5003363061deb734c106f8851414f4cb86ca85fe48ee62bfbc6a9e32a6fd7f71e63b89d222520c6", 0xfc0}, {&(0x7f0000001200)="7da9545f34e5d591", 0x8}], 0x3, 0xff7, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) close(r0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x0, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001100)={r1, 0x3, 0x5}) bind(r2, &(0x7f0000001240)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x2}, 0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000000c0)={0x9, 0x0, 0x10000, 0x3ff, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r0, 0x0, 0x2) 03:57:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 49) 03:57:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x14, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:07 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x13, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1682.653947] FAULT_INJECTION: forcing a failure. [ 1682.653947] name failslab, interval 1, probability 0, space 0, times 0 [ 1682.655390] CPU: 0 PID: 10202 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1682.656232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1682.657263] Call Trace: [ 1682.657592] dump_stack+0x107/0x167 [ 1682.658040] should_fail.cold+0x5/0xa [ 1682.658509] ? create_object.isra.0+0x3a/0xa20 [ 1682.659074] should_failslab+0x5/0x20 [ 1682.659542] kmem_cache_alloc+0x5b/0x310 [ 1682.660041] create_object.isra.0+0x3a/0xa20 [ 1682.660618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1682.661238] kmem_cache_alloc_node+0x169/0x330 [ 1682.661796] __alloc_skb+0x6d/0x5b0 [ 1682.662241] alloc_skb_with_frags+0x92/0x570 [ 1682.662779] ? lock_chain_count+0x20/0x20 [ 1682.663286] sock_alloc_send_pskb+0x7af/0x930 [ 1682.663838] ? sk_alloc+0x350/0x350 [ 1682.664285] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1682.664943] ? lock_downgrade+0x6d0/0x6d0 [ 1682.665455] __ip_append_data+0x1628/0x3310 [ 1682.665986] ? fib_select_path+0x293/0x1de0 [ 1682.666515] ? ip_frag_init+0x350/0x350 [ 1682.667003] ? ip_finish_output+0x330/0x330 [ 1682.667528] ? ip_route_output_key_hash+0x19c/0x340 [ 1682.668133] ? ipv4_mtu+0x1ed/0x2c0 [ 1682.668599] ip_make_skb+0x22a/0x2a0 [ 1682.669055] ? ip_frag_init+0x350/0x350 [ 1682.669541] ? ip_flush_pending_frames+0x20/0x20 [ 1682.670123] ? lock_downgrade+0x6d0/0x6d0 [ 1682.670631] ? xfrm_lookup_route+0x65/0x210 [ 1682.671161] udp_sendmsg+0x1940/0x2160 [ 1682.671640] ? ip_frag_init+0x350/0x350 [ 1682.672133] ? udp_setsockopt+0xc0/0xc0 [ 1682.672627] ? mark_lock+0xf5/0x2df0 [ 1682.673084] ? lock_chain_count+0x20/0x20 [ 1682.673590] ? mark_lock+0xf5/0x2df0 [ 1682.674045] ? mark_lock+0xf5/0x2df0 [ 1682.674498] ? lock_chain_count+0x20/0x20 [ 1682.675002] ? lock_chain_count+0x20/0x20 [ 1682.675508] ? prep_new_page+0x16d/0x1d0 [ 1682.676003] ? lock_chain_count+0x20/0x20 [ 1682.676527] ? __lock_acquire+0x1657/0x5b00 [ 1682.677060] udpv6_sendmsg+0x1b30/0x2ad0 [ 1682.677555] ? __lock_acquire+0x1657/0x5b00 [ 1682.678090] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.678716] ? trace_hardirqs_on+0x5b/0x180 [ 1682.679245] ? lock_acquire+0x197/0x470 [ 1682.679727] ? find_held_lock+0x2c/0x110 [ 1682.680227] ? lock_acquire+0x197/0x470 [ 1682.680721] ? find_held_lock+0x2c/0x110 [ 1682.681220] ? __might_fault+0xd3/0x180 [ 1682.681705] ? lock_downgrade+0x6d0/0x6d0 [ 1682.682208] ? lock_chain_count+0x20/0x20 [ 1682.682714] ? sock_has_perm+0x1ea/0x280 [ 1682.683207] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1682.683848] ? __import_iovec+0x458/0x590 [ 1682.684354] ? udp_v6_push_pending_frames+0x360/0x360 [ 1682.685005] inet6_sendmsg+0x105/0x140 [ 1682.685480] ? inet6_compat_ioctl+0x320/0x320 [ 1682.686026] __sock_sendmsg+0xf2/0x190 [ 1682.686502] ____sys_sendmsg+0x334/0x870 [ 1682.686998] ? sock_write_iter+0x3d0/0x3d0 [ 1682.687512] ? do_recvmmsg+0x6d0/0x6d0 [ 1682.687993] ? __lock_acquire+0x1657/0x5b00 [ 1682.688536] ___sys_sendmsg+0xf3/0x170 [ 1682.689012] ? sendmsg_copy_msghdr+0x160/0x160 [ 1682.689571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1682.690210] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1682.690753] ? trace_hardirqs_on+0x5b/0x180 [ 1682.691282] ? lock_acquire+0x197/0x470 [ 1682.691764] ? find_held_lock+0x2c/0x110 [ 1682.692261] ? __might_fault+0xd3/0x180 [ 1682.692760] ? lock_downgrade+0x6d0/0x6d0 [ 1682.693269] ? io_schedule_timeout+0x140/0x140 [ 1682.693835] __sys_sendmmsg+0x195/0x470 [ 1682.694323] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1682.694849] ? lock_downgrade+0x6d0/0x6d0 [ 1682.695365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1682.695954] ? wait_for_completion_io+0x270/0x270 [ 1682.696555] ? rcu_read_lock_any_held+0x75/0xa0 [ 1682.697121] ? vfs_write+0x354/0xb10 [ 1682.697574] ? fput_many+0x2f/0x1a0 [ 1682.698018] ? ksys_write+0x1a9/0x260 [ 1682.698484] ? __ia32_sys_read+0xb0/0xb0 [ 1682.698983] __x64_sys_sendmmsg+0x99/0x100 [ 1682.699498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1682.700129] do_syscall_64+0x33/0x40 [ 1682.700595] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1682.701220] RIP: 0033:0x7fec4fe72b19 [ 1682.701675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1682.703911] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1682.704855] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1682.705724] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1682.706590] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1682.707458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1682.708325] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x13, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xa000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:57:21 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1, 0x5, 0x7, 0xffffffffffffffe0, r2}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006a00274e000000000000006a7912000000000000000000008547f0a1b8d1aaa02658eaecbfa6dc0a4047a8a2c44db7e5f488c236c7058efe5fd28bac8333"], 0x1c}}, 0x0) dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000040000000000000000000400"/241]) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000008c0)}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000480), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x81) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r7}}, 0x8) unshare(0x48020200) 03:57:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x15, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:21 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x5, './file0\x00'}, 0x1d) 03:57:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 50) 03:57:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:57:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x7, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:57:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x18, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1697.147615] FAULT_INJECTION: forcing a failure. [ 1697.147615] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.153965] CPU: 0 PID: 10226 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1697.154809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1697.155819] Call Trace: [ 1697.156147] dump_stack+0x107/0x167 [ 1697.156594] should_fail.cold+0x5/0xa [ 1697.157091] should_failslab+0x5/0x20 [ 1697.157562] __kmalloc_node_track_caller+0x74/0x3b0 [ 1697.158170] ? alloc_skb_with_frags+0x92/0x570 [ 1697.158729] __alloc_skb+0xb1/0x5b0 [ 1697.159176] alloc_skb_with_frags+0x92/0x570 [ 1697.159717] ? lock_chain_count+0x20/0x20 [ 1697.160223] sock_alloc_send_pskb+0x7af/0x930 [ 1697.160776] ? sk_alloc+0x350/0x350 [ 1697.161245] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1697.161880] ? lock_downgrade+0x6d0/0x6d0 [ 1697.162393] __ip_append_data+0x1628/0x3310 [ 1697.162924] ? fib_select_path+0x293/0x1de0 [ 1697.163449] ? ip_frag_init+0x350/0x350 [ 1697.163939] ? ip_finish_output+0x330/0x330 [ 1697.164464] ? ip_route_output_key_hash+0x19c/0x340 [ 1697.165084] ? ipv4_mtu+0x1ed/0x2c0 [ 1697.165532] ip_make_skb+0x22a/0x2a0 [ 1697.165985] ? ip_frag_init+0x350/0x350 [ 1697.166471] ? ip_flush_pending_frames+0x20/0x20 [ 1697.167051] ? lock_downgrade+0x6d0/0x6d0 [ 1697.167560] ? xfrm_lookup_route+0x65/0x210 [ 1697.168090] udp_sendmsg+0x1940/0x2160 [ 1697.168568] ? ip_frag_init+0x350/0x350 [ 1697.169069] ? udp_setsockopt+0xc0/0xc0 [ 1697.169555] ? mark_lock+0xf5/0x2df0 [ 1697.170010] ? lock_chain_count+0x20/0x20 [ 1697.170516] ? mark_lock+0xf5/0x2df0 [ 1697.170970] ? mark_lock+0xf5/0x2df0 [ 1697.171423] ? lock_chain_count+0x20/0x20 [ 1697.171928] ? lock_chain_count+0x20/0x20 [ 1697.172432] ? prep_new_page+0x16d/0x1d0 [ 1697.172924] ? lock_chain_count+0x20/0x20 [ 1697.173463] ? __lock_acquire+0x1657/0x5b00 [ 1697.173993] udpv6_sendmsg+0x1b30/0x2ad0 [ 1697.174488] ? __lock_acquire+0x1657/0x5b00 [ 1697.175019] ? udp_v6_push_pending_frames+0x360/0x360 [ 1697.175645] ? trace_hardirqs_on+0x5b/0x180 [ 1697.176174] ? lock_acquire+0x197/0x470 [ 1697.176656] ? find_held_lock+0x2c/0x110 [ 1697.177173] ? lock_acquire+0x197/0x470 [ 1697.177655] ? find_held_lock+0x2c/0x110 [ 1697.178152] ? __might_fault+0xd3/0x180 [ 1697.178638] ? lock_downgrade+0x6d0/0x6d0 [ 1697.179144] ? sock_has_perm+0x1ea/0x280 [ 1697.179637] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1697.180278] ? __import_iovec+0x458/0x590 [ 1697.180782] ? udp_v6_push_pending_frames+0x360/0x360 [ 1697.181433] inet6_sendmsg+0x105/0x140 [ 1697.181907] ? inet6_compat_ioctl+0x320/0x320 [ 1697.182453] __sock_sendmsg+0xf2/0x190 [ 1697.182927] ____sys_sendmsg+0x334/0x870 [ 1697.183423] ? sock_write_iter+0x3d0/0x3d0 [ 1697.183936] ? do_recvmmsg+0x6d0/0x6d0 [ 1697.184412] ? __lock_acquire+0x1657/0x5b00 [ 1697.184944] ___sys_sendmsg+0xf3/0x170 [ 1697.185437] ? sendmsg_copy_msghdr+0x160/0x160 [ 1697.185988] ? vmacache_find+0x55/0x2a0 [ 1697.186480] ? lock_acquire+0x197/0x470 [ 1697.186963] ? find_held_lock+0x2c/0x110 [ 1697.187461] ? __might_fault+0xd3/0x180 [ 1697.187944] ? lock_downgrade+0x6d0/0x6d0 [ 1697.188448] ? asm_exc_page_fault+0x1e/0x30 [ 1697.188994] __sys_sendmmsg+0x195/0x470 [ 1697.189497] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1697.190021] ? lock_downgrade+0x6d0/0x6d0 [ 1697.190534] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1697.191118] ? wait_for_completion_io+0x270/0x270 [ 1697.191704] ? rcu_read_lock_any_held+0x75/0xa0 [ 1697.192267] ? vfs_write+0x354/0xb10 [ 1697.192719] ? fput_many+0x2f/0x1a0 [ 1697.193182] ? ksys_write+0x1a9/0x260 [ 1697.193646] ? __ia32_sys_read+0xb0/0xb0 [ 1697.194143] __x64_sys_sendmmsg+0x99/0x100 [ 1697.194656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1697.195281] do_syscall_64+0x33/0x40 [ 1697.195735] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1697.196356] RIP: 0033:0x7fec4fe72b19 [ 1697.196810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1697.199067] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1697.200000] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1697.200867] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1697.201751] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.202621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1697.203488] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 51) 03:57:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x13, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x19, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1697.273778] FAULT_INJECTION: forcing a failure. [ 1697.273778] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.275258] CPU: 0 PID: 10239 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1697.276102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1697.277130] Call Trace: [ 1697.277457] dump_stack+0x107/0x167 [ 1697.277905] should_fail.cold+0x5/0xa [ 1697.278374] ? create_object.isra.0+0x3a/0xa20 [ 1697.278939] should_failslab+0x5/0x20 [ 1697.279406] kmem_cache_alloc+0x5b/0x310 [ 1697.279904] create_object.isra.0+0x3a/0xa20 [ 1697.280439] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1697.281074] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1697.281703] ? alloc_skb_with_frags+0x92/0x570 [ 1697.282264] __alloc_skb+0xb1/0x5b0 [ 1697.282713] alloc_skb_with_frags+0x92/0x570 [ 1697.283255] ? lock_chain_count+0x20/0x20 [ 1697.283762] sock_alloc_send_pskb+0x7af/0x930 [ 1697.284317] ? sk_alloc+0x350/0x350 [ 1697.284770] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1697.285426] ? lock_downgrade+0x6d0/0x6d0 [ 1697.285939] __ip_append_data+0x1628/0x3310 [ 1697.286471] ? fib_select_path+0x293/0x1de0 [ 1697.286999] ? ip_frag_init+0x350/0x350 [ 1697.287489] ? ip_finish_output+0x330/0x330 [ 1697.288022] ? ip_route_output_key_hash+0x19c/0x340 [ 1697.288630] ? ipv4_mtu+0x1ed/0x2c0 [ 1697.289093] ip_make_skb+0x22a/0x2a0 [ 1697.289551] ? ip_frag_init+0x350/0x350 [ 1697.290036] ? ip_flush_pending_frames+0x20/0x20 [ 1697.290616] ? lock_downgrade+0x6d0/0x6d0 [ 1697.291124] ? xfrm_lookup_route+0x65/0x210 [ 1697.291654] udp_sendmsg+0x1940/0x2160 [ 1697.292132] ? ip_frag_init+0x350/0x350 [ 1697.292620] ? udp_setsockopt+0xc0/0xc0 [ 1697.293116] ? mark_lock+0xf5/0x2df0 [ 1697.293573] ? lock_chain_count+0x20/0x20 [ 1697.294078] ? mark_lock+0xf5/0x2df0 [ 1697.294534] ? mark_lock+0xf5/0x2df0 [ 1697.294987] ? lock_chain_count+0x20/0x20 [ 1697.295494] ? lock_chain_count+0x20/0x20 [ 1697.296000] ? prep_new_page+0x16d/0x1d0 [ 1697.296494] ? lock_chain_count+0x20/0x20 [ 1697.297014] ? __lock_acquire+0x1657/0x5b00 [ 1697.297548] udpv6_sendmsg+0x1b30/0x2ad0 [ 1697.298045] ? __lock_acquire+0x1657/0x5b00 [ 1697.298576] ? udp_v6_push_pending_frames+0x360/0x360 [ 1697.299203] ? trace_hardirqs_on+0x5b/0x180 [ 1697.299731] ? lock_acquire+0x197/0x470 [ 1697.300214] ? find_held_lock+0x2c/0x110 [ 1697.300714] ? lock_acquire+0x197/0x470 [ 1697.301211] ? find_held_lock+0x2c/0x110 [ 1697.301710] ? __might_fault+0xd3/0x180 [ 1697.302197] ? lock_downgrade+0x6d0/0x6d0 [ 1697.302700] ? lock_chain_count+0x20/0x20 [ 1697.303207] ? sock_has_perm+0x1ea/0x280 [ 1697.303702] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1697.304345] ? __import_iovec+0x458/0x590 [ 1697.304851] ? udp_v6_push_pending_frames+0x360/0x360 [ 1697.305496] inet6_sendmsg+0x105/0x140 [ 1697.305972] ? inet6_compat_ioctl+0x320/0x320 [ 1697.306516] __sock_sendmsg+0xf2/0x190 [ 1697.306991] ____sys_sendmsg+0x334/0x870 [ 1697.307488] ? sock_write_iter+0x3d0/0x3d0 [ 1697.308005] ? do_recvmmsg+0x6d0/0x6d0 [ 1697.308480] ? __lock_acquire+0x1657/0x5b00 03:57:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x14, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1697.309022] ___sys_sendmsg+0xf3/0x170 [ 1697.309501] ? sendmsg_copy_msghdr+0x160/0x160 [ 1697.310066] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1697.310703] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1697.311246] ? trace_hardirqs_on+0x5b/0x180 [ 1697.311773] ? lock_acquire+0x197/0x470 [ 1697.312258] ? find_held_lock+0x2c/0x110 [ 1697.312979] ? __might_fault+0xd3/0x180 [ 1697.313474] ? lock_downgrade+0x6d0/0x6d0 [ 1697.313982] ? io_schedule_timeout+0x140/0x140 [ 1697.314547] __sys_sendmmsg+0x195/0x470 [ 1697.315036] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1697.315561] ? lock_downgrade+0x6d0/0x6d0 [ 1697.316079] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1697.316671] ? wait_for_completion_io+0x270/0x270 [ 1697.317276] ? rcu_read_lock_any_held+0x75/0xa0 [ 1697.317842] ? vfs_write+0x354/0xb10 [ 1697.318297] ? fput_many+0x2f/0x1a0 [ 1697.318742] ? ksys_write+0x1a9/0x260 [ 1697.319207] ? __ia32_sys_read+0xb0/0xb0 [ 1697.319707] __x64_sys_sendmmsg+0x99/0x100 [ 1697.320225] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1697.320852] do_syscall_64+0x33/0x40 [ 1697.321320] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1697.321948] RIP: 0033:0x7fec4fe72b19 [ 1697.322402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1697.324647] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1697.325593] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1697.326461] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1697.327332] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.328200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1697.329086] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:22 executing program 1: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x1, 0x6, @multicast}, 0x10) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@private2, 0x0}, &(0x7f0000000140)=0x14) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x69f0, 0x3, 0x8, 0x3c84, 0x6}) sendmmsg$inet6(r1, &(0x7f0000001800)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0x1000, @local, 0x7}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000240)="a9ce0eacc6a79a77bcd518c1ef478674d00fcb1ba45420cd0a515ec22c66620487d41d61373f", 0x26}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="abf679bc9792779c950d8d9e19f4283d3bdf8b5493aefc292f286c85d16eeb15ff66cf0d3619b9117041437238f996476cd66d350c1e1ef824acaa93195402498dea0709d7a43f560ca4c4fa90461295d395080c1fbef2ec810ec204715f52bf471b476d4d47372ae0b9c1a1abc27eb089", 0x71}, {&(0x7f0000001300)="bf2109315ab4f8e4cc1a1ccd", 0xc}, {&(0x7f0000001340)="69541ddd0a42871fec94bf6bd64320f8201221ea001c6788c243dabd0340a5d102c89a6fdf2c5e18822696a295e53d21c943c3a3f012bfbb580df4a6fc94bddc20b291fee7577fcb6adb8b", 0x4b}, {&(0x7f00000013c0)="394204e17a7deab2b219756ecbd9b0dd1a1a9e3fa3f5ba37279fa48c8551ea08815c0b04a612c3803e7a939c0f529760e3ae73288238a70b6df1e7698c1cbb9b6a66b7f37d430e8fef498a3821ad56e4e032399d2caa8452e2d33544c80a3ec2d21fa5edd601f14eba359968a34daab6d267e0f8e567f65619", 0x79}, {&(0x7f0000001440)="b82222a310b6543fa3174fe9e881eba4f9c7844e9dfeb0970f7e89dbe03ef1f0ada6bd7bb9c166d84eeed1fb987027accfccab65075901db516a02ccd126f8c1eeb03e3a4e8f7a48a5aab0e33c352623681189e2cff1d38ced3a98758d5806653fbdab6ed0739e2cb735dd3dc6cccdb5572f9ffdba9e1c7912d44cbc5be1ea804a51f26e5ac940914f62bbb927c707e5ee8a2ea3653af80d650031cd3b92e367c7cb0303d436eb6afb3d908f385d104d5c27dcb7167325dd2b1399b7a0947c43f6d818c192ef2a44d9c5a4466187a8fd74687d6aaef80e70f88a8527e38051c33b11c2c08cf8e0f8a91f45", 0xeb}, {&(0x7f0000001540)="be8d44b8efdc476121aeb1deb3073c36cbd44afc767881c1343fe5e5184daf2204998d29cd191ccc4de6b640ac5c76879bdfcd360363d9f2925e9439aeb248661060dbc2a6234bc7f77f925f5e133e0ba921421738", 0x55}, {&(0x7f00000015c0)="651ff9498eaf7664404cc4373e294157661e88fbb655a737c56c35fee41eebdc11917edabca73791ca66b8fe05c6b53ec1e663e11597fe67788f3408b9", 0x3d}, {&(0x7f0000001600)="5d3d82432e01b43fad049d176508b9c41d5d6f5aa442d9135bc650c4cd4e9b854c19f7651c9856fed5be24cb0ca8d4d7ff85dada69eea8ba84a7f0f10c19d8e0b7e9801b255872f9a270eaf26cd69eb2a2bb42c11c2411cb633495b8e1b6adb2da89eee33d374058ee1d9debeedcda2b3883ed63576c1628e143de2fc170385366c7c1755ef182d0d3db27e25d5a26f4e9b6778cf0853f978b90b649c53880d3c0cb29c5cf9ca601c0bd8c241be396128fbe09188c91867dabd96a19857943f0b5ce8183ad18", 0xc6}], 0xa, &(0x7f00000017c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xff}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x30}}], 0x1, 0x0) r3 = openat(r1, &(0x7f0000001840)='./file0\x00', 0x60902, 0x8) sendmsg$inet6(r3, &(0x7f0000001d80)={&(0x7f0000001880)={0xa, 0x4e23, 0x0, @mcast1, 0x8e22}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000018c0)="77ff37c4d8d9a79d406e123a5490dbaaf15d63147cd039dc1c7303b7bbb81730bb7570dcd68fefc7b7f559c9bdcdd780395c79ecc1dd60c79fde43f21dfd7b44eb19b152bec35b47f0a5bf40891fb078c924c0b6e8a1efc313c59533c07ef38fca26763e6bbbe6d8e45d3091da5a2cff86fe13c9b33fa3ef495038c37b1cd3510de79400f834b473318e44b856afedb31cf7c4fbce4fe5a7db760b38de4f8e10e6450bef9259f6cdda649f66ac358bea4f13acbe49e6664fcd1df21b30a03e4fca8652de213c01f71c2d7d4d4ae1345b267272a9f5361e2674affa075bbfbafe", 0xe0}, {&(0x7f00000019c0)="5d3ab399c585809ba96f32481bb9b048575f946140fd66159bf83635866568fac6d3f405930bfd5194bebe74e5173d6c6dc2bcf79279510090141037123cbbc31b138197ef1bde5a6799d04f16983405a4e48f36e38e1532dc0decce8cc0e761160427e51a8cbd3cb24cc13f545747e002168c12f7cd3dbfb7a5a6b807779ee3e581f44ac49a134b", 0x88}, {&(0x7f0000001a80)="6c9b4a4ecd663077d4bfb89c47b1ad00b39ef8286ffebb201642a2ec0c7a859840e51d711c29b9daeb61", 0x2a}, {&(0x7f0000001ac0)="329b93e62e0b0a1462e7bd2bbfd214faf99c36bba439c8", 0x17}], 0x4, &(0x7f0000001b40)=[@rthdr={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x7f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x89, 0x4, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0xcce1}}, @dstopts={{0x100, 0x29, 0x37, {0x1d, 0x1c, '\x00', [@ra, @generic={0x0, 0x77, "bf2cdcb63a4e1d2c1d4b91f32dfdb7442da04af333b19c8c98deb73fb56169aeae43e429a208876ca35d4c77f3fca0270f3f142dec731199caad1d3bbe33d0918d3f1f0b32ed2f9d767e573dac7c6184525037d930c4da621decf739c18317f255db7d4d988043d28aa2b7548f0bb8dbbd295265df7713"}, @enc_lim={0x4, 0x1, 0x3f}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x6, 0x5a, "2811ba2ba4f61f3f8cb41266047e8581ecfb711530db1ce8b521e5de297800dc2bfecec3daed1421db06e54ba0524c0bb053ccc0fd03d6803f856847ba7790c686cbaf07f4a5052baf8c50d306bc070aad0cceeca21344968add"}, @jumbo]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x8, 0x2, '\x00', [@ra={0x5, 0x2, 0x759b}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x6, [0x100]}}]}}}, @rthdrdstopts={{0x48, 0x29, 0x37, {0x87, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @local}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1e}, r2}}}], 0x238}, 0x24000800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001dc0)={'veth0\x00'}) openat(0xffffffffffffffff, &(0x7f0000001e00)='./file0\x00', 0x111440, 0xa5) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001e40), 0x400, 0x0) r5 = dup2(r1, r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000001ec0)=0x3, 0x4) bind$packet(r1, &(0x7f0000001f00)={0x11, 0x1a, r2, 0x1, 0x80}, 0x14) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000001f40)={@initdev}, &(0x7f0000001f80)=0x14) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001fc0), 0x20000, 0x0) sendmmsg$inet(r7, &(0x7f0000002bc0)=[{{&(0x7f0000002000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002580)=[{&(0x7f0000002040)="618fa481a510ea283c80b1284130e23d2fd9a4e683cabc7a738b0a253ed9830e5331000f72bdb5189cad486cb77c0779c5c2be93738ceddf37c0243c4ef8036248ce00559abb6a1b31713c0b4d036de67b5c6beee86b03f1f96fb7312b14b521954660e3b7922db0070900eec4077aad778566043d480a963086814e8a5855f04fe307c19c35064fdc128983279ae25f93e7acf16123ddb4e87e9017770a56d29ccf4b99f88753206cb71f32c1a2da56cf799ed977e2628364dcfd66c25191dd444b0257747b", 0xc6}, {&(0x7f0000002140)="830df3a16bb58d6fa9c37e98ac97905271ce90d9e57297b5b75d029567fec3b4d3b91dd8017b3e0c3ccaff3d0d58ab0678f6b1d88005875ca274ecaba8c4", 0x3e}, {&(0x7f0000002180)="1f55126f00c3f25f5d675c92250c044366fdc9947ceeed82a665e387a13cb9f9f352dfb6694a941ee1070317c2e0c728fe1b7273831127d190ab3686d08469143c9f8bd4747595ad4a5865d896c4c14280d15ba4043b804d7e4eec371fbbe724b5f47e7ec2ad591cceff450400bab84760a1ea17bf81491c25514bdcf38703986bd131c6223d9a8d759a4542e5acafeeb979d68f3be2e352d14ae338691468aca584e5485e2084", 0xa7}, {&(0x7f0000002240)="077db2a7e60b5efa9023886c8fd6ffa2b56dc8f5d102cbca23d3e9362fa47e8aae80725819b9233a32a3b22546646abf4c0d80e834f6d83f1cfe6406241adf54c876b4a9b1f965bf81b079b7316953290f713a5b79a85fe525cace17c830fffd050369fa1f5204", 0x67}, {&(0x7f00000022c0)="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", 0xfd}, {&(0x7f00000023c0)="a81262cb8774787536a87e2c46a523368b97ffbae3d7dad955e4a3c9aee2e862a75488cf3e4ebfa599890f112aa3ce2303a7d22569f405971b97ffbac5d581a2003fcb89e9f70517a38ffddc3610a3a0368d3563a28c828e5b0516ab7033567e2dceb6bb8a1789bae56b8c3a4429a9374c2134c1612e587fdbe4c5651d278ba002b855d4b3e61faebd254084c8608f3ea9bf1856f348e7ec741e599ebc56ab817ff603bd9e2cf1d5a1128739145d4f5b49c31036e4d94f", 0xb7}, {&(0x7f0000002480)="011187e43bc28c1a1c17472619de470891e724821c45b55ec68ed1ab5da6617f3d251c12da10f7e598de3d39044c3e2a150c49f499a89354b168d7bb558ec47d2cbfcbbc4aeac7961f3071f739d468c6a1044131f620edd7b7e05636f4eace5061a1677848d55bd1fb697a2fe45ac289db7b09cae14c68cc6f672307c5734f4a8275d0ab5448da3411254e796540f394405f9fea9f4fb9c96fcb86effb6f12c2e20294b60ecaf62df27491e45014bf57231eae6043f64e9e0a6f1332ec5ef63d785707ecee44cca78aebb9a09eea06a0f8c165b9a06fca17b5a13007dfce057a053eb867d32a", 0xe6}], 0x7, &(0x7f0000002600)=[@ip_retopts={{0xdc, 0x0, 0x7, {[@rr={0x7, 0xb, 0x74, [@empty, @empty]}, @ra={0x94, 0x4}, @cipso={0x86, 0x60, 0x3, [{0x5, 0xd, "3b77a1d36c9657e7b629a4"}, {0x2, 0x2}, {0x6, 0x11, "a2eeb645b0c1faa99e275bbbbd7f6b"}, {0x6, 0x12, "35d898f31f2fafc24af4dde18f039cfa"}, {0x7, 0xd, "756426e2cec71beab98bfb"}, {0x7, 0x5, "f25a63"}, {0x0, 0x11, "17ebc5393af39dec3c8d4b1c68c551"}, {0x7, 0x5, "eacb52"}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x7, [@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}]}, @ssrr={0x89, 0x13, 0xb8, [@dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @loopback, @multicast1]}, @ssrr={0x89, 0xb, 0x4e, [@rand_addr=0x64010101, @local]}, @ssrr={0x89, 0x2b, 0xed, [@multicast2, @private=0xa010102, @multicast2, @multicast2, @multicast2, @loopback, @empty, @empty, @local, @broadcast]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x148}}, {{&(0x7f0000002780)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000002b80)=[{&(0x7f00000027c0)="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", 0xfb}, {&(0x7f00000028c0)="13633bae8a6166db65d73ba869f8874c2a35e91ae6548891a31e08ba274f491e22be7d240fef3a3ed5de929dd996ff88cb609a5b400efe105e4a896fd3896cda7fe52366d06b6300b58ada2e30a946082741b108ae02e4e8a8bff16f623752ffb190e0e9d72359d380f7815c458d76c56e2d2bbc582213c9330826157bccafb08da9061812bc668ddff6aa6a595a1ccd12786e6897ca40435ae4cf1ad65e3fe751b5330207897cacaad30367fb393c738aaf2a3250952e38f80318f9236d77161f922e3caab130af94c060d88aa97cbfaa7cd8953169f4dc7e9276e0dbd7ed1a175255aaaef52b50b57759a1de585910e7d14a7e", 0xf4}, {&(0x7f00000029c0)="14a125f3c7bcc13468ada3dff788f32080090f3fcad60d6ce3f6ab2526f860cfb09938afc1906f4729470044db0684217c716157c23d2daa07b509191ed3a58fd9d80bfd15fcdcee3bd72668a31389209ae526357d5da9ee6fd13822e6c13cbd084ffffc953d25cd8e03fe5b5e0653eb625378dfa1c1bef357dc66d4b96e74c730864fcc9d5690a06f8c9f5a8bc1213a01bbb91cf6ef92ead73f66c4dc60dcb139936abe6bab91567c1e3fb6472f43fb5e615db0b08520e52af26f4686380e594fce320e02ad5a067be701588b4c702b0e0352c1653d9bcd87c6e6deb36d5ff8333ace6af8aa63de139e0f77a99c301007bb15215fbb9b46d386fe6f259c5f", 0xff}, {&(0x7f0000002ac0)="dfa5aec35e89a5915fc8d99eb22ceb41d50f264b35f48b099e302862e65283863ad5c0f8abeb967ed98f50deb19f62021c7fd793fbeb6777971e2e0203493ee9b8608310ff92a5afec3f2e88f107b6676db12f5b3ce1d92e344c67dbbd47c41b0903dfc86f9d02d30ce6ac47281722e08aa8658dc471f7c3ed1841b38ee48f805c3306f00add16165a8be4a8a8b29c0e18eca53456186cd026fb9b9a", 0x9c}], 0x4}}], 0x2, 0x20000001) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008044) 03:57:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x1b, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:22 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '\x00'}) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffc, 0xfffd}, 0x0, 0x3, 0xffffffffffffffff, 0x9) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef0100017a0000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519da", 0x81, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) ftruncate(0xffffffffffffffff, 0x8001) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000002c0)) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x3, 0x81, 0x5}) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="0466298eba15364cc9eb3ac7b871f48c6728e3317741fc6a59241c76a9184aebe453e059d5a108c0d1bad1458632dbf612a54a8a6121e78420073840da9b25a21a8de9cafa43c239e6df910df46ec8c849aa1c0362ec0f926dce41e4fe226310882b0799bb1aeaa82e70589dd1f054ae373098a5eb35cf95e69c0ca058cfe37bcb6372acb8ceef480d10a66fe7270c173e2b18c87fb6fc945689f6e10f45a04593e6ea476471e97cd93f54443929633aa59db00f8898bf415eb8be0e3693ddf88958acc5073e51361bb1d71fbe6d5ab9b0d8602808d55c05a29d2b4e05b6a53808", @ANYRES64=r1, @ANYBLOB="00002bbd7000fcdbdf250d0000000800030059b47c173ea56862ee762a93153880e5dee6b973a2", @ANYRES32=0x0, @ANYBLOB="05f92d000000000008003b00ff7f000008002b000700001991ee44e98c18b94e22d8e6f98779b259472a559744410cac7d5ea7598eef12d4b988dff8dee600ff1e913fa363f3cee43ce013d310aab890ced4fb0c409411c9db29e0694561f1002c4553d64f3445ecc26043f73545b5d7ad732a01362c"], 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x81) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) accept(r0, &(0x7f00000004c0)=@nfc_llcp, &(0x7f0000000180)=0x80) 03:57:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 52) [ 1697.442370] FAULT_INJECTION: forcing a failure. [ 1697.442370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1697.443851] CPU: 1 PID: 10254 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1697.444692] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1697.445719] Call Trace: [ 1697.446052] dump_stack+0x107/0x167 [ 1697.446500] should_fail.cold+0x5/0xa [ 1697.446972] _copy_from_user+0x2e/0x1b0 [ 1697.447463] __copy_msghdr_from_user+0x91/0x4b0 [ 1697.448034] ? __ia32_sys_shutdown+0x80/0x80 [ 1697.448574] ? udp_v6_push_pending_frames+0x360/0x360 [ 1697.449230] ? inet6_sendmsg+0xbd/0x140 [ 1697.449717] ? inet6_compat_ioctl+0x320/0x320 [ 1697.450265] ? __sock_sendmsg+0x55/0x190 [ 1697.450765] sendmsg_copy_msghdr+0xa1/0x160 [ 1697.451293] ? do_recvmmsg+0x6d0/0x6d0 [ 1697.451772] ? __lock_acquire+0x1657/0x5b00 [ 1697.452306] ___sys_sendmsg+0xc6/0x170 [ 1697.452783] ? sendmsg_copy_msghdr+0x160/0x160 [ 1697.453363] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1697.454002] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1697.454548] ? trace_hardirqs_on+0x5b/0x180 [ 1697.455079] ? lock_acquire+0x197/0x470 [ 1697.455561] ? find_held_lock+0x2c/0x110 [ 1697.456067] ? __might_fault+0xd3/0x180 [ 1697.456553] ? lock_downgrade+0x6d0/0x6d0 [ 1697.457072] ? io_schedule_timeout+0x140/0x140 [ 1697.457643] __sys_sendmmsg+0x195/0x470 [ 1697.458130] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1697.458654] ? lock_downgrade+0x6d0/0x6d0 [ 1697.459173] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1697.459763] ? wait_for_completion_io+0x270/0x270 [ 1697.460353] ? rcu_read_lock_any_held+0x75/0xa0 [ 1697.460920] ? vfs_write+0x354/0xb10 [ 1697.461389] ? fput_many+0x2f/0x1a0 [ 1697.461832] ? ksys_write+0x1a9/0x260 [ 1697.462295] ? __ia32_sys_read+0xb0/0xb0 [ 1697.462794] __x64_sys_sendmmsg+0x99/0x100 [ 1697.463309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1697.463936] do_syscall_64+0x33/0x40 [ 1697.464389] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1697.465020] RIP: 0033:0x7fec4fe72b19 [ 1697.465480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1697.467723] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1697.468655] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1697.469543] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1697.470409] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1697.471277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1697.472146] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:36 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:57:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7, 0x7, 0x5, 0xfffeffff, {{0x2f, 0x4, 0x1, 0x2, 0xbc, 0x67, 0x0, 0xff, 0x29, 0x0, @multicast1, @empty, {[@noop, @timestamp_addr={0x44, 0x2c, 0x54, 0x1, 0x7, [{@private=0xa010101, 0xfffffffa}, {@multicast1, 0x1}, {@multicast1, 0x9}, {@empty, 0x3916}, {@multicast2, 0x7}]}, @ssrr={0x89, 0x3, 0x28}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x80, 0x0, 0x3, [0xa5, 0x1, 0x8, 0x1]}, @cipso={0x86, 0x37, 0x1, [{0x2, 0x8, "6d9179b6d453"}, {0x2, 0x6, '~1?>'}, {0x0, 0x6, "0bf1d48a"}, {0x7, 0x10, "44bfc07977e567b897273fd453a7"}, {0x7, 0xd, "e805268ba5c3dc625a2e5b"}]}, @end, @generic={0x94, 0xc, "d8190d67d7b074bff115"}, @cipso={0x86, 0x1b, 0x3, [{0x5, 0x6, "5b53edb7"}, {0x1, 0xf, "b090e2c878ed86436254a93e85"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, 0x0, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40045}, 0x20000000) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x78) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@loopback}, &(0x7f00000000c0)=0x14) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)=0x1) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000180)={'filter\x00', 0x0, [0x7, 0x9, 0x4, 0xffff, 0x4]}, &(0x7f0000000200)=0x54) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) 03:57:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000000280)="02", 0x1, 0x800}], 0x0, &(0x7f0000000140)=ANY=[]) 03:57:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x1c, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:36 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xb000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:57:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 53) 03:57:36 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x7, './file0\x00'}, 0x1d) 03:57:36 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1711.643037] FAULT_INJECTION: forcing a failure. [ 1711.643037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1711.644512] CPU: 1 PID: 10278 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1711.645355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1711.646397] Call Trace: [ 1711.646727] dump_stack+0x107/0x167 [ 1711.647171] should_fail.cold+0x5/0xa [ 1711.647642] _copy_from_user+0x2e/0x1b0 [ 1711.648131] __copy_msghdr_from_user+0x91/0x4b0 [ 1711.648696] ? __ia32_sys_shutdown+0x80/0x80 [ 1711.649233] ? udp_v6_push_pending_frames+0x360/0x360 [ 1711.649887] ? inet6_sendmsg+0xbd/0x140 [ 1711.650371] ? inet6_compat_ioctl+0x320/0x320 [ 1711.650916] ? __sock_sendmsg+0x55/0x190 [ 1711.651414] sendmsg_copy_msghdr+0xa1/0x160 [ 1711.651940] ? do_recvmmsg+0x6d0/0x6d0 [ 1711.652422] ? __lock_acquire+0x1657/0x5b00 [ 1711.652955] ___sys_sendmsg+0xc6/0x170 [ 1711.653429] ? sendmsg_copy_msghdr+0x160/0x160 [ 1711.654001] ? vmacache_find+0x55/0x2a0 [ 1711.654498] ? lock_acquire+0x197/0x470 [ 1711.654994] ? find_held_lock+0x2c/0x110 [ 1711.655496] ? __might_fault+0xd3/0x180 [ 1711.655986] ? lock_downgrade+0x6d0/0x6d0 [ 1711.656499] ? asm_exc_page_fault+0x1e/0x30 [ 1711.657034] __sys_sendmmsg+0x195/0x470 [ 1711.657531] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1711.658067] ? lock_downgrade+0x6d0/0x6d0 [ 1711.658583] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1711.659176] ? wait_for_completion_io+0x270/0x270 [ 1711.659772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1711.660342] ? vfs_write+0x354/0xb10 [ 1711.660794] ? fput_many+0x2f/0x1a0 [ 1711.661234] ? ksys_write+0x1a9/0x260 [ 1711.661713] ? __ia32_sys_read+0xb0/0xb0 [ 1711.662215] __x64_sys_sendmmsg+0x99/0x100 [ 1711.662731] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1711.663354] do_syscall_64+0x33/0x40 [ 1711.663807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1711.664429] RIP: 0033:0x7fec4fe72b19 [ 1711.664881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1711.667126] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1711.668049] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1711.668913] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1711.669796] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1711.670664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1711.671531] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="646174613d66254b20ebd8148a00"]) 03:57:36 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)=0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="e9000000010b000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) syz_io_uring_setup(0x7243, &(0x7f0000000600)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x6, 0x0, 0x1, 0xf3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) 03:57:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x1d, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0xba, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0xb4, 0x35, 0x400, 0x70bd25, 0x25dfdbfc, {0x8}, [@typed={0x4, 0x5c}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="eee8f8593b882563fcc024dfa0a5cb6d7e7620c3608bf536709e4a898c90b6ea29adb60e27909a85da448b9459e1dc9dc4f6db4f04e499aff1455689743470440dcf8016b8223cfd9d63d20f9f383f0481ae3941239eb43b8583ed8d8bf223ab88d1eddcd865d6ef27001f77a79ebb7f12592895b0238d373ae04761eceaca68e2af2a9ed731171b6323ccd35ff53dc2f9"]}, 0xb4}}, 0x4005) 03:57:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 54) 03:57:36 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = fsopen(&(0x7f0000000080)='cpuset\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="caa420916e71e8e80d9f0154e43e9331e5e16f07fa9540e7e0b253d83b401a736f0bf0bc9f4c", @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES32=r2]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r5, &(0x7f00000001c0)) flock(r4, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x916f0e0b00d1ab96) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) unshare(0x48020200) [ 1711.757368] FAULT_INJECTION: forcing a failure. [ 1711.757368] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.758822] CPU: 1 PID: 10299 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1711.759665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1711.760674] Call Trace: [ 1711.761001] dump_stack+0x107/0x167 [ 1711.761444] should_fail.cold+0x5/0xa [ 1711.761930] ? create_object.isra.0+0x3a/0xa20 [ 1711.762487] should_failslab+0x5/0x20 [ 1711.762953] kmem_cache_alloc+0x5b/0x310 [ 1711.763450] create_object.isra.0+0x3a/0xa20 [ 1711.763982] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1711.764606] kmem_cache_alloc_node+0x169/0x330 [ 1711.765165] __alloc_skb+0x6d/0x5b0 [ 1711.765623] alloc_skb_with_frags+0x92/0x570 [ 1711.766164] ? lock_chain_count+0x20/0x20 [ 1711.766673] sock_alloc_send_pskb+0x7af/0x930 [ 1711.767222] ? sk_alloc+0x350/0x350 [ 1711.767669] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1711.768306] ? lock_downgrade+0x6d0/0x6d0 [ 1711.768820] __ip_append_data+0x1628/0x3310 [ 1711.769355] ? fib_select_path+0x293/0x1de0 [ 1711.769902] ? ip_frag_init+0x350/0x350 [ 1711.770393] ? ip_finish_output+0x330/0x330 [ 1711.770918] ? ip_route_output_key_hash+0x19c/0x340 [ 1711.771521] ? ipv4_mtu+0x1ed/0x2c0 [ 1711.771967] ip_make_skb+0x22a/0x2a0 [ 1711.772423] ? ip_frag_init+0x350/0x350 [ 1711.772911] ? ip_flush_pending_frames+0x20/0x20 [ 1711.773490] ? lock_downgrade+0x6d0/0x6d0 [ 1711.774019] ? xfrm_lookup_route+0x65/0x210 [ 1711.774560] udp_sendmsg+0x1940/0x2160 [ 1711.775041] ? ip_frag_init+0x350/0x350 [ 1711.775530] ? udp_setsockopt+0xc0/0xc0 [ 1711.776011] ? mark_lock+0xf5/0x2df0 [ 1711.776471] ? lock_chain_count+0x20/0x20 [ 1711.776976] ? mark_lock+0xf5/0x2df0 [ 1711.777439] ? mark_lock+0xf5/0x2df0 [ 1711.777912] ? lock_chain_count+0x20/0x20 [ 1711.778416] ? lock_chain_count+0x20/0x20 [ 1711.778921] ? prep_new_page+0x16d/0x1d0 [ 1711.779413] ? lock_chain_count+0x20/0x20 [ 1711.779934] ? __lock_acquire+0x1657/0x5b00 [ 1711.780470] udpv6_sendmsg+0x1b30/0x2ad0 [ 1711.780970] ? __lock_acquire+0x1657/0x5b00 [ 1711.781500] ? udp_v6_push_pending_frames+0x360/0x360 [ 1711.782149] ? trace_hardirqs_on+0x5b/0x180 [ 1711.782688] ? lock_acquire+0x197/0x470 [ 1711.783177] ? find_held_lock+0x2c/0x110 [ 1711.783691] ? lock_acquire+0x197/0x470 [ 1711.784184] ? find_held_lock+0x2c/0x110 [ 1711.784682] ? __might_fault+0xd3/0x180 [ 1711.785166] ? lock_downgrade+0x6d0/0x6d0 [ 1711.785705] ? sock_has_perm+0x1ea/0x280 [ 1711.786206] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1711.786849] ? __import_iovec+0x458/0x590 [ 1711.787358] ? udp_v6_push_pending_frames+0x360/0x360 [ 1711.787997] inet6_sendmsg+0x105/0x140 [ 1711.788479] ? inet6_compat_ioctl+0x320/0x320 [ 1711.789035] __sock_sendmsg+0xf2/0x190 [ 1711.789516] ____sys_sendmsg+0x334/0x870 [ 1711.790033] ? sock_write_iter+0x3d0/0x3d0 [ 1711.790551] ? do_recvmmsg+0x6d0/0x6d0 [ 1711.791029] ? __lock_acquire+0x1657/0x5b00 [ 1711.791564] ___sys_sendmsg+0xf3/0x170 [ 1711.792041] ? sendmsg_copy_msghdr+0x160/0x160 [ 1711.792598] ? vmacache_find+0x55/0x2a0 [ 1711.793089] ? lock_acquire+0x197/0x470 [ 1711.793593] ? find_held_lock+0x2c/0x110 [ 1711.794094] ? __might_fault+0xd3/0x180 [ 1711.794582] ? lock_downgrade+0x6d0/0x6d0 [ 1711.795092] ? asm_exc_page_fault+0x1e/0x30 [ 1711.795636] __sys_sendmmsg+0x195/0x470 [ 1711.796130] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1711.796657] ? lock_downgrade+0x6d0/0x6d0 [ 1711.797194] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1711.797811] ? wait_for_completion_io+0x270/0x270 [ 1711.798403] ? rcu_read_lock_any_held+0x75/0xa0 [ 1711.798971] ? vfs_write+0x354/0xb10 [ 1711.799431] ? fput_many+0x2f/0x1a0 [ 1711.799882] ? ksys_write+0x1a9/0x260 [ 1711.800347] ? __ia32_sys_read+0xb0/0xb0 [ 1711.800853] __x64_sys_sendmmsg+0x99/0x100 [ 1711.801372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1711.802016] do_syscall_64+0x33/0x40 [ 1711.802472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1711.803103] RIP: 0033:0x7fec4fe72b19 [ 1711.803558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1711.805833] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1711.806771] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1711.807648] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1711.808533] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 03:57:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0x1e, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1711.809418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1711.810321] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') pread64(r0, &(0x7f0000000300)=""/166, 0xa6, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x6, 0x81, 0x7, 0x3, 0x8000, 0xfff}, {0x0, 0x5, 0x10000, 0x200000000000003, 0x5, 0x6}], ['\x00', '\x00', '\x00', '\x00']}) [ 1711.883189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:57:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:51 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x9, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:57:51 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0xf, './file0\x00'}, 0x1d) 03:57:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) 03:57:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 55) 03:57:51 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0/file0\x00', 0x10) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x20800, &(0x7f0000000180)={'trans=unix,', {[{@afid={'afid', 0x3d, 0xfffffffffffffffe}}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@afid={'afid', 0x3d, 0x401}}, {@noextend}, {@posixacl}, {@version_9p2000}, {@access_uid={'access', 0x3d, 0xee00}}, {@access_any}, {@cache_fscache}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'hugetlbfs\x00'}}]}}) 03:57:51 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:57:51 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x10000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1726.930961] FAULT_INJECTION: forcing a failure. [ 1726.930961] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.932487] CPU: 1 PID: 10330 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1726.932495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.932499] Call Trace: [ 1726.932517] dump_stack+0x107/0x167 [ 1726.932531] should_fail.cold+0x5/0xa [ 1726.932546] ? create_object.isra.0+0x3a/0xa20 [ 1726.932561] should_failslab+0x5/0x20 [ 1726.932574] kmem_cache_alloc+0x5b/0x310 [ 1726.932589] create_object.isra.0+0x3a/0xa20 [ 1726.932599] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.932614] kmem_cache_alloc_node+0x169/0x330 [ 1726.932631] __alloc_skb+0x6d/0x5b0 [ 1726.932656] alloc_skb_with_frags+0x92/0x570 [ 1726.936312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10334 comm=syz-executor.2 [ 1726.936757] ? lock_chain_count+0x20/0x20 [ 1726.936772] sock_alloc_send_pskb+0x7af/0x930 [ 1726.936791] ? sk_alloc+0x350/0x350 [ 1726.942309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10336 comm=syz-executor.2 [ 1726.942447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1726.944943] ? lock_downgrade+0x6d0/0x6d0 [ 1726.944963] __ip_append_data+0x1628/0x3310 [ 1726.944982] ? fib_select_path+0x293/0x1de0 [ 1726.944996] ? ip_frag_init+0x350/0x350 [ 1726.945016] ? ip_finish_output+0x330/0x330 [ 1726.947530] ? ip_route_output_key_hash+0x19c/0x340 [ 1726.948135] ? ipv4_mtu+0x1ed/0x2c0 [ 1726.948583] ip_make_skb+0x22a/0x2a0 [ 1726.949036] ? ip_frag_init+0x350/0x350 [ 1726.949522] ? ip_flush_pending_frames+0x20/0x20 [ 1726.950108] ? lock_downgrade+0x6d0/0x6d0 [ 1726.950626] ? xfrm_lookup_route+0x65/0x210 [ 1726.951155] udp_sendmsg+0x1940/0x2160 [ 1726.951635] ? ip_frag_init+0x350/0x350 [ 1726.952122] ? udp_setsockopt+0xc0/0xc0 [ 1726.952614] ? mark_lock+0xf5/0x2df0 [ 1726.953069] ? mark_lock+0xf5/0x2df0 [ 1726.953524] ? lock_chain_count+0x20/0x20 [ 1726.954027] ? lock_chain_count+0x20/0x20 [ 1726.954571] ? __lock_acquire+0x1657/0x5b00 [ 1726.955100] udpv6_sendmsg+0x1b30/0x2ad0 [ 1726.955594] ? __lock_acquire+0x1657/0x5b00 [ 1726.956123] ? udp_v6_push_pending_frames+0x360/0x360 [ 1726.956754] ? lock_acquire+0x197/0x470 [ 1726.957237] ? find_held_lock+0x2c/0x110 [ 1726.957741] ? lock_acquire+0x197/0x470 [ 1726.958242] ? find_held_lock+0x2c/0x110 [ 1726.958739] ? __might_fault+0xd3/0x180 [ 1726.959220] ? lock_downgrade+0x6d0/0x6d0 [ 1726.959726] ? lock_chain_count+0x20/0x20 [ 1726.960229] ? sock_has_perm+0x1ea/0x280 [ 1726.960722] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1726.961360] ? __import_iovec+0x458/0x590 03:57:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x3) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1726.961867] ? udp_v6_push_pending_frames+0x360/0x360 [ 1726.962509] inet6_sendmsg+0x105/0x140 [ 1726.970235] ? inet6_compat_ioctl+0x320/0x320 [ 1726.970781] __sock_sendmsg+0xf2/0x190 [ 1726.971254] ____sys_sendmsg+0x334/0x870 [ 1726.971748] ? sock_write_iter+0x3d0/0x3d0 [ 1726.972260] ? do_recvmmsg+0x6d0/0x6d0 [ 1726.972734] ? __lock_acquire+0x1657/0x5b00 [ 1726.973264] ___sys_sendmsg+0xf3/0x170 03:57:51 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[]) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000880)=@file={0x0, './file0\x00'}, 0xfffffffffffffcce) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0xfdef) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) recvmmsg$unix(r2, &(0x7f0000005640)=[{{&(0x7f0000000900), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000980)=""/205, 0xcd}, {&(0x7f0000000a80)=""/94, 0x5e}, {&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000b00)=""/148, 0x94}], 0x4}}, {{&(0x7f0000000bc0), 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/181, 0xb5}], 0x2, &(0x7f0000000d80)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/246, 0xf6}, {&(0x7f0000000f00)=""/32, 0x20}], 0x3, &(0x7f0000000f80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001040), 0x6e, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/194, 0xc2}, {&(0x7f00000011c0)=""/34, 0x22}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001200)=""/253, 0xfd}, {&(0x7f0000001300)=""/205, 0xcd}], 0x5}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001480)=""/228, 0xe4}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000001580)=""/75, 0x4b}], 0x3, &(0x7f0000001640)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000001700), 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001780)=""/131, 0x83}, {&(0x7f0000001840)=""/144, 0x90}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/162, 0xa2}, {&(0x7f0000001ac0)=""/1, 0x1}, {&(0x7f0000001b00)=""/98, 0x62}, {&(0x7f0000001b80)=""/57, 0x39}, {&(0x7f0000001bc0)=""/52, 0x34}, {&(0x7f0000001c00)=""/97, 0x61}, {&(0x7f0000003e00)=""/4096, 0x1000}], 0xa, &(0x7f0000004e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000004ec0)=@abs, 0x6e, &(0x7f0000005440)=[{&(0x7f0000004f40)=""/169, 0xa9}, {&(0x7f0000001d40)=""/60, 0x3c}, {&(0x7f0000005000)=""/196, 0xc4}, {&(0x7f0000005100)=""/124, 0x7c}, {&(0x7f0000005180)}, {&(0x7f00000051c0)=""/146, 0x92}, {&(0x7f0000005280)=""/103, 0x67}, {&(0x7f0000005300)=""/17, 0x11}, {&(0x7f0000005340)=""/69, 0x45}, {&(0x7f00000053c0)=""/102, 0x66}], 0xa, &(0x7f0000005500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}}], 0x7, 0x2, &(0x7f0000005800)) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x10084, &(0x7f0000005840)=ANY=[@ANYBLOB='trans=virtio,cache=none,dfltgid=', @ANYRESHEX=0xee01, @ANYBLOB=',nodevmap,dfltgid=', @ANYRESHEX, @ANYBLOB=',noextend,msize=0x0000000000000101,access=user,debug=0xfffffffffffff597,access=any,fowner<', @ANYRESDEC=0x0, @ANYBLOB=',de1Hfcontext=unconfined_u,\x00']) fstat(r3, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/zoneinfo\x00', 0x0, 0x0) pipe2(&(0x7f00000003c0), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_WRITEV={0x2, 0x0, 0x2000, @fd_index=0x7, 0x9, &(0x7f0000000400)=[{&(0x7f00000001c0)="b0bec1cc1afba970215ef7402943768d4e10acb4840484c5f72dcc4452e20917fc13608f4930c961e52ff674f6022d22e4b0a3b7dce64c2c62160e4e6ca2d8869edeace42a7215cf4538afb8dbe9abce9b2b5434c35912341defd47e7c2ab51a11fc31326e67011166363155b95806627e20330dec4f600304a2c12a8d87165921751195435ef39d9c27bf6f96c17fd333719ed2b280c8b9d54ac8bcddcaccf875eca096b0f24e177fdb4bdb328f21be6bc40b85f25c95aa9110dc338baf398a7b04a9da386171598fdda5316172d6", 0xcf}, {&(0x7f00000002c0)="686c1d1906f79b2eba58e1bbe3233427239856b713e3608e9b57ed1c66155c9ddb93dba4758d0076eac9cf2e3e025864fcc75375337ad001a9a056c6f6ff15e6b61df3c36133d731c25970ba6e2e8cee", 0x50}, {&(0x7f0000000680)="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", 0xfc}, {&(0x7f0000000040)="b97ba93a896521ab78c728d0a2f94bf1726a170c03796f4a28f885ff532d1d44ab216c7e38aafcb2d8", 0x29}, {&(0x7f0000000100)="add72c73051fea1af22e3ddc4df6c9a55294538cbfa913077ad36847b9eb3a1291691f5b835341efa572c23088605b", 0x2f}, {&(0x7f0000000780)="e5d36e025f14722afc461d34c3c1edad90c71c57af1a3ba708d95abdcfa5dbeaf740bcecbc29eb7dcc408a96b4caf82fb4ca7d426c823c6756384e731e14ebf1619a879d1879dd9fec1e52d368c66e5e56c6e0ed31c772cabc817dc35901c0ae173e402659220f9ad6425e62bd232d920d97b0840c6c72b6730add0a7f04727d98b79a1cd59a2d8c85a92080ab4506ccb2d2ddc295934a7cea4729e7225195b2c8515a597d3158529441122a2325181f306143c072446943bd03675bea5df8c592a1a9854d789b9ed15d678e0de19d2fc1f9e821ae6df4", 0xd7}], 0x6, 0x13, 0x0, {0x1}}, 0xfffffc01) unshare(0x48020200) [ 1726.973739] ? sendmsg_copy_msghdr+0x160/0x160 [ 1726.974309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.974946] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1726.975488] ? trace_hardirqs_on+0x5b/0x180 [ 1726.986309] ? lock_acquire+0x197/0x470 [ 1726.986793] ? find_held_lock+0x2c/0x110 [ 1726.987288] ? __might_fault+0xd3/0x180 [ 1726.987771] ? lock_downgrade+0x6d0/0x6d0 [ 1726.988276] ? io_schedule_timeout+0x140/0x140 [ 1726.988841] __sys_sendmmsg+0x195/0x470 [ 1726.989328] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1726.989853] ? lock_downgrade+0x6d0/0x6d0 [ 1726.990383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1726.990972] ? wait_for_completion_io+0x270/0x270 [ 1726.991559] ? rcu_read_lock_any_held+0x75/0xa0 [ 1726.992122] ? vfs_write+0x354/0xb10 [ 1726.992575] ? fput_many+0x2f/0x1a0 [ 1726.993019] ? ksys_write+0x1a9/0x260 [ 1726.993483] ? __ia32_sys_read+0xb0/0xb0 [ 1726.993980] __x64_sys_sendmmsg+0x99/0x100 [ 1726.994513] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.995137] do_syscall_64+0x33/0x40 [ 1726.995593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.996229] RIP: 0033:0x7fec4fe72b19 [ 1726.996694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.998993] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1726.999935] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1727.000825] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1727.001715] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.002609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.003482] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x300) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1727.088107] FAULT_INJECTION: forcing a failure. [ 1727.088107] name failslab, interval 1, probability 0, space 0, times 0 03:57:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 56) [ 1727.089606] CPU: 1 PID: 10348 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1727.090465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.091472] Call Trace: [ 1727.091800] dump_stack+0x107/0x167 [ 1727.092245] should_fail.cold+0x5/0xa [ 1727.102432] ? create_object.isra.0+0x3a/0xa20 [ 1727.102996] should_failslab+0x5/0x20 [ 1727.103456] kmem_cache_alloc+0x5b/0x310 [ 1727.103948] create_object.isra.0+0x3a/0xa20 [ 1727.104488] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1727.105123] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1727.105755] ? alloc_skb_with_frags+0x92/0x570 [ 1727.106331] __alloc_skb+0xb1/0x5b0 [ 1727.106786] alloc_skb_with_frags+0x92/0x570 [ 1727.107327] ? lock_chain_count+0x20/0x20 [ 1727.107838] sock_alloc_send_pskb+0x7af/0x930 [ 1727.108394] ? sk_alloc+0x350/0x350 [ 1727.108844] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1727.109476] ? lock_downgrade+0x6d0/0x6d0 [ 1727.109997] __ip_append_data+0x1628/0x3310 [ 1727.110559] ? fib_select_path+0x293/0x1de0 [ 1727.111091] ? ip_frag_init+0x350/0x350 [ 1727.111577] ? ip_finish_output+0x330/0x330 [ 1727.112101] ? ip_route_output_key_hash+0x19c/0x340 [ 1727.112700] ? ipv4_mtu+0x1ed/0x2c0 [ 1727.113146] ip_make_skb+0x22a/0x2a0 [ 1727.113598] ? ip_frag_init+0x350/0x350 [ 1727.114078] ? ip_flush_pending_frames+0x20/0x20 [ 1727.114697] ? lock_downgrade+0x6d0/0x6d0 [ 1727.115206] ? xfrm_lookup_route+0x65/0x210 [ 1727.115733] udp_sendmsg+0x1940/0x2160 [ 1727.116207] ? ip_frag_init+0x350/0x350 [ 1727.116695] ? udp_setsockopt+0xc0/0xc0 [ 1727.117173] ? mark_lock+0xf5/0x2df0 [ 1727.117630] ? lock_chain_count+0x20/0x20 [ 1727.118145] ? mark_lock+0xf5/0x2df0 [ 1727.118600] ? lock_chain_count+0x20/0x20 [ 1727.119101] ? prep_new_page+0x16d/0x1d0 [ 1727.119595] ? lock_chain_count+0x20/0x20 [ 1727.120102] ? __lock_acquire+0x1657/0x5b00 [ 1727.120628] udpv6_sendmsg+0x1b30/0x2ad0 [ 1727.121120] ? __lock_acquire+0x1657/0x5b00 [ 1727.121650] ? udp_v6_push_pending_frames+0x360/0x360 [ 1727.122292] ? lock_acquire+0x1b9/0x470 [ 1727.122775] ? find_held_lock+0x2c/0x110 [ 1727.123270] ? lock_acquire+0x197/0x470 [ 1727.123751] ? find_held_lock+0x2c/0x110 [ 1727.124244] ? __might_fault+0xd3/0x180 [ 1727.124733] ? lock_downgrade+0x6d0/0x6d0 [ 1727.125234] ? lock_chain_count+0x20/0x20 [ 1727.125738] ? sock_has_perm+0x1ea/0x280 [ 1727.126255] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1727.126892] ? __import_iovec+0x458/0x590 [ 1727.127390] ? udp_v6_push_pending_frames+0x360/0x360 [ 1727.128021] inet6_sendmsg+0x105/0x140 [ 1727.128492] ? inet6_compat_ioctl+0x320/0x320 [ 1727.129031] __sock_sendmsg+0xf2/0x190 [ 1727.129504] ____sys_sendmsg+0x334/0x870 [ 1727.129998] ? sock_write_iter+0x3d0/0x3d0 [ 1727.130526] ? do_recvmmsg+0x6d0/0x6d0 [ 1727.130997] ? __lock_acquire+0x1657/0x5b00 [ 1727.131525] ___sys_sendmsg+0xf3/0x170 [ 1727.131995] ? sendmsg_copy_msghdr+0x160/0x160 [ 1727.132550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1727.133183] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1727.133724] ? trace_hardirqs_on+0x5b/0x180 [ 1727.134261] ? lock_acquire+0x197/0x470 [ 1727.134745] ? find_held_lock+0x2c/0x110 [ 1727.135236] ? __might_fault+0xd3/0x180 [ 1727.135717] ? lock_downgrade+0x6d0/0x6d0 [ 1727.136221] ? io_schedule_timeout+0x140/0x140 [ 1727.136784] __sys_sendmmsg+0x195/0x470 [ 1727.137270] ? __ia32_sys_sendmsg+0xb0/0xb0 03:57:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x1f, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x400, 0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000900)="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", 0x293}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 1727.137798] ? lock_downgrade+0x6d0/0x6d0 [ 1727.138330] ? __mutex_unlock_slowpath+0xe1/0x600 03:57:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x1000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1727.138916] ? wait_for_completion_io+0x270/0x270 [ 1727.146600] ? rcu_read_lock_any_held+0x75/0xa0 [ 1727.154515] ? vfs_write+0x354/0xb10 [ 1727.154965] ? fput_many+0x2f/0x1a0 [ 1727.155406] ? ksys_write+0x1a9/0x260 [ 1727.155869] ? __ia32_sys_read+0xb0/0xb0 [ 1727.156373] __x64_sys_sendmmsg+0x99/0x100 [ 1727.156888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.157510] do_syscall_64+0x33/0x40 [ 1727.157967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.158621] RIP: 0033:0x7fec4fe72b19 [ 1727.159077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.161319] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1727.162255] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1727.163128] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1727.163990] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.164858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.165736] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:57:51 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x2000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:57:51 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) io_uring_enter(r5, 0x3148, 0x3e49, 0x3, &(0x7f0000000040)={[0x101]}, 0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0, 0x0, 0x0, {0x0, r6}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:57:51 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 57) [ 1727.289445] FAULT_INJECTION: forcing a failure. [ 1727.289445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.290959] CPU: 1 PID: 10368 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1727.291804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1727.292814] Call Trace: [ 1727.293142] dump_stack+0x107/0x167 [ 1727.293587] should_fail.cold+0x5/0xa [ 1727.294058] _copy_from_user+0x2e/0x1b0 [ 1727.294566] __copy_msghdr_from_user+0x91/0x4b0 [ 1727.295132] ? __ia32_sys_shutdown+0x80/0x80 [ 1727.295670] ? udp_v6_push_pending_frames+0x360/0x360 [ 1727.296306] ? inet6_sendmsg+0xbd/0x140 [ 1727.296789] ? inet6_compat_ioctl+0x320/0x320 [ 1727.297332] ? __sock_sendmsg+0x55/0x190 [ 1727.297832] sendmsg_copy_msghdr+0xa1/0x160 [ 1727.298374] ? do_recvmmsg+0x6d0/0x6d0 [ 1727.298850] ? __lock_acquire+0x1657/0x5b00 [ 1727.299389] ___sys_sendmsg+0xc6/0x170 [ 1727.299866] ? sendmsg_copy_msghdr+0x160/0x160 [ 1727.300422] ? vmacache_find+0x55/0x2a0 [ 1727.300914] ? lock_acquire+0x197/0x470 [ 1727.301397] ? find_held_lock+0x2c/0x110 [ 1727.301895] ? __might_fault+0xd3/0x180 [ 1727.302408] ? lock_downgrade+0x6d0/0x6d0 [ 1727.302910] ? asm_exc_page_fault+0x1e/0x30 [ 1727.303443] __sys_sendmmsg+0x195/0x470 [ 1727.303927] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1727.304448] ? lock_downgrade+0x6d0/0x6d0 [ 1727.304966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1727.305552] ? wait_for_completion_io+0x270/0x270 [ 1727.306146] ? rcu_read_lock_any_held+0x75/0xa0 [ 1727.306713] ? vfs_write+0x354/0xb10 [ 1727.307164] ? fput_many+0x2f/0x1a0 [ 1727.307607] ? ksys_write+0x1a9/0x260 [ 1727.308070] ? __ia32_sys_read+0xb0/0xb0 [ 1727.308567] __x64_sys_sendmmsg+0x99/0x100 [ 1727.309083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1727.309710] do_syscall_64+0x33/0x40 [ 1727.310168] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1727.310793] RIP: 0033:0x7fec4fe72b19 [ 1727.311244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1727.313477] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1727.314413] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1727.315280] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1727.316140] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1727.317003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1727.317868] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1741.721219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1741.724917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1741.726969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:58:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x3000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:06 executing program 1: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x68b02, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$SG_IO(r0, 0x40081271, 0x0) 03:58:06 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x20000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:06 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:58:06 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1c040, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x40002002}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000c40)='/proc/bus/input/devices\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x408f811, r2, 0x10000000) r3 = creat(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="001800007bc2000000000000b9ab2b3b8d7d4ebbce54cdb6a461c1df8be3a0642cf5dc46855e3ace55d874c740080d888b96e4757e36cc210045cb6fc11ef0a47669756aef14d6673fa1ff20091748b7a93ee050ba01fce417472c6e66436b65130539259cabb26a8cf4a3d10c128e096410313c9d9adcdce087d7a47bc9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ec9a97f0949f3b6b7780ad8b855bdf07d3d2b9070a70", @ANYRESDEC=r6]) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r6, 0x2, r7}) 03:58:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:58:06 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x10, './file0\x00'}, 0x1d) 03:58:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 58) [ 1741.756202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1741.768059] FAULT_INJECTION: forcing a failure. [ 1741.768059] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.769409] CPU: 1 PID: 10392 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1741.770227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1741.771224] Call Trace: [ 1741.771543] dump_stack+0x107/0x167 [ 1741.771974] should_fail.cold+0x5/0xa [ 1741.772430] ? __alloc_skb+0x6d/0x5b0 [ 1741.772884] should_failslab+0x5/0x20 [ 1741.773332] kmem_cache_alloc_node+0x55/0x330 [ 1741.773855] __alloc_skb+0x6d/0x5b0 [ 1741.774286] alloc_skb_with_frags+0x92/0x570 [ 1741.790858] ? lock_chain_count+0x20/0x20 [ 1741.791340] sock_alloc_send_pskb+0x7af/0x930 [ 1741.791863] ? sk_alloc+0x350/0x350 [ 1741.792287] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1741.792889] ? lock_downgrade+0x6d0/0x6d0 [ 1741.793377] __ip_append_data+0x1628/0x3310 [ 1741.793882] ? fib_select_path+0x293/0x1de0 [ 1741.794382] ? ip_frag_init+0x350/0x350 [ 1741.794895] ? ip_finish_output+0x330/0x330 [ 1741.795393] ? ip_route_output_key_hash+0x19c/0x340 [ 1741.795967] ? ipv4_mtu+0x1ed/0x2c0 [ 1741.796392] ip_make_skb+0x22a/0x2a0 [ 1741.796825] ? ip_frag_init+0x350/0x350 [ 1741.797288] ? ip_flush_pending_frames+0x20/0x20 [ 1741.797850] ? lock_downgrade+0x6d0/0x6d0 [ 1741.798341] ? xfrm_lookup_route+0x65/0x210 [ 1741.798865] udp_sendmsg+0x1940/0x2160 [ 1741.799326] ? ip_frag_init+0x350/0x350 [ 1741.799800] ? udp_setsockopt+0xc0/0xc0 [ 1741.800260] ? mark_lock+0xf5/0x2df0 [ 1741.800709] ? lock_chain_count+0x20/0x20 [ 1741.801199] ? mark_lock+0xf5/0x2df0 [ 1741.801642] ? mark_lock+0xf5/0x2df0 [ 1741.802082] ? lock_chain_count+0x20/0x20 [ 1741.802571] ? lock_chain_count+0x20/0x20 [ 1741.803078] ? prep_new_page+0x16d/0x1d0 [ 1741.803551] ? lock_chain_count+0x20/0x20 [ 1741.804044] ? __lock_acquire+0x1657/0x5b00 [ 1741.804552] udpv6_sendmsg+0x1b30/0x2ad0 [ 1741.805034] ? __lock_acquire+0x1657/0x5b00 [ 1741.805551] ? udp_v6_push_pending_frames+0x360/0x360 [ 1741.806149] ? trace_hardirqs_on+0x5b/0x180 [ 1741.824315] ? lock_acquire+0x197/0x470 [ 1741.824796] ? find_held_lock+0x2c/0x110 [ 1741.825273] ? lock_acquire+0x197/0x470 [ 1741.825731] ? find_held_lock+0x2c/0x110 [ 1741.826206] ? __might_fault+0xd3/0x180 [ 1741.826675] ? lock_downgrade+0x6d0/0x6d0 [ 1741.827161] ? lock_chain_count+0x20/0x20 [ 1741.827641] ? sock_has_perm+0x1ea/0x280 [ 1741.828110] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1741.828718] ? __import_iovec+0x458/0x590 [ 1741.829198] ? udp_v6_push_pending_frames+0x360/0x360 [ 1741.829798] inet6_sendmsg+0x105/0x140 [ 1741.830250] ? inet6_compat_ioctl+0x320/0x320 [ 1741.830783] __sock_sendmsg+0xf2/0x190 [ 1741.831236] ____sys_sendmsg+0x334/0x870 [ 1741.831711] ? sock_write_iter+0x3d0/0x3d0 [ 1741.832201] ? do_recvmmsg+0x6d0/0x6d0 [ 1741.832655] ? __lock_acquire+0x1657/0x5b00 [ 1741.833163] ___sys_sendmsg+0xf3/0x170 [ 1741.833617] ? sendmsg_copy_msghdr+0x160/0x160 [ 1741.834150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1741.834788] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1741.835342] ? trace_hardirqs_on+0x5b/0x180 [ 1741.835895] ? lock_acquire+0x197/0x470 [ 1741.836395] ? find_held_lock+0x2c/0x110 [ 1741.836909] ? __might_fault+0xd3/0x180 [ 1741.837405] ? lock_downgrade+0x6d0/0x6d0 [ 1741.837916] ? io_schedule_timeout+0x140/0x140 [ 1741.838498] __sys_sendmmsg+0x195/0x470 [ 1741.839017] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1741.839565] ? lock_downgrade+0x6d0/0x6d0 [ 1741.840110] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1741.840723] ? wait_for_completion_io+0x270/0x270 [ 1741.841334] ? rcu_read_lock_any_held+0x75/0xa0 [ 1741.841918] ? vfs_write+0x354/0xb10 [ 1741.842396] ? fput_many+0x2f/0x1a0 [ 1741.842881] ? ksys_write+0x1a9/0x260 [ 1741.843376] ? __ia32_sys_read+0xb0/0xb0 [ 1741.843895] __x64_sys_sendmmsg+0x99/0x100 [ 1741.844412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1741.845045] do_syscall_64+0x33/0x40 [ 1741.845542] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1741.846192] RIP: 0033:0x7fec4fe72b19 [ 1741.846680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1741.849018] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1741.849988] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1741.850896] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1741.851794] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1741.852674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1741.853563] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:06 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="00000802c2ff3d63f2ccde0000000000000000"], &(0x7f0000000180)={0x1, 0x4, [0x108, 0xb7e, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) ptrace(0x8, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @random="a28c3ffb4f19", @val={@val={0x9100, 0x6, 0x0, 0x4}, {0x8100, 0x0, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @multicast, @multicast2, @random="218cad541720", @local}}}}, &(0x7f0000000140)={0x1, 0x1, [0xb65, 0x6cb, 0xe93, 0x2f8]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r4 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = dup3(r4, r3, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x1, 0x4e, 0x6, 0x1f, 0x0, 0x2, 0x9008, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000280), 0xe}, 0x0, 0x2, 0x5, 0x4, 0xffffffff, 0x100, 0x8, 0x0, 0x80, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r5, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x80010, 0xffffffffffffffff, 0x5) 03:58:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x100000000000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:06 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x4000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB="74726e6f3d0000b2d8296e79a52f922f40100000000000000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',uid<', @ANYRESDEC=0xee01, @ANYBLOB=',dont_appraise,\x00']) 03:58:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x200000000000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 59) 03:58:06 executing program 1: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001b40)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbf8, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xa248}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xac4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xd0}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x4}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x804}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004880}, 0x44811) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(r0, 0x27b, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x0, 0x101]}) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="fe", 0x1, 0x0) socket$netlink(0x10, 0x3, 0xc) fadvise64(r1, 0x1, 0x1, 0x4) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001900)={0x53, 0xfffffffffffffffc, 0x3, 0xfa, @scatter={0x4, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f0000000480)=""/19, 0x13}]}, &(0x7f00000015c0)="49b9cb", &(0x7f0000001840)=""/121, 0xfffff001, 0x4, 0xffffffffffffffff, &(0x7f00000018c0)}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001f80), 0x123001, 0x0) fallocate(r1, 0x14, 0xfffffffffffffffa, 0x7) io_setup(0x5, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001fc0)={{0x7f, 0x45, 0x4c, 0x46, 0xab, 0x7f, 0x24, 0x3f, 0xf7, 0x3, 0x6, 0x8, 0xaa, 0x40, 0x20f, 0x2, 0xffff, 0x38, 0x1, 0x0, 0xfff}, [{0x3, 0xffffffc0, 0x7, 0x200, 0x2, 0x7, 0x4, 0x80000001}, {0x70000000, 0x7, 0x5, 0x0, 0xfffffffffffffc00, 0x10001, 0x7}], "f4bbe9d4fca3e3680d59c013bfef88ee5ae82b37a5a3ac7e1816a79f4634e21dbeb042eed3b4504ff47ec4c9ce23f8821db0526a0f0bba9a01f49de636a07e0c0a3a771516401a196aacdbf531e55af078e0532e00f2ac81facaeaf42cf11af4727fa9d3310a0e2a25cf50809cbeafe17537aa9505", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x725) 03:58:06 executing program 2: timer_delete(0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x3c, 0x0, @thr={&(0x7f0000000000)="f96e723770c1517fadbcf3fd60115e498de24a08f34a84f7a517f2b042bda53e9253f51e6966cdd7f55143b6af07190ad04f78e110d721e52d4025fd690a24c337d79aa589ec9186dc4f355347f9cbefe5451876f4a3bd55a120cb48f29387f81ef65ca7cb096357d28a4bfa970cb2129ab427e2267779c8630e5d7cc409eb4e1317856fed1692eee1a011e9b0dcfeaa55716cf27ff0caa5152439ba5fcf8729493f9d1a320b367055d30f40192fe5a0f38a6a9dcfa2ab299d61138b0a61a3d15065c4fffe38a4", &(0x7f0000000100)="b3cbe90c6e7a2976634292edc28e6bbc596064e86306290d498b89e24e1c74ef30c579e919f8c0a6956f1e9f7905060f1c4121ca870f69ca2d4e6bcd3b49c0de44e826ec4f6294ed1875869104ae6f04c1ad048c5b44d2bdc6aafd64c2c96591657fb39259b6990f59c6f5238286ed2f7fa0f62346450cd9eea0263e811f9946a8e47cad673866e92a1e58664f2a7ef376bacd826b5c55ada52e8e08d63bcca9ffc4fb1e6829db2466b5ef5f0e1c07d9fbdbd77762a576f182ea086de6c54d170fe5963d32fb63f6c0fb8eeae005dc7fbe86f9d7d042"}}, &(0x7f0000000240)=0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000300)={{r1, r2+60000000}, {r3, r4+60000000}}, &(0x7f0000000340)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f00000003c0)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x3938700}, {r7, r8+60000000}}, &(0x7f00000004c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0xd, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x9) timer_create(0x1, &(0x7f0000000540)={0x0, 0x1, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000580)=0x0) timer_settime(r9, 0x0, &(0x7f00000005c0)={{0x0, 0x989680}}, &(0x7f0000000600)) r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x8c00, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2000, @fd=r10, 0x87, 0x0, 0x0, 0x4, 0x0, {0x1}}, 0x8) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x101001, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(r11, &(0x7f0000000e80)=[{{&(0x7f0000000700)=@tipc=@name, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/87, 0x57}, {&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000900)=""/170, 0xaa}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/240, 0xf0}], 0x6, &(0x7f0000000c00)=""/254, 0xfe}, 0x9770}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/23, 0x17}, {&(0x7f0000000d40)=""/120, 0x78}], 0x2, &(0x7f0000000e00)=""/106, 0x6a}, 0x7}], 0x2, 0x140, &(0x7f0000000f40)={r12, r13+10000000}) copy_file_range(r11, &(0x7f0000000f80)=0x3bb3, 0xffffffffffffffff, &(0x7f0000000fc0)=0x9, 0x0, 0x0) syz_io_uring_setup(0xd64, &(0x7f0000001000)={0x0, 0xb7d4, 0x1, 0x1, 0x175, 0x0, r11}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001080), &(0x7f00000010c0)=0x0) syz_io_uring_submit(0x0, r14, &(0x7f0000001240)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000001100), &(0x7f0000001200)='./file0\x00', 0x1, 0x100}, 0x3) [ 1741.957192] FAULT_INJECTION: forcing a failure. [ 1741.957192] name failslab, interval 1, probability 0, space 0, times 0 [ 1741.958831] CPU: 0 PID: 10413 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1741.959736] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1741.960822] Call Trace: [ 1741.961151] dump_stack+0x107/0x167 [ 1741.961595] should_fail.cold+0x5/0xa [ 1741.962117] ? create_object.isra.0+0x3a/0xa20 [ 1741.962772] should_failslab+0x5/0x20 [ 1741.963248] kmem_cache_alloc+0x5b/0x310 [ 1741.963804] create_object.isra.0+0x3a/0xa20 [ 1741.964341] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1741.965012] kmem_cache_alloc_node+0x169/0x330 [ 1741.965575] __alloc_skb+0x6d/0x5b0 [ 1741.966075] alloc_skb_with_frags+0x92/0x570 [ 1741.966620] ? lock_chain_count+0x20/0x20 [ 1741.967188] sock_alloc_send_pskb+0x7af/0x930 [ 1741.967822] ? sk_alloc+0x350/0x350 [ 1741.968277] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1741.969037] ? lock_downgrade+0x6d0/0x6d0 [ 1741.969556] __ip_append_data+0x1628/0x3310 [ 1741.970345] ? fib_select_path+0x293/0x1de0 [ 1741.970901] ? ip_frag_init+0x350/0x350 [ 1741.971396] ? ip_finish_output+0x330/0x330 [ 1741.971928] ? ip_route_output_key_hash+0x19c/0x340 [ 1741.972543] ? ipv4_mtu+0x1ed/0x2c0 [ 1741.972997] ip_make_skb+0x22a/0x2a0 [ 1741.973455] ? ip_frag_init+0x350/0x350 [ 1741.973943] ? ip_flush_pending_frames+0x20/0x20 [ 1741.974529] ? lock_downgrade+0x6d0/0x6d0 [ 1741.975076] ? xfrm_lookup_route+0x65/0x210 [ 1741.975616] udp_sendmsg+0x1940/0x2160 [ 1741.976098] ? ip_frag_init+0x350/0x350 [ 1741.976589] ? udp_setsockopt+0xc0/0xc0 [ 1741.977070] ? mark_lock+0xf5/0x2df0 [ 1741.977530] ? lock_chain_count+0x20/0x20 [ 1741.978034] ? mark_lock+0xf5/0x2df0 [ 1741.978501] ? mark_lock+0xf5/0x2df0 [ 1741.978992] ? lock_chain_count+0x20/0x20 [ 1741.979499] ? lock_chain_count+0x20/0x20 [ 1741.980007] ? prep_new_page+0x16d/0x1d0 [ 1741.980504] ? lock_chain_count+0x20/0x20 [ 1741.981019] ? __lock_acquire+0x1657/0x5b00 [ 1741.981554] udpv6_sendmsg+0x1b30/0x2ad0 [ 1741.982056] ? __lock_acquire+0x1657/0x5b00 [ 1741.982594] ? udp_v6_push_pending_frames+0x360/0x360 [ 1741.983252] ? trace_hardirqs_on+0x5b/0x180 [ 1741.983783] ? lock_acquire+0x197/0x470 [ 1741.984266] ? find_held_lock+0x2c/0x110 [ 1741.984769] ? lock_acquire+0x197/0x470 [ 1741.985258] ? find_held_lock+0x2c/0x110 [ 1741.985765] ? __might_fault+0xd3/0x180 [ 1741.986254] ? lock_downgrade+0x6d0/0x6d0 [ 1741.986795] ? sock_has_perm+0x1ea/0x280 [ 1741.987288] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1741.987939] ? __import_iovec+0x458/0x590 [ 1741.988443] ? udp_v6_push_pending_frames+0x360/0x360 [ 1741.989080] inet6_sendmsg+0x105/0x140 [ 1741.989555] ? inet6_compat_ioctl+0x320/0x320 [ 1741.990101] __sock_sendmsg+0xf2/0x190 [ 1741.990575] ____sys_sendmsg+0x334/0x870 [ 1741.991117] ? sock_write_iter+0x3d0/0x3d0 [ 1741.991630] ? do_recvmmsg+0x6d0/0x6d0 [ 1741.992110] ? __lock_acquire+0x1657/0x5b00 [ 1741.992642] ___sys_sendmsg+0xf3/0x170 [ 1741.993122] ? sendmsg_copy_msghdr+0x160/0x160 [ 1741.993674] ? vmacache_find+0x55/0x2a0 [ 1741.994168] ? lock_acquire+0x197/0x470 [ 1741.994650] ? find_held_lock+0x2c/0x110 [ 1741.995187] ? __might_fault+0xd3/0x180 [ 1741.995672] ? lock_downgrade+0x6d0/0x6d0 [ 1741.996192] ? asm_exc_page_fault+0x1e/0x30 [ 1741.996729] __sys_sendmmsg+0x195/0x470 [ 1741.997218] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1741.997743] ? lock_downgrade+0x6d0/0x6d0 [ 1741.998269] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1741.998908] ? wait_for_completion_io+0x270/0x270 [ 1741.999505] ? rcu_read_lock_any_held+0x75/0xa0 [ 1742.000072] ? vfs_write+0x354/0xb10 [ 1742.000525] ? fput_many+0x2f/0x1a0 [ 1742.000972] ? ksys_write+0x1a9/0x260 [ 1742.001441] ? __ia32_sys_read+0xb0/0xb0 [ 1742.001950] __x64_sys_sendmmsg+0x99/0x100 [ 1742.002471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.003137] do_syscall_64+0x33/0x40 [ 1742.003591] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.004216] RIP: 0033:0x7fec4fe72b19 [ 1742.004673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.006950] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1742.007877] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1742.008752] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1742.009834] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.010838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.011756] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x300000000000000) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:06 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f8", 0x16}, {0x0, 0x0, 0x800}, {&(0x7f0000000280)="6753fd1bf4b1374aefb0cbcda189eb211b632d558b590693bfa58ebd6c4e1fee8642554b04d4ffb7e0e0fa82a6aae2a2ffac48df73f2ef18643f095e8b90f766c50833d454963cc1edef8a4a127cb9ce79796a3c6061814b75d3fae7da58efbe31b86428a1ebfa20444a5a8dc6f0b20af8c2c4c062372f4bc1abfa6c83e3a214a66730ffdc2d222375aef3578f7b0c52d45f750a93a238ef67224da35d615419bbce62d05793a78fd02e", 0xaa}], 0x90008, &(0x7f0000011200)) dup(r0) 03:58:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 60) [ 1742.113800] FAULT_INJECTION: forcing a failure. [ 1742.113800] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.115208] CPU: 1 PID: 10426 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1742.116023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.116975] Call Trace: [ 1742.117285] dump_stack+0x107/0x167 [ 1742.117707] should_fail.cold+0x5/0xa [ 1742.118154] should_failslab+0x5/0x20 [ 1742.118596] __kmalloc_node_track_caller+0x74/0x3b0 [ 1742.119207] ? alloc_skb_with_frags+0x92/0x570 [ 1742.119739] __alloc_skb+0xb1/0x5b0 [ 1742.120162] alloc_skb_with_frags+0x92/0x570 [ 1742.120674] ? lock_chain_count+0x20/0x20 [ 1742.121153] sock_alloc_send_pskb+0x7af/0x930 [ 1742.121676] ? sk_alloc+0x350/0x350 [ 1742.122100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1742.122736] ? lock_downgrade+0x6d0/0x6d0 [ 1742.123265] __ip_append_data+0x1628/0x3310 [ 1742.123807] ? fib_select_path+0x293/0x1de0 [ 1742.124325] ? ip_frag_init+0x350/0x350 [ 1742.124792] ? ip_finish_output+0x330/0x330 [ 1742.125295] ? ip_route_output_key_hash+0x19c/0x340 [ 1742.125867] ? ipv4_mtu+0x1ed/0x2c0 [ 1742.126291] ip_make_skb+0x22a/0x2a0 [ 1742.126739] ? ip_frag_init+0x350/0x350 [ 1742.127201] ? ip_flush_pending_frames+0x20/0x20 [ 1742.127753] ? lock_downgrade+0x6d0/0x6d0 [ 1742.128236] ? xfrm_lookup_route+0x65/0x210 [ 1742.128738] udp_sendmsg+0x1940/0x2160 [ 1742.129192] ? ip_frag_init+0x350/0x350 [ 1742.129658] ? udp_setsockopt+0xc0/0xc0 [ 1742.130116] ? mark_lock+0xf5/0x2df0 [ 1742.130550] ? lock_chain_count+0x20/0x20 [ 1742.131070] ? mark_lock+0xf5/0x2df0 [ 1742.131502] ? mark_lock+0xf5/0x2df0 [ 1742.131931] ? lock_chain_count+0x20/0x20 [ 1742.132409] ? lock_chain_count+0x20/0x20 [ 1742.132889] ? prep_new_page+0x16d/0x1d0 [ 1742.133357] ? lock_chain_count+0x20/0x20 [ 1742.133845] ? __lock_acquire+0x1657/0x5b00 [ 1742.134347] udpv6_sendmsg+0x1b30/0x2ad0 [ 1742.134849] ? __lock_acquire+0x1657/0x5b00 [ 1742.135394] ? udp_v6_push_pending_frames+0x360/0x360 [ 1742.136026] ? trace_hardirqs_on+0x5b/0x180 [ 1742.136560] ? lock_acquire+0x197/0x470 [ 1742.137021] ? find_held_lock+0x2c/0x110 [ 1742.137495] ? lock_acquire+0x197/0x470 [ 1742.137951] ? find_held_lock+0x2c/0x110 [ 1742.138423] ? __might_fault+0xd3/0x180 [ 1742.138896] ? lock_downgrade+0x6d0/0x6d0 [ 1742.139375] ? sock_has_perm+0x1ea/0x280 [ 1742.139845] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1742.140453] ? __import_iovec+0x458/0x590 [ 1742.140932] ? udp_v6_push_pending_frames+0x360/0x360 [ 1742.141530] inet6_sendmsg+0x105/0x140 [ 1742.141979] ? inet6_compat_ioctl+0x320/0x320 [ 1742.142494] __sock_sendmsg+0xf2/0x190 [ 1742.142981] ____sys_sendmsg+0x334/0x870 [ 1742.143452] ? sock_write_iter+0x3d0/0x3d0 [ 1742.143942] ? do_recvmmsg+0x6d0/0x6d0 [ 1742.144394] ? __lock_acquire+0x1657/0x5b00 [ 1742.144902] ___sys_sendmsg+0xf3/0x170 [ 1742.145351] ? sendmsg_copy_msghdr+0x160/0x160 [ 1742.145875] ? vmacache_find+0x55/0x2a0 [ 1742.146340] ? lock_acquire+0x197/0x470 [ 1742.146837] ? find_held_lock+0x2c/0x110 [ 1742.147312] ? __might_fault+0xd3/0x180 [ 1742.147771] ? lock_downgrade+0x6d0/0x6d0 [ 1742.148247] ? asm_exc_page_fault+0x1e/0x30 [ 1742.148753] __sys_sendmmsg+0x195/0x470 [ 1742.149214] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1742.149712] ? lock_downgrade+0x6d0/0x6d0 [ 1742.150203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1742.150793] ? wait_for_completion_io+0x270/0x270 [ 1742.151388] ? rcu_read_lock_any_held+0x75/0xa0 [ 1742.151965] ? vfs_write+0x354/0xb10 [ 1742.152397] ? fput_many+0x2f/0x1a0 [ 1742.152828] ? ksys_write+0x1a9/0x260 [ 1742.153268] ? __ia32_sys_read+0xb0/0xb0 [ 1742.153742] __x64_sys_sendmmsg+0x99/0x100 [ 1742.154239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.154858] do_syscall_64+0x33/0x40 [ 1742.155289] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.155883] RIP: 0033:0x7fec4fe72b19 [ 1742.156316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.158425] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1742.159361] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1742.160180] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1742.160999] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.161814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.162633] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:21 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) lstat(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000440)='./file0/file0\x00', 0xee00, r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) sendfile(r1, r2, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r3}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), 0x1101000, &(0x7f0000000280)={[{@none}, {@clone_children}], [{@uid_lt={'uid<', r3}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@permit_directio}]}) mount(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x300000, 0x0) 03:58:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f00000008c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000900)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x2) sendfile(r7, r8, 0x0, 0x20d315) keyctl$KEYCTL_MOVE(0xb, 0x0, 0xfffffffffffffffc, 0x0, 0x0) keyctl$chown(0x4, 0x0, r6, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="3de1d25812d6ccf5024c4780f916063291c1b0e9e6c47262ec1baf60dc2f27f0ee180a2d1dfefcba92397eb16918ef40117a80995c38c38dbd4d53ef5e4cd7fa4abd45195c8af4b823b4810d41ffc6b0d2f0282e5c74f4139ef43a6873eba97670d0cf9b2b679d03eaabac66a5c33ee5fc48be3b26071cdb39f3"], 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x805056, &(0x7f0000000ac0)={'trans=unix,', {[{@dfltuid={'dfltuid', 0x3d, r5}}, {@cache_none}], [{@subj_role}, {@audit}, {@obj_role={'obj_role', 0x3d, 'keyring\x00'}}, {@uid_lt={'uid<', r6}}, {@subj_user={'subj_user', 0x3d, ')%(v*]\'#(6&:}['}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@smackfsdef={'smackfsdef', 0x3d, '85baa174f0cb1142'}}]}}) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) 03:58:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r3 = accept$unix(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) r4 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0xffff7fff, 0x2, 0x1, {0x0, r6}}, 0x90d) fallocate(0xffffffffffffffff, 0x1, 0x7, 0x4) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) sendmsg$NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x20000010) unshare(0x48020200) 03:58:21 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xb, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:58:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x20100000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 61) 03:58:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:58:21 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1b, './file0\x00'}, 0x1d) [ 1756.554881] FAULT_INJECTION: forcing a failure. [ 1756.554881] name failslab, interval 1, probability 0, space 0, times 0 [ 1756.556355] CPU: 1 PID: 10441 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1756.557257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1756.558332] Call Trace: [ 1756.558686] dump_stack+0x107/0x167 [ 1756.559170] should_fail.cold+0x5/0xa [ 1756.559679] ? create_object.isra.0+0x3a/0xa20 [ 1756.560278] should_failslab+0x5/0x20 [ 1756.560775] kmem_cache_alloc+0x5b/0x310 [ 1756.561302] create_object.isra.0+0x3a/0xa20 [ 1756.561866] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1756.562530] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1756.563184] ? alloc_skb_with_frags+0x92/0x570 [ 1756.563798] __alloc_skb+0xb1/0x5b0 [ 1756.564277] alloc_skb_with_frags+0x92/0x570 [ 1756.564855] ? lock_chain_count+0x20/0x20 [ 1756.565394] sock_alloc_send_pskb+0x7af/0x930 [ 1756.565984] ? sk_alloc+0x350/0x350 [ 1756.566466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1756.567148] ? lock_downgrade+0x6d0/0x6d0 [ 1756.567721] __ip_append_data+0x1628/0x3310 [ 1756.568292] ? fib_select_path+0x293/0x1de0 [ 1756.568863] ? ip_frag_init+0x350/0x350 [ 1756.569393] ? ip_finish_output+0x330/0x330 [ 1756.569961] ? ip_route_output_key_hash+0x19c/0x340 [ 1756.570608] ? ipv4_mtu+0x1ed/0x2c0 [ 1756.571087] ip_make_skb+0x22a/0x2a0 [ 1756.571604] ? ip_frag_init+0x350/0x350 [ 1756.572127] ? ip_flush_pending_frames+0x20/0x20 [ 1756.572753] ? lock_downgrade+0x6d0/0x6d0 [ 1756.573297] ? xfrm_lookup_route+0x65/0x210 [ 1756.573876] udp_sendmsg+0x1940/0x2160 [ 1756.574395] ? ip_frag_init+0x350/0x350 [ 1756.574926] ? udp_setsockopt+0xc0/0xc0 [ 1756.579471] ? mark_lock+0xf5/0x2df0 [ 1756.579967] ? lock_chain_count+0x20/0x20 [ 1756.580511] ? mark_lock+0xf5/0x2df0 [ 1756.581004] ? mark_lock+0xf5/0x2df0 [ 1756.581493] ? lock_chain_count+0x20/0x20 [ 1756.582037] ? lock_chain_count+0x20/0x20 [ 1756.582579] ? prep_new_page+0x16d/0x1d0 [ 1756.583108] ? lock_chain_count+0x20/0x20 [ 1756.583673] ? __lock_acquire+0x1657/0x5b00 [ 1756.584245] udpv6_sendmsg+0x1b30/0x2ad0 [ 1756.584779] ? __lock_acquire+0x1657/0x5b00 [ 1756.585308] ? udp_v6_push_pending_frames+0x360/0x360 [ 1756.585979] ? trace_hardirqs_on+0x5b/0x180 [ 1756.586510] ? lock_acquire+0x197/0x470 [ 1756.586993] ? find_held_lock+0x2c/0x110 [ 1756.587507] ? lock_acquire+0x197/0x470 [ 1756.587989] ? find_held_lock+0x2c/0x110 [ 1756.588485] ? __might_fault+0xd3/0x180 [ 1756.588973] ? lock_downgrade+0x6d0/0x6d0 [ 1756.589477] ? lock_chain_count+0x20/0x20 [ 1756.589980] ? sock_has_perm+0x1ea/0x280 [ 1756.590474] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1756.591114] ? __import_iovec+0x458/0x590 [ 1756.591717] ? udp_v6_push_pending_frames+0x360/0x360 [ 1756.592348] inet6_sendmsg+0x105/0x140 [ 1756.592824] ? inet6_compat_ioctl+0x320/0x320 [ 1756.593370] __sock_sendmsg+0xf2/0x190 [ 1756.593845] ____sys_sendmsg+0x334/0x870 [ 1756.594344] ? sock_write_iter+0x3d0/0x3d0 03:58:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x8cffffff, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1756.594858] ? do_recvmmsg+0x6d0/0x6d0 [ 1756.595410] ? __lock_acquire+0x1657/0x5b00 [ 1756.595943] ___sys_sendmsg+0xf3/0x170 [ 1756.596417] ? sendmsg_copy_msghdr+0x160/0x160 [ 1756.596971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1756.597605] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1756.598146] ? trace_hardirqs_on+0x5b/0x180 [ 1756.598671] ? lock_acquire+0x197/0x470 [ 1756.599153] ? find_held_lock+0x2c/0x110 [ 1756.599665] ? __might_fault+0xd3/0x180 [ 1756.600147] ? lock_downgrade+0x6d0/0x6d0 [ 1756.600652] ? io_schedule_timeout+0x140/0x140 [ 1756.601217] __sys_sendmmsg+0x195/0x470 [ 1756.601704] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1756.602232] ? lock_downgrade+0x6d0/0x6d0 [ 1756.602744] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1756.603343] ? wait_for_completion_io+0x270/0x270 [ 1756.603932] ? rcu_read_lock_any_held+0x75/0xa0 [ 1756.604495] ? vfs_write+0x354/0xb10 [ 1756.604953] ? fput_many+0x2f/0x1a0 [ 1756.605397] ? ksys_write+0x1a9/0x260 [ 1756.605859] ? __ia32_sys_read+0xb0/0xb0 [ 1756.606357] __x64_sys_sendmmsg+0x99/0x100 [ 1756.606871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1756.607506] do_syscall_64+0x33/0x40 [ 1756.607959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1756.608580] RIP: 0033:0x7fec4fe72b19 [ 1756.609035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1756.611284] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1756.612209] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1756.613074] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1756.613943] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1756.614808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1756.615687] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:21 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="a2ef17e30dca5f50cd29289458ae6597b75fa1657662a15c2ff85957590753069a6f98b2f42ceeecef19fc086ca26abb24c5e4faee75ae92dc3e08bacf7be54429d80b64da30e215e2a89f0d0e", 0x4d, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1756.641712] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 03:58:21 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xc0ed0000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:21 executing program 1: r0 = socket$inet(0x2, 0xa, 0x300) r1 = socket$inet(0x2, 0x3, 0x6) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f00000000c0)=@llc={0x1a, 0xf, 0x1, 0x2, 0x4, 0x40}, 0x0, 0x0, 0x1, {0x0, r2}}, 0x400) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='bridge0\x00', 0xfffffffffffffffd, 0x8000, 0x7f}) sendmmsg$inet(r1, &(0x7f0000000000), 0x400000d, 0x0) 03:58:21 executing program 0: r0 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) statx(r3, &(0x7f0000000180)='./file1\x00', 0x6000, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r4, r5, 0x1000) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000540)={0x0, "2f5bc831fcbc556de240e9e52e1554e48fd3d1f3108a2d226d8c1e3bb319eacb078a4f9a7c6ebb1764c32af3037aeffe918d33ebc003fee3278230b55d95b92e", 0x37}, 0x48, r0) r7 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$link(0x8, r6, r7) setgid(r5) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x3ff, 0x2, &(0x7f0000000140)=[{&(0x7f0000000480)="18e3d8d53ae4acbed347b8cf3458bf936cf914c25bd8f47cf649613aa8a78ccd479b02ef1a0db0285c76f09a284ac6002527cadd09956104968f54bba7499910cbf994f3b1b5730a1f6125e8523f1c20c678637b942a598bba7d0fc76b6397b84c9a42ef9ff386d64f693250bef533d441bf460043ed63006ba9660bc911b238c161f3693ca1", 0x86, 0x7f}, {&(0x7f0000000100)="80a20f411e37c3df516afca246ab9dfddb28f460fb3b6ddf7c80640abee1b0b3626db81d06", 0x25, 0x3c8f}], 0x22000, &(0x7f0000000340)={[{@nobh}, {@noinit_itable}, {@quota}, {@bh}, {@dax}, {@dioread_nolock}, {@data_journal}], [{@smackfstransmute}]}) [ 1756.775679] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 03:58:37 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000001600)={0x4, 0x80, 0x4, 0x6, 0x1f, 0x8, 0x0, 0x796, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff98c8, 0x1, @perf_config_ext={0x7, 0x6}, 0x1708b, 0x401, 0x1, 0x8, 0x7, 0x9700000, 0x800, 0x0, 0x81}, 0x0, 0x5, r2, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500), 0x4) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='net/dev_mcast\x00', &(0x7f0000000300)='./file1\x00', r1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x70) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x40000, &(0x7f0000001540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@version_L}, {@posixacl}, {@cachetag={'cachetag', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810000000806000186dd06100000aaaaaaaaaa00fe8000000000000180c200040020010000000000000000000000000001178377ef45b81e48848165594cf737e99d3844195fa32ea419275093932d1c"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='.&\x00', 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=fd,rfdno\a', @ANYRESHEX=r3, @ANYBLOB="020000006e6f3d443eba2621f78bcdfd462b1892bfaa892ee1f2731bd85c20c52fa89977e65037ab533e830f1bb5a50edd9972a6a43ff5f7891efc47317fb1fd08062992f8477280b013dbb6e5fcf161f2e589c495ad5c1cbbd8bc7efe192bf417c353bfacc451b327f60b260fd853b7e4bec158956435c94c1ed9ca83a1fd15f5ffbf7b601a19e7b0a0ab612cfd1e634bbf7d58377067baa27c35d6700a55b4056de46de9ba58220bf4a51d47dc9dcdf7d8c41f90ded298ce5cbeb1a990143b39cf23bd952d11f5f5ffbaff8f35cf2d49734e37c2f742fecd753c9d044ce4c2d029d09d8144728816befdb99f6a831c51", @ANYRESHEX, @ANYBLOB=',cache=mmap,version=9p2000.L,\x00']) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10) 03:58:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xf6ffffff, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:37 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x600, './file0\x00'}, 0x1d) 03:58:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x1, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) r6 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) dup2(r6, r6) r7 = syz_open_dev$loop(&(0x7f0000000580), 0x400, 0x40100) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000005c0)=@IORING_OP_SPLICE={0x1e, 0x7, 0x0, @fd=r6, 0x8000, {}, 0x4, 0x1, 0x0, {0x0, 0x0, r7}}, 0x3) r8 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r8, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x9]}, 0x8, 0x80000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:58:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 62) [ 1772.721412] FAULT_INJECTION: forcing a failure. [ 1772.721412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.722882] CPU: 0 PID: 10487 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1772.723740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.724780] Call Trace: [ 1772.725109] dump_stack+0x107/0x167 [ 1772.725560] should_fail.cold+0x5/0xa [ 1772.726037] _copy_from_user+0x2e/0x1b0 [ 1772.726533] __copy_msghdr_from_user+0x91/0x4b0 [ 1772.727115] ? __ia32_sys_shutdown+0x80/0x80 [ 1772.727662] ? udp_v6_push_pending_frames+0x360/0x360 [ 1772.728313] ? inet6_sendmsg+0xbd/0x140 [ 1772.728810] ? inet6_compat_ioctl+0x320/0x320 [ 1772.729357] ? __sock_sendmsg+0x55/0x190 [ 1772.729867] sendmsg_copy_msghdr+0xa1/0x160 [ 1772.730394] ? do_recvmmsg+0x6d0/0x6d0 [ 1772.730883] ? __lock_acquire+0x1657/0x5b00 [ 1772.731417] ___sys_sendmsg+0xc6/0x170 [ 1772.731919] ? sendmsg_copy_msghdr+0x160/0x160 [ 1772.732477] ? vmacache_find+0x55/0x2a0 [ 1772.732976] ? lock_acquire+0x197/0x470 [ 1772.733460] ? find_held_lock+0x2c/0x110 [ 1772.733967] ? __might_fault+0xd3/0x180 [ 1772.734453] ? lock_downgrade+0x6d0/0x6d0 [ 1772.734967] ? asm_exc_page_fault+0x1e/0x30 [ 1772.735504] __sys_sendmmsg+0x195/0x470 [ 1772.736019] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1772.736549] ? lock_downgrade+0x6d0/0x6d0 [ 1772.737074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1772.737672] ? wait_for_completion_io+0x270/0x270 [ 1772.738264] ? rcu_read_lock_any_held+0x75/0xa0 [ 1772.738841] ? vfs_write+0x354/0xb10 [ 1772.739296] ? fput_many+0x2f/0x1a0 [ 1772.739749] ? ksys_write+0x1a9/0x260 [ 1772.740231] ? __ia32_sys_read+0xb0/0xb0 [ 1772.740739] __x64_sys_sendmmsg+0x99/0x100 [ 1772.741256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1772.741892] do_syscall_64+0x33/0x40 [ 1772.742346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1772.742980] RIP: 0033:0x7fec4fe72b19 [ 1772.743435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.745719] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1772.746653] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1772.747527] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1772.748418] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.749295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.750171] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) lseek(r2, 0x7, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r4 = dup(r2) write$bt_hci(r4, &(0x7f0000000140)={0x1, @logical_link_cancel={{0x43b, 0x2}, {0xc9, 0x81}}}, 0x6) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "f8719d5b80a6b72af2488b02c30d91647489006dc02ae272b5903834362c9301d5c599691ae581f4ec207d80945ba0376c19ab9f1fdda3fde47042bd21cfaf6d", 0x1d}, 0x48, r1) 03:58:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, 0x0, 0x0) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:58:37 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:58:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xff000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 63) [ 1772.817657] FAULT_INJECTION: forcing a failure. [ 1772.817657] name failslab, interval 1, probability 0, space 0, times 0 03:58:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x1, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000280)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000080)="e42d68787ce64952bb23b88c9c6a79009c0f9559e600df290ff6945ebdf0e676e42eb3ceeffa24184eb9b7dd2d33f5da06531f9c6b4ff89aa5e7f786485bfdddaf3667daeab7972775377ddd941c", 0x4e, 0x101}], 0x0, &(0x7f0000000140)={[{@mode={'mode', 0x3d, 0x755}}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x37]}}}}, {@huge_within_size}, {@mode={'mode', 0x3d, 0x9}}], [{@context={'context', 0x3d, 'root'}}]}) [ 1772.819051] CPU: 0 PID: 10504 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1772.819933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1772.820935] Call Trace: [ 1772.821258] dump_stack+0x107/0x167 [ 1772.821701] should_fail.cold+0x5/0xa [ 1772.822169] should_failslab+0x5/0x20 [ 1772.822634] __kmalloc_node_track_caller+0x74/0x3b0 [ 1772.823240] ? alloc_skb_with_frags+0x92/0x570 [ 1772.823798] __alloc_skb+0xb1/0x5b0 [ 1772.824259] alloc_skb_with_frags+0x92/0x570 [ 1772.824801] ? lock_chain_count+0x20/0x20 [ 1772.825309] sock_alloc_send_pskb+0x7af/0x930 [ 1772.825866] ? sk_alloc+0x350/0x350 [ 1772.826313] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1772.826953] ? lock_downgrade+0x6d0/0x6d0 [ 1772.827463] __ip_append_data+0x1628/0x3310 [ 1772.828010] ? fib_select_path+0x293/0x1de0 [ 1772.828536] ? ip_frag_init+0x350/0x350 [ 1772.829024] ? ip_finish_output+0x330/0x330 [ 1772.829555] ? ip_route_output_key_hash+0x19c/0x340 [ 1772.830161] ? ipv4_mtu+0x1ed/0x2c0 [ 1772.830607] ip_make_skb+0x22a/0x2a0 [ 1772.831060] ? ip_frag_init+0x350/0x350 [ 1772.831545] ? ip_flush_pending_frames+0x20/0x20 [ 1772.832137] ? lock_downgrade+0x6d0/0x6d0 [ 1772.832645] ? xfrm_lookup_route+0x65/0x210 [ 1772.833172] udp_sendmsg+0x1940/0x2160 [ 1772.833650] ? ip_frag_init+0x350/0x350 [ 1772.834146] ? udp_setsockopt+0xc0/0xc0 [ 1772.834628] ? mark_lock+0xf5/0x2df0 [ 1772.835084] ? lock_chain_count+0x20/0x20 [ 1772.835588] ? mark_lock+0xf5/0x2df0 [ 1772.836059] ? mark_lock+0xf5/0x2df0 [ 1772.836512] ? lock_chain_count+0x20/0x20 [ 1772.837015] ? lock_chain_count+0x20/0x20 [ 1772.837521] ? prep_new_page+0x16d/0x1d0 [ 1772.838013] ? lock_chain_count+0x20/0x20 [ 1772.838524] ? __lock_acquire+0x1657/0x5b00 [ 1772.839052] udpv6_sendmsg+0x1b30/0x2ad0 [ 1772.839545] ? __lock_acquire+0x1657/0x5b00 [ 1772.840089] ? udp_v6_push_pending_frames+0x360/0x360 [ 1772.840712] ? trace_hardirqs_on+0x5b/0x180 [ 1772.841243] ? lock_acquire+0x197/0x470 [ 1772.841725] ? find_held_lock+0x2c/0x110 [ 1772.842223] ? lock_acquire+0x197/0x470 [ 1772.842704] ? find_held_lock+0x2c/0x110 [ 1772.843199] ? __might_fault+0xd3/0x180 [ 1772.843682] ? lock_downgrade+0x6d0/0x6d0 [ 1772.844202] ? lock_chain_count+0x20/0x20 [ 1772.844709] ? sock_has_perm+0x1ea/0x280 [ 1772.845204] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1772.845845] ? __import_iovec+0x458/0x590 [ 1772.846353] ? udp_v6_push_pending_frames+0x360/0x360 [ 1772.846986] inet6_sendmsg+0x105/0x140 [ 1772.847463] ? inet6_compat_ioctl+0x320/0x320 [ 1772.848026] __sock_sendmsg+0xf2/0x190 [ 1772.848503] ____sys_sendmsg+0x334/0x870 [ 1772.849000] ? sock_write_iter+0x3d0/0x3d0 [ 1772.849516] ? do_recvmmsg+0x6d0/0x6d0 [ 1772.849994] ? __lock_acquire+0x1657/0x5b00 [ 1772.850529] ___sys_sendmsg+0xf3/0x170 [ 1772.851007] ? sendmsg_copy_msghdr+0x160/0x160 [ 1772.851566] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1772.852218] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1772.852763] ? trace_hardirqs_on+0x5b/0x180 [ 1772.853293] ? lock_acquire+0x197/0x470 [ 1772.853780] ? find_held_lock+0x2c/0x110 [ 1772.854280] ? __might_fault+0xd3/0x180 [ 1772.854765] ? lock_downgrade+0x6d0/0x6d0 [ 1772.855278] ? io_schedule_timeout+0x140/0x140 [ 1772.855865] __sys_sendmmsg+0x195/0x470 [ 1772.856358] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1772.856886] ? lock_downgrade+0x6d0/0x6d0 [ 1772.857417] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1772.858019] ? wait_for_completion_io+0x270/0x270 [ 1772.858611] ? rcu_read_lock_any_held+0x75/0xa0 [ 1772.859179] ? vfs_write+0x354/0xb10 [ 1772.859636] ? fput_many+0x2f/0x1a0 [ 1772.860104] ? ksys_write+0x1a9/0x260 [ 1772.860571] ? __ia32_sys_read+0xb0/0xb0 [ 1772.861072] __x64_sys_sendmmsg+0x99/0x100 [ 1772.861600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1772.862241] do_syscall_64+0x33/0x40 [ 1772.862697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1772.863322] RIP: 0033:0x7fec4fe72b19 [ 1772.863779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1772.866056] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1772.866987] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1772.867871] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1772.868746] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1772.869629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.870503] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xffff0000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:37 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000001600)={0x4, 0x80, 0x4, 0x6, 0x1f, 0x8, 0x0, 0x796, 0x40, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff98c8, 0x1, @perf_config_ext={0x7, 0x6}, 0x1708b, 0x401, 0x1, 0x8, 0x7, 0x9700000, 0x800, 0x0, 0x81}, 0x0, 0x5, r2, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001500), 0x4) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000002c0)='net/dev_mcast\x00', &(0x7f0000000300)='./file1\x00', r1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) r4 = fsmount(0xffffffffffffffff, 0x0, 0x70) stat(&(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x40000, &(0x7f0000001540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@cache_fscache}, {@cachetag={'cachetag', 0x3d, '\x00'}}, {@version_L}, {@posixacl}, {@cachetag={'cachetag', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000810000000806000186dd06100000aaaaaaaaaa00fe8000000000000180c200040020010000000000000000000000000001178377ef45b81e48848165594cf737e99d3844195fa32ea419275093932d1c"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000180)='\x00', &(0x7f0000000200)='.&\x00', 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=fd,rfdno\a', @ANYRESHEX=r3, @ANYBLOB="020000006e6f3d443eba2621f78bcdfd462b1892bfaa892ee1f2731bd85c20c52fa89977e65037ab533e830f1bb5a50edd9972a6a43ff5f7891efc47317fb1fd08062992f8477280b013dbb6e5fcf161f2e589c495ad5c1cbbd8bc7efe192bf417c353bfacc451b327f60b260fd853b7e4bec158956435c94c1ed9ca83a1fd15f5ffbf7b601a19e7b0a0ab612cfd1e634bbf7d58377067baa27c35d6700a55b4056de46de9ba58220bf4a51d47dc9dcdf7d8c41f90ded298ce5cbeb1a990143b39cf23bd952d11f5f5ffbaff8f35cf2d49734e37c2f742fecd753c9d044ce4c2d029d09d8144728816befdb99f6a831c51", @ANYRESHEX, @ANYBLOB=',cache=mmap,version=9p2000.L,\x00']) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') readv(r6, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x6}, 0x10) [ 1772.910093] 9pnet: Insufficient options for proto=fd 03:58:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xffffff8c, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1772.933716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:58:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc8, 0x22, 0x4, 0x70bd2d, 0x25dfdbff, {0x2}, [@typed={0x14, 0x89, 0x0, 0x0, @ipv6=@remote}, @generic="2b0b38a0ab7f84a2117fd59f265669db0cf0aa87f4c17d3057f41280dd819572818bf5b506da1ad988c117edf90bf23e3b15753f11a2516bb3042882cad35a6f4088db4c6ac2591af5b7bfdbaae88416eac579d83fa9", @generic="008d36b19969e6982f4b0f3e2b6a4802bb9b94fe5d88e3be02c6a5355454ced0b6bc27e2ecf6a3830a863374227d7e38c662a8df0b2ea600f96b3c9af96d63ea9d79f14d549d0a"]}, 0xc8}, 0x1, 0x0, 0x0, 0xc000}, 0x20004840) getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000001340), &(0x7f0000001380)=0x4) 03:58:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r2 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r3, 0x800000000081) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x212601, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0xc5, 0x5, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0xd}, 0x804, 0x5, 0x0, 0x0, 0x7f, 0xffff, 0x1, 0x0, 0xfffffffa, 0x0, 0x1}, r3, 0x0, r4, 0x3) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x9, 0x1, 0x6, 0x6, 0x0, 0x101, 0x35468, 0xb, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x488, 0x5}, 0x2449, 0x44, 0x7, 0x0, 0x6, 0xfffffff7, 0x8, 0x0, 0x2, 0x0, 0x7}, r2, 0xe, r0, 0x2) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 64) 03:58:37 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xfffffff6, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1773.017259] FAULT_INJECTION: forcing a failure. [ 1773.017259] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.019013] CPU: 1 PID: 10531 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1773.019899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.020931] Call Trace: [ 1773.021271] dump_stack+0x107/0x167 [ 1773.021738] should_fail.cold+0x5/0xa [ 1773.022227] ? create_object.isra.0+0x3a/0xa20 [ 1773.022804] should_failslab+0x5/0x20 [ 1773.023287] kmem_cache_alloc+0x5b/0x310 [ 1773.023807] ? lock_acquire+0x197/0x470 [ 1773.024352] create_object.isra.0+0x3a/0xa20 [ 1773.024898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1773.025540] kmem_cache_alloc+0x159/0x310 [ 1773.026075] skb_clone+0x14f/0x3d0 [ 1773.026524] dev_queue_xmit_nit+0x3a7/0xb00 [ 1773.027068] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1773.027646] dev_hard_start_xmit+0xab/0x6f0 [ 1773.028220] __dev_queue_xmit+0x179a/0x2690 [ 1773.028768] ? find_held_lock+0x2c/0x110 [ 1773.029277] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1773.029858] ? lock_downgrade+0x6d0/0x6d0 [ 1773.030383] ? lock_acquire+0x197/0x470 [ 1773.030885] ? ip_finish_output2+0x220/0x21f0 [ 1773.031459] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1773.032137] neigh_connected_output+0x382/0x4d0 [ 1773.032735] ip_finish_output2+0x6f1/0x21f0 [ 1773.033275] ? nf_hook_slow+0xfc/0x1e0 [ 1773.033768] ? ip_frag_next+0x9e0/0x9e0 [ 1773.034271] ? nf_hook+0x160/0x510 [ 1773.034722] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1773.035367] __ip_finish_output.part.0+0x5f3/0xb50 [ 1773.036012] ? ip_fragment.constprop.0+0x240/0x240 [ 1773.036620] ? nf_hook+0x510/0x510 [ 1773.037081] ip_output+0x2f7/0x600 [ 1773.037538] ip_send_skb+0xdd/0x260 [ 1773.038001] udp_send_skb+0x6da/0x11d0 [ 1773.038500] udp_sendmsg+0x1980/0x2160 [ 1773.038985] ? ip_frag_init+0x350/0x350 [ 1773.039490] ? udp_setsockopt+0xc0/0xc0 [ 1773.039998] ? mark_lock+0xf5/0x2df0 [ 1773.040474] ? lock_chain_count+0x20/0x20 [ 1773.040993] ? mark_lock+0xf5/0x2df0 [ 1773.041467] ? mark_lock+0xf5/0x2df0 [ 1773.041937] ? lock_chain_count+0x20/0x20 [ 1773.042457] ? lock_chain_count+0x20/0x20 [ 1773.042974] ? prep_new_page+0x16d/0x1d0 [ 1773.043488] ? lock_chain_count+0x20/0x20 [ 1773.044035] ? __lock_acquire+0x1657/0x5b00 [ 1773.044584] udpv6_sendmsg+0x1b30/0x2ad0 [ 1773.045091] ? __lock_acquire+0x1657/0x5b00 [ 1773.045642] ? udp_v6_push_pending_frames+0x360/0x360 [ 1773.046281] ? trace_hardirqs_on+0x5b/0x180 [ 1773.046826] ? lock_acquire+0x197/0x470 [ 1773.047321] ? find_held_lock+0x2c/0x110 [ 1773.047840] ? lock_acquire+0x197/0x470 [ 1773.048341] ? find_held_lock+0x2c/0x110 [ 1773.048855] ? __might_fault+0xd3/0x180 [ 1773.049354] ? lock_downgrade+0x6d0/0x6d0 [ 1773.049865] ? lock_chain_count+0x20/0x20 [ 1773.050381] ? sock_has_perm+0x1ea/0x280 [ 1773.050894] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1773.051552] ? __import_iovec+0x458/0x590 [ 1773.052091] ? udp_v6_push_pending_frames+0x360/0x360 [ 1773.052738] inet6_sendmsg+0x105/0x140 [ 1773.053220] ? inet6_compat_ioctl+0x320/0x320 [ 1773.053772] __sock_sendmsg+0xf2/0x190 [ 1773.054255] ____sys_sendmsg+0x334/0x870 [ 1773.054762] ? sock_write_iter+0x3d0/0x3d0 [ 1773.055285] ? do_recvmmsg+0x6d0/0x6d0 [ 1773.055777] ? __lock_acquire+0x1657/0x5b00 [ 1773.056350] ___sys_sendmsg+0xf3/0x170 [ 1773.056840] ? sendmsg_copy_msghdr+0x160/0x160 [ 1773.057410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.058059] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1773.058618] ? trace_hardirqs_on+0x5b/0x180 [ 1773.059156] ? lock_acquire+0x197/0x470 [ 1773.059643] ? find_held_lock+0x2c/0x110 [ 1773.060167] ? __might_fault+0xd3/0x180 [ 1773.060662] ? lock_downgrade+0x6d0/0x6d0 [ 1773.061183] ? io_schedule_timeout+0x140/0x140 [ 1773.061760] __sys_sendmmsg+0x195/0x470 [ 1773.062262] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1773.062793] ? lock_downgrade+0x6d0/0x6d0 [ 1773.063330] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1773.063942] ? wait_for_completion_io+0x270/0x270 [ 1773.064539] ? rcu_read_lock_any_held+0x75/0xa0 [ 1773.065115] ? vfs_write+0x354/0xb10 [ 1773.065583] ? fput_many+0x2f/0x1a0 [ 1773.066035] ? ksys_write+0x1a9/0x260 [ 1773.066512] ? __ia32_sys_read+0xb0/0xb0 [ 1773.067025] __x64_sys_sendmmsg+0x99/0x100 [ 1773.067542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.068180] do_syscall_64+0x33/0x40 [ 1773.068633] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.069256] RIP: 0033:0x7fec4fe72b19 [ 1773.069709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.071956] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1773.072881] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1773.073748] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1773.074614] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.075478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.076356] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) syz_mount_image$nfs4(&(0x7f0000001640), &(0x7f0000001680)='./file0\x00', 0xa71c, 0x7, &(0x7f0000001d00)=[{&(0x7f0000001700)="00dca79c17e7867c4c10abdca6a858d6c41387", 0x13, 0x1}, {&(0x7f0000001740)="edce1ba1282d04e08d6c3ea8a78a41558b59c6a0d56b5dce51cef01a7873777d5f51021fd00a", 0x26, 0x80000001}, {&(0x7f0000001980)="e909d2f446e123f030af91716226e837f0b0d2db0469cf368b540cbcd4c647f900cf86a88775528aba1738b5906370e011fbc409c93f3813f1dc6a350197a2459485449b0decde91b458a517ff2e3c05583935070af325afa194c9175e8d8bac2afbbe369719a613ace6a08c3c5c0d938e6c8ecee2e07ed3fa41c86636bc458fb2a21fffa3e8528dac910ff08a0301c371249ab82d40e63ac79e3d1b57226f41cca0ba251fbd19004379a535cde117c8fd788f9b9c213b18aa42db4411f6ca699f308484518f9f09", 0xc8}, {&(0x7f0000001780)="930c4ac68748c28498c8e0290abce178ac99bc0562e57c94d6089df64a9c75da83a1d99f0b27a024d3f7048a55c6a0", 0x2f, 0x4}, {&(0x7f0000001a80)="5a86f6d0a62dd7c7aa8b84f58e79d170bc0f30d4e1a4eca08fa45a58f8d48879d42dedb4848aaae50173e400b6acab2227e4a4c4ac516f3d6c4952edbc035dbaae61fa45bbe74a44d26d109f3fa93af70c5c677a2b9f76d380d8204954bc855670a818a8e2987ee2dce4028dd23542f9126291a9c34dfd0a7508114574c2a95e34bae8203dd8a4702763491a8ca4ad8af31e4dc8eeb038673884bde013283feaeeefb6f5c3846dc07ca31c6419512e58b4b018a5ca7d67569f", 0xb9, 0x868}, {&(0x7f0000001b40)="47864539fb3642809d2891adacca6f3fa49c1d9d05e6d3a98aa7f529d0bbb28e7b8ba216fdbe413c6e927c8868b68db4cb9a5328ddaeeb7d9977d2ec22dc6a0017351ee37616416a23ed747176cc5b629d6cbe155d44f79b30d1342129468123b721268a2835a8cb48261375b1a6d80d7a21c233516f43c8705a7c4c818d85b2f6939d6be7b0e4c7b23fbe232ec5af38f8a2491fd7129b571a7234f01c1afc", 0x9f, 0x80000000}, {&(0x7f0000001c00)="d11c30c1ee25a6336cb49e6c4429d5e4d2147bbcb74c9c1da9e178dd617a55190d0a7e8be99748abc48b73da3c136cf8cf5e28b19a6885d2a56e05af67a33eddf7161a33330f9d904bbfdbe2fa4b28cd182350e848fec75dff4657bac464335734a3585d502f7b1de00fec7bf541c5f423bc273596ff571cd0b48ca7a007aa44cd2560236ab7f5792db9a6f9396d000edc29b89c4681b7d02e71cf200af577e9f628136e0e5df41543f27a30d9407fe19ba772c50116d638e78af896098dd803e6f6597de3aedf49", 0xc8, 0xffffffff}], 0x1000, &(0x7f0000001dc0)={[{'['}, {'tmpfs\x00'}, {'\\\xed,'}, {'+,!\\'}, {'ext2\x00'}, {'ext2\x00'}], [{@subj_type}]}) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r0, r1, 0x1000) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, 0x8, &(0x7f00000018c0)=[{&(0x7f0000000180)="dc1ba313022b790238bca1690165165b702a64a51434077474f30e48a570cc461aad4983d06cc56457d5ab89ae0879cacc54ba106e7f7875c259f6cd4ba670b131071ac15792ccf128a15b18f75a8bdff258119ffecd5d3d4f7ecb4c7a38492a596f1b5f7f72e67cb677c5fc818fba519bbed618488b2fa61d8cb9af6d7a3a3622c32995f015fff36547df187ca239eef2a9e0408a8d255eb72dcfc034820b7d41b6b8040a0c638cc3e3526de29c8672ba63c3e49a71c66fac5f2d1f085219a422366fc6ccbbe49ff491e222769025830a5b5975788c1eb1d215d3b3", 0xdc, 0x80000000}, {&(0x7f0000000280)="9b188944d9ffd3b3f50a4c92c9e86cf8ec619339a8904e2db24a4e66d1902f0e7a131f4e4bec94aa41e73df447e133b4986d81986203e8f75bf2558a82df59dfaf1ea16c91b9ec6736991c0683793773ef43126705370205a98f11d8be97ddefaae0ee80397b79ef37f82b24d89b84c35dbf910ca5988add38e74755e970f71605533f65253f2ec0fef51d0b6ac3a2a890ba175248e1f81346f3f6b6bdf3e90b00c4e9f153ec6d19cbf191622efbca407099a104e51d7f3fd30c15fbe35367354c0b55b5ac40509db6187dffcdab6d0be4263c1585fa3f67ed8ec5add0d903f63cc23122b088afe9dbac88", 0xeb, 0x100000001}, {&(0x7f0000000380)="ac51becc5f153c6dcfd532b5229b1ef9d2a30965a576b0fc9f3381df1605618bff7593d1117dee0a948f8da14d412f63f065b7301aa9eed17058c3a331f8915715ad9473b6708d3dedb31dcdad05d16c36dcf4364bf8fd65de158d045428d23924619badaded110157c58f99d2ec275dca0413b55e2fa009b155cc8834632b9eabfe86c94914d446c8eb9eaf3d60f74dad0f99f0", 0x94, 0x7}, {&(0x7f0000000480)="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", 0x1000, 0x7b}, {&(0x7f0000001480)="89cf9aa65aa64868ee11c2f33a66fa6bd39bdff3ac41f85c3717dde8e2e39d73d76585d79acc38fb6e836e762f9a0e93e2daa78e7bcd9263027a7291c2a1fd0fc1c9520fe5ebe345272e79a524592f7096f744c4274c9ddb2e18f264ad6114a02357c09b4c6d967b94ef57974b9315f746e5ec609ea94e7fcaa0e608311a7d45ebe672041342459fc790f87cf29bdd067cc35bb80982adb9de155ce2e7ee316aaf802198fc9bd1a6a5e7b9126ef7d8872e9d0ab50a35b58add2800ad4faf6fee4879d91f944952d334e00ab32513d2f8c62543255c472e564283c10c36fa82a86b117b679d7dda66678d3a7027090fadf30d5a15", 0xf4, 0xfffffffffffffbff}, {&(0x7f0000001580)="e2dc3a7717714a25bc75e7d0a655b4cd821233beebca8d980fca4e06cc796a41c9d3ee8c4e4b47b78521a9b6b006e0cf84267944186ab28a5f0410662735ff09878f0e8243ac333e991b32b446e4a99caf06d284d0cf99e47c31fe2882e5b648b0748ad226cbcf285f8d92da0d734b342a4581e80375c135fb6856c957b3fcfd2ef5deb7c5eec3a0fc872ab6c5f58f7a15da32d08cf0ce9fef212a82087d34283d2bede0d66e2acbae00e570cc0cb460e4807fcf", 0xb4, 0x40}, {&(0x7f0000001840)="9cd14bae6d99c39a3d2afc5f097584896ad6ed3780bf5a9b1c0bb827fd22f14146690fdf2e599419cc2d7b6c51e754e9eb041ff9fea131f4a87820afee4b0897a7dae299cf5bcadc", 0x48, 0x1a2cd77d}, {&(0x7f00000016c0)="896db818620f6b2ee821860567a0b392b3ff45af9dcf8a4f086fd10c0edc9eaabcf0ec802e0ab22b450651c24f1e89af909781d932b0e9e3aa1f7322", 0x3c, 0x1cf}], 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB="2c73697a653d312c687567653d70fe7468696e5f73697a652c61756469742c6f626a5f757365723db62d2d2c66736e616d653d24656c616c6c6f632c00"]) 03:58:52 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x300, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:58:52 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x2000015d) 03:58:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xedc000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:58:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000040)={0x0, 0x62b4}, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x8000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r7, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000600), 0xa40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r9, 0x3312, 0x2) sendfile(r9, r10, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r9, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000001a80)={0x2d0, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0x1a0, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a", @generic="268b937c2cfcc1034cf468f2ddecb62caac33e62e1e68c7d75912046872bd7151470d1987a8fe593a7bb678220a7faacf92e8cd8d5ad7350b33cd7e374a0337b5134658909f1369472e9fc2c3d49f853fa49338dd72c2795ce744c4b1b9a2fb3ce0e4c7c84c2ceeddf923da64defd185fde903e5da91a50b7d26db189e68e6b72e2352dec29237ce2ea2fa23434a42af6864dec34c407338fc316e8696217f192f89a64ceaf06077e001e7ef7066bd9de63e9ae00661", @typed={0x8, 0x86, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0x2}]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r11}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000640)=ANY=[@ANYBLOB="0100f33b8228002018000000", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) sendmmsg$unix(r4, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="ba50c8b82cc17033eaef5e6da2fa9aec7c84141eb275ba00aa7ec749f6fe2346ff2aae72c1d9f8f015fb5acf1d3c080a26d0fb583acb6d2e018d7a4d375bdb5bda9ba3953e13575df11bb1ea99f412f3a676e9f0a0c340641cd27c61e7c331bf119ea9de12992232c0236fc1b44032a1e8f32baae440755bcb572283f186718107507f49f7841acdd86dadb37e8f46cfd8c12d1be51b9b9565f1b8f8b95c009c860c3bd6940ff0744adcdee92f6e638db52b47972bbf6cc13e2bdee10024d5574a468423311956ced429cde8", 0xcc}, {&(0x7f0000000100)="2b52ad0551f317facddeeb027a0879b1753d25146a35c6357e92b7c855b8efe655400dfe4265bb6af99249ee9b72fd59b8c4bffe88ba1765", 0x38}], 0x2, &(0x7f0000000680)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r5, r5, r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r6, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r8, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r12}}}], 0x100, 0x40000}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000800)="ff0781092002b1d3111e01a786f403c6f659115fd579c0312dfe87f8d5908802c1ff409e31b95e914c8140709f4424b56d947566bec8af403e49255914b24ce690c9c0202efa10e28de4fd43c0bc11f59799afabe0ee23619c47c055f82b3da64aab18ba3214cf2bc91644caeaeca6128e451683ec94ed6c6c48a32bb81247f3f216da0d62bc2dc92669", 0x8a}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="3fefdbd5f727742510b4a6daecbb84ea80a356696745882de18265442968a6c20acdfaeb623d16f53a4cb8b4287a09b2ef810eeeb4523db368281fc6603b2e3f173649e3ef30e7959d9602f338a093f9fa3ad6655d2a0890107bdfda0fb5fa34db996002b9028e9ac6bf6ee90e668ac7a4d94ec74cc010c6e6c36a45aa4cb136dc970952800785449158cfb09b382d552ff5588755ea", 0x96}], 0x3, 0x0, 0x0, 0x41}}], 0x2, 0xe6bc914adf286f77) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffff7e9}, 0xacf4ac9b71142229, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 03:58:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 65) 03:58:52 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:58:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x2, 0xffffffff, 0x7, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000ffff0000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB='./file0\x00']) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000140)={&(0x7f0000000040)=""/227, 0xe3}) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="5e3d4f741408efc59399ead460955c69eba299b1062ebe64d8c10f331588c1eff0e8ac211223d29551f70ae00f62088e9a034f48dd0e0eb36f129df118afff4ca3fc862d8a204112394e15d7ed423e717ecaef94d4786810785e933458ce8a79467e80f7f51df843", 0x68, r1) keyctl$chown(0x4, r5, 0x0, r2) [ 1787.850940] FAULT_INJECTION: forcing a failure. [ 1787.850940] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.852366] CPU: 0 PID: 10556 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1787.853246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1787.854269] Call Trace: [ 1787.854599] dump_stack+0x107/0x167 [ 1787.855049] should_fail.cold+0x5/0xa [ 1787.855525] ? lock_release+0x680/0x680 [ 1787.856018] ? skb_clone+0x14f/0x3d0 [ 1787.860502] should_failslab+0x5/0x20 [ 1787.860969] kmem_cache_alloc+0x5b/0x310 [ 1787.861463] ? mark_lock+0xf5/0x2df0 [ 1787.861924] skb_clone+0x14f/0x3d0 [ 1787.862362] dev_queue_xmit_nit+0x3a7/0xb00 [ 1787.862893] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1787.863456] dev_hard_start_xmit+0xab/0x6f0 [ 1787.863987] __dev_queue_xmit+0x179a/0x2690 [ 1787.864540] ? find_held_lock+0x2c/0x110 [ 1787.865041] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1787.865610] ? lock_downgrade+0x6d0/0x6d0 [ 1787.866115] ? lock_acquire+0x197/0x470 [ 1787.866607] ? ip_finish_output2+0x220/0x21f0 [ 1787.867158] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1787.867803] neigh_connected_output+0x382/0x4d0 03:58:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x1000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1787.868388] ip_finish_output2+0x6f1/0x21f0 [ 1787.876663] ? nf_hook_slow+0xfc/0x1e0 [ 1787.877140] ? ip_frag_next+0x9e0/0x9e0 [ 1787.877625] ? nf_hook+0x160/0x510 [ 1787.878058] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1787.878697] __ip_finish_output.part.0+0x5f3/0xb50 [ 1787.879306] ? ip_fragment.constprop.0+0x240/0x240 [ 1787.879902] ? nf_hook+0x510/0x510 [ 1787.880342] ip_output+0x2f7/0x600 [ 1787.880817] ip_send_skb+0xdd/0x260 [ 1787.881278] udp_send_skb+0x6da/0x11d0 [ 1787.881765] udp_sendmsg+0x1980/0x2160 [ 1787.882242] ? ip_frag_init+0x350/0x350 [ 1787.882731] ? udp_setsockopt+0xc0/0xc0 [ 1787.883213] ? mark_lock+0xf5/0x2df0 [ 1787.883671] ? lock_chain_count+0x20/0x20 [ 1787.884190] ? mark_lock+0xf5/0x2df0 [ 1787.884678] ? mark_lock+0xf5/0x2df0 [ 1787.885131] ? lock_chain_count+0x20/0x20 [ 1787.885636] ? lock_chain_count+0x20/0x20 [ 1787.886149] ? prep_new_page+0x16d/0x1d0 [ 1787.886660] ? lock_chain_count+0x20/0x20 [ 1787.887176] ? __lock_acquire+0x1657/0x5b00 [ 1787.887713] udpv6_sendmsg+0x1b30/0x2ad0 [ 1787.888211] ? __lock_acquire+0x1657/0x5b00 [ 1787.888785] ? udp_v6_push_pending_frames+0x360/0x360 [ 1787.889413] ? trace_hardirqs_on+0x5b/0x180 [ 1787.889954] ? lock_acquire+0x197/0x470 [ 1787.890446] ? find_held_lock+0x2c/0x110 [ 1787.890948] ? lock_acquire+0x197/0x470 [ 1787.891432] ? find_held_lock+0x2c/0x110 [ 1787.891933] ? __might_fault+0xd3/0x180 [ 1787.892436] ? lock_downgrade+0x6d0/0x6d0 [ 1787.892955] ? lock_chain_count+0x20/0x20 [ 1787.893464] ? sock_has_perm+0x1ea/0x280 [ 1787.893960] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1787.894604] ? __import_iovec+0x458/0x590 [ 1787.895112] ? udp_v6_push_pending_frames+0x360/0x360 [ 1787.895745] inet6_sendmsg+0x105/0x140 03:58:52 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x4, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x20000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2154d4, 0x0) [ 1787.896220] ? inet6_compat_ioctl+0x320/0x320 [ 1787.904626] __sock_sendmsg+0xf2/0x190 [ 1787.905102] ____sys_sendmsg+0x334/0x870 [ 1787.905599] ? sock_write_iter+0x3d0/0x3d0 [ 1787.906109] ? do_recvmmsg+0x6d0/0x6d0 [ 1787.906586] ? __lock_acquire+0x1657/0x5b00 [ 1787.907120] ___sys_sendmsg+0xf3/0x170 [ 1787.907595] ? sendmsg_copy_msghdr+0x160/0x160 [ 1787.908152] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1787.908830] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1787.909373] ? trace_hardirqs_on+0x5b/0x180 [ 1787.909910] ? lock_acquire+0x197/0x470 [ 1787.910394] ? find_held_lock+0x2c/0x110 [ 1787.910893] ? __might_fault+0xd3/0x180 [ 1787.911377] ? lock_downgrade+0x6d0/0x6d0 [ 1787.911886] ? io_schedule_timeout+0x140/0x140 [ 1787.912476] __sys_sendmmsg+0x195/0x470 [ 1787.912970] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1787.913495] ? lock_downgrade+0x6d0/0x6d0 [ 1787.914014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1787.914602] ? wait_for_completion_io+0x270/0x270 [ 1787.915189] ? rcu_read_lock_any_held+0x75/0xa0 [ 1787.915754] ? vfs_write+0x354/0xb10 [ 1787.916208] ? fput_many+0x2f/0x1a0 [ 1787.916670] ? ksys_write+0x1a9/0x260 [ 1787.917134] ? __ia32_sys_read+0xb0/0xb0 [ 1787.917635] __x64_sys_sendmmsg+0x99/0x100 [ 1787.918148] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1787.918774] do_syscall_64+0x33/0x40 [ 1787.919228] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1787.919857] RIP: 0033:0x7fec4fe72b19 [ 1787.920315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1787.922588] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1787.923519] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1787.924396] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1787.925271] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1787.926141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1787.927008] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:58:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x0, 0x0, @d}, 0x18, r1) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x2) sendfile(r5, r6, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r7}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) keyctl$chown(0x4, r4, r7, r2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) recvmsg$unix(r6, &(0x7f00000002c0)={&(0x7f0000000480), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000500)=""/121, 0x79}, {&(0x7f0000000580)=""/201, 0xc9}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x60) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r9, r10, 0x1000) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x4, r7}], {0x4, 0x7}, [{0x8, 0x1, r8}, {0x8, 0x1, 0xee01}, {0x8, 0x1, r10}], {0x10, 0x1}, {0x20, 0x4}}, 0x44, 0x0) [ 1787.950003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1787.955804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:58:52 executing program 1: mount$9p_fd(0x0, &(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000240), 0x300001, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYBLOB="ac7766646e6f3d", @ANYRESHEX, @ANYBLOB=',cache=fscache,mmap,msize=0x0000000000000005,cache=mmap,noextend,uname=system_u:object_r:unconfined_execmem_exec_t:s0\x00,access=client,func=FILE_CHECK,smackfshat=syz_tun\x00,fsname=system_u:object_r:unconfined_execmem_exec_t:s0\x00,fsmagic=0x0000000000000006,appraise_type=imasig,uid>', @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=s$*),obj_type=,\x00']) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0xfdef) fsetxattr$security_selinux(r0, 0x0, &(0x7f0000000140)='system_u:object_r:devtty_t:s0\x00', 0x1e, 0x0) openat(0xffffffffffffffff, 0x0, 0x185000, 0xea) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000080), 0x4) syz_io_uring_complete(r1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) socket$packet(0x11, 0x2, 0x300) r4 = signalfd4(r3, &(0x7f0000000180)={[0x9]}, 0x8, 0x180800) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 03:58:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:58:52 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000440)) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) r1 = dup(r0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffc, 0x0, 0x0) request_key(&(0x7f0000000400)='logon\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)='key_or_keyring:', 0x0) r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x6, 0x1, 0x2, 0xfe, 0x0, 0x8, 0x4288, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000180), 0xc}, 0x40400, 0x800, 0x7, 0x7, 0x5, 0x100, 0x1, 0x0, 0x100, 0x0, 0x8}, 0x0, 0x4, r1, 0x0) keyctl$revoke(0x3, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r6, 0x1, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}}, 0x0) unshare(0x48020200) 03:58:52 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 66) 03:58:52 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x100000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1788.093791] FAULT_INJECTION: forcing a failure. [ 1788.093791] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.095401] CPU: 1 PID: 10587 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1788.096248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1788.097269] Call Trace: [ 1788.097595] dump_stack+0x107/0x167 [ 1788.098041] should_fail.cold+0x5/0xa [ 1788.098509] ? __alloc_skb+0x6d/0x5b0 [ 1788.098977] should_failslab+0x5/0x20 [ 1788.099443] kmem_cache_alloc_node+0x55/0x330 [ 1788.099993] __alloc_skb+0x6d/0x5b0 [ 1788.100607] alloc_skb_with_frags+0x92/0x570 [ 1788.101180] ? lock_chain_count+0x20/0x20 [ 1788.101689] sock_alloc_send_pskb+0x7af/0x930 [ 1788.102243] ? sk_alloc+0x350/0x350 [ 1788.102692] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1788.103330] ? lock_downgrade+0x6d0/0x6d0 [ 1788.103842] __ip_append_data+0x1628/0x3310 [ 1788.104374] ? fib_select_path+0x293/0x1de0 [ 1788.104921] ? ip_frag_init+0x350/0x350 [ 1788.105412] ? ip_finish_output+0x330/0x330 [ 1788.105940] ? ip_route_output_key_hash+0x19c/0x340 [ 1788.106543] ? ipv4_mtu+0x1ed/0x2c0 [ 1788.106993] ip_make_skb+0x22a/0x2a0 [ 1788.107448] ? ip_frag_init+0x350/0x350 [ 1788.107934] ? ip_flush_pending_frames+0x20/0x20 [ 1788.108532] ? lock_downgrade+0x6d0/0x6d0 [ 1788.109046] ? xfrm_lookup_route+0x65/0x210 [ 1788.109575] udp_sendmsg+0x1940/0x2160 [ 1788.110054] ? ip_frag_init+0x350/0x350 [ 1788.110544] ? udp_setsockopt+0xc0/0xc0 [ 1788.111031] ? mark_lock+0xf5/0x2df0 [ 1788.111489] ? lock_chain_count+0x20/0x20 [ 1788.111992] ? mark_lock+0xf5/0x2df0 [ 1788.112463] ? mark_lock+0xf5/0x2df0 [ 1788.112921] ? lock_chain_count+0x20/0x20 [ 1788.113426] ? lock_chain_count+0x20/0x20 [ 1788.113931] ? prep_new_page+0x16d/0x1d0 [ 1788.114426] ? lock_chain_count+0x20/0x20 [ 1788.114939] ? __lock_acquire+0x1657/0x5b00 [ 1788.115467] udpv6_sendmsg+0x1b30/0x2ad0 [ 1788.115962] ? __lock_acquire+0x1657/0x5b00 [ 1788.116509] ? udp_v6_push_pending_frames+0x360/0x360 [ 1788.117135] ? trace_hardirqs_on+0x5b/0x180 [ 1788.117665] ? lock_acquire+0x197/0x470 [ 1788.118149] ? find_held_lock+0x2c/0x110 [ 1788.118648] ? lock_acquire+0x197/0x470 [ 1788.119137] ? find_held_lock+0x2c/0x110 [ 1788.119633] ? __might_fault+0xd3/0x180 [ 1788.120117] ? lock_downgrade+0x6d0/0x6d0 [ 1788.120637] ? lock_chain_count+0x20/0x20 [ 1788.121142] ? sock_has_perm+0x1ea/0x280 [ 1788.121635] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1788.122278] ? __import_iovec+0x458/0x590 [ 1788.122783] ? udp_v6_push_pending_frames+0x360/0x360 [ 1788.123413] inet6_sendmsg+0x105/0x140 [ 1788.123887] ? inet6_compat_ioctl+0x320/0x320 [ 1788.124452] __sock_sendmsg+0xf2/0x190 [ 1788.124927] ____sys_sendmsg+0x334/0x870 [ 1788.125424] ? sock_write_iter+0x3d0/0x3d0 [ 1788.125937] ? do_recvmmsg+0x6d0/0x6d0 [ 1788.126414] ? __lock_acquire+0x1657/0x5b00 [ 1788.126945] ___sys_sendmsg+0xf3/0x170 [ 1788.127419] ? sendmsg_copy_msghdr+0x160/0x160 [ 1788.127975] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1788.128625] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1788.129168] ? trace_hardirqs_on+0x5b/0x180 [ 1788.129697] ? lock_acquire+0x197/0x470 [ 1788.130180] ? find_held_lock+0x2c/0x110 [ 1788.130677] ? __might_fault+0xd3/0x180 [ 1788.131159] ? lock_downgrade+0x6d0/0x6d0 [ 1788.131668] ? io_schedule_timeout+0x140/0x140 [ 1788.132237] __sys_sendmmsg+0x195/0x470 [ 1788.132740] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1788.133264] ? lock_downgrade+0x6d0/0x6d0 [ 1788.133779] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1788.134367] ? wait_for_completion_io+0x270/0x270 [ 1788.134955] ? rcu_read_lock_any_held+0x75/0xa0 [ 1788.135529] ? vfs_write+0x354/0xb10 [ 1788.135982] ? fput_many+0x2f/0x1a0 [ 1788.136533] ? ksys_write+0x1a9/0x260 [ 1788.137038] ? __ia32_sys_read+0xb0/0xb0 [ 1788.137538] __x64_sys_sendmmsg+0x99/0x100 [ 1788.138060] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1788.138686] do_syscall_64+0x33/0x40 [ 1788.139140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1788.139766] RIP: 0033:0x7fec4fe72b19 [ 1788.140220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1788.142476] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1788.143402] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1788.144269] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1788.145149] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1788.146017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1788.146886] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:09 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) sendmsg$unix(r5, &(0x7f0000000500)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="7962980dd2dede3e7421526cc539f5a18a91f8667808e8b7194781080c93e7baa1c9988f7866d45270c32975eadce1957d8766ee0991198d927df1a4bba4e4c4a129da06d18d5fa12214cec309d253d049b6f40a9f70ff1f0a9cb68553a5af48cec592f09c7fa874312b8de6f7e34d979c099671f254fe4abcafd6026eb8491e3c15110491a3fa25847e511bafec29", 0x8f}, {&(0x7f00000001c0)="7d00fcb86925b43c6530b5900f6cb1ee183618e3eeb7d6896f22792d5cfa27b6941ab96978cb7c2f1055754cd324420ccd09ab45b2a8c798b8733172b6258b63eb6c0dfc26057751e9def8380697fccbc1910e766a6655ec6b6fce3693fa06ccd51301de6b8984a907c8955c", 0x6c}, {&(0x7f0000000100)="074d8971694a1af41035bb8ee87c7445fb050166f87d47959e10e7abe974063ff6", 0x21}, {&(0x7f00000003c0)="8f456d1b43921689d5bbca32a5cc339ad77d", 0x12}, {&(0x7f0000000400)="3d68b0d4a0ce0fd6314e359b4e7f29710a86fbd2da2412e758086d16b9421528ec2f7f1fa995c38861b7957f1e4fdf2561f4daf0e1439028ba3c2760a91be540577b1aa9a01c7ab66cccffa6527c7313c64bd3fd74fa3fc565ab5d5a13564b044cfa853ef5a30db997c3814bcc483491ba1776f00ca0045fa0e5c155fed6", 0x7e}], 0x5, 0x0, 0x0, 0x24000000}, 0x44094) connect$unix(r0, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 03:59:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x700, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:59:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 67) 03:59:09 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x204a, 0x0, 0x2, 0x4, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x30f5, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x80080, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) clone3(&(0x7f0000000ac0)={0x17412e500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup3(r4, r7, 0x80000) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000180)=@sco}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4007, @fd=r8, 0x7, 0x7fffffff, 0x3, 0x8, 0x0, {0x3}}, 0x3) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1d900526efa76883, 0x4004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0xc3) 03:59:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:59:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0xd, 0x10, r1, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) getegid() r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='syz', r3) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x200000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xc0, 0x7f, 0x4, 0x2, 0x0, 0x81, 0x82d2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_config_ext={0x5, 0xba7}, 0x0, 0x5, 0x4, 0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0x0, 0x0) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x48020200) [ 1805.023271] FAULT_INJECTION: forcing a failure. [ 1805.023271] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.024901] CPU: 0 PID: 10609 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1805.025823] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1805.026909] Call Trace: [ 1805.027263] dump_stack+0x107/0x167 [ 1805.027745] should_fail.cold+0x5/0xa [ 1805.028250] ? create_object.isra.0+0x3a/0xa20 [ 1805.028849] should_failslab+0x5/0x20 [ 1805.033384] kmem_cache_alloc+0x5b/0x310 [ 1805.033926] create_object.isra.0+0x3a/0xa20 [ 1805.034503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1805.035175] kmem_cache_alloc_node+0x169/0x330 [ 1805.035789] __alloc_skb+0x6d/0x5b0 [ 1805.036273] alloc_skb_with_frags+0x92/0x570 [ 1805.036850] ? lock_chain_count+0x20/0x20 [ 1805.037498] sock_alloc_send_pskb+0x7af/0x930 [ 1805.038148] ? sk_alloc+0x350/0x350 [ 1805.038635] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1805.039343] ? lock_downgrade+0x6d0/0x6d0 [ 1805.039918] __ip_append_data+0x1628/0x3310 [ 1805.040516] ? fib_select_path+0x293/0x1de0 [ 1805.041124] ? ip_frag_init+0x350/0x350 [ 1805.041655] ? ip_finish_output+0x330/0x330 [ 1805.042216] ? ip_route_output_key_hash+0x19c/0x340 [ 1805.042873] ? ipv4_mtu+0x1ed/0x2c0 [ 1805.043368] ip_make_skb+0x22a/0x2a0 [ 1805.043855] ? ip_frag_init+0x350/0x350 [ 1805.044373] ? ip_flush_pending_frames+0x20/0x20 [ 1805.045004] ? lock_downgrade+0x6d0/0x6d0 [ 1805.045578] ? xfrm_lookup_route+0x65/0x210 [ 1805.046153] udp_sendmsg+0x1940/0x2160 [ 1805.046670] ? ip_frag_init+0x350/0x350 [ 1805.047199] ? udp_setsockopt+0xc0/0xc0 [ 1805.047733] ? mark_lock+0xf5/0x2df0 [ 1805.048224] ? mark_lock+0xf5/0x2df0 [ 1805.048712] ? lock_chain_count+0x20/0x20 [ 1805.049267] ? lock_chain_count+0x20/0x20 [ 1805.049814] ? __lock_acquire+0x1657/0x5b00 [ 1805.050333] udpv6_sendmsg+0x1b30/0x2ad0 [ 1805.050862] ? __lock_acquire+0x1657/0x5b00 [ 1805.051436] ? udp_v6_push_pending_frames+0x360/0x360 [ 1805.052114] ? lock_acquire+0x197/0x470 [ 1805.052633] ? find_held_lock+0x2c/0x110 [ 1805.057200] ? lock_acquire+0x197/0x470 [ 1805.057722] ? find_held_lock+0x2c/0x110 [ 1805.058252] ? __might_fault+0xd3/0x180 [ 1805.058771] ? lock_downgrade+0x6d0/0x6d0 [ 1805.059315] ? lock_chain_count+0x20/0x20 [ 1805.059854] ? sock_has_perm+0x1ea/0x280 [ 1805.060386] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1805.061086] ? __import_iovec+0x458/0x590 [ 1805.061644] ? udp_v6_push_pending_frames+0x360/0x360 [ 1805.062319] inet6_sendmsg+0x105/0x140 [ 1805.062831] ? inet6_compat_ioctl+0x320/0x320 [ 1805.063421] __sock_sendmsg+0xf2/0x190 [ 1805.063941] ____sys_sendmsg+0x334/0x870 [ 1805.064489] ? sock_write_iter+0x3d0/0x3d0 [ 1805.065036] ? do_recvmmsg+0x6d0/0x6d0 [ 1805.065553] ? find_held_lock+0x2c/0x110 [ 1805.066093] ___sys_sendmsg+0xf3/0x170 [ 1805.066605] ? sendmsg_copy_msghdr+0x160/0x160 [ 1805.067188] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1805.067882] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1805.068472] ? trace_hardirqs_on+0x5b/0x180 [ 1805.069046] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1805.069635] ? finish_task_switch+0x126/0x5d0 [ 1805.070215] ? finish_task_switch+0xef/0x5d0 [ 1805.070781] ? __switch_to+0x572/0xf70 [ 1805.071291] ? __switch_to_asm+0x3a/0x60 [ 1805.071822] ? __switch_to_asm+0x34/0x60 [ 1805.072358] ? __schedule+0x82c/0x1ea0 [ 1805.072883] ? io_schedule_timeout+0x140/0x140 [ 1805.077525] __sys_sendmmsg+0x195/0x470 [ 1805.078062] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1805.078631] ? lock_downgrade+0x6d0/0x6d0 [ 1805.079202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1805.079835] ? wait_for_completion_io+0x270/0x270 [ 1805.080480] ? rcu_read_lock_any_held+0x75/0xa0 [ 1805.081108] ? vfs_write+0x354/0xb10 [ 1805.081612] ? fput_many+0x2f/0x1a0 [ 1805.082100] ? ksys_write+0x1a9/0x260 [ 1805.082609] ? __ia32_sys_read+0xb0/0xb0 [ 1805.083153] __x64_sys_sendmmsg+0x99/0x100 [ 1805.083716] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1805.084391] do_syscall_64+0x33/0x40 [ 1805.084885] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1805.085561] RIP: 0033:0x7fec4fe72b19 [ 1805.086046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.088429] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1805.089434] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1805.090362] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1805.091295] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.092230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1805.093180] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000080)=""/134, 0x86}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/69, 0x45}, {&(0x7f0000000280)=""/119, 0x77}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000640)=""/16, 0x10}], 0x9}}], 0x1, 0x2002, &(0x7f00000007c0)={r2, r3+10000000}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x700000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:09 executing program 2: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(0x0, 0x0, 0x21) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffeffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, &(0x7f0000000240)=0xc) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd, 0xfffffffffffffff9, 0x0, 0xfffff41d, 0x0, 0x0, {0x2}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="fffb00000001000000bf30d0ac000000c0027b000000000000000000000000000000000022fb1d7f22ba59fabe4d7cacabd89e100bb196f82830e09ecb0c0f17413355a506a2e42d728077ca76e10dc1d0da1299984501beb00cb755ae80994591471b63c6ebf6029dc329550ca760274d81d231384ad5b54bcf10c735ba7939fab7df23b3c617e4d203db7a476331519e0ae7212a56eb5c0d9da5e2d9a97b0d0052de2cd6129d4144c6939450f3ebdfe2748973b044e68aaf805f1fc9f1131d07f1bcb7d90a0000010000000000f14044e433ba16173d5bea35213f766cdeff9945ea1ed48d3495304690b8e53c24ff1854c1"], 0x1c}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x7, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x0, &(0x7f0000000440)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 03:59:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x800000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() keyctl$set_timeout(0xf, 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 68) 03:59:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$setlease(r3, 0x400, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r5, 0xfffffffffffffffc, r4, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r5}) [ 1805.310160] FAULT_INJECTION: forcing a failure. [ 1805.310160] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.311798] CPU: 0 PID: 10642 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1805.312694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1805.313787] Call Trace: [ 1805.314141] dump_stack+0x107/0x167 [ 1805.314624] should_fail.cold+0x5/0xa [ 1805.315132] should_failslab+0x5/0x20 [ 1805.315632] __kmalloc_node_track_caller+0x74/0x3b0 [ 1805.316291] ? alloc_skb_with_frags+0x92/0x570 [ 1805.316893] __alloc_skb+0xb1/0x5b0 [ 1805.317393] alloc_skb_with_frags+0x92/0x570 [ 1805.317974] ? lock_chain_count+0x20/0x20 [ 1805.318511] sock_alloc_send_pskb+0x7af/0x930 [ 1805.319098] ? sk_alloc+0x350/0x350 [ 1805.319583] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1805.325552] ? lock_downgrade+0x6d0/0x6d0 [ 1805.326126] __ip_append_data+0x1628/0x3310 [ 1805.326707] ? fib_select_path+0x293/0x1de0 [ 1805.327287] ? ip_frag_init+0x350/0x350 [ 1805.327827] ? ip_finish_output+0x330/0x330 [ 1805.328406] ? ip_route_output_key_hash+0x19c/0x340 [ 1805.329088] ? ipv4_mtu+0x1ed/0x2c0 [ 1805.329579] ip_make_skb+0x22a/0x2a0 [ 1805.330089] ? ip_frag_init+0x350/0x350 [ 1805.330620] ? ip_flush_pending_frames+0x20/0x20 [ 1805.331266] ? lock_downgrade+0x6d0/0x6d0 [ 1805.331812] ? xfrm_lookup_route+0x65/0x210 [ 1805.332407] udp_sendmsg+0x1940/0x2160 [ 1805.332925] ? ip_frag_init+0x350/0x350 [ 1805.333491] ? udp_setsockopt+0xc0/0xc0 [ 1805.334008] ? mark_lock+0xf5/0x2df0 [ 1805.334521] ? lock_chain_count+0x20/0x20 [ 1805.335068] ? mark_lock+0xf5/0x2df0 [ 1805.335572] ? mark_lock+0xf5/0x2df0 [ 1805.336069] ? lock_chain_count+0x20/0x20 [ 1805.336622] ? lock_chain_count+0x20/0x20 [ 1805.337195] ? prep_new_page+0x16d/0x1d0 [ 1805.337741] ? lock_chain_count+0x20/0x20 [ 1805.338308] ? __lock_acquire+0x1657/0x5b00 [ 1805.338903] udpv6_sendmsg+0x1b30/0x2ad0 [ 1805.339452] ? __lock_acquire+0x1657/0x5b00 [ 1805.340051] ? udp_v6_push_pending_frames+0x360/0x360 [ 1805.340723] ? trace_hardirqs_on+0x5b/0x180 [ 1805.341334] ? lock_acquire+0x197/0x470 [ 1805.341857] ? find_held_lock+0x2c/0x110 [ 1805.342420] ? lock_acquire+0x197/0x470 [ 1805.342939] ? find_held_lock+0x2c/0x110 [ 1805.343476] ? __might_fault+0xd3/0x180 [ 1805.343992] ? lock_downgrade+0x6d0/0x6d0 [ 1805.344534] ? lock_chain_count+0x20/0x20 [ 1805.345088] ? sock_has_perm+0x1ea/0x280 [ 1805.345585] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1805.346218] ? __import_iovec+0x458/0x590 [ 1805.346720] ? udp_v6_push_pending_frames+0x360/0x360 [ 1805.347343] inet6_sendmsg+0x105/0x140 [ 1805.347814] ? inet6_compat_ioctl+0x320/0x320 [ 1805.348354] __sock_sendmsg+0xf2/0x190 [ 1805.348826] ____sys_sendmsg+0x334/0x870 [ 1805.349370] ? sock_write_iter+0x3d0/0x3d0 [ 1805.349921] ? do_recvmmsg+0x6d0/0x6d0 [ 1805.350432] ? __lock_acquire+0x1657/0x5b00 [ 1805.351007] ___sys_sendmsg+0xf3/0x170 [ 1805.351522] ? sendmsg_copy_msghdr+0x160/0x160 [ 1805.352120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1805.352805] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1805.353406] ? trace_hardirqs_on+0x5b/0x180 [ 1805.353981] ? lock_acquire+0x197/0x470 [ 1805.354500] ? find_held_lock+0x2c/0x110 [ 1805.355034] ? __might_fault+0xd3/0x180 [ 1805.355553] ? lock_downgrade+0x6d0/0x6d0 [ 1805.356095] ? io_schedule_timeout+0x140/0x140 [ 1805.356709] __sys_sendmmsg+0x195/0x470 [ 1805.357249] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1805.357822] ? lock_downgrade+0x6d0/0x6d0 [ 1805.358376] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1805.359015] ? wait_for_completion_io+0x270/0x270 [ 1805.359655] ? rcu_read_lock_any_held+0x75/0xa0 [ 1805.360262] ? vfs_write+0x354/0xb10 [ 1805.360750] ? fput_many+0x2f/0x1a0 [ 1805.361266] ? ksys_write+0x1a9/0x260 [ 1805.361768] ? __ia32_sys_read+0xb0/0xb0 [ 1805.362306] __x64_sys_sendmmsg+0x99/0x100 [ 1805.362857] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1805.363541] do_syscall_64+0x33/0x40 [ 1805.364036] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1805.364706] RIP: 0033:0x7fec4fe72b19 [ 1805.369225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1805.371565] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1805.372566] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1805.373503] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1805.374365] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1805.375228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1805.376085] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x900000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:24 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 03:59:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:59:24 executing program 2: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006a00274e00000000006a79d02dbe2578f32ff640f542f202"], 0x1c}}, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600"}, 0xffffff93, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(0x0, 0x0, &(0x7f00000006c0)='{{\x80\x00\\+\x00', 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain) request_key(0x0, &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) add_key(&(0x7f0000000400)='keyring\x00', 0x0, &(0x7f00000015c0)="04931c01473d9ba2e279ab76b7fd539903fb409bd6ad3ff89c90ba13d86bc6049785de426a8f8ccf23d4cf239237ef6af357ff95b1ade47792f8cfe923b83c3aeae552f2b405205817cfbf5bb6d03915df2fd840adcb5fd684893156407b66c8a2e38ce2495582211bdf5fc667ea872554e7f26f838954196fbc2466eaa4b2eafc5d838f8bcaa01133cbf024f0ae30a1fbd9a7791a908680e37ccc5d554eb2a34f22dba8167d0a9d6984ac00"/183, 0xb7, 0xfffffffffffffffe) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x20, 0x6, 0x4, 0x42, 0x0, 0xfffff80000000000, 0x48000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xecd7, 0x1, @perf_bp, 0xa614, 0xffffffffffffff8f, 0x0, 0x9, 0x7, 0x0, 0xffff, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0x3, r2, 0x8) socket$inet(0x2, 0xa, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:59:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(r0, 0x27b, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x42080, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6c) 03:59:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 69) [ 1819.492598] FAULT_INJECTION: forcing a failure. 03:59:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @auto=[0x61, 0x0, 0x39, 0x65, 0x39, 0x65, 0x30, 0x39, 0x39, 0x64, 0x66, 0x35, 0x34, 0x30, 0x62, 0x30]}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d9fa459baefad59034e2568bb42b87ae631f7a548867a29f29fd1637ddad658a70215c7ab7c00", 0x35}, 0x48, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xffffffffffffff50, 0x7a, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) recvmmsg$unix(r4, &(0x7f0000004d00)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/56, 0x38}], 0x6}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/71, 0x47}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/214, 0xd6}, {&(0x7f0000000980)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/201, 0xc9}], 0x9, &(0x7f0000002e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000000a00)}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/186, 0xba}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x4, &(0x7f0000004f40)=ANY=[@ANYBLOB="180000000000000001000002655ef8009b534221a27edaea350facfce7b276c45db4b1aead3c3fec39d5462503fcf51e788743eade73fd2f99aa6fd75bccebc60711552188d5ba6a52135011879174070bc2638058b0cc9b64063d1870b4f56a2e5ce9e59c3aa47df5d2159096239e6fd4756a6147215e5e5a685bf9657c720f691fcaf8db363e684ac0c4f31af8c86749a00bbd6d26d2687a5d7a60c73c112404bf170b70daf6b0cf2c0d4b7fbeb086942e36a9d1f3ea9faac0931530deb6179a7a89f03f8970e7b05c350b71b48d", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004180)=""/234, 0xea}, {&(0x7f0000004280)=""/94, 0x5e}, {&(0x7f0000004300)=""/201, 0xc9}, {&(0x7f0000004400)=""/36, 0x24}, {&(0x7f0000004440)=""/175, 0xaf}, {&(0x7f0000004500)=""/232, 0xe8}, {&(0x7f0000004600)=""/143, 0x8f}], 0x7, &(0x7f0000004740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/67, 0x43}], 0x1}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004980)=""/184, 0xb8}, {&(0x7f0000004a40)=""/113, 0x71}, {&(0x7f0000004ac0)=""/124, 0x7c}, {&(0x7f0000004b40)=""/144, 0x90}, {&(0x7f0000004c00)=""/37, 0x25}], 0x5, &(0x7f0000004cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x6, 0x42, 0x0) stat(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r7, r8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x900, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1819.492598] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.498390] CPU: 1 PID: 10655 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1819.499238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1819.500248] Call Trace: [ 1819.500575] dump_stack+0x107/0x167 [ 1819.501021] should_fail.cold+0x5/0xa [ 1819.501490] ? create_object.isra.0+0x3a/0xa20 [ 1819.502067] should_failslab+0x5/0x20 [ 1819.502535] kmem_cache_alloc+0x5b/0x310 [ 1819.503034] create_object.isra.0+0x3a/0xa20 [ 1819.503569] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1819.504193] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1819.504813] ? alloc_skb_with_frags+0x92/0x570 [ 1819.505376] __alloc_skb+0xb1/0x5b0 [ 1819.505843] alloc_skb_with_frags+0x92/0x570 [ 1819.506385] ? lock_chain_count+0x20/0x20 [ 1819.506894] sock_alloc_send_pskb+0x7af/0x930 [ 1819.507447] ? sk_alloc+0x350/0x350 [ 1819.507894] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1819.508535] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1819.509196] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1819.509848] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1819.510515] __ip_append_data+0x1628/0x3310 [ 1819.511049] ? fib_select_path+0x293/0x1de0 [ 1819.511578] ? ip_frag_init+0x350/0x350 [ 1819.512070] ? ip_finish_output+0x330/0x330 [ 1819.512597] ? ip_route_output_key_hash+0x19c/0x340 [ 1819.513204] ? ipv4_mtu+0x1ed/0x2c0 [ 1819.513668] ip_make_skb+0x22a/0x2a0 [ 1819.514128] ? ip_frag_init+0x350/0x350 [ 1819.514618] ? ip_flush_pending_frames+0x20/0x20 [ 1819.515202] ? lock_downgrade+0x6d0/0x6d0 [ 1819.515714] ? xfrm_lookup_route+0x65/0x210 [ 1819.516243] udp_sendmsg+0x1940/0x2160 [ 1819.516724] ? ip_frag_init+0x350/0x350 [ 1819.517216] ? udp_setsockopt+0xc0/0xc0 [ 1819.521728] ? mark_lock+0xf5/0x2df0 [ 1819.522186] ? lock_chain_count+0x20/0x20 [ 1819.522689] ? mark_lock+0xf5/0x2df0 [ 1819.523142] ? mark_lock+0xf5/0x2df0 [ 1819.523593] ? lock_chain_count+0x20/0x20 [ 1819.524094] ? lock_chain_count+0x20/0x20 [ 1819.524599] ? prep_new_page+0x16d/0x1d0 [ 1819.525092] ? lock_chain_count+0x20/0x20 [ 1819.525612] ? __lock_acquire+0x1657/0x5b00 [ 1819.526146] udpv6_sendmsg+0x1b30/0x2ad0 [ 1819.526639] ? __lock_acquire+0x1657/0x5b00 [ 1819.527169] ? udp_v6_push_pending_frames+0x360/0x360 [ 1819.527794] ? trace_hardirqs_on+0x5b/0x180 [ 1819.528323] ? lock_acquire+0x197/0x470 [ 1819.528805] ? find_held_lock+0x2c/0x110 [ 1819.529301] ? lock_acquire+0x197/0x470 [ 1819.529798] ? find_held_lock+0x2c/0x110 [ 1819.530293] ? __might_fault+0xd3/0x180 [ 1819.530774] ? lock_downgrade+0x6d0/0x6d0 [ 1819.531280] ? sock_has_perm+0x1ea/0x280 [ 1819.531773] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1819.532410] ? __import_iovec+0x458/0x590 [ 1819.532913] ? udp_v6_push_pending_frames+0x360/0x360 [ 1819.533540] inet6_sendmsg+0x105/0x140 [ 1819.534068] ? inet6_compat_ioctl+0x320/0x320 [ 1819.534612] __sock_sendmsg+0xf2/0x190 [ 1819.535103] ____sys_sendmsg+0x334/0x870 [ 1819.535597] ? sock_write_iter+0x3d0/0x3d0 [ 1819.536131] ? do_recvmmsg+0x6d0/0x6d0 [ 1819.536666] ? __lock_acquire+0x1657/0x5b00 [ 1819.537274] ___sys_sendmsg+0xf3/0x170 [ 1819.537800] ? sendmsg_copy_msghdr+0x160/0x160 [ 1819.538352] ? vmacache_find+0x55/0x2a0 [ 1819.538841] ? lock_acquire+0x197/0x470 [ 1819.539322] ? find_held_lock+0x2c/0x110 [ 1819.539816] ? __might_fault+0xd3/0x180 [ 1819.540298] ? lock_downgrade+0x6d0/0x6d0 [ 1819.540799] ? asm_exc_page_fault+0x1e/0x30 [ 1819.541334] __sys_sendmmsg+0x195/0x470 [ 1819.545865] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1819.546389] ? lock_downgrade+0x6d0/0x6d0 [ 1819.546901] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1819.547486] ? wait_for_completion_io+0x270/0x270 [ 1819.548073] ? rcu_read_lock_any_held+0x75/0xa0 [ 1819.548634] ? vfs_write+0x354/0xb10 [ 1819.549086] ? fput_many+0x2f/0x1a0 [ 1819.549529] ? ksys_write+0x1a9/0x260 [ 1819.550054] ? __ia32_sys_read+0xb0/0xb0 [ 1819.550559] __x64_sys_sendmmsg+0x99/0x100 [ 1819.551073] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1819.551696] do_syscall_64+0x33/0x40 [ 1819.552149] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1819.552769] RIP: 0033:0x7fec4fe72b19 [ 1819.553222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1819.555469] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1819.556394] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1819.557257] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1819.558137] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1819.559002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1819.559867] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1819.563255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1819.593295] 9pnet: Insufficient options for proto=fd 03:59:24 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20130, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xa00000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1819.619292] 9pnet: Insufficient options for proto=fd 03:59:24 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) r1 = request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\x00', 0xfffffffffffffffc) add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @auto=[0x61, 0x0, 0x39, 0x65, 0x39, 0x65, 0x30, 0x39, 0x39, 0x64, 0x66, 0x35, 0x34, 0x30, 0x62, 0x30]}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d9fa459baefad59034e2568bb42b87ae631f7a548867a29f29fd1637ddad658a70215c7ab7c00", 0x35}, 0x48, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xffffffffffffff50, 0x7a, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) recvmmsg$unix(r4, &(0x7f0000004d00)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000480)=""/195, 0xc3}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/34, 0x22}, {&(0x7f0000000400)=""/56, 0x38}], 0x6}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000680)=""/58, 0x3a}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/71, 0x47}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/251, 0xfb}, {&(0x7f0000001ac0)=""/214, 0xd6}, {&(0x7f0000000980)=""/74, 0x4a}, {&(0x7f0000001bc0)=""/201, 0xc9}], 0x9, &(0x7f0000002e00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000004040)=[{&(0x7f0000000a00)}, {&(0x7f0000002f00)=""/71, 0x47}, {&(0x7f0000002f80)=""/186, 0xba}, {&(0x7f0000003040)=""/4096, 0x1000}], 0x4, &(0x7f0000004f40)=ANY=[@ANYBLOB="180000000000000001000002655ef8009b534221a27edaea350facfce7b276c45db4b1aead3c3fec39d5462503fcf51e788743eade73fd2f99aa6fd75bccebc60711552188d5ba6a52135011879174070bc2638058b0cc9b64063d1870b4f56a2e5ce9e59c3aa47df5d2159096239e6fd4756a6147215e5e5a685bf9657c720f691fcaf8db363e684ac0c4f31af8c86749a00bbd6d26d2687a5d7a60c73c112404bf170b70daf6b0cf2c0d4b7fbeb086942e36a9d1f3ea9faac0931530deb6179a7a89f03f8970e7b05c350b71b48d", @ANYRES32, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58}}, {{&(0x7f0000004100)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004180)=""/234, 0xea}, {&(0x7f0000004280)=""/94, 0x5e}, {&(0x7f0000004300)=""/201, 0xc9}, {&(0x7f0000004400)=""/36, 0x24}, {&(0x7f0000004440)=""/175, 0xaf}, {&(0x7f0000004500)=""/232, 0xe8}, {&(0x7f0000004600)=""/143, 0x8f}], 0x7, &(0x7f0000004740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000004840)=""/67, 0x43}], 0x1}}, {{&(0x7f0000004900)=@abs, 0x6e, &(0x7f0000004c40)=[{&(0x7f0000004980)=""/184, 0xb8}, {&(0x7f0000004a40)=""/113, 0x71}, {&(0x7f0000004ac0)=""/124, 0x7c}, {&(0x7f0000004b40)=""/144, 0x90}, {&(0x7f0000004c00)=""/37, 0x25}], 0x5, &(0x7f0000004cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x6, 0x42, 0x0) stat(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r5, r7, r8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)={0x1, 0x0, [0x0]}) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:24 executing program 2: syz_open_dev$sg(0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x80, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x60010143, &(0x7f0000004540)={0x0, 0x989680}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x55, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff5}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) 03:59:24 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 03:59:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='user\x00', r1) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x1, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=r5, @ANYRESOCT=r4]) 03:59:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xb00000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1819.685307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.694353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.698818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.702216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:59:24 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0092c802ea000300f41100"/26], 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="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"], 0x14}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_gettime(0x0, &(0x7f00000003c0)) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="7601addc9b7b0b884139f55865d38066e68f4205000000000000008bc31f58bc69efb0aa61adcdaa918c00000000000000e810800fd165"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:59:24 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x73, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x9}, 0x0, 0x0, 0x5}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x1d) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r2, 0x800000000081) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x7, 0xff, 0x1, 0x0, 0x8, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x1f, 0x94ef}, 0x40088, 0x8, 0x7ff, 0x8, 0x5, 0x5, 0x3f, 0x0, 0x2, 0x0, 0x9}, r2, 0x0, r0, 0x8) [ 1819.717896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.720306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.722297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1819.724244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:59:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x4d, 0x1, 0x20, 0x0, 0x1, 0x0, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfa, 0x2, @perf_config_ext={0x400, 0x80}, 0x1402, 0x5e8, 0x0, 0x1, 0x400, 0x8, 0x7f, 0x0, 0x9, 0x0, 0xffffffff00000000}, 0x0, 0x5, r2, 0x3) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:59:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x14403, 0x0) 03:59:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x1000000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 70) 03:59:24 executing program 2: fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r0, 0x800000000081) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x4, 0xf9, 0x1, 0x0, 0x0, 0x101, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_config_ext={0x1000, 0x5}, 0x410, 0x7, 0x9, 0x9, 0x10000, 0xe16, 0x9, 0x0, 0x7ff, 0x0, 0xbd}, r0, 0x3, 0xffffffffffffffff, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x100000001) [ 1819.915825] FAULT_INJECTION: forcing a failure. [ 1819.915825] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.917224] CPU: 1 PID: 10727 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1819.918083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1819.919091] Call Trace: [ 1819.919419] dump_stack+0x107/0x167 [ 1819.919865] should_fail.cold+0x5/0xa [ 1819.920333] ? lock_release+0x680/0x680 [ 1819.920820] ? skb_clone+0x14f/0x3d0 [ 1819.921277] should_failslab+0x5/0x20 [ 1819.921785] kmem_cache_alloc+0x5b/0x310 [ 1819.922282] ? mark_lock+0xf5/0x2df0 [ 1819.922741] skb_clone+0x14f/0x3d0 [ 1819.923179] dev_queue_xmit_nit+0x3a7/0xb00 [ 1819.923708] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1819.924270] dev_hard_start_xmit+0xab/0x6f0 [ 1819.924802] __dev_queue_xmit+0x179a/0x2690 [ 1819.925330] ? find_held_lock+0x2c/0x110 [ 1819.926154] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1819.927310] ? lock_downgrade+0x6d0/0x6d0 [ 1819.928325] ? lock_acquire+0x197/0x470 [ 1819.929294] ? ip_finish_output2+0x220/0x21f0 [ 1819.930009] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1819.930654] neigh_connected_output+0x382/0x4d0 [ 1819.931231] ip_finish_output2+0x6f1/0x21f0 [ 1819.931759] ? nf_hook_slow+0xfc/0x1e0 [ 1819.932235] ? ip_frag_next+0x9e0/0x9e0 [ 1819.932721] ? nf_hook+0x160/0x510 [ 1819.933156] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1819.933821] __ip_finish_output.part.0+0x5f3/0xb50 [ 1819.934424] ? ip_fragment.constprop.0+0x240/0x240 [ 1819.935022] ? nf_hook+0x510/0x510 [ 1819.935465] ip_output+0x2f7/0x600 [ 1819.935904] ip_send_skb+0xdd/0x260 [ 1819.936354] udp_send_skb+0x6da/0x11d0 [ 1819.936838] udp_sendmsg+0x1980/0x2160 [ 1819.937317] ? ip_frag_init+0x350/0x350 [ 1819.938152] ? udp_setsockopt+0xc0/0xc0 [ 1819.939148] ? mark_lock+0xf5/0x2df0 [ 1819.940076] ? mark_lock+0xf5/0x2df0 [ 1819.940988] ? lock_chain_count+0x20/0x20 [ 1819.942051] ? lock_chain_count+0x20/0x20 [ 1819.943102] ? __lock_acquire+0x1657/0x5b00 [ 1819.944179] udpv6_sendmsg+0x1b30/0x2ad0 [ 1819.945176] ? __lock_acquire+0x1657/0x5b00 [ 1819.946290] ? udp_v6_push_pending_frames+0x360/0x360 [ 1819.947582] ? lock_acquire+0x197/0x470 [ 1819.948566] ? find_held_lock+0x2c/0x110 [ 1819.949561] ? lock_acquire+0x197/0x470 [ 1819.950580] ? find_held_lock+0x2c/0x110 [ 1819.951592] ? __might_fault+0xd3/0x180 [ 1819.952576] ? lock_downgrade+0x6d0/0x6d0 [ 1819.953591] ? sock_has_perm+0x1ea/0x280 [ 1819.954774] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1819.956292] ? __import_iovec+0x458/0x590 [ 1819.957477] ? udp_v6_push_pending_frames+0x360/0x360 [ 1819.958823] inet6_sendmsg+0x105/0x140 [ 1819.959793] ? inet6_compat_ioctl+0x320/0x320 [ 1819.960900] __sock_sendmsg+0xf2/0x190 [ 1819.961893] ____sys_sendmsg+0x334/0x870 [ 1819.962904] ? sock_write_iter+0x3d0/0x3d0 [ 1819.963956] ? do_recvmmsg+0x6d0/0x6d0 [ 1819.964913] ? __lock_acquire+0x1657/0x5b00 [ 1819.966006] ___sys_sendmsg+0xf3/0x170 [ 1819.966975] ? sendmsg_copy_msghdr+0x160/0x160 [ 1819.968106] ? vmacache_find+0x55/0x2a0 [ 1819.969090] ? lock_acquire+0x197/0x470 [ 1819.969852] ? find_held_lock+0x2c/0x110 [ 1819.970354] ? __might_fault+0xd3/0x180 [ 1819.970842] ? lock_downgrade+0x6d0/0x6d0 [ 1819.971347] ? asm_exc_page_fault+0x1e/0x30 [ 1819.971887] __sys_sendmmsg+0x195/0x470 [ 1819.972378] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1819.972905] ? lock_downgrade+0x6d0/0x6d0 [ 1819.973424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1819.974613] ? wait_for_completion_io+0x270/0x270 [ 1819.975817] ? rcu_read_lock_any_held+0x75/0xa0 [ 1819.976968] ? vfs_write+0x354/0xb10 [ 1819.977905] ? fput_many+0x2f/0x1a0 [ 1819.978809] ? ksys_write+0x1a9/0x260 [ 1819.979754] ? __ia32_sys_read+0xb0/0xb0 [ 1819.980763] __x64_sys_sendmmsg+0x99/0x100 [ 1819.981717] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1819.982346] do_syscall_64+0x33/0x40 [ 1819.982802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1819.983429] RIP: 0033:0x7fec4fe72b19 [ 1819.983888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1819.986176] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1819.987109] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1819.987980] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1819.988851] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1819.989768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1819.990640] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:25 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa00, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:59:25 executing program 0: r0 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x3, 0x7f, 0x1, 0x20, 0x0, 0x1, 0x8000, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3a9c, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x204, 0x4, 0x20, 0x4, 0x8, 0xddc, 0xfff, 0x0, 0x9, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r3, 0xfffffffffffffffc, r2, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c", 0x10}, 0x48, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) getegid() add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000000)="a3", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000ac0)="74cbbf0661140076331bcc1aee89f8c7952ae4e4e80a80e9318fa08b4c795da9dedf033ff762a169a92cf1bc6a3acc889d4d52dab69491968aa95a0eece86ea75b500f7f92e793a223db79bdede2490f3e69af09ed8d296924c40b341d10ea1e52a53b2f3fe5ee781e1b79173cbbe07894e60443b051ab8eae2ec2d3cbb9cab03b41ef579e3bcd96a7005f02f0c8c374d380b1b00ac961301deaf316fe092356c0a7f68dff2cfbb25933186bc47e5b69327a1e982501d452ec99f7436c7ef0c08be4780f20027d72c4d3502d3fa9e4b942b0684fe874bb7ea74d65ce5b5b0e5d7c3580176e41d00378c2203aadc6798ca78cda20276a48759d143086e99b707b01bf39bd9ebefe7accc051208c2070706a26c1dfa3366be84187c40c032beceda9d4192a20c0febe90691b91f7395479af9ed1c7fb8b558ef71f76cc62bbb94f43c6b2bfae53f29439e8ad81e1b3d6ac20164d6f1a4bcd010a28bd6755689ee0da311f9ad44c3470e1cd13acd2c28780c9048f4b3527eba35e829d5fc0df7ec99ab19a707dd8f2237ba748b9ab36d1474c8b9d02ab87e5148200d7b6cbe25e5e168f2f9ebf9d24c66ab65ae3f454ecd2a64df449ac72343b6d28c340b905230e50d143b3b0ff39e9ee4603872c9dd5b537a59fd9f588d176a91ada1d9855376e04141306c4af0c810f7a649fb4a61a5d21fde8da68264180895f817c11cefbc7ecf46219da0442ec696befd6a0449cc0500944462c40f39b38990353331cbcf941cd78754f4271435f8b77991e9c1b8fba33999c77a3d8ecc67810f9320904bb1650ad3e28bb67b490258105bbc56bf2bad67a42e9976950089655f518f71d4a77df1dae831ac1011cd642acf04d30340bbe1607a55435650082595f26306b665fcc4487aed69095cf503f08998c671b17ed8c51050f6f7dcdd6b634a219dd2d985b0b2fe93e2a08effcbec49815f19cc7c5981d2be806488b75eb77f3de733e78e27d342f9bea5257e740fffb9a7db7f55515f4045c8ee718b01ace40f74d10f727fd3e14c31f7877081ccae65cca0beeb6c51ecf25df2a6c039062a8d8fddb05188ae70764d89bb4a2ca45fa6c382d420b8d871aaf572e8661ae5c55900528a4c8196448aab3b76e89c642fc17d6feaaa91d60e90ac01990c55ad3f52cf998c43b4a07dd47a750aee6b3bdc0ab95ac47f171d5a8713005c8c1ac6ba02c406db1f4931800e81135105ab6e1158868877139bec1e4ef030388e1e345d8dd3bda0924e936c7a313c6ce1c1351997baa1b0531934012046588b4451da2c353dcaae1caac3ba5f7a3a8657a5797e779c6fe44e6ca257bb73f3430ad63132d37f6cccee7606d695f59e8169e22bd397b5f3c42082db35b1a3e49d5f54600de7a6318698fc592cdf6800a8f616ac605123f999c9529a9c6fad7a2794fbee8ad44bae09a1e5484bcf4ec4ae0c6e685b794aba429fa62365a3b9f45c477e2844a1d7b88fe85be3d875498457589e8dbf92b463cce44a20eed19215cd248a65f983486db12beb0e10ff68ccf93f4640e7a108a1b95ad16b32e1fc830af2f63c58cbb7382a0a90a4bdaea5e9970b8984cb03dec9176f53ac059f4834acf13ade9fed182a955e9ae0d035632638e007b02e1f36cf60ea2c160d9a090da3fde15465a9d36c16bb26fbcfb7ab8f5ae354bd8672f4596815c0c96d20e47ab3eba6f708e05c33edd62944e403db85c0b735953615e6b018ae5ef05c29fc4596a70fd48eea5e1bf08878fdc8aebb00e9914fde08d46957a05f5e0cba13c734de045950ddfe23fd8f4a7c413e7f003c69e381457fe9ee182a5333b7f6dc33d77bfcc3dda642ad32386a62e91d2458ef62c0576de1ec7d570dd1479c299163bb1f68f5828d3463b3e64cc82b7d10d929965ee138dbb623f7591d7dd7f07ef20f8d224570de777eb90331f951d1706bb7cd279755d32c4e8b58d2d3125fa3219e4fb1f14eddcb565915a905a836b0cacf2d39556aa01d4cf2c5373499818c36fc228e8d4702edb8b313159aa9fa880f03fc1f39cd6f1f04a7db2dc88172d2b7f81b75aa1ec04a79cf68b14750c7fe4435805f59c85f8f68d35779c23793d4340413defb831319d387526731bb7a9d66693767ec196c399c0e6f09cc7a2e0ef746454b7b6c03369f07744b23185c344e5d9c838dc7d86a6e084bebecd40cb26253473024c428ff46ab06906a0a5dfc6ab5316e1897755c467162cb45989ac108e64eb7305555881e03e00a3a646b91920ca1261555d3b13dfd8d38d7548b1a9b00ce924d7c0d27542da94e55b9973f33901bfb9aa0fa2921b148a9556ef59b74b80f4b5fdbf7bad4de73b4c6bb97993778e6ee3fb0d1923f233d5fc9f479d8c697e3b7af5eedf87afe1eb0354598ea49202b78df74e80b8f620de470cd8bf70b19f6e24b928926573eb27bd2863028cc5f0394fa65129f13913ecc6d5ce01032e136cb3de9b577b9fe31e26aa26cf6fa7cf41b8f19a249d934617e7d4f55739b0a6718bc41c34f95a2c996058c21d99e5229a9f8f1ef0780071d3514903930bf0239438a96b834ae5bee6530c0e7d838230a7cc56ada0fbf5f595580c6244a42016c4142a781c36836f9dbc90e4755d1e2878e953939beefce534e16f47832d670110a86e35407bebd48098a15c39b56f4f45fd7bd55fb4f8e80ed065c95cb06bf9cdfd930e3a76b6a2bab8272834e7ad78856a931c87511e2bfbb40f05cfb5446e1ec70cce53556156ff58b371553025cf6d4e07b0511ffd41b9c8835b49ae9d65260f9adfc56c482a40736524de7aec8419e382ebed7a1a001959e223951c70c0104d3d83068f8293a3464940dbadf501a8c25ee07026a8f35668bec2e93e32cfb815292076b0cec59fc2877c76477971990e62b60d7f770c09227786ee9d1a9c7d3b8b94c68d6f8b86495ec8e7d763f61930bda261107f5c5a09cc4951bec5c02060fe874ad8701c69b10fb538aa37969485abed11dd1d740c645e71d4eac172df2faa87fc8c6541986666328c68062f3aed26f5dc20ffa9924dd86c835eeae351913f0bc9ca6462efae754490070481db5774e8d2a18ce2571442d439c34b99eb8bc0ec9e67901fcfa2fbc81fef8057cf732447e1322d34e475a1651a053c0ef3440fd92694fa92261561f74e83af5d1ed01e3d72e180d3c09762bedb2afae03917a3fe993a62554c84125cb60dabdfa40b5a56a7f8c3588f438ee6cc452b317b9db13e681f0893f6aac24c677c41e95db064aad86cd1ad0dac9a46ec27e7e7955336f41b806a9fc931857a13b38d54ec248db485ffa05c525b175fcb16eacfaaf7cb141d01f39e8205309cb9f88e077911fa2324de1f87043da666efe950a92259a2dfe76b09b6d464277c0aba0d5c126f4e9afffcfd3993e169fa3d7d8c9a68e358a93fc1dfe5fd9f5c56f0068f91b0a73ee006bfbffabafb11b9e9b11dc89505cf911e56112a9ee7f8b83158ebc4823f1e5cda9a4dc5003ee97ff586f190ff3da965c2cd06adcd85d1db1a8a54810c6f1a6e8d1e7d08628bdebea8b97c7d5ab1df59b328843b8ce7bf97a689a3804bcc332a4fb8655d0a5c89e112fb7bc9a6b1daaeab094ec3b142b4e416f2149980834e025d6561c15b79050bfb05e268f8f88f29162197122072d079c0d9ab00cb183e236f368083f8ac551b9684749ea129a79344089244a39c9cf30dc018939208d73b3bc5f5490640c71adbebc8461da23170d3f3a3be498bba1cae685aeab7850faf5f5e7812d94ceb151925568a989d0414276f888482f1a951d2a173a5cb2685bab9bf1d39efc9e9ad14b5c6b0f2ae2e89b976db28abcab04a642148b24e40f3e16e3bca1d8efd58cda2f3cbcbf42cc61be840dce52b677076e7fcb62b7d26328585c27699fba5f25439046da5124c7ae338f2816cb7d7d06ec6ac3b58d4ce99b2fa400bdb50cfbcf95af1238f0b0cb8d192dfd734ff0624a8d192524a3dcbf9bbe1d93d323852a7cee9530108dd8f5d759757f787d7bd70548fab6200391735010b96f557a98330aca4bbbae4186f16d85ed18bcd080b080c28416319a9fc7f4f8c076022873282693838f2933144463f5b4458ebf4c98d2f971dd526f6814d0adda4a1b06be4d1a6449550f03dee7a2a2fc9fe41445ec6fec9a77943ae25528913c8cbdbe09a517468bd711d9d963ba2bcad5da03e2066a3a6a2bc3fc2ecd15367d8fedf665231a033b5cb6a0bf120da4c77f29e82b5796387b04fdd3a42c7c617e67a6fc69562aef374961e0fd6cf724665a8733957fbe25ac9961d4d512c81a3f8ec3b67c891b91fe375d15ea35fb8080b6aa9c34987ed5145b6a6cf2a68936cdfa4d773e9851a2fc3235288e630bb88e7870ab8092dc2583ed50e77f8fdea94145f5a13b57b180e0b28bcb21970e9298fd2813f691ad735473c06b14b9a6690c32f962992ed1a07a40b09ca83aa2b58daca11643c16995b4dd272177f47a4a5bd06b465f9d589357985cd1e86ab632c75b7c1233b5e9280ef951c097c12e961b04df7ee997a5d823d451b6c56b99692a60d6f777c8d5e358050032675d27668b1f764e0063b418e6fe9d9e2f35da5470b97486b206edf098e9f83f01ba07f39c58acbea6dcb9289de3ae77a3e56ef36a06bfc616fe6344f6719614594918931649e983d23051097217989cc7cdbe5f77f2198061813f5db6796c4115184cdf4d328f8a61b162ae01c10aad2954551d349c4d03ee4606d16e5efa178bb6cb67eff8183b0aa5e67c7c6e4e85af2db36dd15801631e32441c54964fc8b4ccb6a29346b2250fc6274c859d748136a1d2c4667f82f9d4e3abead5aef48d4c33f8b04960d02640c0b00ed5d55af0174f5defb9d44dd72d54d6434987abfe55487b6fa22cd604454e8024e3bd4ae8b1f5570baed7e5502f7a5a39fe657ee18eca5459ef2c894a1fae5c697271482476db52ebac09deb2d6e36d25f6395df5a30fe3b4ae8bb022d3cc7b374597fdd716a45cf493807ce2ab16c94390321e90dcdc86ab7027b4b97b2e44ef1c085b7f880374d368f04ddb8a4c6acb354613b769ed043bef65f87ea38b947aaa6d2a1b5322cd145e672aaae207f9dda30f94bec9a5c5d384db98a65a09254e2ac04fe77482eb21b2673bbdaac8cb8315ee4313a87737f2eca51e8dfc39d43253b1ac2a0ea04d47693de2e6bd8e9b3ba7effa6727cfd890ceb3e6b1922686a82d0ad772f057fc8738ca1c60c92cf643ec26bcca7ff5f89f25bf75793edee5c705c552cd8553db146cda30cc95f2b1d4a8a4286f92586e534ea83a8e7f012ad47aaef2172c317fd2068042dd1b7934113699a2b028e115aebc07502e502f76c4ce431b46506942bb101aade3e8bce48a30a75885a8453a780962ff568a40fefd17f1e8d3fc6645a10c471f2c825111acf42c4ab2ccbf79fff2ef3e5e4f3e6551c9c2d442fd343174e553fcaa85917c2d54a29c2bc56b26696cfb25d1879b2087b14187489438992fea34a1afa4cd5e2bbfb0e4a9208d15f16b9beb1dee0bc24d9abe7b0ad156d6bfe50625701f3b978abbbff2c1325b8f8a79f8c854a8102cad0ca29d23cb8cdd1d3d0bb7d4f79907f50717126339bbbfdc8f50f51706af9972a22abc6be83353c9e7372293bb72fb4a6d459e078a4c066e6b1eff4092cd3f37621d255f01752cc4c2c1920f622afbf0836f3c4e5b14e1c932d6a683adcb7819e68199b9ff76d0df8309ee7d833672c04c6a41608edbc8e4d7e61ef32268e1c8377b800a8aff40e94feeb32", 0x1000, r2) keyctl$set_timeout(0xf, r4, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) keyctl$revoke(0x3, r6) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) keyctl$setperm(0x5, r2, 0x8010000) 03:59:25 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0092c802ea000300f41100"/26], 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2f77000000002aed273de7ee6b69e41adc2cebf1e75ab5823c0f66df8ce00a606b314fda6b3cdeee62e63d01ea5b546ca573eab438685400dd03626c92ee7ef227d518fba5cb8b601a63c84e0669e589e813d8c1d7d217b487b1705179b7f33f2e729e591c5972ce913f307f1f9b764037811df9653f3c51f4030aebbb6e96dfd4e009f448aa097286498ab385876e321b41568bd5bc70feb49b7491de91cd1b0000000000000000da95e53ab75fc7b345e754323aa7839e9c2b9afebd7d4c181426b256d8308185e6590c22b590d461ef2d8295d025e28915d6363f883e4e9ba9712e8529d8a4a6885100871870dcf30c2c73b55fb7fe23db35a96310cd4c334ad8c61a8a3b9b37fccb8e79558f222e6a1902c8e6befd3ed553a2f860b12d1fee0f650b5ea13a9a71711522effcaccfa72471ddc0874e1280d1b672222b9686d8b66fa94303acac588058834a7e0f059256e24f0c746631849bb2c1fce7853d3144622d72ccfe4e6395fc98075abc588a294546a8549640aece2130c41bae174043822ad1d866f5ca2bf917e16ae6"], 0x14}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_gettime(0x0, &(0x7f00000003c0)) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="7601addc9b7b0b884139f55865d38066e68f4205000000000000008bc31f58bc69efb0aa61adcdaa918c00000000000000e810800fd165"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:59:25 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2000000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x15e, 0x400}], 0x0, &(0x7f0000000000)=ANY=[]) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x0, 0x9) [ 1835.809229] FAULT_INJECTION: forcing a failure. 03:59:40 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0x7) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c25b97240680458fc3e1da3e10f31db6edc3b64a44432dfaae905fdc252d2f2af4bab0edbfcf7a5c8ea4b4783033cbfda147015615386abf52be64c542e64"]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 03:59:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xb00, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:59:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x2010000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 71) 03:59:40 executing program 2: ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) 03:59:40 executing program 1: syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x1, 0x0, @remote, @multicast1}, @redirect={0xb, 0x0, 0x0, @broadcast, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, @loopback, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1, 0x2}, {@remote}, {@multicast1}, {@multicast1}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) syz_emit_ethernet(0xd6, &(0x7f0000000140)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@x25={0x805, {0x1, 0x0, 0x0, "1115e1868bf3a403dad9c2aaf8ca3b490c09a6aaa6c88c5a97bf39f66b5ea08cb9efb787fa9234a34e7551aac8bb94ea84bc81e0691d89fc853f9b941b89d2d8c936faecae863772e960945ca5356f3de3cf7482f55e9de9d653ff01544af0edc4124a9f8974e7e755946a006bf6e97c8361f30c2da89700e6a77b420d92aa43e48aa16a0897a51d568bedcab278faed5510e54f1a4c1b3ae2140d2106e5e8d09cf2140dc3ecd39370df77fc10f2114f34f83be2b1097497a26c59601738ac73db"}}}}, &(0x7f0000000000)={0x1, 0x4, [0xece, 0x5c3, 0xdd4, 0x3e8]}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x101100, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x88be}, @void, @llc={@llc={0x88b1d708288deb8f, 0x4e, "8e5f", "ab0b68a767df3931fad3a1ee40bedf38288a8ac0fd9279b959996b44f1690e60fa0c7ebac749add2e7d7429f1a7bbe6bc7ff3ec33ac7960ddfba1d581edc3b9e24e4debdcf13f33d706de6282b63789403b17e7b71c6e10ade40ee194c932e8e9d6c9d5ef63a3531e5451ef1e9f69a1f"}}}, 0x78) 03:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4, 0x0, 0x100000000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$link(0x8, r1, r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) setregid(0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @auto=[0x64, 0x36, 0x32, 0x36, 0x37, 0x30, 0x33, 0x65, 0x33, 0x0, 0x36, 0x30, 0x31, 0x36, 0x63, 0xf]}, &(0x7f0000000540)={0x0, "c9f85803e301cefeea4a7a846f64e7478dd7066ce49c1ad3441eb921a8499fbe158a2314205c8a556d5aa2479bb87934bb446ae9371a8c8e9596731a3b88506c", 0x3d}, 0x48, r1) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x2) r6 = add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x3}, 0x0, 0x0, r6) sendfile(r2, r4, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r7}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080)="77fa72455c6fdc7848ca3de6f07c3e3463f97bbb3f6a2e6e6efdb6b4b8b11e", 0x1f, 0x8}, {&(0x7f00000000c0)="fce134a4059f61625b749bfbea26cba2df70d5a1c614d6ed0bd5acc39d7731e5346d3f99e9080b0980603ce8337c6b1d2288b6e14278305ae1546b0cac75dd60c47960a586ac493e0ece01f95c5a1b18ab229f98da9a44f25de5a9469112c0aa5cd01720bae144835e3d516c1b", 0x6d, 0xb7}], 0x100001, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6e725f626c7a19e0fbb5b0194a687567653d616c776179732c687567653d6164766973652c6e725f626c6f636b733d65656d6b32332d78742c6d6f64653d30323030303030303030303030303030303230303030302c6d706f6c3d6c6f63616c3d72656c6174e976652c61707072616973655f747970653d696d617369672c666f776e65723e", @ANYRESDEC=r7, @ANYBLOB="2c66736e616d653d38356261613137346630b4c26362313134322c7063723d30303030303030303030303030303030303030372c00"]) 03:59:40 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:59:40 executing program 1: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000002c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000500)=""/139, 0x8b}, {&(0x7f00000005c0)=""/247, 0xf7}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000780)=""/46, 0x2e}], 0x7, &(0x7f0000000840)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}], 0x1, 0x40012101, 0x0) syz_io_uring_setup(0x6695, &(0x7f0000000940)={0x0, 0x19d7, 0x8, 0x0, 0x2c9, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000009c0), &(0x7f0000000a00)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800000, 0x50071, r2, 0x10000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}]}, 0x44}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xbc, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x580117a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa884}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40091}, 0x30000000) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x84a0, &(0x7f0000000200)={[{@nr_blocks={'nr_blocks', 0x3d, [0x36, 0x39, 0x38, 0x65]}}]}) [ 1835.809229] name failslab, interval 1, probability 0, space 0, times 0 [ 1835.818693] CPU: 1 PID: 10761 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1835.819537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1835.820546] Call Trace: [ 1835.820875] dump_stack+0x107/0x167 [ 1835.821321] should_fail.cold+0x5/0xa [ 1835.821786] ? lock_release+0x680/0x680 [ 1835.822288] ? skb_clone+0x14f/0x3d0 [ 1835.822745] should_failslab+0x5/0x20 [ 1835.823213] kmem_cache_alloc+0x5b/0x310 [ 1835.823708] ? mark_lock+0xf5/0x2df0 [ 1835.824166] skb_clone+0x14f/0x3d0 [ 1835.824605] dev_queue_xmit_nit+0x3a7/0xb00 [ 1835.825138] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1835.825702] dev_hard_start_xmit+0xab/0x6f0 [ 1835.826255] __dev_queue_xmit+0x179a/0x2690 [ 1835.826785] ? find_held_lock+0x2c/0x110 [ 1835.827282] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1835.827841] ? lock_downgrade+0x6d0/0x6d0 [ 1835.828346] ? lock_acquire+0x197/0x470 [ 1835.828834] ? ip_finish_output2+0x220/0x21f0 [ 1835.829390] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 03:59:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, r2, 0x0) close(r2) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc096}, 0x4040084) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="3eb245db0956c05552c8be8756ac847fb911274f502fc72b583339a260dc5c9232daef098130423e3fc5d5f147751e170fb588eba7767867cbfe6bb1fba71835916558e3ecdf95017b445c0abf85653f71640c5773c4c31c48e59291c6a543b202d0209471a1c42d6cc720bd2081c72aa4958afce671c0ad644a900975c5a10d09ffa03a06213f3e0262d1fc4ef066b9afc4955abaf5facc75055c7a7bc3cfdda261bb5dc7b4150970786154318cccec095bbd3f2c6d3e9a0442c467f5d51c45ac8876d6c2ac6683d95cb23f7278c197db9065317f43a44f78b6a7b1ce2ae9e290bdb4ef385f02000000195db3e70479292f", 0xf2}], 0x1}, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x5ef0cb54) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000180)=0xff, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f0000000280)=""/83, &(0x7f0000000300)=0x53) getsockopt$inet6_mreq(r3, 0x29, 0x6, 0x0, &(0x7f00000003c0)) dup2(0xffffffffffffffff, r3) [ 1835.830033] neigh_connected_output+0x382/0x4d0 [ 1835.830622] ip_finish_output2+0x6f1/0x21f0 [ 1835.831152] ? nf_hook_slow+0xfc/0x1e0 [ 1835.831627] ? ip_frag_next+0x9e0/0x9e0 [ 1835.838414] ? nf_hook+0x160/0x510 [ 1835.838849] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1835.839468] __ip_finish_output.part.0+0x5f3/0xb50 [ 1835.840065] ? ip_fragment.constprop.0+0x240/0x240 [ 1835.840658] ? nf_hook+0x510/0x510 [ 1835.841101] ip_output+0x2f7/0x600 [ 1835.841538] ip_send_skb+0xdd/0x260 [ 1835.841983] udp_send_skb+0x6da/0x11d0 [ 1835.842479] udp_sendmsg+0x1980/0x2160 [ 1835.842955] ? ip_frag_init+0x350/0x350 [ 1835.843443] ? udp_setsockopt+0xc0/0xc0 [ 1835.843924] ? mark_lock+0xf5/0x2df0 [ 1835.844381] ? lock_chain_count+0x20/0x20 03:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) keyctl$chown(0x4, r2, 0x0, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1835.844883] ? mark_lock+0xf5/0x2df0 [ 1835.850390] ? mark_lock+0xf5/0x2df0 [ 1835.850844] ? lock_chain_count+0x20/0x20 [ 1835.851347] ? lock_chain_count+0x20/0x20 [ 1835.851852] ? prep_new_page+0x16d/0x1d0 [ 1835.852344] ? lock_chain_count+0x20/0x20 [ 1835.852859] ? __lock_acquire+0x1657/0x5b00 [ 1835.853388] udpv6_sendmsg+0x1b30/0x2ad0 [ 1835.853883] ? __lock_acquire+0x1657/0x5b00 [ 1835.854436] ? udp_v6_push_pending_frames+0x360/0x360 [ 1835.855063] ? trace_hardirqs_on+0x5b/0x180 [ 1835.855595] ? lock_acquire+0x197/0x470 [ 1835.856077] ? find_held_lock+0x2c/0x110 [ 1835.856578] ? lock_acquire+0x197/0x470 [ 1835.857062] ? find_held_lock+0x2c/0x110 [ 1835.857559] ? __might_fault+0xd3/0x180 [ 1835.858043] ? lock_downgrade+0x6d0/0x6d0 [ 1835.858563] ? lock_chain_count+0x20/0x20 [ 1835.859068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1835.859704] ? sock_has_perm+0x1ea/0x280 [ 1835.860203] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1835.860844] ? __import_iovec+0x458/0x590 [ 1835.861356] ? udp_v6_push_pending_frames+0x360/0x360 [ 1835.861999] inet6_sendmsg+0x105/0x140 [ 1835.862488] ? inet6_compat_ioctl+0x320/0x320 [ 1835.863034] __sock_sendmsg+0xf2/0x190 [ 1835.863513] ____sys_sendmsg+0x334/0x870 [ 1835.864014] ? sock_write_iter+0x3d0/0x3d0 [ 1835.864535] ? do_recvmmsg+0x6d0/0x6d0 [ 1835.865011] ? find_held_lock+0x2c/0x110 [ 1835.865514] ___sys_sendmsg+0xf3/0x170 [ 1835.865997] ? sendmsg_copy_msghdr+0x160/0x160 [ 1835.866579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1835.867217] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1835.867760] ? trace_hardirqs_on+0x5b/0x180 [ 1835.868292] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1835.868853] ? finish_task_switch+0x126/0x5d0 [ 1835.869398] ? finish_task_switch+0xef/0x5d0 [ 1835.869931] ? __switch_to+0x572/0xf70 [ 1835.870426] ? __switch_to_asm+0x3a/0x60 [ 1835.870925] ? __switch_to_asm+0x34/0x60 [ 1835.871424] ? __schedule+0x82c/0x1ea0 [ 1835.871905] ? io_schedule_timeout+0x140/0x140 [ 1835.872471] __sys_sendmmsg+0x195/0x470 [ 1835.872958] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1835.873484] ? lock_downgrade+0x6d0/0x6d0 [ 1835.874012] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1835.874625] ? wait_for_completion_io+0x270/0x270 [ 1835.875216] ? rcu_read_lock_any_held+0x75/0xa0 [ 1835.875798] ? vfs_write+0x354/0xb10 [ 1835.876260] ? fput_many+0x2f/0x1a0 [ 1835.876718] ? ksys_write+0x1a9/0x260 [ 1835.877190] ? __ia32_sys_read+0xb0/0xb0 [ 1835.877705] __x64_sys_sendmmsg+0x99/0x100 [ 1835.882261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1835.882890] do_syscall_64+0x33/0x40 [ 1835.883342] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1835.883964] RIP: 0033:0x7fec4fe72b19 [ 1835.884416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1835.886656] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1835.887581] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1835.888445] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1835.889313] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.890184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1835.891072] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x8cffffff00000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:40 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) syncfs(0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ftruncate(r2, 0x0) 03:59:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 72) [ 1835.972212] tmpfs: Too small a size for current use 03:59:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x48281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0xe6, 0x2, 0xa0, 0x0, 0x9, 0x2000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x0, 0x401, 0x5, 0x9, 0x34d6, 0xe38, 0x8, 0x0, 0x3, 0x0, 0x40}, r1, 0xffffffffffffffff, r3, 0x9) r4 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r5 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x0) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r4) r7 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r7, 0x8000000) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r9}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd=r2, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000, 0x0, 0x1, {0x0, r9}}, 0x4) add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="67643abc7fddb6e42ad5f114d50935b044b06eb93c3fecac771660a42b264df4ca186265847a0e869afc9dacefd854757ec6c7d79d1bc1765495405210757874f9194697ca1a368bd33575c9300938fee792a3919cbb6f1aaffbcf5b4f55cbffb3eef51a5c7b1f37bfb5729c6c079c471fa2412f57d34297603fd1a3e050c1aff8ce91f9e62a730628cb79dbc4484d859ce0b56b5eff25fd8929fe79197cd7fbb8113655fbca3ff0acc2ea2b3c75427c6afa02dcbc057aa272f4c680e10ea9289122e5906cb0568736685375f9faf57e420cb9", 0xd3, r6) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1836.001906] FAULT_INJECTION: forcing a failure. [ 1836.001906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.003563] CPU: 1 PID: 10791 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1836.003844] tmpfs: Too small a size for current use [ 1836.004407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1836.004418] Call Trace: [ 1836.006458] dump_stack+0x107/0x167 [ 1836.006905] should_fail.cold+0x5/0xa [ 1836.007375] _copy_from_user+0x2e/0x1b0 [ 1836.007867] __copy_msghdr_from_user+0x91/0x4b0 [ 1836.008436] ? __ia32_sys_shutdown+0x80/0x80 [ 1836.008976] ? udp_v6_push_pending_frames+0x360/0x360 [ 1836.009609] ? inet6_sendmsg+0xbd/0x140 [ 1836.010095] ? inet6_compat_ioctl+0x320/0x320 [ 1836.010658] ? __sock_sendmsg+0x55/0x190 [ 1836.011156] sendmsg_copy_msghdr+0xa1/0x160 [ 1836.011680] ? do_recvmmsg+0x6d0/0x6d0 [ 1836.012155] ? __lock_acquire+0x1657/0x5b00 [ 1836.012687] ___sys_sendmsg+0xc6/0x170 [ 1836.013160] ? sendmsg_copy_msghdr+0x160/0x160 [ 1836.013718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1836.014366] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1836.014912] ? trace_hardirqs_on+0x5b/0x180 [ 1836.015447] ? lock_acquire+0x197/0x470 [ 1836.015933] ? find_held_lock+0x2c/0x110 [ 1836.016433] ? __might_fault+0xd3/0x180 [ 1836.016921] ? lock_downgrade+0x6d0/0x6d0 [ 1836.017426] ? io_schedule_timeout+0x140/0x140 [ 1836.017992] __sys_sendmmsg+0x195/0x470 [ 1836.018492] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1836.019014] ? lock_downgrade+0x6d0/0x6d0 [ 1836.019527] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1836.020115] ? wait_for_completion_io+0x270/0x270 [ 1836.020702] ? rcu_read_lock_any_held+0x75/0xa0 [ 1836.021266] ? vfs_write+0x354/0xb10 [ 1836.021721] ? fput_many+0x2f/0x1a0 [ 1836.022170] ? ksys_write+0x1a9/0x260 [ 1836.022634] ? __ia32_sys_read+0xb0/0xb0 [ 1836.023140] __x64_sys_sendmmsg+0x99/0x100 [ 1836.023657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1836.024286] do_syscall_64+0x33/0x40 [ 1836.024748] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1836.025371] RIP: 0033:0x7fec4fe72b19 [ 1836.025831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1836.028081] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1836.029008] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1836.029882] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1836.030764] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1836.031627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.032490] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:40 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000000c0)) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="a230ba15cce57a41ffe33159b735f68cb221e3e1d84acea42e483634460f4cf0c8d90363e1f91a40a9ddfe780f02e561e9cef288b9f56871fa88a77a5018a74a5d26791e8150c47a0969cec1582d100d1e3f1e4cae700e4951bf89de19d84a647377f178aec5d1546308f5d41a31f4dff860bd149efc19222c1cbf6eb726ede12a81d567fd656b", 0x87, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f00000002c0)=""/134, 0x86) [ 1836.105369] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1836.680121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 03:59:55 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0xd8499488957a772f}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) timer_gettime(r1, &(0x7f0000000280)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 03:59:55 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB=',wfdno=', @ANYRES64=r2, @ANYRESOCT=r1]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) [ 1850.617888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 03:59:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xf6ffffff00000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x1c0000000, 0x0, 0x0, 0x0, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r2, 0xfffffffffffffffc, r1, 0x0) perf_event_open(&(0x7f0000000340)={0x6, 0x80, 0x1, 0xff, 0x1f, 0x6, 0x0, 0x4, 0xe2dea28b991a3d42, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x4, 0x1}, 0x0, 0xfffffffffffffffe, 0x7fff, 0x7, 0x100000000, 0x8b8, 0x7f, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xf, 0xffffffffffffffff, 0x4) r3 = add_key$user(&(0x7f0000000180), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000140)="c086f62cccbc205257a3a3", 0xb, r1) keyctl$set_timeout(0xf, r3, 0x0) add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="515c2771523d6fb20876311601b98ee395e4c1930dd36ab918429fec73768ef2ae64d21561b46ff730ffb3fb003b627b9b44e72c5e9e4ed84be3b1e5cc9ffae71561bb0c1ef5b6285a9a2efdffd1611df2d9c2573be88a8c029c9b75503c70515941f80a51e4e111f716b28619809cbbf391cfe81bf6", 0x76, 0xfffffffffffffffe) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000040)=ANY=[]) 03:59:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 73) [ 1850.640994] FAULT_INJECTION: forcing a failure. [ 1850.640994] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.642411] CPU: 0 PID: 10814 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1850.643272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1850.644287] Call Trace: [ 1850.644619] dump_stack+0x107/0x167 [ 1850.645069] should_fail.cold+0x5/0xa [ 1850.645542] ? create_object.isra.0+0x3a/0xa20 [ 1850.646106] should_failslab+0x5/0x20 [ 1850.646578] kmem_cache_alloc+0x5b/0x310 [ 1850.647086] ? lock_acquire+0x197/0x470 [ 1850.647584] create_object.isra.0+0x3a/0xa20 [ 1850.648121] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1850.648753] kmem_cache_alloc+0x159/0x310 [ 1850.649259] ? mark_lock+0xf5/0x2df0 [ 1850.649723] skb_clone+0x14f/0x3d0 [ 1850.650162] dev_queue_xmit_nit+0x3a7/0xb00 [ 1850.650697] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1850.651282] dev_hard_start_xmit+0xab/0x6f0 [ 1850.651823] __dev_queue_xmit+0x179a/0x2690 [ 1850.652355] ? find_held_lock+0x2c/0x110 [ 1850.652854] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1850.653420] ? lock_downgrade+0x6d0/0x6d0 [ 1850.653930] ? lock_acquire+0x197/0x470 [ 1850.654419] ? ip_finish_output2+0x220/0x21f0 [ 1850.654989] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1850.655636] neigh_connected_output+0x382/0x4d0 [ 1850.656216] ip_finish_output2+0x6f1/0x21f0 [ 1850.656752] ? nf_hook_slow+0xfc/0x1e0 [ 1850.657230] ? ip_frag_next+0x9e0/0x9e0 [ 1850.657717] ? nf_hook+0x160/0x510 [ 1850.658155] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1850.658792] __ip_finish_output.part.0+0x5f3/0xb50 [ 1850.659406] ? ip_fragment.constprop.0+0x240/0x240 [ 1850.660006] ? nf_hook+0x510/0x510 [ 1850.660449] ip_output+0x2f7/0x600 [ 1850.660889] ip_send_skb+0xdd/0x260 [ 1850.661341] udp_send_skb+0x6da/0x11d0 [ 1850.661827] udp_sendmsg+0x1980/0x2160 [ 1850.662307] ? ip_frag_init+0x350/0x350 [ 1850.662819] ? udp_setsockopt+0xc0/0xc0 [ 1850.663309] ? mark_lock+0xf5/0x2df0 [ 1850.663774] ? lock_chain_count+0x20/0x20 [ 1850.664283] ? mark_lock+0xf5/0x2df0 [ 1850.664749] ? mark_lock+0xf5/0x2df0 [ 1850.665206] ? lock_chain_count+0x20/0x20 [ 1850.665716] ? lock_chain_count+0x20/0x20 [ 1850.666226] ? prep_new_page+0x16d/0x1d0 [ 1850.666732] ? lock_chain_count+0x20/0x20 [ 1850.667263] ? __lock_acquire+0x1657/0x5b00 [ 1850.667806] udpv6_sendmsg+0x1b30/0x2ad0 [ 1850.668307] ? __lock_acquire+0x1657/0x5b00 [ 1850.668845] ? udp_v6_push_pending_frames+0x360/0x360 [ 1850.669484] ? trace_hardirqs_on+0x5b/0x180 [ 1850.670019] ? lock_acquire+0x197/0x470 [ 1850.670507] ? find_held_lock+0x2c/0x110 [ 1850.671029] ? lock_acquire+0x197/0x470 [ 1850.671636] ? find_held_lock+0x2c/0x110 [ 1850.672136] ? __might_fault+0xd3/0x180 [ 1850.672622] ? lock_downgrade+0x6d0/0x6d0 [ 1850.673128] ? lock_chain_count+0x20/0x20 [ 1850.673635] ? sock_has_perm+0x1ea/0x280 [ 1850.674132] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1850.674785] ? __import_iovec+0x458/0x590 [ 1850.675296] ? udp_v6_push_pending_frames+0x360/0x360 [ 1850.675937] inet6_sendmsg+0x105/0x140 [ 1850.676419] ? inet6_compat_ioctl+0x320/0x320 [ 1850.676967] __sock_sendmsg+0xf2/0x190 [ 1850.677444] ____sys_sendmsg+0x334/0x870 [ 1850.677945] ? sock_write_iter+0x3d0/0x3d0 [ 1850.678467] ? do_recvmmsg+0x6d0/0x6d0 [ 1850.678974] ? __lock_acquire+0x1657/0x5b00 [ 1850.679512] ___sys_sendmsg+0xf3/0x170 [ 1850.679991] ? sendmsg_copy_msghdr+0x160/0x160 [ 1850.680552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1850.681192] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1850.681743] ? trace_hardirqs_on+0x5b/0x180 [ 1850.682276] ? lock_acquire+0x197/0x470 [ 1850.682768] ? find_held_lock+0x2c/0x110 [ 1850.683272] ? __might_fault+0xd3/0x180 [ 1850.683764] ? lock_downgrade+0x6d0/0x6d0 [ 1850.684272] ? io_schedule_timeout+0x140/0x140 [ 1850.684840] __sys_sendmmsg+0x195/0x470 [ 1850.685330] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1850.685862] ? lock_downgrade+0x6d0/0x6d0 [ 1850.686384] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1850.686995] ? wait_for_completion_io+0x270/0x270 [ 1850.687587] ? rcu_read_lock_any_held+0x75/0xa0 [ 1850.688152] ? vfs_write+0x354/0xb10 [ 1850.688612] ? fput_many+0x2f/0x1a0 [ 1850.689057] ? ksys_write+0x1a9/0x260 [ 1850.689523] ? __ia32_sys_read+0xb0/0xb0 [ 1850.690025] __x64_sys_sendmmsg+0x99/0x100 [ 1850.690542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1850.691182] do_syscall_64+0x33/0x40 [ 1850.691641] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1850.692263] RIP: 0033:0x7fec4fe72b19 [ 1850.692722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1850.694976] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1850.695910] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1850.696775] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1850.697640] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1850.698504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1850.699386] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 03:59:55 executing program 1: r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002000028020000028401001b0000000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e35393638303238373300"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000003bf48e55190e4cca80d5ddff88e7b6a1010000000c00000000000000d7f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000000000002600000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0000000000000000000000000000000000000000010400"/32, 0x20, 0x7}, {&(0x7f0000010400)="030000000400000005000000d4000f000300040000000000000000000f00c7e0", 0x20, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d7f4655fd7f4655fd7f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004000200000000000000050000001500"/64, 0x40, 0x1600}, {&(0x7f0000010f00)="20000000d0fadacdd0fadacd00000000d7f4655f00"/32, 0x20, 0x1680}, {&(0x7f0000011000)="c0410000002c0000d7f4655fd7f4655fd7f4655f0000000000000200160000000000000000000000160000001700000018000000190000001a0000001b0000001c0000001d0000001e0000001f00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d7f4655f000000000000000000000000000002ea00"/192, 0xc0, 0x2800}, {&(0x7f0000011100)="ed4100003c000000d7f4655fd7f4655fd7f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000b7a4e9e000000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x2a00}, {&(0x7f0000011200)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001000400000000000000010000002100000022000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f52167000000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xa0, 0x2c00}, {&(0x7f0000011300)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3539363830323837332f66696c65302f66696c6530000000000000000000000000000000000000000000008d6390c800000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xa0, 0x2e00}, {&(0x7f0000011400)="ed8100000a000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c65727300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d37571e00000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea040700000000000000000000000000006461746106015401000000000600000000000000786174747231000006014c0100000000060000000000000078617474723200"/256, 0x100, 0x3000}, {&(0x7f0000011500)="0000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f0000000000000200120000000000000001000000230000002400000025000000260000002700000028000000290000002a0000002b000000000000000000000000000000000000000000000000000000b964ab4600000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000", 0xc0, 0x31e0}, {&(0x7f0000000140)="ed81000064000000d7f4655fd7f4655fd7f4655f000000000000010000000000000000100100000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616cc2ee83da00000000000000000000000000000000000000000000000020000000d0fadacdd0fadacdd0fadacdd7f4655fd0fadacd0000000000000000000002ea04073401000000002800000000000000646174610000000000000000", 0xc0, 0x3400}, {&(0x7f0000011700)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lersyzkallersyzkallersyzkallersyzkallers', 0x40, 0x35c0}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x5400}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x5800}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x5c00}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x6000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x6400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x6800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x6c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x7000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x7400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x7800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x7c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20}, {&(0x7f0000012400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8400}], 0x0, &(0x7f0000000040)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@measure}, {@fowner_eq={'fowner', 0x3d, r0}}, {@uid_eq={'uid', 0x3d, r0}}]}) 03:59:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}], 0x1) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 03:59:55 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1020, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:59:55 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560b, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000001600)) r1 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {}, [@typed={0x8, 0x27, 0x0, 0x0, @ipv4=@private=0xa010102}]}, 0x1c}}, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000100)=0x9) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)=0x4011, 0x4) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 03:59:55 executing program 0: add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) fstat(0xffffffffffffffff, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) r0 = getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)='\x00', 0x1, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="01000000000000002e2f66695fe757f70f28fa20e633883801f3af21cdbe5df503af7b528de750c1c77c5a9319a36a5fb52d1183345202f7edc32d9e5a6bec7844433c2db7f58e3753b8a310de7862604ca8200d254ac5809bc1390afadd59297cd2691e067a816bb0e3e3a0d712f3646809ee0fcd4d54e0ad9b3448dc68"]) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x2) sendfile(r3, r4, 0x0, 0x20d315) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r5}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) statx(0xffffffffffffffff, &(0x7f0000000480)='./file1\x00', 0x0, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r3, &(0x7f00000002c0)='./file1/file0\x00', 0x228080, 0x10) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r6, r7, 0x1000) fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)={{}, {0x1, 0x6}, [{0x2, 0x4, r5}], {0x4, 0x6}, [{0x8, 0x1, r7}, {0x8, 0x4, r0}], {0x10, 0x2}, {0x20, 0x3}}, 0x3c, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r3, 0x8000000) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 03:59:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xff00000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:55 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:59:55 executing program 1: r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r1, 0x10001) r2 = syz_io_uring_setup(0x2a7b, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0xdb0, &(0x7f00000002c0)={0x0, 0x74e4, 0x10, 0x1, 0x2ff, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) r5 = openat$cgroup_pressure(r1, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2004, @fd=r5, 0xffff, &(0x7f0000000340)=""/240, 0xf0, 0x1, 0x0, {0x0, r0}}, 0x100) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r1, r6, 0x0, 0x20d315) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x45142, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 03:59:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xffff000000000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:59:55 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x50, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r2, 0x800000000081) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x5, 0x4b, 0x55, 0xfb, 0x0, 0x4, 0xc000, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000380), 0x4}, 0xc68, 0x800, 0x5, 0x8, 0x10000, 0x6b43, 0x5, 0x0, 0x0, 0x0, 0x522}, r2, 0x4, r0, 0x2) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) request_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000340)=',.{\x00', 0xfffffffffffffff9) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) keyctl$set_timeout(0xf, r1, 0x3) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000080)=""/226, 0xe2}) [ 1850.847755] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 04:00:09 executing program 6: r0 = socket$unix(0x1, 0x68402bfb4295d571, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000980)=0x0) r4 = inotify_init() r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r6 = epoll_create(0x3f) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r7, 0x800000000081) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000000a00)=0xc) fstat(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r10, 0x800000000081) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)="40e9395d90c659ebe48c6c4e3f4618e0b651c59fb64aff4b7a21ccb0cf6895d200cb2192c37e015f8fb847ba04abdf9b1c62fc4b73d981a926cede2ac4640c593fd68fd874f810eb3cbcdae91a1efafbbca563beef567eafc8933029b61dc3b2176f90b3a988c60c9381045601720e31fce460cdee6b7ce2d8", 0x79}], 0x1, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r0, r0, 0xffffffffffffffff, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r2, r1, r2]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r1]}}], 0x138, 0x4010}}, {{&(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000780)="15874542673e447abfbd231ea5e476246287484ff4c84006a860b08e1ad93dd7cd960092baec4c1fe734553010e139e374ed4a4909a654f9674396e4841e6c16d45c2bce566ac4284e332792a1a6ff33d78fd6c7aefb0a8a3e575e6e72b225e32d262938b3be15dfe427ca9503fbd7837bf55b69e6f93c974af3c4fbe94bd645a1", 0x81}, {&(0x7f0000000840)="1b044d2e7f2bd773bbad3193b52a58d593df0eb897fbf3c1f4abe96ded3a16dcd538251788f597334b9111ab796fcf5ef21a6724b08beeb28689c082f7cc031d5659d7fea6cac159118f3b9f3a5bcceb2367856fad7d0f7fe39cc610885b9f447fb22bb7ff94b23a1603cd29835e05808256423dd3b81c4e3d46697c9e5f16dc93dd89af3184ea62bf7ef6e432f4e74bc9de80a0e645fe4498cb4fd8e753cfd28781de021402aedb78d0fffbaed48107245994515fd6dbc5f49e8df6f9ae235c6289da57ab3aa584c02903b7436a5d3602cdc20d05ca6f8b058423d23ff5629d5573", 0xe2}], 0x2, &(0x7f0000000ac0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r0]}}, @rights={{0x18, 0x1, 0x1, [r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01}}}], 0xf0, 0x40814}}], 0x2, 0x41) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r11 = socket$unix(0x1, 0x5, 0x0) connect$unix(r11, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:00:09 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000080)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0/file1\x00', 0xffffc000, 0x1) 04:00:09 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:00:09 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="70ed981900f66b89ff6ac7ee334da4bf9e24e9bb0b1e2444cce9957ecfa16464c7dc260eb0ba26"]) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x4, 0x0, 0x1, 0xc000000000000000, 0x3, 0x3, 0x18c, 0x109, 0x40, 0x3a7, 0x8000, 0x4, 0x38, 0x2, 0x7, 0x101, 0x5}, [{0x70000000, 0x0, 0x8, 0x9, 0x1, 0x1, 0x3d, 0x9}, {0x6474e551, 0x1, 0x4, 0x0, 0x0, 0x3, 0x1, 0x6}], "4f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52349e338c9f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056006b104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b", ['\x00']}, 0x299) r3 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, &(0x7f0000000080)=0xc0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000d75839e3ca5869a423a5057d4a6be0f7d4f10ffc50dabfbf7dea7f039c2772c025ece864b836eb620137f4de06af046b3728d0d98e3b57f9b3a0a803278b68b326920d13806bd5f3b61e14bb9a6b8fde07b3d5b2d50a5a9ed4d9d78d687bf2003b6c7dcadd4921c9e9d06dcdfa1f5317194658fd8d47dcdbb90f482a994b4f2cdc6ee86c538157e92e64eafcdfbc15cde3ba860caed9e0d5847b894c", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c653000"]) 04:00:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 74) 04:00:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0xffffffff00000000, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 04:00:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x1, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="419a187d58544eaea52d2b651137879645295cc004a3b777bc463ce616b00ebc13ac3c124a535198f42a0035872d5d0ee2ba49bada775ff0e02ff3e03a240fb75e6519b706423646b63fcf4f03d34cdcb5ec20b10f48154bc54f3113330fe42261677ca8e018619f777bb21696fb642c1fcfc1b6d4652c43ba2ca170613a8f3ae6db78cac454b3b9c395", @ANYRESHEX, @ANYRESDEC=r1]) [ 1865.003215] FAULT_INJECTION: forcing a failure. [ 1865.003215] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.004659] CPU: 1 PID: 10864 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1865.005513] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1865.006540] Call Trace: 04:00:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2010, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 1865.006873] dump_stack+0x107/0x167 [ 1865.011715] should_fail.cold+0x5/0xa [ 1865.012190] ? create_object.isra.0+0x3a/0xa20 [ 1865.012486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1865.012755] should_failslab+0x5/0x20 [ 1865.014255] kmem_cache_alloc+0x5b/0x310 [ 1865.014763] ? lock_acquire+0x197/0x470 [ 1865.015273] create_object.isra.0+0x3a/0xa20 [ 1865.015824] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1865.016455] kmem_cache_alloc+0x159/0x310 [ 1865.016963] ? mark_lock+0xf5/0x2df0 [ 1865.017429] skb_clone+0x14f/0x3d0 [ 1865.017864] dev_queue_xmit_nit+0x3a7/0xb00 [ 1865.018392] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1865.018965] dev_hard_start_xmit+0xab/0x6f0 [ 1865.019520] __dev_queue_xmit+0x179a/0x2690 [ 1865.020064] ? find_held_lock+0x2c/0x110 [ 1865.020569] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1865.021131] ? lock_downgrade+0x6d0/0x6d0 [ 1865.021636] ? lock_acquire+0x197/0x470 [ 1865.021760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1865.022131] ? ip_finish_output2+0x220/0x21f0 [ 1865.023726] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1865.024370] neigh_connected_output+0x382/0x4d0 [ 1865.024692] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1865.024959] ip_finish_output2+0x6f1/0x21f0 [ 1865.026521] ? nf_hook_slow+0xfc/0x1e0 [ 1865.027002] ? ip_frag_next+0x9e0/0x9e0 [ 1865.027515] ? nf_hook+0x160/0x510 [ 1865.027960] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1865.028595] __ip_finish_output.part.0+0x5f3/0xb50 [ 1865.029198] ? ip_fragment.constprop.0+0x240/0x240 [ 1865.029803] ? nf_hook+0x510/0x510 [ 1865.030243] ip_output+0x2f7/0x600 [ 1865.030679] ip_send_skb+0xdd/0x260 [ 1865.031132] udp_send_skb+0x6da/0x11d0 [ 1865.035647] udp_sendmsg+0x1980/0x2160 [ 1865.036124] ? ip_frag_init+0x350/0x350 [ 1865.036614] ? udp_setsockopt+0xc0/0xc0 [ 1865.037102] ? mark_lock+0xf5/0x2df0 [ 1865.037314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1865.037562] ? lock_chain_count+0x20/0x20 [ 1865.037575] ? mark_lock+0xf5/0x2df0 [ 1865.037590] ? mark_lock+0xf5/0x2df0 [ 1865.037603] ? lock_chain_count+0x20/0x20 [ 1865.037614] ? lock_chain_count+0x20/0x20 [ 1865.037630] ? prep_new_page+0x16d/0x1d0 [ 1865.041531] ? lock_chain_count+0x20/0x20 [ 1865.042045] ? __lock_acquire+0x1657/0x5b00 [ 1865.042588] udpv6_sendmsg+0x1b30/0x2ad0 [ 1865.043087] ? __lock_acquire+0x1657/0x5b00 [ 1865.043637] ? udp_v6_push_pending_frames+0x360/0x360 [ 1865.044264] ? trace_hardirqs_on+0x5b/0x180 [ 1865.044795] ? lock_acquire+0x197/0x470 [ 1865.045277] ? find_held_lock+0x2c/0x110 [ 1865.045787] ? lock_acquire+0x197/0x470 [ 1865.046270] ? find_held_lock+0x2c/0x110 [ 1865.046777] ? __might_fault+0xd3/0x180 [ 1865.047268] ? lock_downgrade+0x6d0/0x6d0 [ 1865.047782] ? sock_has_perm+0x1ea/0x280 [ 1865.048277] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1865.048917] ? __import_iovec+0x458/0x590 [ 1865.049430] ? udp_v6_push_pending_frames+0x360/0x360 [ 1865.050069] inet6_sendmsg+0x105/0x140 [ 1865.050542] ? inet6_compat_ioctl+0x320/0x320 [ 1865.051087] __sock_sendmsg+0xf2/0x190 [ 1865.051579] ____sys_sendmsg+0x334/0x870 [ 1865.052074] ? sock_write_iter+0x3d0/0x3d0 [ 1865.052600] ? do_recvmmsg+0x6d0/0x6d0 [ 1865.053082] ? __lock_acquire+0x1657/0x5b00 [ 1865.053616] ___sys_sendmsg+0xf3/0x170 [ 1865.054091] ? sendmsg_copy_msghdr+0x160/0x160 [ 1865.054646] ? vmacache_find+0x55/0x2a0 [ 1865.055144] ? lock_acquire+0x197/0x470 [ 1865.059653] ? find_held_lock+0x2c/0x110 [ 1865.060150] ? __might_fault+0xd3/0x180 [ 1865.060634] ? lock_downgrade+0x6d0/0x6d0 [ 1865.061135] ? asm_exc_page_fault+0x1e/0x30 [ 1865.061674] __sys_sendmmsg+0x195/0x470 [ 1865.062160] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1865.062685] ? lock_downgrade+0x6d0/0x6d0 [ 1865.063201] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1865.063817] ? wait_for_completion_io+0x270/0x270 [ 1865.064406] ? rcu_read_lock_any_held+0x75/0xa0 [ 1865.064974] ? vfs_write+0x354/0xb10 [ 1865.065432] ? fput_many+0x2f/0x1a0 [ 1865.065884] ? ksys_write+0x1a9/0x260 [ 1865.066346] ? __ia32_sys_read+0xb0/0xb0 [ 1865.066845] __x64_sys_sendmmsg+0x99/0x100 [ 1865.067380] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1865.068002] do_syscall_64+0x33/0x40 [ 1865.068453] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1865.069077] RIP: 0033:0x7fec4fe72b19 04:00:09 executing program 6: prctl$PR_SET_FPEMU(0xa, 0x1) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/cfg80211', 0x244100, 0x2) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) r4 = socket$unix(0x1, 0x5, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, r5, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) writev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)="db7fd7926781be1239a56f4db7a2cb01198e64f9854df477813293658cc2ac37ddb74b903122a44d4e375e54358a3c29b8ca03875d2f25adef2efb0f1da365d0a7bcc27d048255cca918154bf9935ada34e58683d8554e30364d2a5fd913c419d3db2bb0cc8be6686c9047072d74eba6f918f8731e4d025f4ef220d085481f0d82d93d3c6d09b2e5b1f6a1c57dfb3dbfab843dae708585ef20622cc070d5563d16fe1ec21ea52c663f28b6726f6f46b0fc752f06448142367a32d3dfc6346d63f9ada665025e5d42a16a6d8b18f293d0e3a491", 0xd3}, {&(0x7f00000004c0)="5292886fa36e8906a2f44c821ba377a3581b5d4cfdc2", 0x16}, {&(0x7f0000000500)="0e10a37f0bb86f4fc8937e65bd9233c07746f510994e5644a5c5b29ba4a3dfb599ae38", 0x23}], 0x3) [ 1865.069536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1865.071786] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1865.072704] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1865.073565] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1865.079474] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1865.080331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1865.081188] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:00:09 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xedc0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:00:09 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x22, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 1865.141408] 9pnet: Insufficient options for proto=fd [ 1865.178787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10888 comm=syz-executor.6 [ 1865.959532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10888 comm=syz-executor.6 04:00:24 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x40000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, @in_args={0x2}}, './file0\x00'}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x39) r3 = fcntl$dupfd(r2, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:00:24 executing program 2: syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast}}}}}}, 0x0) syz_emit_ethernet(0x10d, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "3ed779", 0xd7, 0x3, 0x1, @private1, @mcast2, {[@routing={0x2, 0x4, 0x2, 0x68, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1]}], "1e54be936104dfaba78bf14769aa51948816d86ed90eb154a5d3187c3cfad9aaaadb00493eb00d47ed6e0b688f18d430d59428203358ebcb5bc0e9cb58277c357e98a42f38c57ad3b16a400b215a9c1006f1b4fb619a63a527ebcb6b41f4641d63e50348bac3ea620500a0f279aa16bed56f16a834909d42dc0020256364a06aae8fa6c44432b4b9dc9d70080d87633b05679434cdb38de615540de5bb8e4a2c8e2932e865e31b7ea2678328a64c93"}}}}}, &(0x7f0000000040)={0x1, 0x3, [0x30f, 0x4ac, 0x689, 0x8fa]}) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x80, 0x60, 0x14}, 0x18) write$tun(r0, &(0x7f0000000480)={@val, @val={0x2, 0x3, 0x0, 0x9, 0x0, 0x401}, @x25={0x7, 0x4, 0xf6, "ea0b94e93d2146b1ad6d2ee31148bcc524f4829edda2c170f6ace93b906e418846da0f97b8206f35227a2a7721a150ad7fc19a6042a78f539e4585e500ffceb61b4272cb53ba31699875a7eca6dc04e135260800d4535c8c38aa08b091ea4f11394a8bc1de49cc2dd84bb3cd4df672bfa66e242f3067f3e1b03018d3b724a8acb2b4f6b72ddc0834e2ea69cd19ff470608141eafa2a0a7057f64b97e726fe3e21c366a749375998c7768eda6dff65c972040bf722a1aaba670a7cd1e90bbb8bcd4d95dbf8d53e3dc437703d489e32eddd689aac1"}}, 0xe5) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) syz_io_uring_setup(0x80000000, &(0x7f0000000240)={0x0, 0xc86d, 0x4, 0x2, 0x1b7, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x8848}, @void, @x25={0x1, 0x3, 0xb, "f6caafd094d144ca87a24f28bcf232bf59dcb7cf231b4f61660c0de83f62f874e725332e6003721aade6e72693d1ea1bece8d1c1c442b6a0b9a46b220b9744"}}, 0x46) syz_emit_ethernet(0x11c, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/514], &(0x7f0000000080)={0x1, 0x3, [0x1c3, 0xa5f, 0xcc6, 0x65d]}) 04:00:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:00:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x2c, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 04:00:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xb3ca88be2430f972, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0xfefd, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x2) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) add_key$keyring(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$invalidate(0x15, r3) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r5, 0xfffffffffffffffc, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) 04:00:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 75) 04:00:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:00:24 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/vmcoreinfo', 0x0, 0x0) r0 = syz_io_uring_setup(0x6c6b, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3, 0x78, 0x6, 0x4, 0x0, 0x6, 0x195, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000200), 0x18}, 0x504, 0x9, 0x4, 0x1, 0x401, 0x9, 0x7, 0x0, 0x5, 0x0, 0x10001}, 0x0, 0x0, r3, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000400)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400dbdf256ae3ffffffffffffff"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000600), &(0x7f0000000640)=@ng={0x4, 0x13, "96cf815f217fbb116f6f6acce8ae1c6d6f964e"}, 0x15, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1879.890952] 9pnet: Insufficient options for proto=fd [ 1879.894366] FAULT_INJECTION: forcing a failure. [ 1879.894366] name failslab, interval 1, probability 0, space 0, times 0 [ 1879.895814] CPU: 1 PID: 10908 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1879.896731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1879.897786] Call Trace: [ 1879.898191] dump_stack+0x107/0x167 [ 1879.898659] should_fail.cold+0x5/0xa [ 1879.899182] ? create_object.isra.0+0x3a/0xa20 [ 1879.899766] should_failslab+0x5/0x20 [ 1879.900299] kmem_cache_alloc+0x5b/0x310 [ 1879.900820] create_object.isra.0+0x3a/0xa20 [ 1879.901414] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1879.906097] kmem_cache_alloc_node+0x169/0x330 [ 1879.906680] __alloc_skb+0x6d/0x5b0 [ 1879.907211] alloc_skb_with_frags+0x92/0x570 [ 1879.907757] ? lock_chain_count+0x20/0x20 [ 1879.908327] sock_alloc_send_pskb+0x7af/0x930 [ 1879.908945] ? sk_alloc+0x350/0x350 [ 1879.909407] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1879.910095] ? lock_downgrade+0x6d0/0x6d0 [ 1879.910629] __ip_append_data+0x1628/0x3310 [ 1879.911214] ? fib_select_path+0x293/0x1de0 [ 1879.911745] ? ip_frag_init+0x350/0x350 [ 1879.912334] ? ip_finish_output+0x330/0x330 [ 1879.912884] ? ip_route_output_key_hash+0x19c/0x340 [ 1879.913542] ? ipv4_mtu+0x1ed/0x2c0 [ 1879.914043] ip_make_skb+0x22a/0x2a0 [ 1879.914520] ? ip_frag_init+0x350/0x350 [ 1879.915061] ? ip_flush_pending_frames+0x20/0x20 [ 1879.915648] ? lock_downgrade+0x6d0/0x6d0 [ 1879.916250] ? xfrm_lookup_route+0x65/0x210 [ 1879.916801] udp_sendmsg+0x1940/0x2160 [ 1879.917335] ? ip_frag_init+0x350/0x350 [ 1879.917831] ? udp_setsockopt+0xc0/0xc0 [ 1879.918373] ? mark_lock+0xf5/0x2df0 [ 1879.918841] ? lock_chain_count+0x20/0x20 [ 1879.919405] ? lock_chain_count+0x20/0x20 [ 1879.919980] ? mark_lock+0xf5/0x2df0 [ 1879.920456] ? mark_lock+0xf5/0x2df0 [ 1879.920984] ? lock_chain_count+0x20/0x20 [ 1879.921515] ? mark_lock+0xf5/0x2df0 [ 1879.922027] udpv6_sendmsg+0x1b30/0x2ad0 [ 1879.922544] ? __lock_acquire+0x1657/0x5b00 [ 1879.923157] ? udp_v6_push_pending_frames+0x360/0x360 [ 1879.923814] ? find_held_lock+0x2c/0x110 [ 1879.924382] ? lock_acquire+0x197/0x470 [ 1879.924876] ? find_held_lock+0x2c/0x110 [ 1879.925426] ? __might_fault+0xd3/0x180 [ 1879.925990] ? lock_downgrade+0x6d0/0x6d0 [ 1879.926518] ? lock_chain_count+0x20/0x20 [ 1879.927075] ? sock_has_perm+0x1ea/0x280 [ 1879.927572] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1879.928280] ? __import_iovec+0x458/0x590 [ 1879.928808] ? udp_v6_push_pending_frames+0x360/0x360 [ 1879.929491] inet6_sendmsg+0x105/0x140 [ 1879.930045] ? inet6_compat_ioctl+0x320/0x320 [ 1879.930611] __sock_sendmsg+0xf2/0x190 [ 1879.931140] ____sys_sendmsg+0x334/0x870 [ 1879.931641] ? sock_write_iter+0x3d0/0x3d0 [ 1879.932221] ? do_recvmmsg+0x6d0/0x6d0 [ 1879.932719] ? __lock_acquire+0x1657/0x5b00 [ 1879.933306] ___sys_sendmsg+0xf3/0x170 [ 1879.933786] ? sendmsg_copy_msghdr+0x160/0x160 [ 1879.934414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1879.935130] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1879.935675] ? trace_hardirqs_on+0x5b/0x180 [ 1879.936273] ? lock_acquire+0x197/0x470 [ 1879.936777] ? find_held_lock+0x2c/0x110 [ 1879.937330] ? __might_fault+0xd3/0x180 [ 1879.937816] ? lock_downgrade+0x6d0/0x6d0 [ 1879.938391] ? io_schedule_timeout+0x140/0x140 [ 1879.939040] __sys_sendmmsg+0x195/0x470 [ 1879.939533] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1879.940128] ? lock_downgrade+0x6d0/0x6d0 [ 1879.940667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1879.941306] ? wait_for_completion_io+0x270/0x270 [ 1879.941949] ? rcu_read_lock_any_held+0x75/0xa0 [ 1879.942541] ? vfs_write+0x354/0xb10 [ 1879.943073] ? fput_many+0x2f/0x1a0 [ 1879.943522] ? ksys_write+0x1a9/0x260 [ 1879.944053] ? __ia32_sys_read+0xb0/0xb0 [ 1879.944574] __x64_sys_sendmmsg+0x99/0x100 [ 1879.945141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1879.945769] do_syscall_64+0x33/0x40 [ 1879.946279] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1879.946993] RIP: 0033:0x7fec4fe72b19 [ 1879.947455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1879.949827] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1879.950838] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1879.951799] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1879.952740] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1879.953667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1879.954606] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:00:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffd}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x66, 0x51, 0x39, 0x33, 0x35, 0x31, 0xfb, 0x38, 0x36, 0x31, 0x62, 0x34, 0x38, 0x38, 0x64, 0x39]}, &(0x7f00000000c0)={0x0, "d98015347c8da9d024cb151d0a85feec1a73e8bee6f0020154059093a5b1ed4a2292403bb2122d577634347a14eb67f1a7c07455e3b7f8bb3ff8ef388eb39d4e", 0x12}, 0x48, 0x0) keyctl$link(0x8, r2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000000)) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1879.962383] 9pnet: Insufficient options for proto=fd [ 1894.969613] 9pnet: Insufficient options for proto=fd [ 1894.980649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=10928 comm=syz-executor.2 04:00:39 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:00:39 executing program 6: bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f0000000480)=[{&(0x7f00000001c0)="bbe1cf403f663f1814a2df57435f3ed404a3bdf2360433e19433ab1b3c6c1bccd089bf6f00c0c18fe9ea545d7563347d6fd72d51ca29641cfb40691a751a2a2a195ff099a9fddb2c221152d704585d372d8a", 0x52, 0x4}, {&(0x7f0000000300)="9f43aaa2a539", 0x6, 0x100000000}, {&(0x7f0000000340)="d356216dd0c231e100c52df325bf169a426515df95d9debde5b51bcbadf3531d8fcea9b03c2b3e6321d4dec0178add80ade6446e8ca7ae0b2d94acbf87c111783063d274b488e454c82013fb59febc77f41a46ccd85f5ec462e398efe6bad8e0f6bccf88d0ce8642ed93b11adc938a8950b66fc6d31638b49c068eef0ada5d50974c042a2456357ab11613208a6205f0015c5b859de7df22b29ab694b4fbe431a547bb6af10ab8f4ddf80b880a43ed9d483a4fce863e6e5b776a7465aff982", 0xbf, 0x3}, {&(0x7f0000000400)="b7155f2a64f45586449ae4381a8baaa0c20e9133f1002df6da30a8e1a9d6abbc21579e0506e9b1a270fa7a2471a1ca2429e27f4d97fea09d8a4cfcb985f5a1436bb74f602c87641ae83645584542cffc82", 0x51, 0x34}], 0x100000, &(0x7f0000000500)={[{@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@uni_xlate}], [{@dont_hash}]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:00:39 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:00:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x65, 0x8, 0x1, 0x3f, 0x0, 0x8, 0x28080, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0xffff, 0x88a4}, 0x2008, 0x401, 0x6e7, 0x7, 0xffffffff, 0x2, 0xdd8, 0x0, 0x1, 0x0, 0x100000000}, r1, 0x7, r0, 0x0) r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080)=r1, 0x12) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:00:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000007700001000"/20], 0x14}}, 0x0) 04:00:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x22, {'wfdno', 0x3d, r1}}) 04:00:39 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508", 0x5}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 04:00:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 76) [ 1894.989040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=10940 comm=syz-executor.2 [ 1894.997363] FAULT_INJECTION: forcing a failure. [ 1894.997363] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.998762] CPU: 1 PID: 10942 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1894.999609] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1895.000663] Call Trace: [ 1895.000988] dump_stack+0x107/0x167 [ 1895.001435] should_fail.cold+0x5/0xa [ 1895.001915] should_failslab+0x5/0x20 [ 1895.002380] __kmalloc_node_track_caller+0x74/0x3b0 [ 1895.002989] ? alloc_skb_with_frags+0x92/0x570 [ 1895.003548] __alloc_skb+0xb1/0x5b0 [ 1895.003996] alloc_skb_with_frags+0x92/0x570 [ 1895.004552] ? lock_chain_count+0x20/0x20 [ 1895.005060] sock_alloc_send_pskb+0x7af/0x930 [ 1895.005610] ? sk_alloc+0x350/0x350 [ 1895.006059] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1895.006695] ? lock_downgrade+0x6d0/0x6d0 [ 1895.007206] __ip_append_data+0x1628/0x3310 [ 1895.007737] ? fib_select_path+0x293/0x1de0 [ 1895.008263] ? ip_frag_init+0x350/0x350 [ 1895.008766] ? ip_finish_output+0x330/0x330 [ 1895.009291] ? ip_route_output_key_hash+0x19c/0x340 [ 1895.009894] ? ipv4_mtu+0x1ed/0x2c0 [ 1895.010341] ip_make_skb+0x22a/0x2a0 [ 1895.010797] ? ip_frag_init+0x350/0x350 [ 1895.011282] ? ip_flush_pending_frames+0x20/0x20 [ 1895.011864] ? lock_downgrade+0x6d0/0x6d0 [ 1895.012381] ? xfrm_lookup_route+0x65/0x210 [ 1895.012916] udp_sendmsg+0x1940/0x2160 [ 1895.013395] ? ip_frag_init+0x350/0x350 [ 1895.013884] ? udp_setsockopt+0xc0/0xc0 [ 1895.014366] ? mark_lock+0xf5/0x2df0 [ 1895.014823] ? lock_chain_count+0x20/0x20 [ 1895.015328] ? mark_lock+0xf5/0x2df0 [ 1895.015784] ? mark_lock+0xf5/0x2df0 [ 1895.016237] ? lock_chain_count+0x20/0x20 [ 1895.016762] ? lock_chain_count+0x20/0x20 [ 1895.017268] ? prep_new_page+0x16d/0x1d0 [ 1895.017761] ? lock_chain_count+0x20/0x20 [ 1895.018275] ? __lock_acquire+0x1657/0x5b00 [ 1895.018802] udpv6_sendmsg+0x1b30/0x2ad0 04:00:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000640)="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", 0x1d9, r1) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1895.019295] ? __lock_acquire+0x1657/0x5b00 [ 1895.024802] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.025435] ? trace_hardirqs_on+0x5b/0x180 [ 1895.025962] ? lock_acquire+0x197/0x470 [ 1895.026443] ? find_held_lock+0x2c/0x110 [ 1895.026940] ? lock_acquire+0x197/0x470 [ 1895.027420] ? find_held_lock+0x2c/0x110 [ 1895.027915] ? __might_fault+0xd3/0x180 [ 1895.028405] ? lock_downgrade+0x6d0/0x6d0 [ 1895.028914] ? sock_has_perm+0x1ea/0x280 [ 1895.029410] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1895.030047] ? __import_iovec+0x458/0x590 [ 1895.030550] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.031178] inet6_sendmsg+0x105/0x140 [ 1895.031652] ? inet6_compat_ioctl+0x320/0x320 [ 1895.032194] __sock_sendmsg+0xf2/0x190 [ 1895.032679] ____sys_sendmsg+0x334/0x870 [ 1895.033175] ? sock_write_iter+0x3d0/0x3d0 [ 1895.033687] ? do_recvmmsg+0x6d0/0x6d0 [ 1895.034163] ? __lock_acquire+0x1657/0x5b00 [ 1895.034694] ___sys_sendmsg+0xf3/0x170 [ 1895.035173] ? sendmsg_copy_msghdr+0x160/0x160 [ 1895.035724] ? vmacache_find+0x55/0x2a0 [ 1895.036214] ? lock_acquire+0x197/0x470 [ 1895.036708] ? find_held_lock+0x2c/0x110 [ 1895.037202] ? __might_fault+0xd3/0x180 [ 1895.037685] ? lock_downgrade+0x6d0/0x6d0 [ 1895.038201] ? asm_exc_page_fault+0x1e/0x30 [ 1895.038745] __sys_sendmmsg+0x195/0x470 [ 1895.039244] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1895.039779] ? lock_downgrade+0x6d0/0x6d0 [ 1895.040306] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1895.040923] ? wait_for_completion_io+0x270/0x270 [ 1895.041517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1895.042087] ? vfs_write+0x354/0xb10 [ 1895.042548] ? fput_many+0x2f/0x1a0 [ 1895.042997] ? ksys_write+0x1a9/0x260 [ 1895.043459] ? __ia32_sys_read+0xb0/0xb0 [ 1895.043957] __x64_sys_sendmmsg+0x99/0x100 [ 1895.044492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.045116] do_syscall_64+0x33/0x40 [ 1895.045569] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1895.046193] RIP: 0033:0x7fec4fe72b19 [ 1895.046649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.048894] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1895.049819] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1895.050685] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1895.051550] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.052421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.053291] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:00:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x22, r1}}) 04:00:39 executing program 2: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x40, 0x4) msgrcv(0x0, &(0x7f0000000440)={0x0, ""/4096}, 0x1008, 0x0, 0x800) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @loopback, 0x1f}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x6}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001480)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000080000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041fff8c900000000000000000000000000000000000000000000000000000000000000000000000000000000070000000a004e2040000001fc0100000000000000000000000f0001ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000a004e2200400040fc00000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2200000009fe88000000000000000000000000010100040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000defc3848454bf80fb069f874ed2ca20328c17a7ed07816b48d38adbf54c4d6fb72b253059930e196efb8fb234c34152fa64a5be4bfd5a44ed2523b74707a3c56e2568806b47188ef0593fa753e0fb56c9bc90674a4ec714ccb64a756f2b32247f0712bc976bb40ec289356abc9eac46e6f4e2e6d427f93d5147c24ec1d28b14b47450e882e49976f0068145001a107759ca411b6b30bf1"], 0x410) close(r0) [ 1895.104323] 9pnet: Insufficient options for proto=fd 04:00:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xe, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0x3, 0x20, 0xea, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xb29, 0x9}, 0x1808, 0x33, 0x8, 0x6, 0xffffffffffffffff, 0x20, 0x0, 0x0, 0x6, 0x0, 0x13}, r1, 0x7, r3, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:00:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 04:00:39 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000004fc0)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004f80)={&(0x7f0000002bc0)={0x28, 0x38, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa}, [@typed={0xc, 0x46, 0x0, 0x0, @u64=0x20000000000000}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x4000010) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r4 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6c, 0x840) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg$unix(r2, &(0x7f0000004e00)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/139, 0x8b}, {&(0x7f0000000440)=""/174, 0xae}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f00000005c0), 0x6e, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/137, 0x89}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f00000018c0)=""/63, 0x3f}, {&(0x7f0000001900)=""/4096, 0x1000}], 0x3, &(0x7f0000002940)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002a00)=""/41, 0x29}, {&(0x7f0000002a40)=""/207, 0xcf}], 0x2, &(0x7f0000002b80)}}, {{&(0x7f0000002c00)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x2, &(0x7f0000004cc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x130}}], 0x5, 0x40000000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000004f40)={{0x1, 0x1, 0x18, r5, {0xee00, r6}}, './file0\x00'}) [ 1895.151815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10965 comm=syz-executor.6 04:00:39 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x2c, r1}}) 04:00:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 77) [ 1895.190094] 9pnet: Insufficient options for proto=fd [ 1895.228333] FAULT_INJECTION: forcing a failure. [ 1895.228333] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.229799] CPU: 0 PID: 10976 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1895.230648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1895.231664] Call Trace: [ 1895.231994] dump_stack+0x107/0x167 [ 1895.232455] should_fail.cold+0x5/0xa [ 1895.232930] ? lock_release+0x680/0x680 [ 1895.233422] ? skb_clone+0x14f/0x3d0 [ 1895.233881] should_failslab+0x5/0x20 [ 1895.234350] kmem_cache_alloc+0x5b/0x310 [ 1895.234845] ? mark_lock+0xf5/0x2df0 [ 1895.235305] skb_clone+0x14f/0x3d0 [ 1895.235743] dev_queue_xmit_nit+0x3a7/0xb00 [ 1895.236274] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1895.236855] dev_hard_start_xmit+0xab/0x6f0 [ 1895.237389] __dev_queue_xmit+0x179a/0x2690 [ 1895.237922] ? find_held_lock+0x2c/0x110 [ 1895.238420] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1895.238982] ? lock_downgrade+0x6d0/0x6d0 [ 1895.239487] ? lock_acquire+0x197/0x470 [ 1895.239976] ? ip_finish_output2+0x220/0x21f0 [ 1895.240546] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1895.241189] neigh_connected_output+0x382/0x4d0 [ 1895.241767] ip_finish_output2+0x6f1/0x21f0 [ 1895.242297] ? nf_hook_slow+0xfc/0x1e0 [ 1895.242775] ? ip_frag_next+0x9e0/0x9e0 [ 1895.243260] ? nf_hook+0x160/0x510 [ 1895.243698] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1895.244320] __ip_finish_output.part.0+0x5f3/0xb50 [ 1895.244934] ? ip_fragment.constprop.0+0x240/0x240 [ 1895.245531] ? nf_hook+0x510/0x510 [ 1895.245975] ip_output+0x2f7/0x600 [ 1895.246414] ip_send_skb+0xdd/0x260 [ 1895.246866] udp_send_skb+0x6da/0x11d0 [ 1895.247350] udp_sendmsg+0x1980/0x2160 [ 1895.247830] ? ip_frag_init+0x350/0x350 [ 1895.248324] ? udp_setsockopt+0xc0/0xc0 [ 1895.248829] ? mark_lock+0xf5/0x2df0 [ 1895.249290] ? lock_chain_count+0x20/0x20 [ 1895.249798] ? mark_lock+0xf5/0x2df0 [ 1895.250256] ? mark_lock+0xf5/0x2df0 [ 1895.250712] ? lock_chain_count+0x20/0x20 [ 1895.251220] ? lock_chain_count+0x20/0x20 [ 1895.251734] ? prep_new_page+0x16d/0x1d0 [ 1895.252232] ? lock_chain_count+0x20/0x20 [ 1895.252769] ? __lock_acquire+0x1657/0x5b00 [ 1895.253303] udpv6_sendmsg+0x1b30/0x2ad0 [ 1895.253806] ? __lock_acquire+0x1657/0x5b00 [ 1895.254343] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.254975] ? trace_hardirqs_on+0x5b/0x180 [ 1895.255510] ? lock_acquire+0x197/0x470 [ 1895.255995] ? find_held_lock+0x2c/0x110 [ 1895.256513] ? lock_acquire+0x197/0x470 [ 1895.256999] ? find_held_lock+0x2c/0x110 [ 1895.257502] ? __might_fault+0xd3/0x180 [ 1895.257988] ? lock_downgrade+0x6d0/0x6d0 [ 1895.258499] ? sock_has_perm+0x1ea/0x280 [ 1895.258996] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1895.259642] ? __import_iovec+0x458/0x590 [ 1895.260149] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.260806] inet6_sendmsg+0x105/0x140 [ 1895.261283] ? inet6_compat_ioctl+0x320/0x320 [ 1895.261832] __sock_sendmsg+0xf2/0x190 [ 1895.262310] ____sys_sendmsg+0x334/0x870 [ 1895.262809] ? sock_write_iter+0x3d0/0x3d0 [ 1895.263326] ? do_recvmmsg+0x6d0/0x6d0 [ 1895.263805] ? __lock_acquire+0x1657/0x5b00 [ 1895.264344] ___sys_sendmsg+0xf3/0x170 [ 1895.264839] ? sendmsg_copy_msghdr+0x160/0x160 [ 1895.265396] ? vmacache_find+0x55/0x2a0 [ 1895.265893] ? lock_acquire+0x197/0x470 [ 1895.266379] ? find_held_lock+0x2c/0x110 [ 1895.266885] ? __might_fault+0xd3/0x180 [ 1895.267371] ? lock_downgrade+0x6d0/0x6d0 [ 1895.267880] ? asm_exc_page_fault+0x1e/0x30 [ 1895.268432] __sys_sendmmsg+0x195/0x470 [ 1895.268927] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1895.269459] ? lock_downgrade+0x6d0/0x6d0 [ 1895.269983] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1895.270578] ? wait_for_completion_io+0x270/0x270 [ 1895.271170] ? rcu_read_lock_any_held+0x75/0xa0 [ 1895.271741] ? vfs_write+0x354/0xb10 [ 1895.272197] ? fput_many+0x2f/0x1a0 [ 1895.272667] ? ksys_write+0x1a9/0x260 [ 1895.273134] ? __ia32_sys_read+0xb0/0xb0 [ 1895.273639] __x64_sys_sendmmsg+0x99/0x100 [ 1895.274157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.274789] do_syscall_64+0x33/0x40 [ 1895.275247] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1895.275876] RIP: 0033:0x7fec4fe72b19 [ 1895.276334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.278613] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1895.279547] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1895.280428] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1895.281307] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.282181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.283055] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:00:40 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:00:40 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508", 0x5}], 0x1}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 04:00:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_setup(0x5, &(0x7f0000000700)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r3 = eventfd2(0x0, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="2dad503ea5da348e", 0x8}, {&(0x7f0000000240)='~', 0x1}], 0x2) r4 = eventfd2(0x0, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="2dad503ea5da348e", 0x8}, {&(0x7f0000000240)='~', 0x1}], 0x2) r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x80800) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) io_submit(0x0, 0x7, &(0x7f0000000a40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f0000000440)="43eaf68669c53c19ab6efeb6e3d9a554f53f72c8439f7daa8b2f4e2e344d5a30e829e5a7991f271ad46b4f63a015874119", 0x31, 0x7, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f00000005c0)="26e867e742de8ad2e36b12c5a46e5289d72fed8cd6668c1fa7495fcde003fb602dd5175661dc03dfb799a7d258e7a77153c1b3ad38d7561ba54f394760217ea2b06081fe12820cdc5e035c867d9b91e71e79cc0993ac6c7664a863bff4575bd0b142a992aba1dfff77e0ebc5b64aea88414a4ec58c030f9272a035c177593005d09d35a0f214fb5b45ec3c015aeb2493f7465f", 0x93, 0x0, 0x0, 0x1, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000740)="5a32a3931fc3384100db96a9c2af5cebf74c3f2947fba1ae5bdd6fd2370251e92e0225c9ec9e9c3c23a5f4b07d20e2d189c19f73bbc164f72c63312070a70b24497e364d519c5d0889ff771d33690986a58c2212615b079deef9a13f49dfe8e567db595716c77866f6add0bb174c554553c6d1fc1661715f92253a9e224de8ab303df221a07a4a1c8568b8dcc42bab77aa35ac1045c1f20773d3dae1ceb55f6e2c80b53513a7b2ccd44203d210cd0976632eb300e68c46e5a57dc316f6dee2a72c5277ce592ce54da6c1d2dcca9edaa032c42c68c3e78ef064a3437e2beadb1c3319d7e48ab575dd6f06761ae24951b83308e95cd2d2d395", 0xf8, 0xf53f, 0x0, 0x3, r4}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f00000006c0)="83f0fda15dc4b123a7f1efedfe25", 0xe, 0xffffffff, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x7, 0x9fe6, 0xffffffffffffffff, &(0x7f0000000880)="9794412876c05169dfe6327eeeddb0f40f880bce99f4401f4ea616b0731d6a6808d702c37856a4e863ffa6aebf16e8f62c9e9c660fe8abaf5d82609563cc103e5062ae27f49d7084e01cf8f8eb031a999cf32ebc044af67897b5f82bc82ed0584c59d9cbc166672b47", 0x69, 0xea, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x6, 0x6, r0, &(0x7f0000000940)="a08b0f11c7", 0x5, 0x5, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2, 0x2, r6, &(0x7f00000009c0)="a865789193d49cc96705ad7f5fc570c9ace77464ec2a23a8b65fba9bdbe1", 0x1e, 0x3ff, 0x0, 0x3}]) io_setup(0x5, &(0x7f0000000700)=0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) io_submit(r7, 0x2, &(0x7f0000000400)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8001, r0, &(0x7f0000000240)="35d0d9a862a7cf6aa31e35d4e7310de9ce5ffcf07a94754e1a48e5d4ba683683b82bc4caf7e22b8d24719692bdf1f3af92ca43894716aa28daa3bfc9cedc1a51ed8552bdeec8fb2976fc5a8fee327331c8b56a56d9fa49", 0x57, 0x6, 0x0, 0x1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000300)="e953277b42d4e8fede2deb689820c96acb550216f383b84794141b1e255747493346a68ad9f814366670daee50a8e5d88970d18c91ff0848338ef5c11ed5843489cefc53d37d6a59b72d7ba2c42ea06a0bef0f50b8fdcee75c869bffc250869bb273f2d15a0a59cb49a31dd713ce121346742ebe767abdc93b1c69466ae4ae4dc8", 0x81, 0x1000, 0x0, 0x2}]) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) io_pgetevents(r2, 0x7, 0xa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)={0x77359400}, &(0x7f0000000200)={&(0x7f0000000040), 0x8}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x8, 0x0, r0, 0x0}]) 04:00:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x22}) 04:00:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 78) 04:00:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r2, 0x800000000081) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xf7, 0x6, 0x72, 0x1f, 0x0, 0x2, 0x2000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x99, 0x40}, 0x20e, 0x7, 0x1, 0x5, 0x800, 0x8001, 0x6, 0x0, 0x3, 0x0, 0x8000}, r2, 0xe, r3, 0xa) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:00:40 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 1895.860031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1895.864864] 9pnet: Insufficient options for proto=fd [ 1895.868138] FAULT_INJECTION: forcing a failure. [ 1895.868138] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.869566] CPU: 1 PID: 10990 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1895.870409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1895.871432] Call Trace: [ 1895.871761] dump_stack+0x107/0x167 [ 1895.872221] should_fail.cold+0x5/0xa [ 1895.872706] ? create_object.isra.0+0x3a/0xa20 [ 1895.873268] should_failslab+0x5/0x20 [ 1895.873741] kmem_cache_alloc+0x5b/0x310 [ 1895.874243] ? lock_acquire+0x197/0x470 [ 1895.874742] create_object.isra.0+0x3a/0xa20 [ 1895.875283] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1895.875915] kmem_cache_alloc+0x159/0x310 [ 1895.876434] skb_clone+0x14f/0x3d0 [ 1895.876872] dev_queue_xmit_nit+0x3a7/0xb00 [ 1895.877401] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1895.877965] dev_hard_start_xmit+0xab/0x6f0 [ 1895.878507] __dev_queue_xmit+0x179a/0x2690 [ 1895.879044] ? find_held_lock+0x2c/0x110 [ 1895.879542] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1895.880099] ? lock_downgrade+0x6d0/0x6d0 [ 1895.880621] ? lock_acquire+0x197/0x470 [ 1895.881107] ? ip_finish_output2+0x220/0x21f0 [ 1895.881675] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1895.882321] neigh_connected_output+0x382/0x4d0 [ 1895.882898] ip_finish_output2+0x6f1/0x21f0 [ 1895.883428] ? nf_hook_slow+0xfc/0x1e0 [ 1895.883913] ? ip_frag_next+0x9e0/0x9e0 [ 1895.884405] ? nf_hook+0x160/0x510 [ 1895.885331] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1895.886559] __ip_finish_output.part.0+0x5f3/0xb50 [ 1895.887746] ? ip_fragment.constprop.0+0x240/0x240 [ 1895.889036] ? nf_hook+0x510/0x510 [ 1895.889895] ip_output+0x2f7/0x600 [ 1895.890745] ip_send_skb+0xdd/0x260 [ 1895.891618] udp_send_skb+0x6da/0x11d0 [ 1895.892601] udp_sendmsg+0x1980/0x2160 [ 1895.893539] ? ip_frag_init+0x350/0x350 [ 1895.894505] ? udp_setsockopt+0xc0/0xc0 [ 1895.895457] ? mark_lock+0xf5/0x2df0 [ 1895.896356] ? lock_chain_count+0x20/0x20 [ 1895.897533] ? mark_lock+0xf5/0x2df0 [ 1895.898427] ? mark_lock+0xf5/0x2df0 [ 1895.899314] ? lock_chain_count+0x20/0x20 [ 1895.900304] ? lock_chain_count+0x20/0x20 [ 1895.901471] ? prep_new_page+0x16d/0x1d0 [ 1895.902439] ? lock_chain_count+0x20/0x20 [ 1895.903436] ? __lock_acquire+0x1657/0x5b00 [ 1895.904488] udpv6_sendmsg+0x1b30/0x2ad0 [ 1895.905456] ? __lock_acquire+0x1657/0x5b00 [ 1895.906490] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.907719] ? trace_hardirqs_on+0x5b/0x180 [ 1895.908827] ? lock_acquire+0x197/0x470 [ 1895.909773] ? find_held_lock+0x2c/0x110 [ 1895.910745] ? lock_acquire+0x197/0x470 [ 1895.911691] ? find_held_lock+0x2c/0x110 [ 1895.912558] ? __might_fault+0xd3/0x180 [ 1895.913044] ? lock_downgrade+0x6d0/0x6d0 [ 1895.913553] ? sock_has_perm+0x1ea/0x280 [ 1895.914047] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1895.914692] ? __import_iovec+0x458/0x590 [ 1895.915199] ? udp_v6_push_pending_frames+0x360/0x360 [ 1895.915834] inet6_sendmsg+0x105/0x140 [ 1895.916310] ? inet6_compat_ioctl+0x320/0x320 [ 1895.917499] __sock_sendmsg+0xf2/0x190 [ 1895.918429] ____sys_sendmsg+0x334/0x870 [ 1895.919396] ? sock_write_iter+0x3d0/0x3d0 [ 1895.920407] ? do_recvmmsg+0x6d0/0x6d0 [ 1895.921504] ? __lock_acquire+0x1657/0x5b00 [ 1895.922541] ___sys_sendmsg+0xf3/0x170 [ 1895.923469] ? sendmsg_copy_msghdr+0x160/0x160 [ 1895.924602] ? vmacache_find+0x55/0x2a0 [ 1895.925558] ? lock_acquire+0x197/0x470 [ 1895.926506] ? find_held_lock+0x2c/0x110 [ 1895.927473] ? __might_fault+0xd3/0x180 [ 1895.928427] ? lock_downgrade+0x6d0/0x6d0 [ 1895.929594] ? asm_exc_page_fault+0x1e/0x30 [ 1895.930634] __sys_sendmmsg+0x195/0x470 [ 1895.931584] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1895.932680] ? lock_downgrade+0x6d0/0x6d0 [ 1895.933684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1895.934840] ? wait_for_completion_io+0x270/0x270 [ 1895.935996] ? rcu_read_lock_any_held+0x75/0xa0 [ 1895.937238] ? vfs_write+0x354/0xb10 [ 1895.938125] ? fput_many+0x2f/0x1a0 [ 1895.939047] ? ksys_write+0x1a9/0x260 [ 1895.940053] ? __ia32_sys_read+0xb0/0xb0 [ 1895.948891] __x64_sys_sendmmsg+0x99/0x100 [ 1895.949403] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1895.950026] do_syscall_64+0x33/0x40 [ 1895.950477] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1895.951097] RIP: 0033:0x7fec4fe72b19 [ 1895.951550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1895.953802] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1895.954728] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1895.955593] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1895.956473] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.957340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1895.958221] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1895.981825] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11001 comm=syz-executor.6 04:00:40 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x401, 0x0, 0x0, 'queue1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x30401, 0x140) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/246, 0xf6, 0x3) sendfile(r2, r3, 0x0, 0x100000001) lseek(0xffffffffffffffff, 0xffff, 0x0) 04:00:40 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 04:00:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r3 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='85baa174f0cb1142', r1) request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\x00', r3) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r5, 0xfffffffffffffffc, r4, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)={0x3, 0x0, @auto=[0x3f, 0x11, 0x31]}, 0xb, r5) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0, 0x0, 0x92}], 0x0, &(0x7f0000000040)=ANY=[]) 04:00:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 79) 04:00:40 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x1, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1890, 0x0, 0x0, 0x0, 0xd73, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gretap0\x00', 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x3a74, &(0x7f0000000100)={0x0, 0x2a98, 0x0, 0x404000, 0x284}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000001c0)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x1010, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f0000000280)=0x6e) dup(0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000007780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) [ 1896.075057] FAULT_INJECTION: forcing a failure. [ 1896.075057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1896.076643] CPU: 0 PID: 11014 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1896.077505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1896.078529] Call Trace: [ 1896.078868] dump_stack+0x107/0x167 [ 1896.079325] should_fail.cold+0x5/0xa [ 1896.079815] _copy_from_user+0x2e/0x1b0 [ 1896.080321] __copy_msghdr_from_user+0x91/0x4b0 [ 1896.080925] ? __ia32_sys_shutdown+0x80/0x80 [ 1896.081482] ? udp_v6_push_pending_frames+0x360/0x360 [ 1896.082130] ? inet6_sendmsg+0xbd/0x140 [ 1896.082632] ? inet6_compat_ioctl+0x320/0x320 [ 1896.083189] ? __sock_sendmsg+0x55/0x190 [ 1896.083707] sendmsg_copy_msghdr+0xa1/0x160 [ 1896.084244] ? do_recvmmsg+0x6d0/0x6d0 [ 1896.084746] ? __lock_acquire+0x1657/0x5b00 [ 1896.085297] ___sys_sendmsg+0xc6/0x170 [ 1896.085791] ? sendmsg_copy_msghdr+0x160/0x160 [ 1896.086366] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1896.087011] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1896.087565] ? trace_hardirqs_on+0x5b/0x180 [ 1896.088111] ? lock_acquire+0x197/0x470 [ 1896.088623] ? find_held_lock+0x2c/0x110 [ 1896.089130] ? __might_fault+0xd3/0x180 [ 1896.089621] ? lock_downgrade+0x6d0/0x6d0 [ 1896.090132] ? io_schedule_timeout+0x140/0x140 [ 1896.090711] __sys_sendmmsg+0x195/0x470 [ 1896.091207] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1896.091743] ? lock_downgrade+0x6d0/0x6d0 [ 1896.092267] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1896.092880] ? wait_for_completion_io+0x270/0x270 [ 1896.093482] ? rcu_read_lock_any_held+0x75/0xa0 [ 1896.094054] ? vfs_write+0x354/0xb10 [ 1896.094510] ? fput_many+0x2f/0x1a0 [ 1896.094958] ? ksys_write+0x1a9/0x260 [ 1896.095433] ? __ia32_sys_read+0xb0/0xb0 [ 1896.095938] __x64_sys_sendmmsg+0x99/0x100 [ 1896.096469] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1896.097102] do_syscall_64+0x33/0x40 [ 1896.097557] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1896.098187] RIP: 0033:0x7fec4fe72b19 [ 1896.098647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1896.100907] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1896.101841] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1896.102717] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1896.103591] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1896.104475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1896.105358] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1896.689712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:00:55 executing program 6: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000400)=0x6e, 0x800) socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="00fbbb0402d0976a9b94a32d19b7eb70a47c00518e5d2e7f8c3e7371131a3b87b0c504b03c09d96e4056e562434b44dbe59d385e1dc45a2f8c60f260ecd544f650883d8f04c0ec2902f36f636f98faa2efc7850ce3087ffe081419d26f66a5f025b38bbf8e093c255f5a67120b256be5d6c44786095e1e7e35fd908a156bb30677b2851783411b93742da523c6852612f635af99aeb00417560ff7ca9cb56060045cb2611ea6a9f2c0c29fb6ef4e37cc517ea0c94e5565843418ca"], 0xbb, 0xc91be6bf82d24fce) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = accept$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) listen(r4, 0x7fff) connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x95f440c5) [ 1910.917017] FAULT_INJECTION: forcing a failure. [ 1910.917017] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.920274] CPU: 0 PID: 11032 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1910.922312] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1910.924642] Call Trace: [ 1910.924661] dump_stack+0x107/0x167 [ 1910.924677] should_fail.cold+0x5/0xa [ 1910.924694] ? create_object.isra.0+0x3a/0xa20 [ 1910.924711] should_failslab+0x5/0x20 [ 1910.924725] kmem_cache_alloc+0x5b/0x310 [ 1910.924741] ? lock_acquire+0x197/0x470 [ 1910.924758] create_object.isra.0+0x3a/0xa20 [ 1910.924770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1910.924793] kmem_cache_alloc+0x159/0x310 [ 1910.931166] ? mark_lock+0xf5/0x2df0 [ 1910.931190] skb_clone+0x14f/0x3d0 [ 1910.931209] dev_queue_xmit_nit+0x3a7/0xb00 [ 1910.931227] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1910.931251] dev_hard_start_xmit+0xab/0x6f0 [ 1910.931275] __dev_queue_xmit+0x179a/0x2690 [ 1910.931295] ? find_held_lock+0x2c/0x110 [ 1910.931311] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1910.931331] ? lock_downgrade+0x6d0/0x6d0 [ 1910.931346] ? lock_acquire+0x197/0x470 [ 1910.931363] ? ip_finish_output2+0x220/0x21f0 [ 1910.931384] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1910.931406] neigh_connected_output+0x382/0x4d0 [ 1910.931433] ip_finish_output2+0x6f1/0x21f0 [ 1910.931451] ? nf_hook_slow+0xfc/0x1e0 [ 1910.931469] ? ip_frag_next+0x9e0/0x9e0 [ 1910.931484] ? nf_hook+0x160/0x510 [ 1910.931502] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1910.931522] __ip_finish_output.part.0+0x5f3/0xb50 [ 1910.931541] ? ip_fragment.constprop.0+0x240/0x240 [ 1910.931554] ? nf_hook+0x510/0x510 [ 1910.931581] ip_output+0x2f7/0x600 [ 1910.931602] ip_send_skb+0xdd/0x260 [ 1910.931622] udp_send_skb+0x6da/0x11d0 [ 1910.931649] udp_sendmsg+0x1980/0x2160 [ 1910.931669] ? ip_frag_init+0x350/0x350 [ 1910.931693] ? udp_setsockopt+0xc0/0xc0 [ 1910.931706] ? mark_lock+0xf5/0x2df0 [ 1910.931728] ? lock_chain_count+0x20/0x20 [ 1910.931744] ? mark_lock+0xf5/0x2df0 [ 1910.931764] ? mark_lock+0xf5/0x2df0 [ 1910.931778] ? lock_chain_count+0x20/0x20 [ 1910.931793] ? lock_chain_count+0x20/0x20 [ 1910.931811] ? prep_new_page+0x16d/0x1d0 [ 1910.931826] ? lock_chain_count+0x20/0x20 [ 1910.931854] ? __lock_acquire+0x1657/0x5b00 [ 1910.931873] udpv6_sendmsg+0x1b30/0x2ad0 [ 1910.931889] ? __lock_acquire+0x1657/0x5b00 [ 1910.931912] ? udp_v6_push_pending_frames+0x360/0x360 [ 1910.931928] ? trace_hardirqs_on+0x5b/0x180 [ 1910.955068] ? lock_acquire+0x197/0x470 [ 1910.955550] ? find_held_lock+0x2c/0x110 [ 1910.956048] ? lock_acquire+0x197/0x470 [ 1910.956531] ? find_held_lock+0x2c/0x110 [ 1910.957053] ? __might_fault+0xd3/0x180 [ 1910.957658] ? lock_downgrade+0x6d0/0x6d0 [ 1910.958288] ? lock_chain_count+0x20/0x20 [ 1910.958920] ? sock_has_perm+0x1ea/0x280 [ 1910.959540] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1910.960339] ? __import_iovec+0x458/0x590 [ 1910.960985] ? udp_v6_push_pending_frames+0x360/0x360 [ 1910.961778] inet6_sendmsg+0x105/0x140 [ 1910.962371] ? inet6_compat_ioctl+0x320/0x320 [ 1910.963057] __sock_sendmsg+0xf2/0x190 [ 1910.963654] ____sys_sendmsg+0x334/0x870 [ 1910.964273] ? sock_write_iter+0x3d0/0x3d0 [ 1910.964921] ? do_recvmmsg+0x6d0/0x6d0 [ 1910.965497] ? __lock_acquire+0x1657/0x5b00 [ 1910.966171] ___sys_sendmsg+0xf3/0x170 [ 1910.966770] ? sendmsg_copy_msghdr+0x160/0x160 [ 1910.967467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1910.968266] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1910.968956] ? trace_hardirqs_on+0x5b/0x180 [ 1910.969580] ? lock_acquire+0x197/0x470 [ 1910.970187] ? find_held_lock+0x2c/0x110 [ 1910.970812] ? __might_fault+0xd3/0x180 [ 1910.971420] ? lock_downgrade+0x6d0/0x6d0 [ 1910.972058] ? io_schedule_timeout+0x140/0x140 [ 1910.972769] __sys_sendmmsg+0x195/0x470 [ 1910.973361] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1910.973954] ? lock_downgrade+0x6d0/0x6d0 [ 1910.974504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1910.975162] ? wait_for_completion_io+0x270/0x270 [ 1910.975861] ? rcu_read_lock_any_held+0x75/0xa0 [ 1910.976531] ? vfs_write+0x354/0xb10 [ 1910.977089] ? fput_many+0x2f/0x1a0 [ 1910.977611] ? ksys_write+0x1a9/0x260 [ 1910.978159] ? __ia32_sys_read+0xb0/0xb0 [ 1910.978746] __x64_sys_sendmmsg+0x99/0x100 [ 1910.979263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1910.979887] do_syscall_64+0x33/0x40 [ 1910.980339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1910.980968] RIP: 0033:0x7fec4fe72b19 [ 1910.981421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1910.983652] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1910.984599] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1910.985474] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1910.986338] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.987204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1910.988070] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:00:55 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x224c0}, 0xfe8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) sendfile(r0, r1, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r2}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80800, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@cache_mmap}], [{@pcr={'pcr', 0x3d, 0x2c}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@(-*$.'}}, {@dont_hash}, {@hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt={'euid>', r2}}, {@seclabel}, {@dont_hash}, {@func={'func', 0x3d, 'FILE_CHECK'}}]}}) 04:00:55 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x2}}) 04:00:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x472200, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="67446698000000000000000041f46850780238ccc2bfbf00000000"], 0x10) syz_io_uring_submit(0x0, r3, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}, 0x80000001) io_uring_enter(r1, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 04:00:55 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 80) 04:00:55 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:00:55 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x3000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:00:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) pipe(&(0x7f0000000000)) 04:01:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x7}}) 04:01:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x7000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:01:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8496}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x4, 0x0, 0x7, 0x6e6, 0x68, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x7808, 0x1, 0x884}}) sendmmsg$inet(r1, &(0x7f0000001140)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="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", 0xfd}, {&(0x7f0000000280)="aafa99e0a46ea49aebf5e3532a48990e6428ab494d22be81cb8de54ee95a0b7c151768261f77d86da781489240ed31a7ff6004dc17d64c7e78a53dc03f6455d2a7dfec01f2d6cb9d408860c08bf097c9a6cd8e71f3455c30dacb6d35e7a41f55ba20b2aa1563aafc1d2b626866549d48ba4b009bd546c8c61f103d1e3829", 0x7e}, {&(0x7f0000000340)="f1d1c7850bdb9c1ca970416f8a8a8225a981844d19726c6422e13f7a3b05ce22193e1da075584e7f45a76dbd1beada3d4b75ca44ba89a01fa244dddd9aee11975baadfb1eb15225b9bf16266e585e318aa81adea35e360ba8592e2e6d03b7c547763e396287a99890bba5ac7a6c9e90755a8e9f630ce2ce1d840776ec8724fde1f49080b3581f84ba376c06736a9f23f83368fb6240a13bbcab02bf5d4ac1b30f7f387148963b4050e51d45479d7f379f58f77d8a7024dc92a2f016014", 0xbd}, {&(0x7f0000000480)="01e4f3ff3be7c1a81281219c562403f4d2e9f32710e2628f3cb753e359ede1c2ac53e7e71d2a7ab81ea0f92a4a8aecbd30237bac1b0ced1e928bcbfc2433fdc40c7d0d073d9863f8b5a0fc9e2bc223de363bd89299259ec11fbe27eef20155f7eb225bd2b3a2c53f64ff52e4f42327d00f2133d8c2ebbce8f0f85eee85ba1c70177f1814ac2291d45f7bf3642662bb95c611807dce7e11e1d744e5becbad6113dd9fa62d4019b987163ea1630f7607c6674a7ac030a62604dcec6609cfe65b7a42e6d4452e5f53fd6e635121e9e3e51e7af12ff38731416910a8d3272e81e62a15dba043a3ebae4d6bc1cf08dd018a62debb", 0xf2}, {&(0x7f0000000580)="2b944be596996bf1d63b088aa8a97ee82e190c1d634a8776aeb5256151e9c95db92f66b357a5a101d4cefd8eb38e61cbaace577290e29c7c68520a6df6a00aa59ef6089e6d8a5436c7a004265643f28489", 0x51}, {&(0x7f0000000600)="24cbb82dcc325ec8e995e453bc11083576df60f3fe6903cb382daf5d37652722df4a1885bba822855c15a12fe37d91ac9ae7f70349dd4782ba379683bf08e84b585fb28bcd746870b3555edd7241a2127eb41d492720ac668e978c586a9aba5218b36f484dd20a", 0x67}], 0x6, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @private=0xa010101, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}], 0x40}}, {{&(0x7f0000000780)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000940)=[{&(0x7f00000007c0)="2a6d59a4045a72c2032b", 0xa}, {&(0x7f0000000800)="939d2feaf5d152de9d6985e03ecabf3343bbe8d0cb1565238a57133585f7f23cecbe5f3e92c0c6a2de76c3a405667e55756c4333cba99c9c32a5c53182f0070d6bfe6652a270de9b73165584e5899181e67eba93f7406bf7430e1cdfdf6c0557e83f2030b1f62cb9797a07a5719e44bd2cf0349f6165ece2dcbc39ad0090aea942375daddbd56816650a392f3c0f1a3c260821d7b160", 0x96}, {&(0x7f00000008c0)="35b0684eca90415249d771991a8c64203f32da660e26772f52f107f0e18cbc7281b1b8164b1fbd4c4082828584ee918c6c492d259054207785b9cd39a0117d559db6bbf6dee407c69f5de3508cbf157cb09bed5e301e292dd4610d9e1b2cd15ad7a662b8d2fa7705b4d85b5502a48a9bf3de", 0x72}], 0x3, &(0x7f0000000ac0)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffe1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x1c, 0x29, 0x1, 0xc, [{@private=0xa010100, 0x1}, {@rand_addr=0x64010101, 0x6}, {@local, 0x2}]}, @end, @timestamp_addr={0x44, 0x4c, 0xdd, 0x1, 0x1, [{@rand_addr=0x64010102}, {@multicast2, 0x1}, {@remote, 0x7}, {@private=0xa010101, 0xf5da}, {@empty, 0x40}, {@empty, 0x1}, {@local, 0x40}, {@rand_addr=0x64010100, 0x4}, {@rand_addr=0x64010101, 0x1}]}, @cipso={0x86, 0x19, 0x2, [{0x6, 0xa, "6c244137309b01ab"}, {0x2, 0x9, "4937442da21488"}]}, @cipso={0x86, 0x39, 0x1, [{0x6, 0xc, "69ba668edd681a888b69"}, {0x6, 0xb, "ab8911444f0c200277"}, {0x7, 0xd, "8db7f8e43fde17692c2800"}, {0x5, 0xf, "c85f8ae14bcf9d8ece588c390c"}]}, @noop, @lsrr={0x83, 0x13, 0x6f, [@local, @multicast2, @remote, @loopback]}, @lsrr={0x83, 0x7, 0xb1, [@empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x157}}], 0x190}}, {{&(0x7f0000000980)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f00000009c0)="2d22b52dd4f88058f407d1845b90ef54813e2dbafcc55c6798f4df6f36365d765d0d1f7c293e42f6362dffeb432ecacb70504b7f31c9c548a34f8e325e09a90f5f3fb5ea46c37806316695", 0x4b}, {&(0x7f0000000c80)="f01a872609ed4f58857921196cf645ac0ebc73f6a0519ab14ad95faa4458af5b9fe50b7069c256a515652a4cf2855e4c4e79c6e93e95", 0x36}], 0x2, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000d80)="dffb9b6a9d00c18ed1bb8d36dbcb2000bcda19bb349c2d17142658a4e2", 0x1d}, {&(0x7f0000000dc0)="f9ab500a3da655c8bccff1c8a5238efee8c59c5b5ca34b0827276a742648d3fd0065cca8382054f67d1b302dd11ca723b9b096e6e70161008b7f9a8d5804f7c5e8abb3f49b9e7764a040af003d31d0579a9ad5299ecea803f0956348fc5273d6b01b3de25666ecbdd7", 0x69}, {&(0x7f0000000e40)="65cbbb4cac464820c05986e6383eef58212d4ff31fb5a7c72f923f70984899bb37e89ed96bb75f68895657693288e579d6675576256e819f44588712eb12da3bd93610883e713f53ed38ce5e6587d03c8275bc282a7f52f02d1c311a62da62dbc47d75dbb34dc4b9ecf3f12fda748e45083d815ccc69b88757f8bf5c09358e086fe2490c2f70b00a289212ededec513da3ff0c583157dcc4acce78640651fda2dc2605117e824708a19170ec51838562e85385f8b84f5379c4772cd67270276335f036c8a98a7711f84540566d68d63e019255ffb7eff6a18891cc5a339f0d52853d44d5dc51d7dcf5c6a48c608902ca", 0xf0}, {&(0x7f0000000f40)="b2a36a3763f7f75ae210349d81ee25f1cc043e268cdc753da53532731993d4ac108c9188bfe6cd0653a65e642811aaf9e38d0572d6fcac418490a596aa0662fef22599d914965d4ed8c22790b6fe32f744caa7adae59411de47a8306baab0f6c6efe9c7f5ecf177711549bb5d028c6a486f49ad09e705ee6f663052af10e23861eea128c7aa333b76a360cda240b687372765490c174a65144d62a4efbfeb58f57c8a367505bc2445cc64c979696525bab3d3cc7458702748ec9309d", 0xbc}], 0x4, &(0x7f0000001040)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@cipso={0x86, 0xc, 0x3, [{0x7, 0x6, "5a49bfd3"}]}, @ssrr={0x89, 0x2b, 0xaf, [@dev={0xac, 0x14, 0x14, 0x2f}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x4, "23f2"}]}, @ssrr={0x89, 0x1b, 0x58, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty, @private=0xa010101, @empty, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x40, 0x1, 0x2, [{@remote, 0x6}, {@broadcast, 0x5}, {@loopback, 0x1}, {@loopback, 0xfffffe04}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x3}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @timestamp={0x44, 0x8, 0x24, 0x0, 0x8, [0x3]}, @timestamp_prespec={0x44, 0x34, 0x28, 0x3, 0x4, [{@private=0xa010101, 0x6}, {@remote, 0x9}, {@multicast1, 0x2000000}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@rand_addr=0x64010100, 0x3}]}, @ra={0x94, 0x4}]}}}], 0xf8}}], 0x4, 0x200080d4) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:01:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 81) 04:01:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c90686b66732e66617400020801000470208400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x81) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 04:01:11 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'vcan0\x00', {'wg0\x00'}}) r3 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x9) socket$unix(0x1, 0x5, 0x0) 04:01:11 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x21}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 04:01:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(0x0, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 1927.013026] FAULT_INJECTION: forcing a failure. [ 1927.013026] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.018370] CPU: 0 PID: 11056 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1927.019217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.020228] Call Trace: [ 1927.020557] dump_stack+0x107/0x167 [ 1927.021006] should_fail.cold+0x5/0xa [ 1927.021476] ? create_object.isra.0+0x3a/0xa20 [ 1927.026055] should_failslab+0x5/0x20 [ 1927.026519] kmem_cache_alloc+0x5b/0x310 [ 1927.027013] create_object.isra.0+0x3a/0xa20 [ 1927.027544] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1927.028159] kmem_cache_alloc_node+0x169/0x330 [ 1927.028716] __alloc_skb+0x6d/0x5b0 [ 1927.029165] alloc_skb_with_frags+0x92/0x570 [ 1927.029718] ? lock_chain_count+0x20/0x20 [ 1927.030221] sock_alloc_send_pskb+0x7af/0x930 [ 1927.030768] ? sk_alloc+0x350/0x350 [ 1927.031214] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1927.031844] ? lock_downgrade+0x6d0/0x6d0 [ 1927.032357] __ip_append_data+0x1628/0x3310 [ 1927.032885] ? fib_select_path+0x293/0x1de0 [ 1927.033412] ? ip_frag_init+0x350/0x350 [ 1927.033915] ? ip_finish_output+0x330/0x330 [ 1927.034438] ? ip_route_output_key_hash+0x19c/0x340 [ 1927.035040] ? ipv4_mtu+0x1ed/0x2c0 [ 1927.035484] ip_make_skb+0x22a/0x2a0 [ 1927.035938] ? ip_frag_init+0x350/0x350 [ 1927.041703] ? ip_flush_pending_frames+0x20/0x20 [ 1927.042297] ? lock_downgrade+0x6d0/0x6d0 [ 1927.042818] ? xfrm_lookup_route+0x65/0x210 [ 1927.043354] udp_sendmsg+0x1940/0x2160 [ 1927.043840] ? ip_frag_init+0x350/0x350 [ 1927.044334] ? udp_setsockopt+0xc0/0xc0 [ 1927.044826] ? mark_lock+0xf5/0x2df0 [ 1927.045289] ? lock_chain_count+0x20/0x20 [ 1927.057819] ? mark_lock+0xf5/0x2df0 [ 1927.058275] ? mark_lock+0xf5/0x2df0 [ 1927.058726] ? lock_chain_count+0x20/0x20 [ 1927.059227] ? lock_chain_count+0x20/0x20 [ 1927.059729] ? prep_new_page+0x16d/0x1d0 [ 1927.060221] ? lock_chain_count+0x20/0x20 [ 1927.060729] ? __lock_acquire+0x1657/0x5b00 [ 1927.061254] udpv6_sendmsg+0x1b30/0x2ad0 [ 1927.061764] ? __lock_acquire+0x1657/0x5b00 [ 1927.062293] ? udp_v6_push_pending_frames+0x360/0x360 [ 1927.062917] ? trace_hardirqs_on+0x5b/0x180 [ 1927.063447] ? lock_acquire+0x197/0x470 [ 1927.063935] ? find_held_lock+0x2c/0x110 [ 1927.064443] ? lock_acquire+0x197/0x470 [ 1927.064930] ? find_held_lock+0x2c/0x110 [ 1927.065426] ? __might_fault+0xd3/0x180 [ 1927.065923] ? lock_downgrade+0x6d0/0x6d0 [ 1927.066428] ? sock_has_perm+0x1ea/0x280 [ 1927.066920] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1927.067557] ? __import_iovec+0x458/0x590 [ 1927.068059] ? udp_v6_push_pending_frames+0x360/0x360 [ 1927.068688] inet6_sendmsg+0x105/0x140 [ 1927.069161] ? inet6_compat_ioctl+0x320/0x320 [ 1927.069719] __sock_sendmsg+0xf2/0x190 [ 1927.070196] ____sys_sendmsg+0x334/0x870 [ 1927.070691] ? sock_write_iter+0x3d0/0x3d0 [ 1927.071205] ? do_recvmmsg+0x6d0/0x6d0 [ 1927.071681] ? __lock_acquire+0x1657/0x5b00 [ 1927.072213] ___sys_sendmsg+0xf3/0x170 [ 1927.072687] ? sendmsg_copy_msghdr+0x160/0x160 [ 1927.073243] ? vmacache_find+0x55/0x2a0 [ 1927.073754] ? lock_acquire+0x197/0x470 [ 1927.074235] ? find_held_lock+0x2c/0x110 [ 1927.074729] ? __might_fault+0xd3/0x180 [ 1927.075211] ? lock_downgrade+0x6d0/0x6d0 [ 1927.075715] ? asm_exc_page_fault+0x1e/0x30 [ 1927.076253] __sys_sendmmsg+0x195/0x470 [ 1927.076740] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1927.077261] ? lock_downgrade+0x6d0/0x6d0 [ 1927.080343] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1927.080930] ? wait_for_completion_io+0x270/0x270 [ 1927.081517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1927.082098] ? vfs_write+0x354/0xb10 [ 1927.082550] ? fput_many+0x2f/0x1a0 [ 1927.082993] ? ksys_write+0x1a9/0x260 [ 1927.083461] ? __ia32_sys_read+0xb0/0xb0 [ 1927.083959] __x64_sys_sendmmsg+0x99/0x100 [ 1927.084473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.085095] do_syscall_64+0x33/0x40 [ 1927.085558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.086188] RIP: 0033:0x7fec4fe72b19 [ 1927.086644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.088872] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1927.089809] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1927.090674] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1927.091537] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.092408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1927.093286] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:01:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x101, 0x7, &(0x7f0000000700)=[{&(0x7f0000000080)="ddb4008acc7ca8e1dfa3ec87da2397a462d78a3aaf55b7c400018ca30032e09271fa71de4d32671cefd51a00716bc70a6f7197895e03c55eba6f3d2171730aa75eb1fa3e0ce68694657952eb3328f40807403177e8aa3d06a30cbea8a30db46c0581f65b46c8ae725fac72346024d6a7c7c4d99e238baf5e12731fd35f1182d184e282a5aa408ea64d1537e033bf5e6b12379d7c3c694866c56c01fcffff9967b1e0afd86e20fb2e9d5449af81dc931e1a86f3bc01392dcaa28c30fa10003a9e7a867c082c6ab94d07ceb8c080046ac747ebc075fbe1edc5aadfec806e0e", 0xde, 0x3}, {&(0x7f0000000340)="0031fc1c5a6e45e4e0d06e565d8a83926b2b4fd4a7c0de220af9acc8954433235fc53875d7dc1957b3b97fb203c2154e1170bdf39977fe99d5c249ad856a9d147f00e202b7ab6d248c77d0bd66a1ae607a8d7c9f3a647b5cc3bd6ff8c60c3c009ec95a65fd70c02bec1ccd7220d4ed70ddcee54096e50dab9989393d423997390b22adc7ebda517be4f871990ef1d8eb87c2bde7d3bd54f9a0caaa829f7e712c1d4e274151d45f4185810fdbf7eb2a05b2ca92bb93142d60", 0xb8, 0x200}, {&(0x7f0000000480)="25881e1b6aaf8aba397065299973140a82fb5f4d24c7ef7e9df4f9c783e5914bb5439b9d291aed2c86eb29dc6515ea245e8e670387f417316a92f856298d3f03d7424fd30196650698b005220e93ed482e275fd57844af11ec32dbf473b125e26a83c96382b53d9c7916b55e4b5a5caef3ed9ff181b63523fdf0b0d035009bc35f8d64", 0x83, 0x81e6}, {&(0x7f0000000180)="06ca1558dcb9d25b9fa3bb98e7ed6dc76e2ab08a23937145603d77f86a6c166030cb5753669817e2b35ccbf98172", 0x2e, 0x1}, {&(0x7f0000000540)="2d1dbf31423deb11c87ce8ecf1cf23af548fdb835c776a6c0aed3e0a52a4b29201d42ebfc0aa391c1a28dd75f17c09977f7246d24b2de0c0d535f8118c47300b0e7f4855552a3a0b23f17b606f8ac995ddc40ebd3f273ff25c85e03bc37de1a7d18184ecc52565b9d265a77141aac7b7bb71892c70fe0bcdab820f5679caaba49fe3bbb4759d7dc996", 0x89, 0xfff}, {&(0x7f0000000280)="77dbfe6e4a90b4fb7db3e977cb7b", 0xe, 0xffffffff}, {&(0x7f0000000600)="b074ea52ac0c0ff95e93b5773af49c326778c515fcfabb57b102ba9fea44db704630e188880a6d5097b04893f6df990986b82e38c731b24afeb63b6f1111f67271ff3299798432e471935059ea3f8dafa039c0f504cd2b42b26e966ddb7dfc4488f9b2dad6b247012bb695f48ceb707b659168edd4d2da5ac2b468fb2d34d00db94eb998cf43ecf77d31f27d2fa3002857297b3e4be106083f9e32ee19a00195c2a6d5df7188c6f11b2ae1de8e687c44ba2a86831c52b46f2f40f2b6b1c04ee3347067fe8064b564257b24b670a804", 0xcf, 0x6}], 0x0, &(0x7f0000000840)={[{@mode={'mode', 0x3d, 0x1}}, {@huge_always}, {@huge_advise}, {@huge_advise}, {@mode={'mode', 0x3d, 0xed}}], [{@seclabel}, {@permit_directio}, {@dont_hash}]}) 04:01:11 executing program 2: r0 = gettid() r1 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x1, 0x6f, 0x6, 0x0, 0x5, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x67405f35, 0x4, @perf_config_ext={0x3ff, 0x1}, 0x2100, 0x1000, 0x1, 0x8, 0x4, 0x20000000, 0xffff, 0x0, 0xb28, 0x0, 0xfd}, r2, 0x0, r4, 0x2) kcmp(r0, r1, 0x79d491c7e6870eac, 0xffffffffffffffff, 0xffffffffffffffff) 04:01:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 82) [ 1927.183251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1927.228238] FAULT_INJECTION: forcing a failure. [ 1927.228238] name failslab, interval 1, probability 0, space 0, times 0 [ 1927.229696] CPU: 0 PID: 11080 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1927.230543] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1927.231559] Call Trace: [ 1927.231887] dump_stack+0x107/0x167 [ 1927.232335] should_fail.cold+0x5/0xa [ 1927.232812] ? __alloc_skb+0x6d/0x5b0 [ 1927.233283] should_failslab+0x5/0x20 [ 1927.233768] kmem_cache_alloc_node+0x55/0x330 [ 1927.234321] __alloc_skb+0x6d/0x5b0 [ 1927.234771] alloc_skb_with_frags+0x92/0x570 [ 1927.235314] ? lock_chain_count+0x20/0x20 [ 1927.235822] sock_alloc_send_pskb+0x7af/0x930 [ 1927.236375] ? sk_alloc+0x350/0x350 [ 1927.236825] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1927.237473] ? lock_downgrade+0x6d0/0x6d0 [ 1927.246012] __ip_append_data+0x1628/0x3310 [ 1927.246546] ? fib_select_path+0x293/0x1de0 [ 1927.247070] ? ip_frag_init+0x350/0x350 [ 1927.247558] ? ip_finish_output+0x330/0x330 [ 1927.248081] ? ip_route_output_key_hash+0x19c/0x340 [ 1927.248684] ? ipv4_mtu+0x1ed/0x2c0 [ 1927.250324] ip_make_skb+0x22a/0x2a0 [ 1927.250783] ? ip_frag_init+0x350/0x350 [ 1927.251271] ? ip_flush_pending_frames+0x20/0x20 [ 1927.251858] ? lock_downgrade+0x6d0/0x6d0 [ 1927.252367] ? xfrm_lookup_route+0x65/0x210 [ 1927.252895] udp_sendmsg+0x1940/0x2160 [ 1927.253373] ? ip_frag_init+0x350/0x350 [ 1927.253883] ? udp_setsockopt+0xc0/0xc0 [ 1927.254366] ? mark_lock+0xf5/0x2df0 [ 1927.254825] ? lock_chain_count+0x20/0x20 [ 1927.255330] ? mark_lock+0xf5/0x2df0 [ 1927.255786] ? mark_lock+0xf5/0x2df0 [ 1927.256239] ? lock_chain_count+0x20/0x20 [ 1927.256744] ? lock_chain_count+0x20/0x20 [ 1927.257249] ? prep_new_page+0x16d/0x1d0 [ 1927.257761] ? lock_chain_count+0x20/0x20 [ 1927.258275] ? __lock_acquire+0x1657/0x5b00 [ 1927.258805] udpv6_sendmsg+0x1b30/0x2ad0 [ 1927.259301] ? __lock_acquire+0x1657/0x5b00 [ 1927.259834] ? udp_v6_push_pending_frames+0x360/0x360 [ 1927.260463] ? trace_hardirqs_on+0x5b/0x180 [ 1927.260993] ? lock_acquire+0x197/0x470 [ 1927.261477] ? find_held_lock+0x2c/0x110 [ 1927.261989] ? lock_acquire+0x197/0x470 [ 1927.262470] ? find_held_lock+0x2c/0x110 [ 1927.262964] ? __might_fault+0xd3/0x180 [ 1927.263445] ? lock_downgrade+0x6d0/0x6d0 [ 1927.263944] ? lock_chain_count+0x20/0x20 [ 1927.264445] ? sock_has_perm+0x1ea/0x280 [ 1927.264933] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1927.265575] ? __import_iovec+0x458/0x590 [ 1927.266093] ? udp_v6_push_pending_frames+0x360/0x360 [ 1927.266724] inet6_sendmsg+0x105/0x140 [ 1927.267195] ? inet6_compat_ioctl+0x320/0x320 [ 1927.267739] __sock_sendmsg+0xf2/0x190 [ 1927.268213] ____sys_sendmsg+0x334/0x870 [ 1927.268709] ? sock_write_iter+0x3d0/0x3d0 [ 1927.269223] ? do_recvmmsg+0x6d0/0x6d0 [ 1927.269729] ? find_held_lock+0x2c/0x110 [ 1927.270230] ___sys_sendmsg+0xf3/0x170 [ 1927.270705] ? sendmsg_copy_msghdr+0x160/0x160 [ 1927.271262] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1927.271897] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1927.272437] ? trace_hardirqs_on+0x5b/0x180 [ 1927.272964] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1927.273506] ? finish_task_switch+0x126/0x5d0 [ 1927.274062] ? finish_task_switch+0xef/0x5d0 [ 1927.274592] ? __switch_to+0x572/0xf70 [ 1927.275063] ? __switch_to_asm+0x3a/0x60 [ 1927.275551] ? __switch_to_asm+0x34/0x60 [ 1927.276043] ? __schedule+0x82c/0x1ea0 [ 1927.276521] ? io_schedule_timeout+0x140/0x140 [ 1927.277079] __sys_sendmmsg+0x195/0x470 [ 1927.277570] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1927.278096] ? lock_downgrade+0x6d0/0x6d0 [ 1927.278615] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1927.279201] ? wait_for_completion_io+0x270/0x270 [ 1927.279785] ? rcu_read_lock_any_held+0x75/0xa0 [ 1927.280346] ? vfs_write+0x354/0xb10 [ 1927.280797] ? fput_many+0x2f/0x1a0 [ 1927.281238] ? ksys_write+0x1a9/0x260 [ 1927.281714] ? __ia32_sys_read+0xb0/0xb0 [ 1927.282212] __x64_sys_sendmmsg+0x99/0x100 [ 1927.282727] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1927.283350] do_syscall_64+0x33/0x40 [ 1927.283804] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1927.284427] RIP: 0033:0x7fec4fe72b19 [ 1927.284885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1927.287132] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1927.288049] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1927.288906] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1927.289780] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.290637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1927.291496] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1927.858071] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1949.206768] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1949.220179] FAULT_INJECTION: forcing a failure. [ 1949.220179] name failslab, interval 1, probability 0, space 0, times 0 04:01:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 83) 04:01:33 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) capget(&(0x7f0000000080), &(0x7f0000000100)) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file1\x00'}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f00000000c0)={0x49, 0x7ffb}) ioctl$TIOCL_SCROLLCONSOLE(r1, 0x5453, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x301001, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xb10d) r4 = syz_io_uring_setup(0x752d, &(0x7f0000000380)={0x0, 0x52b2, 0x2, 0x1, 0x68}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000400)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000018, 0x20010, r4, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="fca721aa3fdfb36ebf1f24ccfb5923932abc5319e7b2b9f62608e5ddce5e3372abd5aa8da9dd415a9fe66ee5c941b18bc5ce100280dfe8d4fd64d1f88f0674b47276e4e0a4e8d0776aff5addefc550da18833243a2fb0b48888ff10dbee93783829ad2bece5549096d7b21e36951d744dd5b4b44cc888282b86e1b23fdfb1d13b8aea736cbd81da2dad02ded75becf33b6b7a58c4c692c8bff30de20e98da7f2d190df1f56820cf90f035383c6db0c546bec7dacf0", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r6, 0x800, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r2, r7, 0x2) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000700)) 04:01:33 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x2808800, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:01:33 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:01:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000180)=@sco}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x1c5, &(0x7f00000002c0)={0x0, 0x8902, 0x2, 0x2, 0x66, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) r7 = openat$cgroup_pressure(r0, &(0x7f0000000200)='memory.pressure\x00', 0x2, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000340)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2cec) dup2(r5, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) [ 1949.221793] CPU: 0 PID: 11096 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1949.222924] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1949.224272] Call Trace: [ 1949.224680] dump_stack+0x107/0x167 [ 1949.225168] should_fail.cold+0x5/0xa [ 1949.225730] ? __alloc_skb+0x6d/0x5b0 [ 1949.226490] should_failslab+0x5/0x20 [ 1949.227788] kmem_cache_alloc_node+0x55/0x330 [ 1949.228383] __alloc_skb+0x6d/0x5b0 [ 1949.228950] alloc_skb_with_frags+0x92/0x570 [ 1949.229528] ? lock_chain_count+0x20/0x20 [ 1949.230131] sock_alloc_send_pskb+0x7af/0x930 [ 1949.231278] ? sk_alloc+0x350/0x350 [ 1949.231885] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1949.232733] ? lock_downgrade+0x6d0/0x6d0 [ 1949.234060] __ip_append_data+0x1628/0x3310 [ 1949.234763] ? fib_select_path+0x293/0x1de0 [ 1949.235394] ? ip_frag_init+0x350/0x350 [ 1949.236052] ? ip_finish_output+0x330/0x330 [ 1949.236770] ? ip_route_output_key_hash+0x19c/0x340 [ 1949.237498] ? ipv4_mtu+0x1ed/0x2c0 [ 1949.238107] ip_make_skb+0x22a/0x2a0 [ 1949.238726] ? ip_frag_init+0x350/0x350 [ 1949.239505] ? ip_flush_pending_frames+0x20/0x20 [ 1949.240273] ? lock_downgrade+0x6d0/0x6d0 [ 1949.240971] ? xfrm_lookup_route+0x65/0x210 [ 1949.241609] udp_sendmsg+0x1940/0x2160 [ 1949.242243] ? ip_frag_init+0x350/0x350 [ 1949.242901] ? udp_setsockopt+0xc0/0xc0 [ 1949.243470] ? mark_lock+0xf5/0x2df0 [ 1949.244069] ? lock_chain_count+0x20/0x20 [ 1949.244751] ? mark_lock+0xf5/0x2df0 [ 1949.245304] ? mark_lock+0xf5/0x2df0 [ 1949.245922] ? lock_chain_count+0x20/0x20 [ 1949.246553] ? lock_chain_count+0x20/0x20 [ 1949.247213] ? prep_new_page+0x16d/0x1d0 [ 1949.247871] ? lock_chain_count+0x20/0x20 [ 1949.248494] ? __lock_acquire+0x1657/0x5b00 [ 1949.249224] udpv6_sendmsg+0x1b30/0x2ad0 [ 1949.249896] ? __lock_acquire+0x1657/0x5b00 [ 1949.250555] ? udp_v6_push_pending_frames+0x360/0x360 [ 1949.251365] ? trace_hardirqs_on+0x5b/0x180 [ 1949.252072] ? lock_acquire+0x197/0x470 [ 1949.252733] ? find_held_lock+0x2c/0x110 [ 1949.253327] ? lock_acquire+0x197/0x470 [ 1949.253952] ? find_held_lock+0x2c/0x110 [ 1949.254544] ? __might_fault+0xd3/0x180 [ 1949.255355] ? lock_downgrade+0x6d0/0x6d0 [ 1949.256030] ? lock_chain_count+0x20/0x20 [ 1949.256700] ? sock_has_perm+0x1ea/0x280 [ 1949.257306] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1949.258142] ? __import_iovec+0x458/0x590 [ 1949.258809] ? udp_v6_push_pending_frames+0x360/0x360 [ 1949.259559] inet6_sendmsg+0x105/0x140 [ 1949.260188] ? inet6_compat_ioctl+0x320/0x320 [ 1949.260936] __sock_sendmsg+0xf2/0x190 [ 1949.261510] ____sys_sendmsg+0x334/0x870 [ 1949.262177] ? sock_write_iter+0x3d0/0x3d0 [ 1949.262874] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.263447] ? __lock_acquire+0x1657/0x5b00 [ 1949.264140] ___sys_sendmsg+0xf3/0x170 [ 1949.264797] ? sendmsg_copy_msghdr+0x160/0x160 [ 1949.265468] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1949.266293] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1949.267008] ? trace_hardirqs_on+0x5b/0x180 [ 1949.267699] ? lock_acquire+0x197/0x470 [ 1949.268284] ? find_held_lock+0x2c/0x110 [ 1949.268971] ? __might_fault+0xd3/0x180 [ 1949.269543] ? lock_downgrade+0x6d0/0x6d0 [ 1949.270199] ? io_schedule_timeout+0x140/0x140 [ 1949.271119] __sys_sendmmsg+0x195/0x470 [ 1949.271785] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1949.272346] ? lock_downgrade+0x6d0/0x6d0 [ 1949.273061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1949.273815] ? wait_for_completion_io+0x270/0x270 [ 1949.274511] ? rcu_read_lock_any_held+0x75/0xa0 [ 1949.274543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1949.275221] ? vfs_write+0x354/0xb10 [ 1949.275238] ? fput_many+0x2f/0x1a0 [ 1949.275257] ? ksys_write+0x1a9/0x260 [ 1949.278145] ? __ia32_sys_read+0xb0/0xb0 [ 1949.278788] __x64_sys_sendmmsg+0x99/0x100 [ 1949.279385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1949.280183] do_syscall_64+0x33/0x40 [ 1949.280790] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1949.281449] RIP: 0033:0x7fec4fe72b19 [ 1949.282067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.284891] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1949.286223] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1949.287269] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1949.290534] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.291595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.293967] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:01:33 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x8}}) 04:01:33 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:01:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r4, 0xfffffffffffffffc, r3, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r1, 0x0) 04:01:34 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x42) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000040)={0xff, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7b}, @ra={0x5, 0x2, 0x9}]}, 0x18) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') getegid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2801001, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'trans=fd,'}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}]}}) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) [ 1949.343902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:01:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000000)='./file1\x00', 0x23) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1949.361018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:01:34 executing program 6: ioctl$CDROM_SELECT_SPEED(0xffffffffffffffff, 0x5322, 0x101) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x2000) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000001c0)=""/110, &(0x7f0000000040)=0x6e) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="1f1066646e6f2d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:01:34 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r4, 0xfffffffffffffffc, r3, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r1, 0x0) 04:01:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r4, 0xfffffffffffffffc, r3, 0x0) r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r6, 0xfffffffffffffffc, r5, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r1, 0x0) 04:01:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 84) 04:01:34 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:01:34 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x1000, 0x0, 0x80004, 0x0, 0xc2a, 0x200060d, 0x9, 0x0, 0x0, 0x0, 0x80000007}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r2, 0xfffffffffffffffc, r1, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a69f29fd1637ddac658a709b49b08000000e1c7391515c7ab7c"}, 0x48, r1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r3 = getegid() r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) keyctl$chown(0x4, r4, 0x0, r3) [ 1949.503900] FAULT_INJECTION: forcing a failure. [ 1949.503900] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.505440] CPU: 0 PID: 11133 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1949.506276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1949.507296] Call Trace: [ 1949.507622] dump_stack+0x107/0x167 [ 1949.508063] should_fail.cold+0x5/0xa [ 1949.508526] ? create_object.isra.0+0x3a/0xa20 [ 1949.509084] should_failslab+0x5/0x20 [ 1949.509544] kmem_cache_alloc+0x5b/0x310 [ 1949.510036] create_object.isra.0+0x3a/0xa20 [ 1949.510577] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1949.511192] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1949.511807] ? alloc_skb_with_frags+0x92/0x570 [ 1949.512360] __alloc_skb+0xb1/0x5b0 [ 1949.512804] alloc_skb_with_frags+0x92/0x570 [ 1949.513339] ? lock_chain_count+0x20/0x20 [ 1949.513842] sock_alloc_send_pskb+0x7af/0x930 [ 1949.514403] ? sk_alloc+0x350/0x350 [ 1949.514852] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1949.515489] ? lock_downgrade+0x6d0/0x6d0 [ 1949.515999] __ip_append_data+0x1628/0x3310 [ 1949.516528] ? fib_select_path+0x293/0x1de0 [ 1949.517052] ? ip_frag_init+0x350/0x350 [ 1949.517541] ? ip_finish_output+0x330/0x330 [ 1949.518066] ? ip_route_output_key_hash+0x19c/0x340 [ 1949.518698] ? ipv4_mtu+0x1ed/0x2c0 [ 1949.519179] ip_make_skb+0x22a/0x2a0 [ 1949.519666] ? ip_frag_init+0x350/0x350 [ 1949.520199] ? ip_flush_pending_frames+0x20/0x20 [ 1949.520834] ? lock_downgrade+0x6d0/0x6d0 [ 1949.521388] ? xfrm_lookup_route+0x65/0x210 [ 1949.521964] udp_sendmsg+0x1940/0x2160 [ 1949.522501] ? ip_frag_init+0x350/0x350 [ 1949.523037] ? udp_setsockopt+0xc0/0xc0 [ 1949.523561] ? mark_lock+0xf5/0x2df0 [ 1949.524060] ? lock_chain_count+0x20/0x20 [ 1949.524607] ? mark_lock+0xf5/0x2df0 [ 1949.525107] ? mark_lock+0xf5/0x2df0 [ 1949.525597] ? lock_chain_count+0x20/0x20 [ 1949.526142] ? lock_chain_count+0x20/0x20 [ 1949.526698] ? prep_new_page+0x16d/0x1d0 [ 1949.527232] ? lock_chain_count+0x20/0x20 [ 1949.527791] ? __lock_acquire+0x1657/0x5b00 [ 1949.528374] udpv6_sendmsg+0x1b30/0x2ad0 [ 1949.528914] ? __lock_acquire+0x1657/0x5b00 [ 1949.529493] ? udp_v6_push_pending_frames+0x360/0x360 [ 1949.530170] ? trace_hardirqs_on+0x5b/0x180 [ 1949.530759] ? lock_acquire+0x197/0x470 [ 1949.531287] ? find_held_lock+0x2c/0x110 [ 1949.531832] ? lock_acquire+0x197/0x470 [ 1949.532359] ? find_held_lock+0x2c/0x110 [ 1949.532902] ? __might_fault+0xd3/0x180 [ 1949.533430] ? lock_downgrade+0x6d0/0x6d0 [ 1949.533983] ? sock_has_perm+0x1ea/0x280 [ 1949.534546] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1949.535246] ? __import_iovec+0x458/0x590 [ 1949.535797] ? udp_v6_push_pending_frames+0x360/0x360 [ 1949.536479] inet6_sendmsg+0x105/0x140 [ 1949.536999] ? inet6_compat_ioctl+0x320/0x320 [ 1949.537595] __sock_sendmsg+0xf2/0x190 [ 1949.538116] ____sys_sendmsg+0x334/0x870 [ 1949.538669] ? sock_write_iter+0x3d0/0x3d0 [ 1949.539230] ? do_recvmmsg+0x6d0/0x6d0 [ 1949.539750] ? __lock_acquire+0x1657/0x5b00 [ 1949.540331] ___sys_sendmsg+0xf3/0x170 [ 1949.540852] ? sendmsg_copy_msghdr+0x160/0x160 [ 1949.541456] ? vmacache_find+0x55/0x2a0 [ 1949.541996] ? lock_acquire+0x197/0x470 [ 1949.542541] ? find_held_lock+0x2c/0x110 [ 1949.543084] ? __might_fault+0xd3/0x180 [ 1949.543611] ? lock_downgrade+0x6d0/0x6d0 [ 1949.544161] ? asm_exc_page_fault+0x1e/0x30 [ 1949.544747] __sys_sendmmsg+0x195/0x470 [ 1949.545281] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1949.545854] ? lock_downgrade+0x6d0/0x6d0 [ 1949.546426] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1949.547072] ? wait_for_completion_io+0x270/0x270 [ 1949.547715] ? rcu_read_lock_any_held+0x75/0xa0 [ 1949.548330] ? vfs_write+0x354/0xb10 [ 1949.548824] ? fput_many+0x2f/0x1a0 [ 1949.549308] ? ksys_write+0x1a9/0x260 [ 1949.549814] ? __ia32_sys_read+0xb0/0xb0 [ 1949.550369] __x64_sys_sendmmsg+0x99/0x100 [ 1949.550932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1949.551608] do_syscall_64+0x33/0x40 [ 1949.552101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1949.552774] RIP: 0033:0x7fec4fe72b19 [ 1949.553261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1949.555681] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1949.556684] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1949.557620] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1949.558570] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.559508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1949.560453] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:01:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) dup2(r2, r3) 04:01:34 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x1ff, 0xfffffff6, 0x101, 0x597}, 0x10) r3 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766e46e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:01:34 executing program 2: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x4077, 0x8000) [ 1949.594050] 9pnet: Insufficient options for proto=fd 04:01:34 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="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", 0x1000, r1}, 0x68) flock(r4, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "12852ee246b149ec4e0bc7bacf27cc444919aed26cef0ed88e61066a2602f8b898227884075400e6ab7a433f83d5130151c8dfae7fda7925d882d1bd49a816dbab08b93bc75cce1eda46d097976f4cc5f7cfe4dd50fbe285d8a564d752c42884c08f575250fcab04f62046484c523856295705a3047913d8c70f81ebe9a44583b3145d4883b5d8f4519f7bd1adba5a5fdf31732e2a606019faeb23344939796b3e16ccb29260de78997bc36cf68b66466bd25729dd0b7cde53f76be436e6bdc3bd6a575438acd24472bd98686376edad168e5c9a521d13390910b5093adc504ab0a0c63a5eda15bb29a3b805a6ddd7090f667725c83dd9bb290c2eabd26ca0a95bcd0770bbaeae50ae9dc5ec60a2db6e7d8ccf0cf11d86ab92e95c9859e57b7d6c77e4e80a4f5de84c49423d82065a91198987d5b28a2cf937a12ad1d16e21eba16e6f570b26c2fca9096f252b4ca6d594817141de6bc9ee612f89425037ee314296f7aaa6aa2eabcc3e3739ba934a7ed2f42651f9a3ad30a26b8bd96cac538d080741fafcfd3f384ed555e4b8690f92714a60526787b61756be8f7012d5fb6684b0176ec30eea403c5dde29a01465404a49f63fa29348bf2b125c5ae83e5c71eca9e1517a03c7a624702069d26e08ad61cbbe1098198eef3dbe0f4ab9b5fab5e80940054a62cfdcf624225fa414fbe9e13f5346fbdf9c289888d6e1b9d0dd2a6af4a58c9a466b8e1f3c394950ab04513e8e70bfbbecd5ca92eb58e5ca96c61817bdf3865fd87851da4bb522903939c2e667168cc4f45499db14e4400f984ebf141fbb324f0b1f79b10c352b870bb5230b5762f57562bdcc7e54e6ecbd0fa2b95ac263b7f3275717f928e958691d7c384bf169649ab482bd0dd2a85e3bb34ce3a04a782da6fa8a58abe6aa0fae7faea555e7b6c1d4762217bb1f929f8dcf45bb9b2a8627ae35a6905d275526df5e9bf336688d6769a594c3e6a13531edc89826d0a19c473c4e973fe0725ba9ac219586c8f24ce5cb8ddb8fb5a65c090e17f1bbc2bf1442c5710ee08eb88fbc041415dae75b376a66ab7ccac819596c991d7f39ffaef1e6a6d95735a35bf4cc6d201649fcc11e82981624be868a216f2f0e6fc1bc95e3a96b8e3148872b54bb5bb743dda6735846a3731282628f55effee084ea63aca27466d9af7e3c931a8b1de6a15e268c45846f28c74986e0b8089827b411f112c71da323b26c694441478f997d1f452ace55d47ad2e90156c1433ee49ae9af2fda73b3f89dce074f102a649545656c28202ab7d2f3c1fad6b77c7dd06b4f13c53ec2e79772cb212a45bdeb33a5d93d0c6c6493782407bfe669a55ece90dd8a2e133312985161011ddaf0c537476a1af6f396ebea7f39aa6b4bc75600ae9d8e09ed49e30ac62a640b8b15721eaa620622117bca7b89649e1e29a192ff7b998bffcafb7950ebb928a743fa80fe5eca83f6ee9479ef99834800b6dd0bca9103f2de13998560bd492fa6f4f4de37bcd18d7aa67bc3fa7d6f0696750e71566d2be7e779a2a9734f08a784eff904faca662ab7f39d53030247061375d35bfb110c52cb19dfcadab7e685bf2909b39c79f3a061d2820a79ed4557c2290bdd56b194dd38b02e2e4dcbad35b779517d77a78051c5bb9e68089178e2ec9020c2b3555985285b6f36d74ca5ce30013e8732f376a775bab324a463f020071703cc8eedff9ca0c45f8cea901e30a93fd3c2db06dbcef392aee894565f34aa7b15a3111ae8b59324999075432b1f557af94704a5048444cac1bf0622824af6ab18e4b8d9468d8d4abfb1700ce68bf34509002df3b101186734a00e14d15a5dd830c319242e6b1f3d2be2102e7af5a3a962ffa0505af53ec3de2761ef72f08baf030cd0f37f90a2bc6bedd1da0b2895537922863054871f51df4d253d182200f088178434c9141c9d9977ab39a5a3fadfe3f471440dcd714eb1f6ef993d71a72f5818225e3589830b3e113bc17570ab7d85c321335708357f54a140d02d3c8aa7783201610a2df33a22781786ce0cfd77ad0664117be6caaccb98fd20d285873899663c44e4896e935ed7d710cd35614fa79c4aad322a6af698d95ed49174f1ec7db75dc5b60ba86746a685625daf44d4e0abe8778711d5bedb6c84373e01d7d1f7cab254b8c9c306b25932d143ad90b4964c89911652f9f2dd38d577cbcdf599a4d8900b7ddf154c79ccf26f15ef344e9d680a843f255eb52815614ad9e5406b0062ad3ede64e287a7e8ee8b547e7ba12221b632f9a2a11e86e77635782a5136e6799d1fbb54511acb3039de65bf65fa7187754eb7bf02b01688112e81a559d8eaad867536ebe00bd411b339c9e3659b0d8fd5f3ecaf2fffce388eabc70ce6b9efdc304d1a3f81d828c7f14977b22c84ab72fc678cc120918e267a5f8de182d1d2a818706447ffaa77a650e4a692ae91eb36df2fe4465bf19ed7c41d688f5e6d2dfd4edf8b6adb9924e6a50c0a48ee4369f55edd167cc647cf4f37fe454a3f6497940042fdb06c45f4b3b929066e0315592abd29fb2e84772b56bc23f24bc493812439892db716597ec8c8f3a8750dc85b7fdf6cd97072c3350d2351a3bf6a4af1af83f339d349f8469e588c692f603ab20408b2c3222fa447ad0a70d54b299386dafafcc087ec61cff7f35dc16c6f5a37146c4f21d4bb85bad9440a38c39796be8baca4bad6fd2e9327b68b24254fbcd78bfde06a75afbf3235012529559369a7dd8354848e6c9aeca0139ad35c605fdc750d85d4399061264d05096b78a3b49b2fa6c67ca85eb908395f1f0288c165c544ed253ed696b0a0673f8d554dc206a90e9414b867519902da983a8e140de4314e31a6e8c0e92f3a64b6d34895ef66756b57690a0ab6e9c0e7d5050a43c1ec6bfca67c28c75c37ddf2d48baf8ea69d7c956fa1b36ac2e34e03678a58539a6c30cbd26bb498adaf33dd9c596899618b80b844957782d7b86abb708101e8944bf5da260b040f912564cad6968e410057046558c07c8629e1fd7a7f4e1d66ffc0e0106c104fb979c999a56fbf2bb6051332c71fe92e37213452ad485af96c1135ffc80febca188c2643f471907065904f1f85c9dc454dfd57a720c156a4a5f6b58a5e107df625acf38162d58cc4249346d97a95c9d926545c915f2c6bc8d173153c117e5d857f5975421968e1c55c60ac124cb923111fe16ac253a00971bbe9d0967e0281c4e76720d29185604774cefcc0619b4ce5699912f72bad2e8674199bd972d2e32a2a9b44103a4763e78c149495836c0ac42771d4dd2dd67a1e5d1f92d35cc553e80f5b60ba1320cf19b7c1c76a7faa5ed68f31d195d8e9a7a257ddcb81df965b113ec9a707a1b9b6cb404d2cdff61c23bb715485d81df4dc0491575a82c28e53ef01fe5438ba9e7199e2f981e5199a9ac86513f79261991734387e61931133f85aa1fa574275feec1a64b703e582bc48be1410d2c49c81dbbfd09f435327378cff74f24404b29097a1cd397c90845ad104e2867cea75c097f8347fca5a45c9b79e95ac0e35d56a642e606731a0e8b6383483adec9df9a58c0714183737102c2498c1de139fc479ca5e042490ae19d3860f318253c0e62c58bca7d4aa71cde7708676cbbf5ffc3519a72929b4ca7f384f8c89e4a37e6f5a4aeba8f2d9d982a9abe05ad8123b1dbb2bc8e064c9a068717ebb39a95e3b534eaee3269cf2169b25921ec0bf6c364cab323c92be5237d848a165c828898edda7c4f98d2db928857245eb18a93278ada9a36aab2fd3f0f16441bdb2e44c57a044f7c5344e2a4cb7854e32751546d52ebb02b196c4ff1ad8a7ab7b315a6512b3f7ffd4afb0acdd0c8ec0585039759d9a33101cc028a4a8ace8b4132955efbf8400aefda18d198cfc95aa8b7dac20215934eb4dfd47b1927a2ff8eebfc9ffbc7e2f63d1409666faafd48050c1a9f0e10e8915f2986337bc01ec727295198634611a1d6f55baaeeebf96c9acbc2404b69672f07d50eead240796c197dad25c1e8b67feea1a3f65c549ddbecee5ff26bde65120a64b54042693a6bbcbc1c49b65dc262de7b1b1fb47a3e93566225a7bf0c0b39523b1235d54b2e80afcb8d2b798e47a32a7552d97c50abc73cc000c38c4d5418f510d21c23d9590366d5ded87604e27c801893d022fb5454c5019129e60786f5eae86fbb8a9f7155bde6447aa1ebed65e598e6245deb033b8e945d96106cc6ac24021db90a2fa304a31add61293927738a2731aab673700d7b5117d8eaa5df59a90f622723326975d0f9e753e82bb716824cc5edbc3c6728999e9170c75ba6a4ac888447ce9b6f8929461946e8c63ea49e691dbb75ef48eece664da1e39c4f8bceaa8d14a3349909bab33380e79762d6a25fc1b49f3eebe345644e9073288f0965f524bdf4e7b8112417bd29c1f62735834be838c1553b73e7da9d5645fdea685320b415f151a29f966e8761a621c18703cf75c952a3c226f80c77732b4cdfd215bd00af717fd5948fdb0a48ba71f1f2c3743e7fa45e6407190466f28a41c7aefa96652de6ba0330085f9784df2ae2753854b791254ce89341c9ed07df7caf012f017e1991e2651998011cf673fae9064506dda031615401b63dbdf4ebf3d36e2e3d1470a9ccb78bd89995ed52eef55bbcedf216e2ab875cad325e44b6d3ebd22ffe8cb79b36a71eebbf34e29c06cba3ef978342288777651e3ced73109c073060a0f36846347a8a1153c549aa23a73f55d78c15e47c8f31b1958535a68ad617a686daeadc322e6adf42043a58562ecc1d7f5b9468f22fcd2d3eb6cb4aba97865f098f6408d02c52ad4963009c57afb16daedba301eace4d6b58bec2cb0d40d96c12aa4819cc1fdba49522495be1ccbe83c9a36cf40f5bc272efcd76172f83fc5788b480e8deba20c3355e1d405cb4961a05a619a8255d69923e075690ea6434a05a8a8cdc43dd986ecee55686172fd97671dafa6a3da991d998d49933d803de17271301798a64bad795062409ce705376b21d477c0e117c9d79c38bf4e9e4d0442ca98cb654014532e1acf0309439c16b1612ea929e6235b33945555f52b2ffb5fd409d71cb8c2a8feb9e16bc480f8157a24ba9dbb631e5db393cafef897d404ec7feaf585de2603b98f96d515d9168547c748717436ac7f970b2db860f0acb44a1b72a2fc88b590346759f91795f25ff7cb4f55341beeab8eafb469cebd36e5beac37ed79ae479009ee9965a2de3f3292dc73976f5bf653fe335a561daeb22a3a887a844bc207fea30198f6c4e5507484fb185d61452a20b508b941b2ac517c6ce2b977b5ac4e3d8299fad78527168041623ed30ae7ac594e642109365f9458687115c6a4fc2396ce3e19f1b35cad7525596c75fed918dcf3e879065c16d7ae9ebeff4018f4e29cc350ea2a6d75f2d34fbbdced9aef7530f1ff97c7cefa558c2e92fa4cd07b7fa46c02fc9504868f7f683ad81fec5dd42584de07a1a8fa62dbe7c22f57683421a8f71269f9ed4d52a3e30dee15adfaa9f9289eda0414d3fc156e1340fbdce5246773e535ed241b2ea52d7f3dfa1a73d9985f0b9962b98b9cfc6e2e50b39cddbd04e7e24a56a341b2935e800b7fb66dc960e85c4902130459a89f408a36ba5509eb7341d8e0b80a708a20f3ce09a64794dbe90fb5439f3c4b410c7a3ca55f266fffb6e6127fbcaec22b692712d723998204c86fc5abac93bdd8aae6e3da9507a1f5ac72f9df250247d0f39f4156bb61245193a59f8beaf2222501"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) [ 1949.622163] 9pnet: Insufficient options for proto=fd 04:01:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xf, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1965.488894] 9pnet: Insufficient options for proto=fd [ 1965.496366] 9pnet: Insufficient options for proto=fd [ 1965.498839] FAULT_INJECTION: forcing a failure. [ 1965.498839] name failslab, interval 1, probability 0, space 0, times 0 [ 1965.500251] CPU: 0 PID: 11179 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1965.500260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1965.500264] Call Trace: [ 1965.500285] dump_stack+0x107/0x167 [ 1965.500300] should_fail.cold+0x5/0xa [ 1965.500317] ? create_object.isra.0+0x3a/0xa20 [ 1965.500332] should_failslab+0x5/0x20 [ 1965.500346] kmem_cache_alloc+0x5b/0x310 [ 1965.500360] ? lock_acquire+0x197/0x470 [ 1965.500374] create_object.isra.0+0x3a/0xa20 [ 1965.500385] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1965.500405] kmem_cache_alloc+0x159/0x310 [ 1965.500416] ? mark_lock+0xf5/0x2df0 [ 1965.500434] skb_clone+0x14f/0x3d0 [ 1965.500449] dev_queue_xmit_nit+0x3a7/0xb00 [ 1965.500465] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1965.500483] dev_hard_start_xmit+0xab/0x6f0 [ 1965.500501] __dev_queue_xmit+0x179a/0x2690 [ 1965.500517] ? find_held_lock+0x2c/0x110 [ 1965.500530] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1965.500545] ? lock_downgrade+0x6d0/0x6d0 [ 1965.500558] ? lock_acquire+0x197/0x470 [ 1965.500572] ? ip_finish_output2+0x220/0x21f0 [ 1965.500589] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1965.500606] neigh_connected_output+0x382/0x4d0 [ 1965.500628] ip_finish_output2+0x6f1/0x21f0 [ 1965.500643] ? nf_hook_slow+0xfc/0x1e0 [ 1965.500656] ? ip_frag_next+0x9e0/0x9e0 [ 1965.500669] ? nf_hook+0x160/0x510 [ 1965.500683] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1965.500699] __ip_finish_output.part.0+0x5f3/0xb50 [ 1965.500714] ? ip_fragment.constprop.0+0x240/0x240 [ 1965.500724] ? nf_hook+0x510/0x510 [ 1965.500744] ip_output+0x2f7/0x600 [ 1965.500761] ip_send_skb+0xdd/0x260 [ 1965.500777] udp_send_skb+0x6da/0x11d0 [ 1965.500798] udp_sendmsg+0x1980/0x2160 [ 1965.500813] ? ip_frag_init+0x350/0x350 [ 1965.500832] ? udp_setsockopt+0xc0/0xc0 [ 1965.500843] ? mark_lock+0xf5/0x2df0 [ 1965.500860] ? lock_chain_count+0x20/0x20 [ 1965.500872] ? mark_lock+0xf5/0x2df0 [ 1965.500887] ? mark_lock+0xf5/0x2df0 [ 1965.500899] ? lock_chain_count+0x20/0x20 [ 1965.500911] ? lock_chain_count+0x20/0x20 [ 1965.500926] ? prep_new_page+0x16d/0x1d0 [ 1965.500938] ? lock_chain_count+0x20/0x20 [ 1965.500960] ? __lock_acquire+0x1657/0x5b00 [ 1965.500978] udpv6_sendmsg+0x1b30/0x2ad0 [ 1965.500992] ? __lock_acquire+0x1657/0x5b00 [ 1965.501012] ? udp_v6_push_pending_frames+0x360/0x360 [ 1965.501024] ? trace_hardirqs_on+0x5b/0x180 [ 1965.501042] ? lock_acquire+0x197/0x470 [ 1965.501053] ? find_held_lock+0x2c/0x110 [ 1965.501071] ? lock_acquire+0x197/0x470 [ 1965.501082] ? find_held_lock+0x2c/0x110 [ 1965.501099] ? __might_fault+0xd3/0x180 [ 1965.501111] ? lock_downgrade+0x6d0/0x6d0 [ 1965.501124] ? lock_chain_count+0x20/0x20 [ 1965.501136] ? sock_has_perm+0x1ea/0x280 [ 1965.501149] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1965.501176] ? __import_iovec+0x458/0x590 [ 1965.501189] ? udp_v6_push_pending_frames+0x360/0x360 [ 1965.501206] inet6_sendmsg+0x105/0x140 [ 1965.501220] ? inet6_compat_ioctl+0x320/0x320 [ 1965.501232] __sock_sendmsg+0xf2/0x190 [ 1965.501245] ____sys_sendmsg+0x334/0x870 [ 1965.501260] ? sock_write_iter+0x3d0/0x3d0 [ 1965.501271] ? do_recvmmsg+0x6d0/0x6d0 [ 1965.501286] ? find_held_lock+0x2c/0x110 [ 1965.501307] ___sys_sendmsg+0xf3/0x170 [ 1965.501321] ? sendmsg_copy_msghdr+0x160/0x160 [ 1965.501336] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1965.501348] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1965.501366] ? trace_hardirqs_on+0x5b/0x180 [ 1965.539714] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1965.540266] ? finish_task_switch+0x126/0x5d0 [ 1965.540812] ? finish_task_switch+0xef/0x5d0 [ 1965.541351] ? __switch_to+0x572/0xf70 [ 1965.541827] ? __switch_to_asm+0x3a/0x60 [ 1965.542323] ? __switch_to_asm+0x34/0x60 [ 1965.542826] ? __schedule+0x82c/0x1ea0 [ 1965.543324] ? io_schedule_timeout+0x140/0x140 [ 1965.543896] __sys_sendmmsg+0x195/0x470 [ 1965.544388] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1965.544917] ? lock_downgrade+0x6d0/0x6d0 [ 1965.545439] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1965.546033] ? wait_for_completion_io+0x270/0x270 [ 1965.546626] ? rcu_read_lock_any_held+0x75/0xa0 [ 1965.547203] ? vfs_write+0x354/0xb10 [ 1965.547659] ? fput_many+0x2f/0x1a0 [ 1965.548106] ? ksys_write+0x1a9/0x260 [ 1965.548574] ? __ia32_sys_read+0xb0/0xb0 [ 1965.549076] __x64_sys_sendmmsg+0x99/0x100 [ 1965.549594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1965.550224] do_syscall_64+0x33/0x40 [ 1965.550680] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1965.551318] RIP: 0033:0x7fec4fe72b19 [ 1965.551774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1965.554021] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1965.554960] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1965.555838] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1965.556708] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1965.557577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.558448] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:01:50 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, 0x0, 0x0) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:01:50 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x9}}) 04:01:50 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x9000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:01:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 85) 04:01:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001300)=ANY=[@ANYBLOB="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"]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x8000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000001e00)="3024b6c441ffa692c3ed69c9064bc1490740ed940236997ecf2c232ad1aacc084d3ff51ed896f44800d9a756e975b5390beb11fd5333ebb002934083316efe225f5f0345a235e1712ca2f19c10200e96e4e1b361256f00a2e8bfc6cfafce66510aa197b1785fa1327bf99b4190d8ecb7e4a2cc86a2d7cd70e872bfdeb263468d5e84c6752b1c4181a62e6f3e1ddafae4b1263570ddfe9e78bd2090cb11ff5d2e03019656fc43c85bab9912f6fa52d8257b1bfc01052016b9e07a86421ad1cfa54a40628cddb2f3b545c0edd9c934b703298c96bb22dd1789000d29accf5d947cd4dd663b5d6957f09bf52ec8694c787785f3064710a84e5571506f8617d6a5e19bf99a6f6572a69bd06b2cbee36de9dd51684076125b679c17b573339191678b61e500fab323cb80fa9d01395532794a19bc831d7ec4d4b046cc4dab051f4196ec27f2fb7a17ebe3ced57127d512eb6fdd542e58f47d6b459a212827fd33fb85ac893cb03a1f0ec32114d2d0a5e9f9bc6f966c99c8d106404de8e4a8ca296a53013d81d6c2f0e46f5b12163da25121906e2920a9fedb1b868269390c26c5a927e1995621198fd1cb83096b695863cb4e021e58f976c9374df773499418d644f225b8e47446fa997ef465e0ab4fa3896df4309d36697fc748281b78a3fca696adc670066d422e130c9553af75d199fcb8d2f8a94708ad9d263cc0156aab16f22feb7720112adfe6cd4c883da1736e9aa38ae99b69059a6322be42a97d4dc0548092c6ab1a03f0658a730b4d69e9fa0c80c2b319a6931189d842ff7ce97aec306afa007779b8edc5ca77558c4a3059680d7b5b9ffb1aeefb79f5b6ad5d8dfba41c9494196f589b102e3203ea2f73be7c02c59a1e3fe7d39dddf0443ea37a71f247fb64b54430bd19071af53ece1e8062763e133bd509aea0e6039b9647aca17481ef716fc3dee04c48287305492d345c8e0895fb7b901931b98b4ad91b37bfb5d6f099d0d05918fcb24692b4d96d048d2894f13f874b136b82f0b444920e9530e7f1baa5c852ab006e77985a957df68b47d3fce0e36be0a6d12d261fc1752fc8ffb9684fa58ad10948c04eb70fbd833b6d4be77826324199c647d2ca58724314e5e3ed75781bf850a9e3ab1c72b205c47d0c2982cdf81a7966989cb71dc77e76e15e28ee770feb0225cd71c8e635f364b55d014887220642361be6dca420d63b030716cb056dc08acce4227591ca77d8f685d40b2bcabf3727e4a5377bc0da4adee8c695d162b253987bf27d94d5f4bc0b037f823309046d5fd367a143ee60164f9d310eb5ecf5926fbc75c36b5a981152d61dca63404a25e769519b037c29b908174546359a9fdd52ce5d1a7e04317b246c5d3398a16059499a2a3b7f03d7588f6516c702783083c69406f1e6e430259e111264a4a36e3182d7b1a5805a271e6ce0291df9733dac2adb988f7824407dca1d1262c56fc11e00bc09e2cfe601756026305cbf20cbc08e2b287e19fbfbb008158124dff8e34179c45b4f181948b28bed1396c4fc0b270fba481289b6c33648d9076ff724ac113ee6e2dc73fc2722502c7e13736708d38fbe59885012bb79c6eda27fd09fd0e2480e8da0c2511ef86bbc30ef0e1c304aab32320f2075cd5b0c91026c29e2ec8a9697f8dbf881055eb60c7bf93a20cecfe4b55fb1d19d566d92aa3d2c29a3e76e87266ad25166ffb4a5e6ef8c22ff517958ea53810ec2f92c7fa335842d09387ccd970d0195eff778778922a16355bb68733fd8f859ff654d97a3a0ebd1b0191786622b4e9e8858b1141080d54384f0b759f6ddfad2b4b7b52602dca5ad13a5f73775b4b4c637da166e63eee2bcde6b74649370e34fd3742a095265b7a7d28c4db0426fba8caf2ce3a1c2bb49778bf851b9111ef0cc0fa5908687cef702a5a3dd5435d90987b87ec2f0b129adfac82df5d18c9df299f737956d38a5a445b500cf1b6189b1fa9327a05db3631b9bc8ef79c5f42b0053c7169c04943efee7299696e348ea4fd79eebaeb9357f797b14e511570860de10ebe6babcb854021b416304ebcb9104d2a8d85a75a875429ae92eb453aa9bfb9cc83ff53979f11a57e237795dfe22cf41e80cd714453806e7df5dd0f8bf14a2d789ab027cf70b55ab68c31b3bdae01ce6ba16b5ebc8b155d7c64289d3fb2596a93699aa8832dbe4168daad721ab91e077fc6ebfcc6b4811404cf0f8c5948f32b8f7b3fe83cb9686841c37b50e8fcef0e6272b048f1f196830d75552e2b734569ebcd4cbf4b4275fede5bc7a286ab69f4bf42d1271b0a4c76a3f51ceb8edc4522ec83648e00214ef1dbce72eb1db6f6cd99b6c98bc9d9464c511758efb44e0a3adf6432fb6ded743137e09683e2143441a9c7aa189182b03fbf350a5502b5a74059ad53488c1a4779e282523f83ae4d4da380d36e73bcbc7692415f3c34453e1178e219f47182746e26acc77c3e14a5e4dbbc0abb16a680037872de2ac8f0e42440f43196817b161e9d46af468f09b0d23dce8620ff7f046767937a7d19b8cb2b93d28a86028f5daf9bf35caaf3dcd76fda8ea3e9177bffee3680602c2752ca0a27028ed6302f0761b78c9be8fd3962421af702a88a56dfadc4084aaf5e68828ef4c74c3a7300bea184aeedbb40d06d2def76ee9dc748a6ae4dd9d16710565895402a954144d5651db0f3688436ca18b8908dfa4accee5d0cd89304cc122bebf404ec576ea22553b36515f26d06bfe6c52d9d9e5f271274fce0ccfc37a5d111053bf2c0128580f2da89ed0a5db2a35e12d845dc6e6b16e9f3fcc1ef7b0952d7ecb12ce7b6e8ce0107d69f431544cf54e753e2f7f52ab34c20ed2e4926beee19d266357c53ff0685029cd1e102a97dfe5e130befd4ee8902d76cee5c2fcc8ceabf80997a51b63fa0c87da7d2273629f5f5a92979d51d66b8fc4287388744b396a3f3d9d24b8829216e01ae16400e4446e89af483d329b09d8557848c17ea3756dadcdb2ec2193fb18629f5cc085d5026fe206015f8b5986e2b15bd3c2d6daa4b00978a2f61bb759a1f78eb4bfc102e6dc85c2c276c05d5f969ecb07fb1dd29e59823c07636f43556aed043e3edb9012a5e66c525596048a86138ca441dd04c19d2926a5cd9a19d114348a86f82d30fc5c0481d19eb2cd20796cfa6c8892a07c63aa64cd3ec9faa08c5b26fad0d32001061937ab8a1902f0a522f2f7ef7534efa244b96de65d2aee4841183b23b3af32fc39a005e1de6af463447a736f3c840be57fb76546bef35f2f569cf2ddfce09ca9e406407fe0e62b64319dcd4067c644b6ee7c31dfb6791c4dfa919f3669bfa9862500e84f8e2183c99e0efc8df30f27897dcdc9b054e4fdf2acc06cb1b219b0984a9530c1e412da729199472d5c1287bcac0baf6288813480a1e6268200a451a258f4b6336edab53d09fe917734eea3894dadb02578b0d37a0e678a96cfb3f7c009f2678f08dc3d32ab72af332563b902f15b2ffa85a1efa3d00268594fe4d7a095980f81422484b6f2d2a1f8fe92b9505eaed5e6ec081efb88a282b0f4332b056c8908790daecb6e158c72bcf291df4254dfae96ac6e3e27f78118c85a73a1427c1e9e60578579bc5411dbb580c4c086bb66a22e39ed989d02141f4e9971663969dd7d4cf82d929ffc7493a3732a5e68bbb281ae0bc0f7a8cd25ce228d5c14b9f41dfb848aea3c2a20df230b254b5cd0ea7dc62840f772ad96bd1e2724d3f409ba3bca1799e51273c19282687980c5a9a2e23b4b25de1f614d0ebcba90fb71e24e44a80038f411f9a8156e9bce390e90dff6186fb600f19658ea62925b795c2c3895ebe2c1828928f25729083a4420a48ebcdf892304f49fd20732340928d39c08f3bbbb530c84a0ffa3c53e33f494e018378f2b399cc57c44a69162fbe46f3f13212496434b9ebdc6909ea082938dad4273ec78bd6219b87253cb4e4d0536c6aea734459a36f452b39cc3f6cd1c11cb6822eb3979299aae47db0908e57d21c5088d0454fb596604976f9db2ee16d5119d361b464699b9eec6f74566c3753178a0663c9ab1fc66199bc51443577cff5972620359af79327d435b02d7ba58479671f05fa493345bb627092c5bac30b874c01f82890bf8146810b4707f491629a9afe2611b32514250ff1a4f2381d4b25f5e7f245e7954420b8a474cd85a78c03491c845a79039c98fa5557856a18303dafa01463fc7be7435e95f08db21ebdd6a3abe7ec39bfd7786391a358e4691e47fa7b755443c888c26872526c5e38496ecd4cf6bfd05efd9ce7ad51ec6519e6dbcedc3469d4716c6ad2450276d537a5397a0a903f555fb95c42a2187f0b206072821dea1bae68ad9c4541cf513daa4bca66378a42e5dfddf8c81e8d3089b9fce8073de73f05c1a55efa61a1f92e5191c419aa6b028f51207ce7b39b338f8a3b785574efce909ef245e9ab38e6fb7f9bf7c7711c25bde2835868f1e10839c7bdf03fd131e98912bd15dca4758c6cd126922513e6b7bb79e9710dda457e3a9a77fe55b31916ddc29fa1075cd3ddc80958da67d5a04af49b57f62ebad527223b748aab158f0869f02e6604cc37c9d29958cbd16c419df24d93236c76bc7825ce6947f4c760aa4a2ba5fc495f6d5c58ab77333c450b78e384d81353bf6c1f4fef11576e3ed3e22fdf78631b9dd67793fadcba652d8a6071fd03fb8044e5961b1731fe1537f3326fa4a9a67cc5d56911985a3101cdd99f5c76b2bd968195a29076f85d4def2a4ddca23792433134bceec0adee1a19874b63cfbd71c8045baa12572c75eb5871f6e8b0fca7a224687013d2f69662d8c93971ffe41d8fa5daa5b8bc9c4289e624a3c8579d77c619927f500bd40e791026719f2f82f69cc68f946dca22307596c85b215708d5e07220b1a58da201f4c97cc426a434395d68a10955980ee000980b3b3287b33c3bded840dca6b4eb99a10fc83bbfab80e6a791f28cee2094ddd984e24d8394142ea38ea1099868f4462ae913cf5e40b5edfe41a56993c17d2b2e8af31e37a590b7c88ce1c6dbe25a73e2894cf5cc7862b86323309fc4287c5a799176dc6940528180d2a7b4d8fde59a0d243cf2471d0d48101ec9c22fd054ac77221d57d5491b2fe8edf3eae9e5c59a449efa9cda4f2f4fa51d99c6c5ac7cca5e836bbcc02a8fc6da7b20d1b790a6708b87c746920d4f59caa37390745588b44cf467a22f9c296f4f0708500476f27a04291a8396405596534a1c394ce3eb4c504f3c43447e8d683ecfade60f8e4bead09957ac41d3f0897bb5a03be1060776d4981d5328ea1dd4964f9c88e18fc6512cbdc92dc5e02c2e1cd702088a96e4bcdb8a98eaf8d588356c23fec3b37045b8b491405c2704a1fe6421b93b8186ceb75f31b6e66f0f5812b1dc19aec27e3942cb798f8e762dc44b9cffaf1d4b569d7ff2faf34d24327d3ef02cf5d9e89009d8ac0783c46f8cbcd93df8f8762e10e2bd0aa76e589843665ca57c676549530c99a7f005923ff89cda8c083dd2fc4143f47e36beda154d5acd162cb194937001aa44bef558b0cbbad4bc60864813b5a5ee73bdf76bf0488a052f23b50bfab557468ddc40de54dd22bb04f1978f4851c4e1944205bccb389396cb0028dce73b0df4c39bb2fbf0b64681b3d8e1f5127569945cc7720898f98624f1ebc983327768d0401e1a1d373679c3bf4c0859152409bc85d08610bb3db635b09c271dec991ff4d35d29c87def625eb4f091b8f5f3f5dc710fc2a764fce5241f25d746ed937b883423586b2", 0x1000, r1}, 0x68) flock(r4, 0x6) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) syz_open_dev$vcsa(&(0x7f0000000280), 0xc, 0x2800) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) unshare(0x48020200) 04:01:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x101}, 0x0, 0x40, 0x1000000, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:01:50 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x3ceead6a, 0x1, &(0x7f0000000300)=[{&(0x7f0000000640)="771f0b61496107674eee10bda55dbfa2c48c9e2c8e606d609d428530e4021cd96911301179bd37128a4fa9ccb0dbed9d694065673f17937d03c96982f4d4908e5e9f053b9d08f175767c2de3513011ed9f8af8ba62594e95199f35d55cc7ba820ae17642d606fbc4cb9dfbec8ef709a2187b3a467de5d5bf72b73d337847", 0x7e, 0x6b}], 0x2200048, &(0x7f00000006c0)={[{'\x00'}, {'\x00'}, {'\x00'}, {'\x00'}, {')\\-)&#'}, {'-'}, {'vfat\x00'}], [{@obj_type={'obj_type', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_lt={'euid<', 0xee01}}]}) unlinkat(r1, &(0x7f0000000740)='./file0\x00', 0x0) r2 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x10000000c) syz_io_uring_setup(0x77d5, &(0x7f0000000140)={0x0, 0x6d73, 0x0, 0x2, 0xbb, 0x0, r2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYBLOB="c0ffffffffffffff090000000000000009000000000000000000361500000000000000000000000500000000000000040000007747000004000000e0ffffff0001000000000000050000000000000009000000000000000700000000000f002000000000000000000000000000000000000000000000000000000000000000000000000000000026ce72f95122e1e5718ab9767043cec498378c5f3a110bac716943ed974f09bb5c81356b79cad7187434ed0f03edd2bf35a3425198f760b623001e33a67fc36d60f172be312829f18654b38c76a337563e83668e2891c106e2c23fe48c3795a1c96a"]) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000440)) mkdirat(r2, &(0x7f0000000780)='./file0\x00', 0x141) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000007c0)={{r14, 0x63, 0xcb50a7c, 0x1, 0x3ff, 0x4, 0x100000001, 0x40, 0x0, 0x200, 0x5, 0x1f, 0x0, 0x4, 0x8001}}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x0, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6, r9}], 0x80, "5fabd34a60e47f"}) 04:01:50 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="000001fe4fc00a0dacb942ecc0df06829d25ab91fd525a764ea96d49558f7998d20c8009ff94f940f9c5c62eeaa14d8c49e864d41a0a58a1c6ebe42c58545a3d878b32286b117b7f14a647d2f83be0", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:01:50 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) fstatfs(r1, &(0x7f0000000000)=""/80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:01:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x5}, 0x2, 0x3) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:01:50 executing program 1: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038679de021f8c801000000000000009d1fa459d07100000000bc7ae631f7a54805ff070000000000093393d0e1c7391515c7ab7c8e0600", 0x27}, 0xffffff93, 0x0) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffffe, 0x0, 0x0) request_key(&(0x7f0000000640)='asymmetric\x00', &(0x7f0000000680)={'syz', 0x0}, &(0x7f00000006c0)='{{@\x04\\+\x00', 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000080)="a3", 0x1, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000780)='dns_resolver\x00', &(0x7f0000000740)=@chain={'key_or_keyring:', r1}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r2) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8917, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x0, @empty}}) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891a, &(0x7f00000001c0)={'syz_tun\x00', {0x2, 0x0, @empty}}) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1965.625531] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:01:50 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(r6, 0x4b36) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) [ 1966.459151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:02:05 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x40540, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000100)=0xc) connect$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) 04:02:05 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xa}}) [ 1980.561508] FAULT_INJECTION: forcing a failure. [ 1980.561508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.562963] CPU: 1 PID: 11215 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1980.563835] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.564853] Call Trace: [ 1980.565184] dump_stack+0x107/0x167 [ 1980.565633] should_fail.cold+0x5/0xa [ 1980.566106] _copy_from_user+0x2e/0x1b0 [ 1980.566599] __copy_msghdr_from_user+0x91/0x4b0 [ 1980.567170] ? __ia32_sys_shutdown+0x80/0x80 [ 1980.568048] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.569328] sendmsg_copy_msghdr+0xa1/0x160 [ 1980.570365] ? do_recvmmsg+0x6d0/0x6d0 [ 1980.571300] ? find_held_lock+0x2c/0x110 [ 1980.571927] ___sys_sendmsg+0xc6/0x170 [ 1980.572406] ? sendmsg_copy_msghdr+0x160/0x160 [ 1980.572966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.573605] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1980.574153] ? trace_hardirqs_on+0x5b/0x180 [ 1980.574681] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1980.575227] ? finish_task_switch+0x126/0x5d0 [ 1980.576153] ? finish_task_switch+0xef/0x5d0 [ 1980.577210] ? __switch_to+0x572/0xf70 [ 1980.578141] ? __switch_to_asm+0x3a/0x60 [ 1980.579113] ? __switch_to_asm+0x34/0x60 [ 1980.579835] ? __schedule+0x82c/0x1ea0 [ 1980.580325] ? io_schedule_timeout+0x140/0x140 [ 1980.580893] __sys_sendmmsg+0x195/0x470 [ 1980.581384] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1980.581914] ? lock_downgrade+0x6d0/0x6d0 [ 1980.582433] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.583026] ? wait_for_completion_io+0x270/0x270 [ 1980.583859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.584979] ? vfs_write+0x354/0xb10 [ 1980.585872] ? fput_many+0x2f/0x1a0 [ 1980.586744] ? ksys_write+0x1a9/0x260 [ 1980.587712] ? __ia32_sys_read+0xb0/0xb0 [ 1980.588693] __x64_sys_sendmmsg+0x99/0x100 [ 1980.589710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.590950] do_syscall_64+0x33/0x40 [ 1980.591727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.592355] RIP: 0033:0x7fec4fe72b19 [ 1980.592812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.595061] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1980.600016] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1980.600881] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1980.601745] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.602609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 04:02:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 86) 04:02:05 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:02:05 executing program 2: r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x400, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) r3 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000400), 0x303242, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vxcan1\x00'}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000000c0), 0x12) r6 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(r6, 0x4b36) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 04:02:05 executing program 1: syz_io_uring_setup(0x7895, &(0x7f0000000080)={0x0, 0x0, 0xe, 0x200}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000005", @ANYRESHEX=r0]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) syz_open_dev$vcsa(&(0x7f0000000140), 0x200, 0x200003) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast2}}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x616800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x30) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = openat(r1, &(0x7f0000000240)='./file0\x00', 0x4800, 0x12c) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000002c0)=@target={'target ', {'PCI:', '17', ':', 'a', ':', '3', '.', '1c'}}, 0x15) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x3e, 0xc21, 0x0, 0x0, {}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000200)=0x1d, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x495c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d00210c00000000000000000400022a"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 04:02:05 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x1, 0x7f, 0x20, 0x0, 0x7, 0x8000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x7f, 0x100}, 0x40c8c, 0xffffffff, 0x0, 0x7, 0x7ff, 0x7ff, 0x5, 0x0, 0x600000, 0x0, 0xb0}, 0xffffffffffffffff, 0x6, r0, 0x9) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 1980.603471] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:05 executing program 0: ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)={0x190, r0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x1f, 0x2a, [@measure_req={0x26, 0x16, {0x51, 0x3f, 0x4, "2919302215a07d5266ac484ac0c02484fbf54a"}}, @dsss={0x3, 0x1, 0xb3}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x10}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}, @NL80211_ATTR_IE={0x110, 0x2a, [@ht={0x2d, 0x1a, {0x2, 0x1, 0x5, 0x0, {0xa16a, 0x1ffd, 0x0, 0x40, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x400, 0x3}}, @supported_rates={0x1, 0x8, [{0xc}, {0x2}, {0x6c}, {0x60}, {0x1b}, {0x0, 0x1}, {0x18}, {0xb, 0x1}]}, @mesh_chsw={0x76, 0x6, {0x8, 0x54, 0x28, 0x4}}, @dsss={0x3, 0x1, 0x71}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1}, @preq={0x82, 0x41, @ext={{0x1, 0x0, 0x1}, 0x2, 0x1, 0x4, @device_a, 0x81, @broadcast, 0xffff9981, 0x7, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0xf3}, {{0x1}, @broadcast, 0x9}, {{}, @device_b, 0x3f}]}}, @random_vendor={0xdd, 0x8b, "56bbd87244f2252408d53faa9b24769f9680c7669b06c6cfa93b348b7a4c48e9aa06d78da01fd446ca89b99d815189c2def5aa94d2c236ab9ccd9833775ba108e200fea3c618617564fee69efb8f8f00e68e7cb9674722bb357e4e700ba5cfa851914d3129f3375b679c43c42eee5351ee95f7edb21b7d581a9b03fb7efbf9fa9283cf7a0f3120a925e852"}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x804}, 0x800) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) getegid() r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 87) [ 1980.695337] FAULT_INJECTION: forcing a failure. [ 1980.695337] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.697521] CPU: 0 PID: 11233 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1980.698366] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.699383] Call Trace: [ 1980.699728] dump_stack+0x107/0x167 [ 1980.700176] should_fail.cold+0x5/0xa [ 1980.700647] ? __alloc_skb+0x6d/0x5b0 [ 1980.701120] should_failslab+0x5/0x20 [ 1980.701588] kmem_cache_alloc_node+0x55/0x330 [ 1980.702142] __alloc_skb+0x6d/0x5b0 [ 1980.702595] alloc_skb_with_frags+0x92/0x570 [ 1980.703140] ? lock_chain_count+0x20/0x20 [ 1980.703823] sock_alloc_send_pskb+0x7af/0x930 [ 1980.704907] ? sk_alloc+0x350/0x350 [ 1980.705784] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.707043] ? lock_downgrade+0x6d0/0x6d0 [ 1980.708211] __ip_append_data+0x1628/0x3310 [ 1980.709456] ? fib_select_path+0x293/0x1de0 [ 1980.710697] ? ip_frag_init+0x350/0x350 [ 1980.711858] ? ip_finish_output+0x330/0x330 [ 1980.713098] ? ip_route_output_key_hash+0x19c/0x340 [ 1980.714528] ? ipv4_mtu+0x1ed/0x2c0 [ 1980.715582] ip_make_skb+0x22a/0x2a0 [ 1980.716651] ? ip_frag_init+0x350/0x350 [ 1980.717789] ? ip_flush_pending_frames+0x20/0x20 [ 1980.719154] ? lock_downgrade+0x6d0/0x6d0 [ 1980.720358] ? xfrm_lookup_route+0x65/0x210 [ 1980.721600] udp_sendmsg+0x1940/0x2160 [ 1980.722718] ? ip_frag_init+0x350/0x350 [ 1980.723850] ? udp_setsockopt+0xc0/0xc0 [ 1980.724341] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.724985] ? __lock_acquire+0xbb1/0x5b00 [ 1980.725518] ? handle_mm_fault+0x1a0b/0x3500 [ 1980.726056] ? lock_downgrade+0x6d0/0x6d0 [ 1980.726564] ? do_raw_spin_lock+0x121/0x260 [ 1980.727091] ? rwlock_bug.part.0+0x90/0x90 [ 1980.727631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.728282] udpv6_sendmsg+0x1b30/0x2ad0 [ 1980.728790] ? udp_v6_push_pending_frames+0x360/0x360 [ 1980.729422] ? _down_write_nest_lock+0x160/0x160 [ 1980.730012] ? do_user_addr_fault+0x5b0/0xc60 [ 1980.730563] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.731203] ? exc_page_fault+0xca/0x1a0 [ 1980.731732] ? trace_hardirqs_on+0x5b/0x180 [ 1980.732264] ? exc_page_fault+0xca/0x1a0 [ 1980.732765] ? asm_exc_page_fault+0x1e/0x30 [ 1980.733293] ? sock_has_perm+0x1ea/0x280 [ 1980.733788] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1980.734426] ? copy_user_generic_string+0x2c/0x40 [ 1980.735022] ? __import_iovec+0x458/0x590 [ 1980.735536] ? udp_v6_push_pending_frames+0x360/0x360 [ 1980.735643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1980.736182] inet6_sendmsg+0x105/0x140 [ 1980.736196] ? inet6_compat_ioctl+0x320/0x320 [ 1980.736209] __sock_sendmsg+0xf2/0x190 [ 1980.736224] ____sys_sendmsg+0x334/0x870 [ 1980.739193] ? sock_write_iter+0x3d0/0x3d0 [ 1980.739732] ? do_recvmmsg+0x6d0/0x6d0 [ 1980.740212] ? __lock_acquire+0x1657/0x5b00 [ 1980.740748] ___sys_sendmsg+0xf3/0x170 [ 1980.741227] ? sendmsg_copy_msghdr+0x160/0x160 [ 1980.741790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.742430] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1980.742976] ? trace_hardirqs_on+0x5b/0x180 [ 1980.743517] ? lock_acquire+0x197/0x470 [ 1980.743532] ? find_held_lock+0x2c/0x110 [ 1980.743548] ? __might_fault+0xd3/0x180 [ 1980.743560] ? lock_downgrade+0x6d0/0x6d0 [ 1980.743574] ? io_schedule_timeout+0x140/0x140 [ 1980.746198] __sys_sendmmsg+0x195/0x470 [ 1980.746689] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1980.747216] ? lock_downgrade+0x6d0/0x6d0 [ 1980.747758] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.748352] ? wait_for_completion_io+0x270/0x270 [ 1980.748949] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.749528] ? vfs_write+0x354/0xb10 [ 1980.749985] ? fput_many+0x2f/0x1a0 [ 1980.750431] ? ksys_write+0x1a9/0x260 [ 1980.750898] ? __ia32_sys_read+0xb0/0xb0 [ 1980.751400] __x64_sys_sendmmsg+0x99/0x100 [ 1980.751974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.752606] do_syscall_64+0x33/0x40 [ 1980.753062] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.753691] RIP: 0033:0x7fec4fe72b19 [ 1980.754147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.756423] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1980.757356] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1980.758230] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1980.759100] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.759991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.760864] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000100)="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", 0xfa8) 04:02:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 88) [ 1980.840652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1980.873873] FAULT_INJECTION: forcing a failure. [ 1980.873873] name failslab, interval 1, probability 0, space 0, times 0 [ 1980.875301] CPU: 0 PID: 11246 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1980.876187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1980.877191] Call Trace: [ 1980.877518] dump_stack+0x107/0x167 [ 1980.877960] should_fail.cold+0x5/0xa [ 1980.878424] ? create_object.isra.0+0x3a/0xa20 [ 1980.878982] should_failslab+0x5/0x20 [ 1980.879446] kmem_cache_alloc+0x5b/0x310 [ 1980.879972] create_object.isra.0+0x3a/0xa20 [ 1980.880504] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1980.881125] kmem_cache_alloc_node+0x169/0x330 [ 1980.881687] __alloc_skb+0x6d/0x5b0 [ 1980.882134] alloc_skb_with_frags+0x92/0x570 [ 1980.882671] ? lock_chain_count+0x20/0x20 [ 1980.883176] sock_alloc_send_pskb+0x7af/0x930 [ 1980.883746] ? sk_alloc+0x350/0x350 [ 1980.884194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.884829] ? lock_downgrade+0x6d0/0x6d0 [ 1980.885343] __ip_append_data+0x1628/0x3310 [ 1980.885877] ? fib_select_path+0x293/0x1de0 [ 1980.886405] ? ip_frag_init+0x350/0x350 [ 1980.886894] ? ip_finish_output+0x330/0x330 [ 1980.887418] ? ip_route_output_key_hash+0x19c/0x340 [ 1980.888045] ? ipv4_mtu+0x1ed/0x2c0 [ 1980.888492] ip_make_skb+0x22a/0x2a0 [ 1980.888950] ? ip_frag_init+0x350/0x350 [ 1980.889435] ? ip_flush_pending_frames+0x20/0x20 [ 1980.890016] ? lock_downgrade+0x6d0/0x6d0 [ 1980.890527] ? xfrm_lookup_route+0x65/0x210 [ 1980.891057] udp_sendmsg+0x1940/0x2160 [ 1980.891545] ? ip_frag_init+0x350/0x350 [ 1980.892643] ? udp_setsockopt+0xc0/0xc0 [ 1980.893134] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1980.893778] ? __lock_acquire+0xbb1/0x5b00 [ 1980.894309] ? handle_mm_fault+0x1a0b/0x3500 [ 1980.894845] ? lock_downgrade+0x6d0/0x6d0 [ 1980.895350] ? do_raw_spin_lock+0x121/0x260 [ 1980.895883] ? rwlock_bug.part.0+0x90/0x90 [ 1980.896400] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.897045] udpv6_sendmsg+0x1b30/0x2ad0 [ 1980.897548] ? udp_v6_push_pending_frames+0x360/0x360 [ 1980.898176] ? _down_write_nest_lock+0x160/0x160 [ 1980.898764] ? do_user_addr_fault+0x5b0/0xc60 [ 1980.899315] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1980.900553] ? exc_page_fault+0xca/0x1a0 [ 1980.901717] ? trace_hardirqs_on+0x5b/0x180 [ 1980.902949] ? exc_page_fault+0xca/0x1a0 [ 1980.904120] ? asm_exc_page_fault+0x1e/0x30 [ 1980.905355] ? sock_has_perm+0x1ea/0x280 [ 1980.906514] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1980.908004] ? copy_user_generic_string+0x2c/0x40 [ 1980.909390] ? __import_iovec+0x458/0x590 [ 1980.910573] ? udp_v6_push_pending_frames+0x360/0x360 [ 1980.912069] inet6_sendmsg+0x105/0x140 [ 1980.913186] ? inet6_compat_ioctl+0x320/0x320 [ 1980.914466] __sock_sendmsg+0xf2/0x190 [ 1980.915587] ____sys_sendmsg+0x334/0x870 [ 1980.916749] ? sock_write_iter+0x3d0/0x3d0 [ 1980.917955] ? do_recvmmsg+0x6d0/0x6d0 [ 1980.919067] ? __lock_acquire+0x1657/0x5b00 [ 1980.920318] ___sys_sendmsg+0xf3/0x170 [ 1980.921430] ? sendmsg_copy_msghdr+0x160/0x160 [ 1980.922731] ? vmacache_find+0x55/0x2a0 [ 1980.923884] ? lock_acquire+0x197/0x470 [ 1980.925017] ? find_held_lock+0x2c/0x110 [ 1980.926181] ? __might_fault+0xd3/0x180 [ 1980.927313] ? lock_downgrade+0x6d0/0x6d0 [ 1980.928505] ? asm_exc_page_fault+0x1e/0x30 [ 1980.929745] __sys_sendmmsg+0x195/0x470 [ 1980.930882] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1980.932122] ? lock_downgrade+0x6d0/0x6d0 [ 1980.933319] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1980.934698] ? wait_for_completion_io+0x270/0x270 [ 1980.936089] ? rcu_read_lock_any_held+0x75/0xa0 [ 1980.937417] ? vfs_write+0x354/0xb10 [ 1980.938480] ? fput_many+0x2f/0x1a0 [ 1980.939524] ? ksys_write+0x1a9/0x260 [ 1980.940617] ? __ia32_sys_read+0xb0/0xb0 [ 1980.941783] __x64_sys_sendmmsg+0x99/0x100 [ 1980.942991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1980.944476] do_syscall_64+0x33/0x40 [ 1980.945540] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1980.947010] RIP: 0033:0x7fec4fe72b19 [ 1980.948085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1980.953410] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1980.955601] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1980.957649] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1980.959705] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1980.961754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1980.963814] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:05 executing program 2: sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x8001) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @fd}]}]}, 0x28}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d7b18d8a6518eff38cadf2f243fb4cd1f7f1c1f562778da13ef44a9137839d7e86194ebd42726872c4020fe5b3743382798cf05a99b473f0e2a3ace9e5f7f62367aa8197dffc1235c57859e6b782149b8693ec223e4d8a84e2dda3eae89f1e9ea75f8edc23e419442f3b2a6068c7ca206c2790aae7a32c24ae1079b75ba07113af5aa742c23cdf89aae2a65cf0ec471567b704d97ce4b8c5ba35709cf3520f0807ae1eebc616393f0200a3311f6ba6c3a9dea5583623385b27a11171318d13283041", @ANYRES32=r0, @ANYRES32, @ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES64=r1, @ANYRES16=r1], 0x18}, 0x1, 0x0, 0x0, 0x837271399f06b7e7}, 0x4000) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) accept(0xffffffffffffffff, &(0x7f0000000600)=@can, &(0x7f0000000680)=0x80) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0xc1}, 0x200040c0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES64], 0x5c000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/4116, @ANYRESDEC, @ANYRES64]) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000300), 0x5}, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:02:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1f, 0xb, 0x1, 0x3, 0x0, 0x0, 0x20, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x621, 0x80000001, 0xd125, 0x8, 0x48e, 0x152c031e, 0xffff, 0x0, 0x5, 0x0, 0x807}, 0xffffffffffffffff, 0x4, r2, 0x9) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r4) 04:02:05 executing program 1: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1981.011898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1981.035394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.036437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.037498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1981.047943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1981.071982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.073235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.074255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:02:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xdb, 0x3f, 0xea, 0x93, 0x0, 0x9, 0x4002, 0x7, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000000), 0xd9bdcf496d84e986}, 0x814, 0x2, 0x778a, 0x0, 0x4, 0xb79, 0x1, 0x0, 0xfffffc00, 0x0, 0xe4}, 0x0, 0x2, r3, 0x1) 04:02:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 89) 04:02:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r1, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = clone3(&(0x7f00000008c0)={0x31142580, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="c4d088f87f89543746018111782fed60f174bf9a24e2c3c7f39262a8ec699d1124c9ece669f3637e7381786d8a9c717c49c05f8affeb87f63c70553e15", 0x3d}, {&(0x7f0000000940)="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", 0x1000}], 0x2) r3 = getpgrp(0x0) kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) setresuid(0xffffffffffffffff, 0x0, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:02:20 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xb000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000be00010100000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x4000000, 0x2, 0x3, 0x1c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) pwritev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="9c91709922ab5997c5cd05f498bebc1c4d064495f3fb46bfb1618d6b3f462ffe284b611e5e86b52021bab8d0ed8097245204ecb6b856a722", 0x38}, {0x0, 0x2}], 0x2, 0x101, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x104, r3, 0x8, 0x70bd25, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "2bfe486b9ba9ecbb7a645f548e44aa7edf79df26275f0ac832c5cd009ad317012b67edbe879ea66b3264037ecb9b434764721cac7d6d343832a36ad2f567e5f5ca3a94cdad870c9ead5c2a8116decc809a2290845ea86f5c45e71a22904b1fd05d60a5c32927ff543409807da97a5919dbe71302890ba18d2d776e92075c2e0df7095c5e79ef380849631a1e7fdd6300ac5a74bd825d4d510dd7c1481e6e2a0dc062da6fc9381cd3d2098b597f0e4c4bef6dd32dd523e61bb1c12712ec37c5875f631bf5e4e966c98b7ad468b4704683e911ce61b3d58f7d722f599dadf1d1a4ab099b91f0"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x2004045}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0xc8, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040040}, 0x4044880) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(r6, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) 04:02:20 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xb}}) 04:02:20 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000280), 0x60a0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:02:20 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 1995.951265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=190 sclass=netlink_route_socket pid=11290 comm=syz-executor.1 [ 1995.962216] FAULT_INJECTION: forcing a failure. [ 1995.962216] name failslab, interval 1, probability 0, space 0, times 0 [ 1995.963672] CPU: 0 PID: 11277 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1995.964530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1995.965543] Call Trace: [ 1995.965872] dump_stack+0x107/0x167 [ 1995.966320] should_fail.cold+0x5/0xa [ 1995.966793] should_failslab+0x5/0x20 [ 1995.967263] __kmalloc_node_track_caller+0x74/0x3b0 [ 1995.967876] ? alloc_skb_with_frags+0x92/0x570 [ 1995.968451] __alloc_skb+0xb1/0x5b0 [ 1995.968900] alloc_skb_with_frags+0x92/0x570 [ 1995.969444] ? lock_chain_count+0x20/0x20 [ 1995.969952] sock_alloc_send_pskb+0x7af/0x930 [ 1995.970512] ? sk_alloc+0x350/0x350 [ 1995.970531] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1995.970541] ? lock_downgrade+0x6d0/0x6d0 [ 1995.970562] __ip_append_data+0x1628/0x3310 [ 1995.970581] ? fib_select_path+0x293/0x1de0 [ 1995.970595] ? ip_frag_init+0x350/0x350 [ 1995.970614] ? ip_finish_output+0x330/0x330 [ 1995.970627] ? ip_route_output_key_hash+0x19c/0x340 [ 1995.970637] ? ipv4_mtu+0x1ed/0x2c0 [ 1995.970653] ip_make_skb+0x22a/0x2a0 [ 1995.970667] ? ip_frag_init+0x350/0x350 [ 1995.970681] ? ip_flush_pending_frames+0x20/0x20 [ 1995.970698] ? lock_downgrade+0x6d0/0x6d0 [ 1995.970715] ? xfrm_lookup_route+0x65/0x210 [ 1995.970731] udp_sendmsg+0x1940/0x2160 [ 1995.970748] ? ip_frag_init+0x350/0x350 [ 1995.970765] ? udp_setsockopt+0xc0/0xc0 [ 1995.970779] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1995.970794] ? __lock_acquire+0xbb1/0x5b00 [ 1995.970820] ? handle_mm_fault+0x1a0b/0x3500 [ 1995.970832] ? lock_downgrade+0x6d0/0x6d0 [ 1995.970843] ? do_raw_spin_lock+0x121/0x260 [ 1995.970854] ? rwlock_bug.part.0+0x90/0x90 [ 1995.970867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.970885] udpv6_sendmsg+0x1b30/0x2ad0 [ 1995.970907] ? udp_v6_push_pending_frames+0x360/0x360 [ 1995.970920] ? _down_write_nest_lock+0x160/0x160 [ 1995.970942] ? do_user_addr_fault+0x5b0/0xc60 [ 1995.970957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.970970] ? exc_page_fault+0xca/0x1a0 [ 1995.970981] ? trace_hardirqs_on+0x5b/0x180 [ 1995.970993] ? exc_page_fault+0xca/0x1a0 [ 1995.971007] ? asm_exc_page_fault+0x1e/0x30 [ 1995.971020] ? sock_has_perm+0x1ea/0x280 [ 1995.971031] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1995.971049] ? copy_user_generic_string+0x2c/0x40 [ 1995.971069] ? __import_iovec+0x458/0x590 [ 1995.971082] ? udp_v6_push_pending_frames+0x360/0x360 [ 1995.971097] inet6_sendmsg+0x105/0x140 [ 1995.971110] ? inet6_compat_ioctl+0x320/0x320 [ 1995.971123] __sock_sendmsg+0xf2/0x190 [ 1995.971136] ____sys_sendmsg+0x334/0x870 [ 1995.971150] ? sock_write_iter+0x3d0/0x3d0 [ 1995.971161] ? do_recvmmsg+0x6d0/0x6d0 [ 1995.971175] ? __lock_acquire+0x1657/0x5b00 [ 1995.971195] ___sys_sendmsg+0xf3/0x170 [ 1995.971209] ? sendmsg_copy_msghdr+0x160/0x160 [ 1995.971223] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1995.971234] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1995.971243] ? trace_hardirqs_on+0x5b/0x180 [ 1995.971259] ? lock_acquire+0x197/0x470 [ 1995.971270] ? find_held_lock+0x2c/0x110 [ 1995.971285] ? __might_fault+0xd3/0x180 [ 1995.971297] ? lock_downgrade+0x6d0/0x6d0 [ 1995.971312] ? io_schedule_timeout+0x140/0x140 [ 1995.971333] __sys_sendmmsg+0x195/0x470 [ 1995.971349] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1995.971361] ? lock_downgrade+0x6d0/0x6d0 [ 1995.971384] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1995.971399] ? wait_for_completion_io+0x270/0x270 [ 1995.971414] ? rcu_read_lock_any_held+0x75/0xa0 [ 1995.971426] ? vfs_write+0x354/0xb10 [ 1995.971438] ? fput_many+0x2f/0x1a0 [ 1995.971451] ? ksys_write+0x1a9/0x260 [ 1995.971471] ? __ia32_sys_read+0xb0/0xb0 [ 1996.004967] __x64_sys_sendmmsg+0x99/0x100 [ 1996.004986] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.004997] do_syscall_64+0x33/0x40 [ 1996.005010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.005019] RIP: 0033:0x7fec4fe72b19 [ 1996.005032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.005039] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1996.005053] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1996.005066] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1996.012609] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.013484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.014354] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000006a00274e0000000000000000000200007b6a7912d74e0000"], 0x1c}}, 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000007c0), &(0x7f0000000800)={'fscrypt:', @desc3}, &(0x7f0000000840)={0x0, "d385789290d2306560fa7c915245a0dc4d63a45de4ed006822f01c916d902c89ab295e1fd4aebaec8518120661958d96f4665cc5658c52d1afb4dd2782e7198f", 0x32}, 0x48, r1) keyctl$set_timeout(0xf, r4, 0xe512) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r6 = clone3(&(0x7f0000000480)={0x1008100, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340), {0x22}, &(0x7f0000000380)=""/102, 0x66, &(0x7f0000000400)=""/50, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) r7 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc1}, &(0x7f0000000640)={0x0, "49ceff1752cc6771181cad2ecfeb6e271c004e1e108a0da1662a7067ae3658d4b95e26bbedd7de27478c871506f67011740aad51fc78096a1ee65aeec896eefd", 0x4}, 0x48, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, r7, 0xfffffffffffffffb, 0x1) r8 = gettid() perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x0, 0x40, 0xfd, 0xd5, 0x0, 0x2, 0x1800, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xac2f, 0xffffffffffff0000}, 0x0, 0x9, 0x3f, 0x8, 0x716b, 0x6, 0x3, 0x0, 0xff, 0x0, 0x4}, r8, 0x1, 0xffffffffffffffff, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="900100002100000429bd7000fedbdf25090000001400778008000400", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00'], 0x190}, 0x1, 0x0, 0x0, 0x40090}, 0x80) r9 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[{0x0}, {0x0}, {&(0x7f0000000000)="aed8b1e9f66ad13f65eda82472a8586a56935ea372ea809c57c1e5351d982adb4ef971a78dbd0eecc145fe77c75346e7efabff2fa44e2485259f09bb9980", 0x3e, 0x5}, {&(0x7f0000000ac0)="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", 0x1000, 0x3}], 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r5, @ANYRESOCT=r5]) fcntl$notify(r9, 0x402, 0x80000007) 04:02:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x1, 0xff, 0x8, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@uid_lt={'uid<', 0xee01}}, {@dont_appraise}]}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x1, 0x3, 0x1, 'queue1\x00'}) [ 1996.047200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1996.054746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1996.074106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=190 sclass=netlink_route_socket pid=11300 comm=syz-executor.1 04:02:20 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x2) sendfile(r3, r4, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r6, 0x800000000081) getgroups(0x3, &(0x7f0000002c40)=[0x0, 0x0, 0x0]) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000300)="f7ddbbef69dc53e08055582e5d24691160da97b9827f9ae33f535715fbbf47743c025992d6e49ceb19be8fecfe2eef3a6be36f55bb647fb101367afc6d856dcebbf2adb891a87ead9701d274dd0b210868a8c5674eb32a1299a2985b2289c83e63637db7519d0feecd9b0476c3331b45ce8a31458764091f9e1818e23d3ec68add7105c58b479de27f5d17dc246c5d", 0x8f}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000001c0)="a65e1c4fa239e0806a6c1b2a1df7da720698d0b0469beeddebbba7a56370edc37725c52109d45e91b6f93a6d17e4ef62c48dcf0fb2d27002208bea986953c111fad3968322c763eece0b64ec2aeacd8f8df285159b2ba4fe4ee87926b824", 0x5e}, {&(0x7f00000013c0)="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", 0x1000}], 0x4, &(0x7f0000002440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x8000}}, {{&(0x7f00000024c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002540)="55678539ea12e829aac0a2eb689092202b8c84d11d690f94d9adad6ccd00097f596b80160a24490fd14bb63c7746b3bd78168e7188b08427a7552630f107022339f8939bbdc794bc0a1412e15f08b074be4d0eed1a3cc42d8444de673049c1c5dcb6509a", 0x64}, {&(0x7f00000025c0)="9587b4c280b5eedd6844485fa00946e8642c6a23accbf01b5f63e3a9648032884f6db5c1fe706c27a20fca00ddf370d5e3834f3dc9ea25caa197afbdc0196957b7c932bf3fe1a7c42fef4eae57ec1d5056e7c3014494ea0d94271a567bbea36fed8030b5fac04385dbde66e9672bd13c38a55dae37156cc0c9309f65f7f0a5cf8a6405c7735aaf18c4dff690aca0a0786ee1e862e30576d95caa4dbcc68396", 0x9f}, {&(0x7f0000002680)="9ce45de935f629dc99655875c0f2bbb77397e2ed02459ac9817944ecd3bb6870d6a2440f73d0a3", 0x27}, {&(0x7f00000026c0)="8809edf1a98df6af18924817352c78b9d6561cffc284007e1881ead7a1ac9430c2ae81d4d09551bd89a72c1c584cceecbfe485ec2b999257650ba5e6811e923967e79357bd8f41e8e139", 0x4a}, {&(0x7f0000002740)="6999cc82610ca2068dc7c2dfbf6e9f9fe305f7ff82e7c574756ee6446a07d0946f03b33ee0aae6058dc6e7127d0796cb132f1e77e14aa8fb055e68a3372a8a35938b25a186ee80d7afc8926ac08daeb3fd3f0007ad1ed3665616c74542641cb7efd7da5b2e40667aa264e73ee2b968f0d9d04ae8a97b58fc7a01c521d10ad6bd020c188af628da71344e4cbd7a8e81b5a54d47e8bfe0e00e2cdff02d2ce5bb4abc936fb3cc", 0xa5}], 0x5, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0xf8, 0x4008040}}, {{&(0x7f0000002ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b40)="ac3ef232b14934c24312e71155fd00abaf0d6c6e09b92255e551609c7df5f7dcb349863ee24313732224eb21f0fd20ff07c2db00c4ae74360013d6e9c9e29bc1fb4031d4d31dcc68919b83ae1183cf61fa2912908721ea1d65459e76d8598e95b96b1a056db885847df6338c7abaf10aa38c7a47afcac44e3dbee61449c4214ca25b497127253567ebd228f34560335c8340fe9001e7296b84ccf52acfe4ff302e0d765eb724acda49f64f", 0xab}], 0x1, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0xf0, 0x800}}], 0x3, 0x40) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r9 = socket$unix(0x1, 0x5, 0x0) connect$unix(r9, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:02:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 90) [ 1996.083770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1996.087126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1996.097904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1996.115592] FAULT_INJECTION: forcing a failure. [ 1996.115592] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.117089] CPU: 0 PID: 11310 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1996.117995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.119007] Call Trace: [ 1996.119336] dump_stack+0x107/0x167 [ 1996.119784] should_fail.cold+0x5/0xa [ 1996.120271] ? create_object.isra.0+0x3a/0xa20 [ 1996.120833] should_failslab+0x5/0x20 [ 1996.121302] kmem_cache_alloc+0x5b/0x310 [ 1996.121801] create_object.isra.0+0x3a/0xa20 [ 1996.122346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1996.122969] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1996.123589] ? alloc_skb_with_frags+0x92/0x570 [ 1996.124176] __alloc_skb+0xb1/0x5b0 [ 1996.124624] alloc_skb_with_frags+0x92/0x570 [ 1996.125165] ? lock_chain_count+0x20/0x20 [ 1996.125672] sock_alloc_send_pskb+0x7af/0x930 [ 1996.126230] ? sk_alloc+0x350/0x350 [ 1996.126680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1996.127318] ? lock_downgrade+0x6d0/0x6d0 [ 1996.127833] __ip_append_data+0x1628/0x3310 [ 1996.128425] ? fib_select_path+0x293/0x1de0 [ 1996.128958] ? ip_frag_init+0x350/0x350 [ 1996.129446] ? ip_finish_output+0x330/0x330 [ 1996.129969] ? ip_route_output_key_hash+0x19c/0x340 [ 1996.130573] ? ipv4_mtu+0x1ed/0x2c0 [ 1996.131019] ip_make_skb+0x22a/0x2a0 [ 1996.131475] ? ip_frag_init+0x350/0x350 [ 1996.131961] ? ip_flush_pending_frames+0x20/0x20 [ 1996.132565] ? lock_downgrade+0x6d0/0x6d0 [ 1996.133075] ? xfrm_lookup_route+0x65/0x210 [ 1996.133607] udp_sendmsg+0x1940/0x2160 [ 1996.134085] ? ip_frag_init+0x350/0x350 [ 1996.134575] ? udp_setsockopt+0xc0/0xc0 [ 1996.135061] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1996.135702] ? __lock_acquire+0xbb1/0x5b00 [ 1996.136241] ? handle_mm_fault+0x1a0b/0x3500 [ 1996.136775] ? lock_downgrade+0x6d0/0x6d0 [ 1996.137278] ? do_raw_spin_lock+0x121/0x260 [ 1996.137801] ? rwlock_bug.part.0+0x90/0x90 [ 1996.138317] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.138965] udpv6_sendmsg+0x1b30/0x2ad0 [ 1996.139469] ? udp_v6_push_pending_frames+0x360/0x360 [ 1996.140115] ? _down_write_nest_lock+0x160/0x160 [ 1996.140708] ? do_user_addr_fault+0x5b0/0xc60 [ 1996.141254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.141890] ? exc_page_fault+0xca/0x1a0 [ 1996.142383] ? trace_hardirqs_on+0x5b/0x180 [ 1996.142908] ? exc_page_fault+0xca/0x1a0 [ 1996.143406] ? asm_exc_page_fault+0x1e/0x30 [ 1996.143931] ? sock_has_perm+0x1ea/0x280 [ 1996.144439] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1996.145070] ? copy_user_generic_string+0x2c/0x40 [ 1996.145663] ? __import_iovec+0x458/0x590 [ 1996.146166] ? udp_v6_push_pending_frames+0x360/0x360 [ 1996.146795] inet6_sendmsg+0x105/0x140 [ 1996.147270] ? inet6_compat_ioctl+0x320/0x320 [ 1996.147813] __sock_sendmsg+0xf2/0x190 [ 1996.148308] ____sys_sendmsg+0x334/0x870 [ 1996.148803] ? sock_write_iter+0x3d0/0x3d0 [ 1996.149322] ? do_recvmmsg+0x6d0/0x6d0 [ 1996.149798] ? __lock_acquire+0x1657/0x5b00 [ 1996.150337] ___sys_sendmsg+0xf3/0x170 [ 1996.150812] ? sendmsg_copy_msghdr+0x160/0x160 [ 1996.151377] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.152012] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1996.152591] ? trace_hardirqs_on+0x5b/0x180 [ 1996.153117] ? lock_acquire+0x197/0x470 [ 1996.153600] ? find_held_lock+0x2c/0x110 [ 1996.154102] ? __might_fault+0xd3/0x180 [ 1996.154586] ? lock_downgrade+0x6d0/0x6d0 [ 1996.155090] ? io_schedule_timeout+0x140/0x140 [ 1996.155653] __sys_sendmmsg+0x195/0x470 [ 1996.156165] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1996.156692] ? lock_downgrade+0x6d0/0x6d0 [ 1996.157206] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1996.157795] ? wait_for_completion_io+0x270/0x270 [ 1996.158383] ? rcu_read_lock_any_held+0x75/0xa0 [ 1996.158946] ? vfs_write+0x354/0xb10 [ 1996.159397] ? fput_many+0x2f/0x1a0 [ 1996.159838] ? ksys_write+0x1a9/0x260 [ 1996.160312] ? __ia32_sys_read+0xb0/0xb0 [ 1996.160810] __x64_sys_sendmmsg+0x99/0x100 [ 1996.161329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.161955] do_syscall_64+0x33/0x40 [ 1996.162408] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.163031] RIP: 0033:0x7fec4fe72b19 [ 1996.163485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.165735] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1996.166664] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1996.167533] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1996.168409] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.169274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.170145] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) getegid() r0 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x280800, 0x0) clock_gettime(0x0, &(0x7f0000001ac0)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000001980)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f0000000300)=""/12, 0xc}, {&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/11, 0xb}], 0x5, &(0x7f0000000480)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000540)=""/135, 0x87}, {&(0x7f0000000600)=""/188, 0xbc}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/144, 0x90}, {&(0x7f0000000880)=""/86, 0x56}, {&(0x7f0000000900)=""/244, 0xf4}, {&(0x7f0000000a00)=""/220, 0xdc}, {&(0x7f0000000b00)=""/143, 0x8f}, {&(0x7f0000000bc0)=""/246, 0xf6}], 0x9, &(0x7f0000000d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000e00), 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e80)=""/73, 0x49}, {&(0x7f0000000f00)=""/42, 0x2a}, {&(0x7f0000000f40)=""/33, 0x21}, {&(0x7f0000000f80)=""/152, 0x98}, {&(0x7f0000001040)=""/46, 0x2e}, {&(0x7f0000001080)}], 0x6, &(0x7f0000001140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000001240)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000012c0)=""/91, 0x5b}, {&(0x7f0000001340)=""/76, 0x4c}, {&(0x7f00000013c0)=""/212, 0xd4}, {&(0x7f00000014c0)=""/251, 0xfb}], 0x4, &(0x7f0000001600)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/21, 0x15}, {&(0x7f0000001dc0)=""/25, 0x19}, {&(0x7f0000001740)=""/13, 0xd}, {&(0x7f0000001e00)=""/255, 0xff}], 0x4, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x5, 0x40, &(0x7f0000001b00)={r3, r4+60000000}) r7 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f0000001d00)) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup3(r7, r10, 0x80000) syz_io_uring_submit(r8, r9, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000180)=@sco}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) write$cgroup_subtree(r12, &(0x7f0000001d40)={[{0x2d, 'rlimit'}, {0x2b, 'memory'}, {0x2d, 'rlimit'}, {0x2d, 'pids'}, {0x2b, 'pids'}, {0x2d, 'memory'}, {0x2b, 'net_prio'}, {0x2d, 'cpuacct'}, {0x2b, 'cpuset'}, {0x2b, 'io'}]}, 0x4b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000009, 0x110, r6, 0x8000000) r13 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001080)='./file0\x00', &(0x7f0000001b40)={0xe40, 0x188, 0x10}, 0x18) syz_io_uring_submit(0x0, r9, &(0x7f0000001cc0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r13, &(0x7f0000001b80), &(0x7f0000001c80)='./file1\x00', 0x800, 0x0, 0x1}, 0x2) 04:02:20 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r5, 0xfffffffffffffffc, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x100000000000, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000100)=ANY=[]) 04:02:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 91) 04:02:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x9) io_uring_enter(0xffffffffffffffff, 0x669e, 0x5a26, 0x3, &(0x7f00000001c0)={[0x6]}, 0x8) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x7, 0xa4800) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x8, 0xff, 0x1, 0x20, 0x0, 0x6, 0x42, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7cd5, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x120, 0x63, 0x1f, 0x5, 0x4, 0x10001, 0x1ff, 0x0, 0xd9a, 0x0, 0x10001}, r0, 0xb, r1, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000500000000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b8200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33353633373030303500"/192, 0xc0, 0x404}, {&(0x7f0000010100)="00000000000000000000000039c043f6970341999833e8e90d2470c4010040000c00000000000000dbf4655f00"/60, 0x3c, 0x7fff}, {&(0x7f0000010200)="0100000000000500400000000000000000000000000000006e00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="02000000030000000400000005000f000300040000", 0x15, 0x1000}, {0x0}, {&(0x7f0000012500)="ed41000000100000dbf4655fdcf4655fdcf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x404080}, {&(0x7f0000012700), 0x0, 0x8004500}, {0x0}, {0x0}, {&(0x7f0000013000)="504d4d00504d4dffdcf4655f00000000647679756b6f762d", 0x18, 0x40000}], 0xc0000, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2]) [ 1996.291164] FAULT_INJECTION: forcing a failure. [ 1996.291164] name failslab, interval 1, probability 0, space 0, times 0 [ 1996.292619] CPU: 0 PID: 11329 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 1996.293464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1996.294477] Call Trace: [ 1996.294808] dump_stack+0x107/0x167 [ 1996.295256] should_fail.cold+0x5/0xa [ 1996.295726] ? lock_release+0x680/0x680 [ 1996.296231] ? skb_clone+0x14f/0x3d0 [ 1996.296692] should_failslab+0x5/0x20 [ 1996.297161] kmem_cache_alloc+0x5b/0x310 [ 1996.297657] ? mark_lock+0xf5/0x2df0 [ 1996.298117] skb_clone+0x14f/0x3d0 [ 1996.298556] dev_queue_xmit_nit+0x3a7/0xb00 [ 1996.299086] ? ipv6_mc_check_mld+0x1110/0x1110 [ 1996.299650] dev_hard_start_xmit+0xab/0x6f0 [ 1996.300198] __dev_queue_xmit+0x179a/0x2690 [ 1996.300731] ? find_held_lock+0x2c/0x110 [ 1996.301233] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 1996.301795] ? lock_downgrade+0x6d0/0x6d0 [ 1996.302303] ? lock_acquire+0x197/0x470 [ 1996.302792] ? ip_finish_output2+0x220/0x21f0 [ 1996.303346] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 1996.303997] neigh_connected_output+0x382/0x4d0 [ 1996.304592] ip_finish_output2+0x6f1/0x21f0 [ 1996.305123] ? nf_hook_slow+0xfc/0x1e0 [ 1996.305601] ? ip_frag_next+0x9e0/0x9e0 [ 1996.306090] ? nf_hook+0x160/0x510 [ 1996.306528] ? __ip_finish_output.part.0+0xb50/0xb50 [ 1996.307152] __ip_finish_output.part.0+0x5f3/0xb50 [ 1996.307754] ? ip_fragment.constprop.0+0x240/0x240 [ 1996.308365] ? nf_hook+0x510/0x510 [ 1996.308810] ip_output+0x2f7/0x600 [ 1996.309253] ip_send_skb+0xdd/0x260 [ 1996.309707] udp_send_skb+0x6da/0x11d0 [ 1996.310193] udp_sendmsg+0x1980/0x2160 [ 1996.310674] ? ip_frag_init+0x350/0x350 [ 1996.311167] ? udp_setsockopt+0xc0/0xc0 [ 1996.311657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1996.312330] ? __lock_acquire+0xbb1/0x5b00 [ 1996.312866] ? handle_mm_fault+0x1a0b/0x3500 [ 1996.313405] ? lock_downgrade+0x6d0/0x6d0 [ 1996.313913] ? do_raw_spin_lock+0x121/0x260 [ 1996.314440] ? rwlock_bug.part.0+0x90/0x90 [ 1996.314957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.315611] udpv6_sendmsg+0x1b30/0x2ad0 [ 1996.316129] ? udp_v6_push_pending_frames+0x360/0x360 [ 1996.316765] ? _down_write_nest_lock+0x160/0x160 [ 1996.317361] ? do_user_addr_fault+0x5b0/0xc60 [ 1996.317914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1996.318556] ? exc_page_fault+0xca/0x1a0 [ 1996.319051] ? trace_hardirqs_on+0x5b/0x180 [ 1996.319585] ? exc_page_fault+0xca/0x1a0 [ 1996.320093] ? asm_exc_page_fault+0x1e/0x30 [ 1996.320628] ? sock_has_perm+0x1ea/0x280 [ 1996.321127] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1996.321764] ? copy_user_generic_string+0x2c/0x40 [ 1996.322362] ? __import_iovec+0x458/0x590 [ 1996.322872] ? udp_v6_push_pending_frames+0x360/0x360 [ 1996.323509] inet6_sendmsg+0x105/0x140 [ 1996.323988] ? inet6_compat_ioctl+0x320/0x320 [ 1996.324549] __sock_sendmsg+0xf2/0x190 [ 1996.325026] ____sys_sendmsg+0x334/0x870 [ 1996.325526] ? sock_write_iter+0x3d0/0x3d0 [ 1996.326041] ? do_recvmmsg+0x6d0/0x6d0 [ 1996.326521] ? __lock_acquire+0x1657/0x5b00 [ 1996.327058] ___sys_sendmsg+0xf3/0x170 [ 1996.327537] ? sendmsg_copy_msghdr+0x160/0x160 [ 1996.328152] ? vmacache_find+0x55/0x2a0 [ 1996.328653] ? lock_acquire+0x197/0x470 [ 1996.329138] ? find_held_lock+0x2c/0x110 [ 1996.329639] ? __might_fault+0xd3/0x180 [ 1996.330124] ? lock_downgrade+0x6d0/0x6d0 [ 1996.330629] ? asm_exc_page_fault+0x1e/0x30 [ 1996.331170] __sys_sendmmsg+0x195/0x470 [ 1996.331661] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1996.332201] ? lock_downgrade+0x6d0/0x6d0 [ 1996.332723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1996.333315] ? wait_for_completion_io+0x270/0x270 [ 1996.333909] ? rcu_read_lock_any_held+0x75/0xa0 [ 1996.334480] ? vfs_write+0x354/0xb10 [ 1996.334935] ? fput_many+0x2f/0x1a0 [ 1996.335382] ? ksys_write+0x1a9/0x260 [ 1996.335849] ? __ia32_sys_read+0xb0/0xb0 [ 1996.336361] __x64_sys_sendmmsg+0x99/0x100 [ 1996.336879] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1996.337508] do_syscall_64+0x33/0x40 [ 1996.337964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1996.338590] RIP: 0033:0x7fec4fe72b19 [ 1996.339047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1996.341304] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1996.342233] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 1996.343102] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1996.343969] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1996.344852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1996.345723] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 1996.353240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1996.357880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1996.956329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:02:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x80, 0x3, 0x7, 0x3f, 0x0, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_config_ext={0x1, 0x5}, 0x20, 0xe11, 0x3, 0x3, 0x9, 0x0, 0x49, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x10, r2, 0x1) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x4e23, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x1, 0x4, [{{0xa, 0x4e24, 0x80, @private0, 0x5}}, {{0xa, 0x4e24, 0x2aa, @local}}, {{0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}}, {{0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00'}}]}, 0x290) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:35 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$inet6(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="f2d4e7e01ec7b849afccd20c2f89a1d25168cb1645aa78fc863f2624e33d4d8bc6629ff57d0e846cc08e91dd864e1b9ac96b43ff797bc9816967ad2126c3068d100d7a473bd9e888579c7ec6e078ef4bdc4b2e7860f728b73305dba6912474bf4f171a98f56fde2a3fe8485d9ef6ec124b5e33a4ac9027fbdbaa1e72c5d575d70110833c9752043b10803c2a01bb9ac9fc6a516d7f", 0x95}, {&(0x7f00000003c0)="69723853faf5a2b41deaa12666afbf59805a7730a774804185117fc6c1adeecac2df78880a28e354f2d76edad305134c9884dbf0d04d5751b6c5e8fd1380d907e58d024debc4971f2f9be7f08600ebf514d473aeb2a059858818a403705faf3ebe7a38ef815d6c2c49928ef1b49cb5b915ee77cca9b285851c88ebdaac7e4166c53f13e9bf022386e26ad07a90321f9a686202670bdb92d33e55b0107193511358e85235ef48190b0bccd103587bbb3369fe48597276a60d2fbe24b9908d4701fe8eb63fd66cd73ef2de093101e277fab5e0c10f5073b33c33d00a7debbf6a9405ffcd401f903ece0c456777c72e8a7efae854cb0a151e", 0xf7}, {&(0x7f0000000000)="63e75f0c7c58411606f6911546f458c609ae51f5780ea875d0859526d7f0b77b85f988b2019eb41ff4582ceac0cb0b9bdf2ffd47fe1341b72913761ac5f18cc4a1729592e37dbcee2bd2ca61bdcda6f7512ae06da4513238f00d492955e2038b7782ff7a733f2097084201625b8295d36bf240bb2f986b17b7", 0x79}, {&(0x7f00000004c0)="5b345614811e8b3d92f0200077bd19e6849cbe36cd3b36f7bdf2b79bc0a4fb5d16cdbbec3fbedbad5f90eff79c228e352228e07c749b99191c4850de42af62e96d000c44418abfdccb3ae32a871cb7bd0b98e2169f438049d6f7cdd19ae6c9783f28a7bdf44edc79dffd3adc05a54c9eff799fd3c6888c6f2c2a2296dc548e3a2b083a4f44e0f390b0f3e5a7097a8e10a32fb652c09ec04895d3f4bfdce76e80612240863e69a579acab13841c61aa09e52608d1137b6867dc4187fd7c934f18fc0c2a3e3f8cbf2542d9bd5f29efe8ebf1c6020f0139c499cef3fdf8192c8d652bb938f864d07f62640ec46a8ceb02ebdd72cca4b2dd31bed4f49998c7b0b781a3e094159a2da02e85f277e39fc1a2c7394e0bc5ee55239f8a2a74fbf1480a70383b62a733e1bb0ffea37fbae8ab68937c4669a2ddc5bfc7a3736563a54fc2e8bbab408480e4fa4958dac288cdc30dcf16b7939b35f5277595e1295af730ce3d422720cdf14bc1c1af9c36e1bb59e8ecfe219278388580fb1348603c441080df713dcf4fe3371bdd83841275cccc9da84637d50c539d5caec41af22e007bf0351ed2eeda0b512b084a9361abffb35445bf540049b83f4c1c73628cd5936cd55e4618f7124fff3ad3fbe240553d9b248ee7095191b607bb49a33cc1122a33050794c94066f7614541f1100904eeaa42d359837f41a6b5c5f7700c8494f02111d9dc95ee529d3a8f335d88138ef1f39a774dae7c744598759e41c7a9a1f715dc68b9c613ad3783e8061c46199fcdbba9c73ede32b3d1144e606131db70c731d5be757fd2e024dc3f3206c30a6ea6a6b11d6a517fac77c0a02ae1c3f27a03b2a968036ccb15b9c133b965b6e2a118101753da015eee0827437fb36637f785b7b6febab90ed2371432df8c033ffd5fd246a30752ba43eb7d513825d36355252fb50aa9537b1696137927e9a7457a4bb838fccd00e98d1e8c9a02ff1765fc91c92b936e6611f59794b92b1aad3e917adf0ad4d7e5ecbd9bdb6e66fe1e791caaccd64f9621589672aa986b3d89e4cb8cb944a8374b1c0004b8aada15e5cfe6ec5d2ba4f6990abdab4b2f72a38390a0f69b2bf600e46701cd06a26c74e4859021400c978477edbc0004bdb877ff26d290e001ce2fbcd615e6fc1cb6f91a3e33cc5a21d48176d797845176b36e259b685cc91db231422484bd569b1326a05cd21e5d2854feff6719da17ee261c58a7913ba679e3b70f32ba6adc61bde3dab1d3e923814f8e3ca891d0c437412233201fa3ed4a3245235ceb97f6dbd653f267e44c21ba014e48d63a28e6c6a912e75c311832fecbc13deeb10cbe890f0913023caa19f57b24eecedbd8e04e499e36f8205579b52ab501de4a7a1890cc737bea82a2fabf7c12a735d0f5b6b9f2eb119346e947741c866c2dac33ce585c862fb7e4467dee627b2526285130c0f46e7691cf9940a2eaf8f6e3c3fdf868a2d42f58240dcbf9720ff8f7b70008d99d4fb53ac22c45cef4a0d509a4c3bb4e60f53911500696e896976f22ce772c3d0dc6031e2ddd0f2e7a5801b87d4c4a49e6bff2ba8c8a6da3f9481f95c2bf4d8af89c3a2e4dc5b8d576037a73acb14fb530edc6f99fa7180e33a9cbbc6a3d52e37d03fd7a7f8f92ebbf2ec1f079a61e249873fea4e85178acc0b2170381c8d728e2995e600d8bfd3f2552cdf44efac810a76d056160e3c19b02388d52a8723f77efc5ebb41a4cc26cd07d82dcd7031c5f02b0d52d7ed70c786fe4c3d3165fadf81dd0b3784a55e89dc7cecdea204d46eedec64e66b8759e511e6f0182c4bfadf64203cba9029d7f79bc6364b244b4ec32c00cd4732298c5d311510aec7b58b623835013c1d304189fd157fbb692926f6ed8bbc9d2e48e03956516f96b7b4e5b278be9d9049e094b3f1fe1b4702686210652f396ea0a8a09b3241463be64c97bbcec6a5093b028b564a4ddb02163c861baffdd21ca4f8dd15059eef03673b06e072d2f13998a80a8e63eef80e0a2665a08dd98423046d9b0676c35055874cb1cd193be0f6600b26e2bdd03d69cc1d863eb4e82f6307e6bb3523d24b9e7cf66e9ee2d0015969d065da552116a47bd85d4fd5bc977be9d3dcd11fb0c2514ac9b3a5e8235d1f5d16c223ebd9240ae6b0c3b834c103798c46c0feaec0fa507120613f001c622807feb736a135b5eb28f8348bdff550507541c93fb9daa32408b250335d0f605f4c89c4eef891330556794e98397fe3b9663cdc394b2788dccab494c6159e94f0fbb2b031f1bd144a59f4aa7b7adbaa1be4b1bf8adba4408dcc157471575c98565844b2df4ab1bf826bc5c311e911cc274a07b2227749cd567216ba2ff0ab417e4f7955cc6f12ef794f92effcffd664164a021683e7ead114e58cfa468cfe0b6700e55082abf6dee82a5be14029186789bf06d556874fc99995c0f625c8788b143f537402955b79766991e1c19dbf4fab43db615904f1eced4850f6851005843f64d30288d3fbcfc9fbacbc0d3d180dab9474918e3f1d596c27642341d1daa704523c2ab353dba04f402da17bb5d06288263408675a2a1ad0625cffa3782ea0920541689637820870943a78405e6a62483ccd414bdd44ce746b4148d06534b7786eb4c6b8b637f62ae19f2372a27a74f08845a7d218f1d5409654c40e9bb7964a35bcb95b4111ff74c91ad890722493ca7fe491e3f45b607737f727fb56fa4dd9678b91bf37f6f5268fa91d97abbd387fb72fa2ac2dcea9a73e355558bb8d66be06eeb608820321d38d579d6f65c65cbc1fa17082c3f222c524b217a016de21928c4a6d2fa46241dfc61beca6139a85301d1c788991745ee0a1708264949ef8d8435e69c5380cfff713bdf1845e9438989d0fd9795c34414716ad69d5391e0e6da6bb574f5e6c872589ada2d83a013daefb0d714e959f7a1d35aecc945bb739dc689c1e6d9870de86a8cf9cc5601faa9a75e222784709e3434a47d05063bb79cf5efef13d25014fb5252ef98d9168be33cf2fb36589a088674b52de239f14a28cef3f8c4917deed0e48cae093f3ec180b8c0efc7335f435f827194e35afd273e05434c39a852750b6e0868f517b4ab3a41643c4dcd6c0d3cfeb146f332630be34227761a4694209039bd8a0c03465a95b7fc66991acd280fdf8f1d8f4bc0e1cb4f0c280bb4473849e8ae7d3f0c1d2f56baa4e6cd46961b8c3f6803bed416518c4a962e8e79c80fdae73916d723b08b532da69e251a00911e5740df47e726a0b397dfd8285602b1c7ba2f7ed92eda0a7cd748c11ee8f28061ce67fd36b40c5157d027f10069a0f15d3af27605a439b528da7c9e5135f755e16e7af44bccaf44f1f6d787af67416d3deeff6551d6871571e33e07d205a7e7d77294870db68387d006fe9d3074129ffc894fcce8404019cd8b0f796e66322af5f6b386e68c2a48e2d5cf49524053e64da22af69aca0121aa0bda580a0df539bcbf83956e48622b31268dcfc7b14ccebb55f0e9711bdab313689ca597a963e829f686fe74c87caafdf182911baa39c475a08d1925b195fd88c9992b67516b4facc85a2e33afb0fbc6cf74bfd94db6e98386d1427e79a89d4dff45c1f06a636382be3d8fa190fa1c6bc1180626454d1ec9f4d016d6a34df162adaee80468792e0413dbaa7f4611f433407d1abb640d107dc28d325e705d5f532898af8b18af8ffc744218c04f94c73a5dc118f1d205f6c61c4d933a351038cec1f46e1c72ac56dea7c59db9e3b66df0dd99b3fdb9cd1a3f714cc20badc95e7681dd13868a6bb37257751812a4b3dde0564cf552f5741b9581ef7fdde786d3ef40f7f7cec3de871af1202ffdd5829d1799fbed2b5b22f08c0faf1c6e85d445682321c42762b9d3437082d2226266028206606036159834cdb5a48f3eb28afd63bee04ac57aee9847e735717322d8d402cc16d2d3b9c776beb4304f46e75beb3c2a0cc18d455af2e735cdc475e2848be074755f07848af49d40484992e7ea8fd36728b220f46e5cfd59115f61968418406fd5ba9c4ca0c217b2911bb69d7667afd7264b61527f9950e5c64b0775c1eaaae956262853278a77358b1a3c70dae8f5e0fbe633f263234d07fc957b60d6c3cfae9a1cc51f2473100e269fcc93ed3345389eb79cf03a2ee9a76e837617ff202f9d73de7d277bc8ed64cd7bbd4b59dbb85cf59e2b4a4b558910763b4c8c2c78cac6c7a75e0f301c761a57710684ebf38055a1cdf2d242fa622096bcd2f10da54c67c151383a01b65c933d6b13627c338e9280cec7693f8d2a803c8a1c68fb6cd23207338a18613b3b71ded03b744482dfdc2521e0c8f3833642499f98a8138d11cafad372d9141647d71e3ee04f9598f47c1a0d096b6db3ea233fbc120f92e88056f9435c5ab9e3fd8a723711f7940de2d99a3d0b079b4c8b71e1c4ca67983c3723970099173b0320222745c5af120eeaf0ab47918cb7aa48b4c52daa368c46a90ee6222b81102d181d1dd239c85238717e969f853e4d2887ebb8a6e6dd872073c3535a1ba901b7f176dacdf3d4775249c84dfef62cb6773d307d8dcb511394397975e67030401172d7a3b0715cc4fa3abe35e41a0b650ec33bb71054bdf2dbd019099f87c0ed826cafe3a1699c5083272a7a47dca3ed740ed2ab4f0fc63f5c8adb87d3c43b85d50e1aff1971a33ceaacca29d5f6689f7b2d5ba1dba5bd125c1cdaca507c03b97f92e55eb7256dee7bb0338e22362cac5886caaa40a14652179f54dd5022a19f3a698eb37d6f9c0cf5a661a0bebd4bf300ca33fbe559e9cb96daf9ac6ef6d27e5900bcc127ac2653d46743e52446f3092338ede69c274a3bf383604fb3cb1b8054eb90fe571595c660aed2c0071699dd0d872a7d7f68bee192a7473933eb260164db18066f435d4436f8990eb4ac9b43519cb8c2e143b4be213c9fee75511eb62dadc84ab9fea53a0875345fa9d8d4548d196e6d1e11471f94a9d4dbfa033e7f761ceada83a342f037136fd0a58fc1efd62ada325ab969bc7f219a08f86f576cdbd8db4e699b69a2f8b97f7ab31d0f910ee585554ca59d1b06b1747287e52684159684cca75f90b192b1bea8bd23bffd1ca029a131a932123be37285c65c37e309ecc435bea31e79e1a92023a5ba622fcabba518d0e66a08df27ae942ad71e872e72a803375a9e6cab73ff1a8d37ea56b49b4a5b5ad0bfb3659e611757fd5a0951fb562cc7ecbce22f6f9d6d591e39cf6a782a4d1066a77d47b6a7151d62cf7ddb98f9618f76fcccc36c4284443b87728dd6bcddd1d7dc997c5a8f99a8cbe89e6373c4fd879055c3a811e7e77f0109c9ffe272f5f5f08bece4165b578b2ae9026cab3640a6e7637f90123f74603950670661d590c1602b6363fa67c9eb4f9078e14d04a8252e30bc06476f98ff2426cfaa0c566919bbaefedb712f66eae35e2103e68936c6a86a9855c4e6588d924a3548514e942164526c81abbb5d307e104269cb83cb0bcdfab639655eba616a49abf1dc97144584e37b04bd31f3e7e13f383ee4babe8a732255b5aa50838b93769ab48a1384a9f56cfa89863e509790f069e99afa0181c7bf3b64982d834d84aab3901ba697ce0d3fd481844dee90fbbe7439f92ca7bdad739c24a85766d26855d0480e94dfbb784293a6bd18b07a17b9e0734997e489f72ab001bf3fb3df9bd50bd7515a6025d2cc484608619ab29b815db490e0ca0a8ab6eb9ab6d6636e2508f6899729b5a964c8f627d74b7260873bb5421f6845d41ea5615bfc091b768793e2", 0x1000}], 0x4}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:02:35 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x10000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 92) 04:02:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xd956, 0x5c7, 0x3, 0x2, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="93ffffff0000", 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2011.175502] FAULT_INJECTION: forcing a failure. [ 2011.175502] name failslab, interval 1, probability 0, space 0, times 0 [ 2011.180972] CPU: 0 PID: 11347 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2011.181813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.182821] Call Trace: [ 2011.183148] dump_stack+0x107/0x167 [ 2011.183595] should_fail.cold+0x5/0xa [ 2011.184064] ? create_object.isra.0+0x3a/0xa20 [ 2011.184638] should_failslab+0x5/0x20 [ 2011.185127] kmem_cache_alloc+0x5b/0x310 [ 2011.185627] ? lock_acquire+0x197/0x470 [ 2011.186114] create_object.isra.0+0x3a/0xa20 [ 2011.186650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2011.187271] kmem_cache_alloc+0x159/0x310 [ 2011.187775] ? mark_lock+0xf5/0x2df0 [ 2011.188235] skb_clone+0x14f/0x3d0 04:02:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x1, 0xff, 0x8, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@uid_lt={'uid<', 0xee01}}, {@dont_appraise}]}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x1, 0x3, 0x1, 'queue1\x00'}) 04:02:35 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:02:35 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) [ 2011.188686] dev_queue_xmit_nit+0x3a7/0xb00 [ 2011.189222] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2011.189786] dev_hard_start_xmit+0xab/0x6f0 [ 2011.190320] __dev_queue_xmit+0x179a/0x2690 [ 2011.190850] ? find_held_lock+0x2c/0x110 [ 2011.197061] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2011.197620] ? lock_downgrade+0x6d0/0x6d0 [ 2011.198125] ? lock_acquire+0x197/0x470 [ 2011.198612] ? ip_finish_output2+0x220/0x21f0 [ 2011.199162] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2011.199803] neigh_connected_output+0x382/0x4d0 [ 2011.200378] ip_finish_output2+0x6f1/0x21f0 [ 2011.200931] ? nf_hook_slow+0xfc/0x1e0 [ 2011.201408] ? ip_frag_next+0x9e0/0x9e0 [ 2011.201893] ? nf_hook+0x160/0x510 [ 2011.202329] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2011.202951] __ip_finish_output.part.0+0x5f3/0xb50 [ 2011.203549] ? ip_fragment.constprop.0+0x240/0x240 [ 2011.204144] ? nf_hook+0x510/0x510 [ 2011.204585] ip_output+0x2f7/0x600 [ 2011.205042] ip_send_skb+0xdd/0x260 [ 2011.205492] udp_send_skb+0x6da/0x11d0 [ 2011.205975] udp_sendmsg+0x1980/0x2160 [ 2011.206452] ? ip_frag_init+0x350/0x350 [ 2011.206945] ? udp_setsockopt+0xc0/0xc0 [ 2011.207433] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2011.208079] ? __lock_acquire+0xbb1/0x5b00 [ 2011.208612] ? handle_mm_fault+0x1a0b/0x3500 [ 2011.209170] ? lock_downgrade+0x6d0/0x6d0 [ 2011.209675] ? do_raw_spin_lock+0x121/0x260 [ 2011.210199] ? rwlock_bug.part.0+0x90/0x90 [ 2011.210716] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.211363] udpv6_sendmsg+0x1b30/0x2ad0 [ 2011.211871] ? udp_v6_push_pending_frames+0x360/0x360 [ 2011.212500] ? _down_write_nest_lock+0x160/0x160 [ 2011.213111] ? do_user_addr_fault+0x5b0/0xc60 [ 2011.213663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.214308] ? exc_page_fault+0xca/0x1a0 [ 2011.214802] ? trace_hardirqs_on+0x5b/0x180 [ 2011.215330] ? exc_page_fault+0xca/0x1a0 [ 2011.215829] ? asm_exc_page_fault+0x1e/0x30 [ 2011.216356] ? sock_has_perm+0x1ea/0x280 [ 2011.216874] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2011.217510] ? copy_user_generic_string+0x2c/0x40 [ 2011.218112] ? __import_iovec+0x458/0x590 [ 2011.218619] ? udp_v6_push_pending_frames+0x360/0x360 [ 2011.219254] inet6_sendmsg+0x105/0x140 [ 2011.219730] ? inet6_compat_ioctl+0x320/0x320 [ 2011.220277] __sock_sendmsg+0xf2/0x190 [ 2011.220777] ____sys_sendmsg+0x334/0x870 [ 2011.221278] ? sock_write_iter+0x3d0/0x3d0 [ 2011.221793] ? do_recvmmsg+0x6d0/0x6d0 [ 2011.222273] ? __lock_acquire+0x1657/0x5b00 [ 2011.222807] ___sys_sendmsg+0xf3/0x170 [ 2011.223286] ? sendmsg_copy_msghdr+0x160/0x160 [ 2011.223842] ? vmacache_find+0x55/0x2a0 [ 2011.224338] ? lock_acquire+0x197/0x470 [ 2011.224852] ? find_held_lock+0x2c/0x110 [ 2011.225351] ? __might_fault+0xd3/0x180 [ 2011.225835] ? lock_downgrade+0x6d0/0x6d0 [ 2011.226337] ? asm_exc_page_fault+0x1e/0x30 [ 2011.226876] __sys_sendmmsg+0x195/0x470 [ 2011.227366] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2011.227892] ? lock_downgrade+0x6d0/0x6d0 [ 2011.228408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2011.229019] ? wait_for_completion_io+0x270/0x270 [ 2011.229610] ? rcu_read_lock_any_held+0x75/0xa0 [ 2011.230176] ? vfs_write+0x354/0xb10 [ 2011.230631] ? fput_many+0x2f/0x1a0 [ 2011.231075] ? ksys_write+0x1a9/0x260 [ 2011.231539] ? __ia32_sys_read+0xb0/0xb0 [ 2011.232041] __x64_sys_sendmmsg+0x99/0x100 [ 2011.232556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.233218] do_syscall_64+0x33/0x40 [ 2011.233673] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.234298] RIP: 0033:0x7fec4fe72b19 [ 2011.234753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.237010] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2011.237940] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2011.238808] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2011.239676] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.240543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.241454] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:35 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x8, 0x3, 0x8, 0x9, 0x0, 0x1, 0x840, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x3, 0xfffffffffffffffa}, 0x20, 0x7919c616, 0xed1e, 0x5, 0x1, 0x101, 0x6, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0x2, r0, 0x2) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:36 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r5, 0xfffffffffffffffc, r4, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x100000000000, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000100)=ANY=[]) 04:02:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 93) [ 2011.351253] FAULT_INJECTION: forcing a failure. [ 2011.351253] name failslab, interval 1, probability 0, space 0, times 0 04:02:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000180), 0x5, 0x1, 0x0, &(0x7f0000000200), 0xfffffffc) clock_gettime(0x3, &(0x7f0000000000)) [ 2011.352684] CPU: 1 PID: 11368 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2011.353537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.354551] Call Trace: [ 2011.354881] dump_stack+0x107/0x167 [ 2011.355329] should_fail.cold+0x5/0xa [ 2011.355800] ? lock_release+0x680/0x680 [ 2011.356288] ? skb_clone+0x14f/0x3d0 [ 2011.360781] should_failslab+0x5/0x20 [ 2011.361248] kmem_cache_alloc+0x5b/0x310 [ 2011.361739] ? mark_lock+0xf5/0x2df0 [ 2011.362197] skb_clone+0x14f/0x3d0 [ 2011.362631] dev_queue_xmit_nit+0x3a7/0xb00 [ 2011.363156] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2011.363718] dev_hard_start_xmit+0xab/0x6f0 [ 2011.364249] __dev_queue_xmit+0x179a/0x2690 [ 2011.364804] ? find_held_lock+0x2c/0x110 [ 2011.365299] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2011.365856] ? lock_downgrade+0x6d0/0x6d0 [ 2011.366360] ? lock_acquire+0x197/0x470 [ 2011.366845] ? ip_finish_output2+0x220/0x21f0 [ 2011.367391] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2011.368031] neigh_connected_output+0x382/0x4d0 [ 2011.368605] ip_finish_output2+0x6f1/0x21f0 [ 2011.369154] ? nf_hook_slow+0xfc/0x1e0 [ 2011.369630] ? ip_frag_next+0x9e0/0x9e0 [ 2011.370113] ? nf_hook+0x160/0x510 [ 2011.370547] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2011.371167] __ip_finish_output.part.0+0x5f3/0xb50 [ 2011.371764] ? ip_fragment.constprop.0+0x240/0x240 [ 2011.372357] ? nf_hook+0x510/0x510 [ 2011.372835] ip_output+0x2f7/0x600 [ 2011.373273] ip_send_skb+0xdd/0x260 [ 2011.373720] udp_send_skb+0x6da/0x11d0 [ 2011.374202] udp_sendmsg+0x1980/0x2160 [ 2011.374677] ? ip_frag_init+0x350/0x350 [ 2011.375168] ? udp_setsockopt+0xc0/0xc0 [ 2011.375654] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2011.376293] ? __lock_acquire+0xbb1/0x5b00 [ 2011.380835] ? handle_mm_fault+0x1a0b/0x3500 [ 2011.381370] ? lock_downgrade+0x6d0/0x6d0 [ 2011.381869] ? do_raw_spin_lock+0x121/0x260 [ 2011.392686] ? rwlock_bug.part.0+0x90/0x90 [ 2011.393203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.393847] udpv6_sendmsg+0x1b30/0x2ad0 [ 2011.394352] ? udp_v6_push_pending_frames+0x360/0x360 [ 2011.394980] ? _down_write_nest_lock+0x160/0x160 [ 2011.395573] ? do_user_addr_fault+0x5b0/0xc60 [ 2011.396136] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.396796] ? exc_page_fault+0xca/0x1a0 [ 2011.397290] ? trace_hardirqs_on+0x5b/0x180 [ 2011.397814] ? exc_page_fault+0xca/0x1a0 [ 2011.398324] ? asm_exc_page_fault+0x1e/0x30 [ 2011.398849] ? sock_has_perm+0x1ea/0x280 [ 2011.399342] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2011.399977] ? copy_user_generic_string+0x2c/0x40 [ 2011.400579] ? __import_iovec+0x458/0x590 [ 2011.409123] ? udp_v6_push_pending_frames+0x360/0x360 [ 2011.409755] inet6_sendmsg+0x105/0x140 [ 2011.410229] ? inet6_compat_ioctl+0x320/0x320 [ 2011.410776] __sock_sendmsg+0xf2/0x190 [ 2011.411251] ____sys_sendmsg+0x334/0x870 [ 2011.411748] ? sock_write_iter+0x3d0/0x3d0 [ 2011.412260] ? do_recvmmsg+0x6d0/0x6d0 [ 2011.412798] ? __lock_acquire+0x1657/0x5b00 [ 2011.413333] ___sys_sendmsg+0xf3/0x170 [ 2011.413810] ? sendmsg_copy_msghdr+0x160/0x160 [ 2011.414369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.415007] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2011.415548] ? trace_hardirqs_on+0x5b/0x180 [ 2011.416079] ? lock_acquire+0x197/0x470 [ 2011.416563] ? find_held_lock+0x2c/0x110 [ 2011.417097] ? __might_fault+0xd3/0x180 [ 2011.417582] ? lock_downgrade+0x6d0/0x6d0 [ 2011.418090] ? io_schedule_timeout+0x140/0x140 [ 2011.418657] __sys_sendmmsg+0x195/0x470 [ 2011.419148] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2011.419673] ? lock_downgrade+0x6d0/0x6d0 [ 2011.420192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2011.420823] ? wait_for_completion_io+0x270/0x270 [ 2011.421416] ? rcu_read_lock_any_held+0x75/0xa0 [ 2011.421982] ? vfs_write+0x354/0xb10 [ 2011.422436] ? fput_many+0x2f/0x1a0 [ 2011.422881] ? ksys_write+0x1a9/0x260 [ 2011.423346] ? __ia32_sys_read+0xb0/0xb0 [ 2011.423847] __x64_sys_sendmmsg+0x99/0x100 [ 2011.424364] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.425037] do_syscall_64+0x33/0x40 [ 2011.425491] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.426117] RIP: 0033:0x7fec4fe72b19 [ 2011.426573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.428830] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2011.429759] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2011.430628] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2011.431495] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.432364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.433261] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000000000)="2ccd6dcdbaca7ad2504ef8a7e663a53cc16d02055f2d52448e8c243f0540be105d07e0e6bbcbe470db2cc2068f9a55c6bbeb8d9ec4038edf53ddb194c425ac6b52339a12346cd60ae75255949f4d608d01779ee14ce2fbf81f875c1083935ac0e08f844c015cadde12bacbbfe62df629f98395dd352512f2123a4d9dfcfc803f5a63b914d8da786a1275bafa9b7832fa2162d26ffe938bd14e68b622e9783e2de9796b8f587a4ab5d8ada43bb36e9ff2a169e5fb592bdf4fcaa6d5458508e55e", 0xc0, 0x1}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 2011.478885] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program [ 2011.488223] futex_wake_op: syz-executor.2 tries to shift op by -1; fix this program 04:02:36 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file1/file0\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x8000}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000180)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r0, 0x800, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) 04:02:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2=0xe0000003}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = syz_open_dev$vcsn(&(0x7f0000000480), 0x7ff, 0x40000) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x6, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000440)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) [ 2011.530310] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 04:02:36 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xb812, 0x2, 0x216b, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000140)='.\x00', 0x5e4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="c80f5b1cef9a9dd9c11702e135f6cd427f40b3f87598a6bf0f9924c42c821e8f48e738494e2892a931cbd7872ce5edb513f80926d8de19d6711d", 0x3a, 0x1000}], 0x2008040, &(0x7f0000000340)={[{@uid={'uid', 0x3d, 0xee01}}, {@mode={'mode', 0x3d, 0x9}}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x33, 0x38, 0x34, 0x33, 0x31, 0x62, 0x51], 0x2d, [0x66, 0x62, 0x55, 0x61], 0x2d, [0x64, 0x63, 0x62, 0x35], 0x2d, [0x65, 0x30, 0x66, 0x39], 0x2d, [0x39, 0x32, 0x38, 0x38, 0x63, 0x33, 0x37, 0x33]}}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@appraise}, {@obj_role={'obj_role', 0x3d, 'keyring\x00'}}, {@euid_gt}, {@context={'context', 0x3d, 'user_u'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, ','}}]}) signalfd4(r1, &(0x7f00000002c0)={[0x8]}, 0x8, 0x80000) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r4, 0xfffffffffffffffc, r3, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) 04:02:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 94) [ 2011.661117] FAULT_INJECTION: forcing a failure. [ 2011.661117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2011.662780] CPU: 0 PID: 11387 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2011.663688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2011.664779] Call Trace: [ 2011.665109] dump_stack+0x107/0x167 [ 2011.665554] should_fail.cold+0x5/0xa [ 2011.666127] _copy_from_user+0x2e/0x1b0 [ 2011.666664] __copy_msghdr_from_user+0x91/0x4b0 [ 2011.667240] ? __ia32_sys_shutdown+0x80/0x80 [ 2011.667841] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2011.668490] sendmsg_copy_msghdr+0xa1/0x160 [ 2011.669089] ? do_recvmmsg+0x6d0/0x6d0 [ 2011.669562] ? handle_mm_fault+0x9e9/0x3500 [ 2011.670201] ? __lock_acquire+0x1657/0x5b00 [ 2011.670780] ? find_held_lock+0x2c/0x110 [ 2011.671282] ___sys_sendmsg+0xc6/0x170 [ 2011.671818] ? sendmsg_copy_msghdr+0x160/0x160 [ 2011.672370] ? vmacache_find+0x55/0x2a0 [ 2011.673243] ? do_user_addr_fault+0x5b0/0xc60 [ 2011.673871] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.674510] ? exc_page_fault+0xca/0x1a0 [ 2011.675083] ? trace_hardirqs_on+0x5b/0x180 [ 2011.675705] ? exc_page_fault+0xca/0x1a0 [ 2011.676213] ? asm_exc_page_fault+0x1e/0x30 [ 2011.676997] __sys_sendmmsg+0x195/0x470 [ 2011.678202] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2011.679521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2011.681148] ? finish_task_switch+0x127/0x5d0 [ 2011.682496] ? __switch_to_asm+0x34/0x60 [ 2011.683799] ? __schedule+0x82c/0x1ea0 [ 2011.684986] ? io_schedule_timeout+0x140/0x140 [ 2011.686356] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2011.688043] ? ksys_write+0x1a9/0x260 [ 2011.689213] __x64_sys_sendmmsg+0x99/0x100 [ 2011.690483] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2011.692097] do_syscall_64+0x33/0x40 [ 2011.693231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2011.694836] RIP: 0033:0x7fec4fe72b19 [ 2011.695969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2011.701605] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2011.703986] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2011.706159] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2011.708340] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2011.710490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2011.712348] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:53 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='user\x00', 0x0) keyctl$set_timeout(0xf, r2, 0x0) keyctl$chown(0x4, r2, 0x0, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2=0xe0000003}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = syz_open_dev$vcsn(&(0x7f0000000480), 0x7ff, 0x40000) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000004c0)={0x6, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000440)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240), 0x6e, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x45) sendto(r0, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x300, 0x10062, 0x0) 04:02:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 95) 04:02:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:53 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x0, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:02:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0xb) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c0266646e6f48", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 04:02:53 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x153) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x2) sendfile(r3, r4, 0x0, 0x20d315) sendmsg$nl_generic(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002980)={0x0, 0x0}, &(0x7f00000029c0)=0xc) sendmsg$unix(r0, &(0x7f0000002b80)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000440)="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", 0xfc}, {&(0x7f00000001c0)="97e91e678bdeb0958ed4e82b686dea9d9c6fb07d6bfc1555c916b48ca40e5575bac0a7556e7345f66f36d9ce570876c026ba748410277ce5241b5cee3642adc64c2f8cb6368006d307b57860a4e502869b9ea44f2ca6f9a89e5c1b0eeaf12362b4316e3ad7497b1ad6a8", 0x6a}, {&(0x7f00000002c0)="1223e385314761b9e2fb9f764dbd6afd48b13abd69438ae39fc57b405268519b6b16b973d6b7df468fa332d6810b1f4b3bc2265c5e58a1b4305df3fe88566176378b6d980bd8c522b48e0330ef436080e94356d8fdf9072936f82b578a56a405f488ea9f04b11620141e3c28e1", 0x6d}, {&(0x7f0000000540)="e98750410f77cc020e8ecddc757d743a940a5106dc73bf261828c89251e76b053bd66b63bb821f42e7cdd3ba38354eb427bc381a4610f99c0e1594a78447364a2ba7f101c4fed9839419eebe7b2e41bddd", 0x51}, {&(0x7f00000005c0)="f467a601b6a2416ac6c3e6d86a43a16bd9946fa3e64571c5a984108e8c94110038b6ad34d827f97cfadf018f82f7ff14c353f713fee47be6904c9f51db03ef9c0e175b417d2121023b16d5452bb71698cedcd6b11bb99250b0", 0x59}], 0x5, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r0, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5}}}], 0x150, 0x4008004}, 0x48000) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="d83fbf37ec3a7253a8472fc7fe412aa0e15bcb11c152332cd13863548980f07c60edf26de66c44ff010089685cc3fa5a140ab9d72584cd2b01b0af27db348337e411f6734e090000000000000006291cd868b2188c3039", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="0d95"]) r8 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) [ 2028.420285] 9pnet: Insufficient options for proto=fd [ 2028.427820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2028.430368] 9pnet: Insufficient options for proto=fd [ 2028.434881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:02:53 executing program 1: inotify_init1(0x0) syz_mount_image$nfs4(0x0, &(0x7f0000005040)='./file0\x00', 0x0, 0x0, 0x0, 0x288000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='ext4\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup2(r0, r1) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) fsync(0xffffffffffffffff) mkdirat(0xffffffffffffffff, 0x0, 0x88) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x8af, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000380)="b441a37e782abac9603456a84b445feda0821214902c2f5e6588e800b0d147c3a699125f34714bd65cf2be56d7f4f1b2ab6f5bb8cfa304bb64816ea52d9c89394695aa6c564ceeec2a0bb6f72604e30d50d406e64a387b16f306d8d24ba855e9f03988c875bc0ec4cad017891dd3d1d7eb4565878b8949ca796e3e38d5f32046c62b5ea8", 0x84}, {&(0x7f0000000440)="9dee70042ef8fb44ce2a1a45b4610e39a0dcdc01087eeea2bd5b6ff559453f9ccce06599f815fb1890bcb8f7bfa9648e248791e476db5e415c0764180646130f9d9511d9290e2420ed0c3cff1b098a12f1937cbb960d539600c6cf5e8d90375d246695ae62", 0x65}, {0x0, 0x0, 0x6}], 0x20, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x130, 0x22, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1b}, [@typed={0x8, 0x1e, 0x0, 0x0, @ipv4=@loopback}, @generic="ba25bbef637606c40d58e1d64fc938b48491f263a269f772ea81f57feec93765197ddf58f163778bb2bcd1b37ee2e51cf6cd8b6525d8b8a7eb03f2", @generic="09f404aeb1fc9da0079369270d852dc477f9b466462628c98051cf37a03a11e56f", @generic="69634adf15597de70ffb4ed0543b29f4939bd926a636913bf899fb1561b4fa2429034d28db9c773bedea0599bdfcaeb14c87b769fd526db9a583f2a0919867ab60472403551cb499664f69a0a8d1e20205879eca0f3239c02e086283d11ea28bb684637081b0ced3c80954a0b3fe22651d2fbb18ef59be5e48f85197dbfaee513e1228a05a81d7e0639dd281fa56c387282fe73a34d375e09e286ae43364357b538f8ac905d0fef8f0167ce9cdb686bd0be5752094"]}, 0x130}, 0x1, 0x0, 0x0, 0x4008854}, 0x10) msgsnd(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000000000000a960073c25eb1f5a30122d3b8fd1e9f0d4aa58a75735193c8134572a1470b01ef901678cee9fd67f96331f8e973ca60bb3e7915fcc85817f3dd7ff9329ec5f4af5f0e5165780dad565ecb1ffbe69e2cd5a3b9c3f01c63ceab56abe33a890e580ff86854431c38412425438892c87a99604a69422b4f9a303000000f817b266023b70d43c4f5f41e57997e8e8d8831b5f560ad606ee20daceac794acb1256bc8020a3d576ae32b3feebccb63be2a0f2bd06667218ca92903330a87719565edd7489fa7af79659b92b4f7bdedcd4d30b9d70a2a8fb45b021d8e546a1d52594220426dc60148e"], 0xea, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000540)={0x8, 0x1, 0x6}) r4 = fcntl$dupfd(r3, 0x0, r3) msgsnd(0xffffffffffffffff, &(0x7f00000004c0)={0x0, "ab89d181c345352254db8c845df78490173acdc9d960007c9d041eec171179a52f3fda0a5bd4e3aca690e407d0eba287828a09532fa065f377feb92461312edbc52e8b3ad8e1318e41e66c79a0dfecda554c9ed349862fbe006d2f38d7055dbb51f62a54fee9426d43bc3c51bf1a4ff7c14a50b52d5df163"}, 0x80, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0xffff) [ 2028.446281] FAULT_INJECTION: forcing a failure. [ 2028.446281] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.447768] CPU: 1 PID: 11408 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2028.448661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.450376] Call Trace: [ 2028.450787] dump_stack+0x107/0x167 [ 2028.451264] should_fail.cold+0x5/0xa [ 2028.451821] ? __alloc_skb+0x6d/0x5b0 [ 2028.452322] should_failslab+0x5/0x20 [ 2028.452876] kmem_cache_alloc_node+0x55/0x330 [ 2028.455374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2028.465480] __alloc_skb+0x6d/0x5b0 [ 2028.465497] alloc_skb_with_frags+0x92/0x570 [ 2028.465513] ? lock_chain_count+0x20/0x20 [ 2028.465526] sock_alloc_send_pskb+0x7af/0x930 [ 2028.465545] ? sk_alloc+0x350/0x350 [ 2028.465562] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2028.465572] ? lock_downgrade+0x6d0/0x6d0 [ 2028.465591] __ip_append_data+0x1628/0x3310 [ 2028.465609] ? fib_select_path+0x293/0x1de0 [ 2028.465623] ? ip_frag_init+0x350/0x350 [ 2028.465642] ? ip_finish_output+0x330/0x330 [ 2028.465655] ? ip_route_output_key_hash+0x19c/0x340 [ 2028.465664] ? ipv4_mtu+0x1ed/0x2c0 [ 2028.465680] ip_make_skb+0x22a/0x2a0 [ 2028.465693] ? ip_frag_init+0x350/0x350 [ 2028.465707] ? ip_flush_pending_frames+0x20/0x20 [ 2028.465724] ? lock_downgrade+0x6d0/0x6d0 [ 2028.465740] ? xfrm_lookup_route+0x65/0x210 [ 2028.465755] udp_sendmsg+0x1940/0x2160 [ 2028.465772] ? ip_frag_init+0x350/0x350 [ 2028.465789] ? udp_setsockopt+0xc0/0xc0 [ 2028.465807] ? mark_lock+0xf5/0x2df0 [ 2028.465821] ? mark_lock+0xf5/0x2df0 [ 2028.465833] ? lock_chain_count+0x20/0x20 [ 2028.465844] ? lock_chain_count+0x20/0x20 [ 2028.465870] ? __lock_acquire+0x1657/0x5b00 [ 2028.465886] udpv6_sendmsg+0x1b30/0x2ad0 [ 2028.465899] ? __lock_acquire+0x1657/0x5b00 [ 2028.465916] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.465933] ? lock_acquire+0x197/0x470 [ 2028.465944] ? find_held_lock+0x2c/0x110 [ 2028.465960] ? lock_acquire+0x197/0x470 [ 2028.465971] ? find_held_lock+0x2c/0x110 [ 2028.465986] ? __might_fault+0xd3/0x180 [ 2028.465997] ? lock_downgrade+0x6d0/0x6d0 [ 2028.466011] ? sock_has_perm+0x1ea/0x280 [ 2028.466022] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2028.466046] ? __import_iovec+0x458/0x590 [ 2028.466059] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.466073] inet6_sendmsg+0x105/0x140 [ 2028.466085] ? inet6_compat_ioctl+0x320/0x320 [ 2028.466097] __sock_sendmsg+0xf2/0x190 [ 2028.466109] ____sys_sendmsg+0x334/0x870 [ 2028.466122] ? sock_write_iter+0x3d0/0x3d0 [ 2028.466132] ? do_recvmmsg+0x6d0/0x6d0 [ 2028.466143] ? handle_mm_fault+0x9e9/0x3500 [ 2028.466156] ? __lock_acquire+0x1657/0x5b00 [ 2028.466166] ? find_held_lock+0x2c/0x110 [ 2028.466184] ___sys_sendmsg+0xf3/0x170 [ 2028.466198] ? sendmsg_copy_msghdr+0x160/0x160 [ 2028.466207] ? vmacache_find+0x55/0x2a0 [ 2028.466225] ? do_user_addr_fault+0x5b0/0xc60 [ 2028.466240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.466252] ? exc_page_fault+0xca/0x1a0 [ 2028.466262] ? trace_hardirqs_on+0x5b/0x180 [ 2028.466273] ? exc_page_fault+0xca/0x1a0 [ 2028.466286] ? asm_exc_page_fault+0x1e/0x30 [ 2028.466308] __sys_sendmmsg+0x195/0x470 [ 2028.466324] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2028.466336] ? lock_downgrade+0x6d0/0x6d0 [ 2028.466358] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2028.466373] ? wait_for_completion_io+0x270/0x270 [ 2028.466387] ? rcu_read_lock_any_held+0x75/0xa0 [ 2028.466398] ? vfs_write+0x354/0xb10 [ 2028.466410] ? fput_many+0x2f/0x1a0 [ 2028.466422] ? ksys_write+0x1a9/0x260 [ 2028.466434] ? __ia32_sys_read+0xb0/0xb0 [ 2028.466450] __x64_sys_sendmmsg+0x99/0x100 [ 2028.466462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.466472] do_syscall_64+0x33/0x40 [ 2028.466483] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.466492] RIP: 0033:0x7fec4fe72b19 [ 2028.466504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.466510] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2028.466524] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2028.466531] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2028.466538] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.466544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.466551] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 [ 2028.564619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.570910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2028.583051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 04:02:53 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='fscrypt:', 0x0, r0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 96) 04:02:53 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2028.619719] FAULT_INJECTION: forcing a failure. [ 2028.619719] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.621667] CPU: 0 PID: 11427 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2028.622545] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.623609] Call Trace: [ 2028.623952] dump_stack+0x107/0x167 [ 2028.624415] should_fail.cold+0x5/0xa [ 2028.624901] ? create_object.isra.0+0x3a/0xa20 [ 2028.625512] should_failslab+0x5/0x20 [ 2028.625997] kmem_cache_alloc+0x5b/0x310 [ 2028.626497] create_object.isra.0+0x3a/0xa20 [ 2028.627032] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2028.627691] kmem_cache_alloc_node+0x169/0x330 [ 2028.628286] __alloc_skb+0x6d/0x5b0 [ 2028.628734] alloc_skb_with_frags+0x92/0x570 [ 2028.629305] ? lock_chain_count+0x20/0x20 [ 2028.629815] sock_alloc_send_pskb+0x7af/0x930 [ 2028.630363] ? sk_alloc+0x350/0x350 [ 2028.630806] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2028.631435] ? lock_downgrade+0x6d0/0x6d0 [ 2028.631941] __ip_append_data+0x1628/0x3310 [ 2028.632466] ? fib_select_path+0x293/0x1de0 [ 2028.632993] ? ip_frag_init+0x350/0x350 [ 2028.633496] ? ip_finish_output+0x330/0x330 [ 2028.634016] ? ip_route_output_key_hash+0x19c/0x340 [ 2028.634614] ? ipv4_mtu+0x1ed/0x2c0 [ 2028.635057] ip_make_skb+0x22a/0x2a0 [ 2028.635508] ? ip_frag_init+0x350/0x350 [ 2028.635994] ? ip_flush_pending_frames+0x20/0x20 [ 2028.636569] ? lock_downgrade+0x6d0/0x6d0 [ 2028.637073] ? xfrm_lookup_route+0x65/0x210 [ 2028.637611] udp_sendmsg+0x1940/0x2160 [ 2028.638088] ? ip_frag_init+0x350/0x350 [ 2028.638573] ? udp_setsockopt+0xc0/0xc0 [ 2028.639821] ? mark_lock+0xf5/0x2df0 [ 2028.640921] ? mark_lock+0xf5/0x2df0 [ 2028.642012] ? lock_chain_count+0x20/0x20 [ 2028.643229] ? lock_chain_count+0x20/0x20 [ 2028.644444] ? __lock_acquire+0x1657/0x5b00 [ 2028.645505] udpv6_sendmsg+0x1b30/0x2ad0 [ 2028.646003] ? __lock_acquire+0x1657/0x5b00 [ 2028.646535] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.647441] ? lock_acquire+0x197/0x470 [ 2028.648324] ? find_held_lock+0x2c/0x110 [ 2028.648887] ? lock_acquire+0x197/0x470 [ 2028.650068] ? find_held_lock+0x2c/0x110 [ 2028.651271] ? __might_fault+0xd3/0x180 [ 2028.652430] ? lock_downgrade+0x6d0/0x6d0 [ 2028.653445] ? sock_has_perm+0x1ea/0x280 [ 2028.653942] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2028.654584] ? __import_iovec+0x458/0x590 [ 2028.655092] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.655723] inet6_sendmsg+0x105/0x140 [ 2028.656197] ? inet6_compat_ioctl+0x320/0x320 [ 2028.656790] __sock_sendmsg+0xf2/0x190 [ 2028.657343] ____sys_sendmsg+0x334/0x870 [ 2028.657883] ? sock_write_iter+0x3d0/0x3d0 [ 2028.658429] ? do_recvmmsg+0x6d0/0x6d0 [ 2028.658976] ? handle_mm_fault+0x9e9/0x3500 [ 2028.659585] ? __lock_acquire+0x1657/0x5b00 [ 2028.660194] ? find_held_lock+0x2c/0x110 [ 2028.660781] ___sys_sendmsg+0xf3/0x170 [ 2028.661348] ? sendmsg_copy_msghdr+0x160/0x160 [ 2028.661905] ? vmacache_find+0x55/0x2a0 [ 2028.662395] ? do_user_addr_fault+0x5b0/0xc60 [ 2028.662942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.663627] ? exc_page_fault+0xca/0x1a0 [ 2028.664156] ? trace_hardirqs_on+0x5b/0x180 [ 2028.664680] ? exc_page_fault+0xca/0x1a0 [ 2028.665225] ? asm_exc_page_fault+0x1e/0x30 [ 2028.665787] __sys_sendmmsg+0x195/0x470 [ 2028.666308] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2028.666851] ? lock_downgrade+0x6d0/0x6d0 [ 2028.667365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2028.668005] ? wait_for_completion_io+0x270/0x270 [ 2028.668628] ? rcu_read_lock_any_held+0x75/0xa0 [ 2028.669241] ? vfs_write+0x354/0xb10 [ 2028.669735] ? fput_many+0x2f/0x1a0 [ 2028.670177] ? ksys_write+0x1a9/0x260 [ 2028.670639] ? __ia32_sys_read+0xb0/0xb0 [ 2028.671134] __x64_sys_sendmmsg+0x99/0x100 [ 2028.671677] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.672322] do_syscall_64+0x33/0x40 [ 2028.672792] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.673481] RIP: 0033:0x7fec4fe72b19 [ 2028.673935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.676306] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2028.677333] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2028.678203] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2028.679065] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.679976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.680892] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:53 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:53 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) preadv2(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f00000001c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/171, 0xab}, {&(0x7f0000000200)=""/35, 0x23}, {&(0x7f00000004c0)=""/131, 0x83}], 0x7, 0xfffff2f1, 0x3ff, 0x0) 04:02:53 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x30, 0x0, 0x0, 0x10000002}, {0x6}]}, 0x10) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'geneve0\x00', 0x6}) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x4, 0x0, 0x0, {{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote}, @in=@remote}}, 0xf0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 04:02:53 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x80000001) io_uring_enter(r0, 0x8058ab, 0x0, 0x0, 0x0, 0x0) 04:02:53 executing program 5: lchown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) removexattr(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@random={'user.', '\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r3, 0x800000000081) sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x24f4, 0x13, 0x1, 0x70bd29, 0x25dfdbff, {0x1c}, [@nested={0x392, 0xa, 0x0, 0x1, [@typed={0xc, 0x74, 0x0, 0x0, @u64=0x7}, @generic="01d9813300e6272e172b90e45c461e1cd1e4e2c831a2c1ba388250fdebe47378eb2c75446c85c5bcb606cabda86fe483e83a4f99ccd7cd2e5dde6255717c6a3807e7ac96fd65966b4a25bf7577268ab3ecd1ed02226f08e09f2e33e16fe53f2f0dd7122609b30f767afa69b28000dd8a", @generic="5a8b6b524e95dd66fd98a03c83a192314b42f7d598d975d30db8e5046d63012bc0833e10e2c4d923f465dbb960ba84680b7eac2467f7065b47549a193e6b26c94d8ecbb214a3e1de2b06ff03d17b87a90b0b0162cf1d31c923a65a92d49d94378a772cee8019a522f21aff1e8ac9cab07d45ae0e2f6d3b4cd88327d30871b001a5b2a10fb810cdf7adbc03e3f37338d0cb97c4d541e98bfda4c74232eb953119a294e2e3a1ec2172ec11bedfaed219e859e9a3", @generic="7b34b82121786c1e82745f8ca57ae0a46ab39ecededc491c3d93bf288bb7c06c4adf3881dd900ee3bfcbd7f6e466010c77696aa6ed77351b4867dcc69677664a40a4de73d2f5b5c546d0b4668b31fc079184717a86ad1b7abe8cfdc8ec1058d3a7e57a29c56bee0bbe1ea2fb7e49ad2f49b715f4d3aaac", @generic="d313dd526c332e4e90c33d77bab290c606e0b9b23666afc9e14ba9ba44f0737b7da669681d553713fe159df96ea2860ff3e98d42b597c43c467209f450f146830395e46fcd013bd765d73e52178344c5efa52ec048d2126a1e1dd83755995936f1aa1eeddf2159d2792f3e01343b05b0fd601773dd5481095e6a5d9511d81be632a20d6ca294a2bc2704aec80e3189b3b4e9af0ff18d6fe2cdde3e465157dc790f9e526749e546b64a043b60c8286f9885df", @generic="08da613afc8f4e91e864f3cbbd1d137d2d9c5cc5b0c4094919fe10997e8751afe99a3e90c2e74ae1e23b8a3c3a2c48e803d14f2de05e0a9656ca5758d4961a6d3735fd56f693fd73d6b7541c", @generic="94d2eebe2f3c7f87967dba0bd5421cbef19a6710bd76036c8491c4b7cfbaef302c31d0624ae2293453c5a4cd07e8f8b8fefabc35ab9f52219b01d3d251ebbf261c2b6bd2f52b767657511c070741a5c634a725303c40919e0d9ceb4f449bca96b74f2e59bfb93616a37c63a7c5bc5c3390c1ff84d979320f7cbce411bcfec2e7910e1da4b0b8fd3232a610a65e5f918e8547b694d727233892d9e206f863f7de7c2cda4765f5b247b70259822cb0ad0b7717ddf4724de72ed400f93b2f4ab4f81ed7067f287d2f7ae3c2010787aea0bfff9f9f896d849073dc620257fa3c7b3ec92b1d535fb23b546963"]}, @nested={0x1014, 0x8f, 0x0, 0x1, [@generic="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", @typed={0x8, 0x12, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x5a, 0x0, 0x0, @pid=r3}]}, @typed={0x8, 0x31, 0x0, 0x0, @fd}, @generic="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", @generic="b3d37c634373852d3480dbb189e66eeeb72e5bf031fbe7e9afbe6fdbf0d42c6e97066238f6123e0ef2b072b65c455875529b6b6a9b1777d1f70470b6e509c5", @typed={0x8, 0x3f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0xe8, 0x8, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x64, 0x0, 0x0, @ipv6=@remote}, @generic="86f02265aa03b58695f6772b4a34f185070faa87d63e1a9e4e98c61723b6d17a9c75d37b0182af9c12a1b3dfba7ee586f5c87d61bf54cebbb276c1e13eaaf9418e294ccc1a71bf739f8b19f09f5dcfa38724b61cf21cb62c11bb0253d8c5ea30a5140d18e999432b42c67b386aac6d4ac9d71d938801d7f4d515698411bcdd89916b5b4f07524479d2105e44acd9a3839ec3da4666d1ae2d87cc1da7b50fea78641bc246696d9091d006fdfbb3b26929a1ac5f8cf27b08316ad495d6db044841"]}]}, 0x24f4}, 0x1, 0x0, 0x0, 0x4000080}, 0x48001) 04:02:53 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 97) [ 2028.852639] FAULT_INJECTION: forcing a failure. [ 2028.852639] name failslab, interval 1, probability 0, space 0, times 0 [ 2028.855806] CPU: 1 PID: 11449 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2028.857668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2028.859682] Call Trace: [ 2028.860309] dump_stack+0x107/0x167 [ 2028.861180] should_fail.cold+0x5/0xa [ 2028.861722] should_failslab+0x5/0x20 [ 2028.862190] __kmalloc_node_track_caller+0x74/0x3b0 [ 2028.862798] ? alloc_skb_with_frags+0x92/0x570 [ 2028.863360] __alloc_skb+0xb1/0x5b0 [ 2028.863808] alloc_skb_with_frags+0x92/0x570 [ 2028.864350] ? lock_chain_count+0x20/0x20 [ 2028.864859] sock_alloc_send_pskb+0x7af/0x930 [ 2028.865430] ? sk_alloc+0x350/0x350 [ 2028.865889] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2028.866544] ? lock_downgrade+0x6d0/0x6d0 [ 2028.867063] __ip_append_data+0x1628/0x3310 [ 2028.867605] ? fib_select_path+0x293/0x1de0 [ 2028.868177] ? ip_frag_init+0x350/0x350 [ 2028.868709] ? ip_finish_output+0x330/0x330 [ 2028.869563] ? ip_route_output_key_hash+0x19c/0x340 [ 2028.870684] ? ipv4_mtu+0x1ed/0x2c0 [ 2028.871275] ip_make_skb+0x22a/0x2a0 [ 2028.872224] ? ip_frag_init+0x350/0x350 [ 2028.872851] ? ip_flush_pending_frames+0x20/0x20 [ 2028.873492] ? lock_downgrade+0x6d0/0x6d0 [ 2028.874042] ? xfrm_lookup_route+0x65/0x210 [ 2028.874612] udp_sendmsg+0x1940/0x2160 [ 2028.875161] ? ip_frag_init+0x350/0x350 [ 2028.875693] ? udp_setsockopt+0xc0/0xc0 [ 2028.876247] ? mark_lock+0xf5/0x2df0 [ 2028.876738] ? lock_chain_count+0x20/0x20 [ 2028.877320] ? lock_chain_count+0x20/0x20 [ 2028.877855] ? mark_lock+0xf5/0x2df0 [ 2028.878331] ? mark_lock+0xf5/0x2df0 [ 2028.878786] ? lock_chain_count+0x20/0x20 [ 2028.879324] ? mark_lock+0xf5/0x2df0 [ 2028.879787] udpv6_sendmsg+0x1b30/0x2ad0 [ 2028.880303] ? __lock_acquire+0x1657/0x5b00 [ 2028.880835] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.881486] ? find_held_lock+0x2c/0x110 [ 2028.881985] ? lock_acquire+0x197/0x470 [ 2028.882475] ? find_held_lock+0x2c/0x110 [ 2028.882973] ? __might_fault+0xd3/0x180 [ 2028.883460] ? lock_downgrade+0x6d0/0x6d0 [ 2028.883967] ? sock_has_perm+0x1ea/0x280 [ 2028.884462] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2028.885101] ? __import_iovec+0x458/0x590 [ 2028.885622] ? udp_v6_push_pending_frames+0x360/0x360 [ 2028.886250] inet6_sendmsg+0x105/0x140 [ 2028.886724] ? inet6_compat_ioctl+0x320/0x320 [ 2028.887268] __sock_sendmsg+0xf2/0x190 [ 2028.887743] ____sys_sendmsg+0x334/0x870 [ 2028.888243] ? sock_write_iter+0x3d0/0x3d0 [ 2028.888754] ? do_recvmmsg+0x6d0/0x6d0 [ 2028.889225] ? handle_mm_fault+0x9e9/0x3500 [ 2028.889766] ? __lock_acquire+0x1657/0x5b00 [ 2028.890289] ? find_held_lock+0x2c/0x110 [ 2028.890834] ___sys_sendmsg+0xf3/0x170 [ 2028.891344] ? sendmsg_copy_msghdr+0x160/0x160 [ 2028.891960] ? vmacache_find+0x55/0x2a0 [ 2028.892515] ? do_user_addr_fault+0x5b0/0xc60 [ 2028.893126] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2028.893781] ? exc_page_fault+0xca/0x1a0 [ 2028.894273] ? trace_hardirqs_on+0x5b/0x180 [ 2028.894798] ? exc_page_fault+0xca/0x1a0 [ 2028.895328] ? asm_exc_page_fault+0x1e/0x30 [ 2028.895899] __sys_sendmmsg+0x195/0x470 [ 2028.896427] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2028.897004] ? lock_downgrade+0x6d0/0x6d0 [ 2028.897559] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2028.898147] ? wait_for_completion_io+0x270/0x270 [ 2028.898733] ? rcu_read_lock_any_held+0x75/0xa0 [ 2028.899295] ? vfs_write+0x354/0xb10 [ 2028.899747] ? fput_many+0x2f/0x1a0 [ 2028.900189] ? ksys_write+0x1a9/0x260 [ 2028.900680] ? __ia32_sys_read+0xb0/0xb0 [ 2028.901177] __x64_sys_sendmmsg+0x99/0x100 [ 2028.901710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2028.902333] do_syscall_64+0x33/0x40 [ 2028.902786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2028.903411] RIP: 0033:0x7fec4fe72b19 [ 2028.903864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2028.906104] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2028.907044] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2028.907906] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2028.908809] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2028.909701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2028.910565] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:53 executing program 0: ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffb, 0x1000}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x39, 0x1, [0x8]}}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2028.923578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2028.937895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.947743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2028.977061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:02:54 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20100000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 98) 04:02:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x0, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:02:54 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000400000000010000000000000002000000000000000"], 0x24, 0x0) creat(&(0x7f00000000c0)='./mnt/file0\x00', 0x125) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./mnt/file0\x00', 0x0, 0x0) 04:02:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000002c0)=0x0) setpriority(0x0, r1, 0x800000000081) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)=""/33, 0x21}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x170}}], 0x1, 0x41, &(0x7f0000000280)={0x0, 0x989680}) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x40, 0x7, 0x1f, 0x2, 0x0, 0x7, 0x800, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x0, @perf_config_ext={0x100000001, 0x1}, 0x4c0, 0x7, 0xfffffff9, 0x3, 0x5, 0x9, 0x3, 0x0, 0x7fffffff, 0x0, 0x80000001}, r1, 0xd, r2, 0x8) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:02:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r5, 0x8000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x10041, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x25dfdbff, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) close_range(r3, r0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000280)={0x100000001, 0xff, 0x2, 0x0, 0x0, [{{r5}, 0x100000000}, {{r8}, 0xa77}]}) [ 2029.336164] FAULT_INJECTION: forcing a failure. [ 2029.336164] name failslab, interval 1, probability 0, space 0, times 0 [ 2029.337657] CPU: 1 PID: 11478 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2029.338504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2029.339514] Call Trace: [ 2029.339843] dump_stack+0x107/0x167 [ 2029.340289] should_fail.cold+0x5/0xa [ 2029.340758] ? create_object.isra.0+0x3a/0xa20 [ 2029.341326] should_failslab+0x5/0x20 [ 2029.341797] kmem_cache_alloc+0x5b/0x310 [ 2029.342295] create_object.isra.0+0x3a/0xa20 [ 2029.342831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2029.343455] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2029.344075] ? alloc_skb_with_frags+0x92/0x570 [ 2029.344635] __alloc_skb+0xb1/0x5b0 [ 2029.345083] alloc_skb_with_frags+0x92/0x570 [ 2029.345642] ? lock_chain_count+0x20/0x20 [ 2029.346151] sock_alloc_send_pskb+0x7af/0x930 [ 2029.346705] ? sk_alloc+0x350/0x350 [ 2029.347154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2029.347792] ? lock_downgrade+0x6d0/0x6d0 [ 2029.348306] __ip_append_data+0x1628/0x3310 [ 2029.348839] ? fib_select_path+0x293/0x1de0 [ 2029.349383] ? ip_frag_init+0x350/0x350 [ 2029.349875] ? ip_finish_output+0x330/0x330 [ 2029.350402] ? ip_route_output_key_hash+0x19c/0x340 [ 2029.351007] ? ipv4_mtu+0x1ed/0x2c0 [ 2029.351456] ip_make_skb+0x22a/0x2a0 [ 2029.351912] ? ip_frag_init+0x350/0x350 [ 2029.352398] ? ip_flush_pending_frames+0x20/0x20 [ 2029.352981] ? lock_downgrade+0x6d0/0x6d0 [ 2029.353504] ? xfrm_lookup_route+0x65/0x210 [ 2029.354033] udp_sendmsg+0x1940/0x2160 [ 2029.354513] ? ip_frag_init+0x350/0x350 [ 2029.355003] ? udp_setsockopt+0xc0/0xc0 [ 2029.355487] ? mark_lock+0xf5/0x2df0 [ 2029.355945] ? lock_chain_count+0x20/0x20 [ 2029.356452] ? mark_lock+0xf5/0x2df0 [ 2029.356911] ? mark_lock+0xf5/0x2df0 [ 2029.357377] ? lock_chain_count+0x20/0x20 [ 2029.357885] ? lock_chain_count+0x20/0x20 [ 2029.358394] ? prep_new_page+0x16d/0x1d0 [ 2029.358889] ? lock_chain_count+0x20/0x20 [ 2029.359409] ? __lock_acquire+0x1657/0x5b00 [ 2029.359938] udpv6_sendmsg+0x1b30/0x2ad0 [ 2029.360437] ? __lock_acquire+0x1657/0x5b00 [ 2029.360968] ? udp_v6_push_pending_frames+0x360/0x360 [ 2029.361613] ? trace_hardirqs_on+0x5b/0x180 [ 2029.362144] ? lock_acquire+0x197/0x470 [ 2029.362634] ? find_held_lock+0x2c/0x110 [ 2029.363137] ? lock_acquire+0x197/0x470 [ 2029.363622] ? find_held_lock+0x2c/0x110 [ 2029.364120] ? __might_fault+0xd3/0x180 [ 2029.364604] ? lock_downgrade+0x6d0/0x6d0 [ 2029.365110] ? sock_has_perm+0x1ea/0x280 [ 2029.365617] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2029.366257] ? __import_iovec+0x458/0x590 [ 2029.366763] ? udp_v6_push_pending_frames+0x360/0x360 [ 2029.367391] inet6_sendmsg+0x105/0x140 [ 2029.367869] ? inet6_compat_ioctl+0x320/0x320 [ 2029.368415] __sock_sendmsg+0xf2/0x190 [ 2029.368890] ____sys_sendmsg+0x334/0x870 [ 2029.369400] ? sock_write_iter+0x3d0/0x3d0 [ 2029.369915] ? do_recvmmsg+0x6d0/0x6d0 [ 2029.370389] ? handle_mm_fault+0x9e9/0x3500 [ 2029.370915] ? __lock_acquire+0x1657/0x5b00 [ 2029.371441] ? find_held_lock+0x2c/0x110 [ 2029.371943] ___sys_sendmsg+0xf3/0x170 [ 2029.372420] ? sendmsg_copy_msghdr+0x160/0x160 [ 2029.372975] ? vmacache_find+0x55/0x2a0 [ 2029.373490] ? do_user_addr_fault+0x5b0/0xc60 [ 2029.374038] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2029.374716] ? exc_page_fault+0xca/0x1a0 [ 2029.375227] ? trace_hardirqs_on+0x5b/0x180 [ 2029.375753] ? exc_page_fault+0xca/0x1a0 [ 2029.376247] ? asm_exc_page_fault+0x1e/0x30 [ 2029.376782] __sys_sendmmsg+0x195/0x470 [ 2029.377268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2029.377808] ? lock_downgrade+0x6d0/0x6d0 [ 2029.378322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2029.378908] ? wait_for_completion_io+0x270/0x270 [ 2029.379494] ? rcu_read_lock_any_held+0x75/0xa0 [ 2029.380056] ? vfs_write+0x354/0xb10 [ 2029.380509] ? fput_many+0x2f/0x1a0 [ 2029.380950] ? ksys_write+0x1a9/0x260 [ 2029.381438] ? __ia32_sys_read+0xb0/0xb0 [ 2029.381936] __x64_sys_sendmmsg+0x99/0x100 [ 2029.382449] do_syscall_64+0x33/0x40 [ 2029.382901] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2029.383524] RIP: 0033:0x7fec4fe72b19 [ 2029.383977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2029.386219] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2029.387138] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2029.388004] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2029.388869] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2029.389747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2029.390612] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:02:54 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0xa, &(0x7f0000000180)=0x469a, 0x4) 04:02:54 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8cffffff, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:02:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x7f, 0x47, 0x8, 0x80, 0x0, 0xcc32, 0x9000, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x6}, 0x40800, 0x9, 0x9, 0x7, 0x4, 0xffffff13, 0x8000, 0x0, 0x3f, 0x0, 0x5e}) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:08 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c006802325004b094c04bd83d8df8bb8b440b6069012be708d1b8c92e634fe35353edf9bbcb3d0be61fa27fd583b635424527f9d6aba79ecaa609af7ca5b276f31f35a0d950449964f857ba2d296164b74e2a563f2c1fb65bf006"]) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:03:08 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c05"]) 04:03:08 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x11, r5, 0x8000000) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x10041, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x25dfdbff, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) close_range(r3, r0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f0000000280)={0x100000001, 0xff, 0x2, 0x0, 0x0, [{{r5}, 0x100000000}, {{r8}, 0xa77}]}) 04:03:08 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x0, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:03:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_io_uring_setup(0x68fa, &(0x7f0000000000)={0x0, 0x2dde, 0x4, 0x3, 0x15a}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd_index=0x7, 0x6, 0x6, 0x1, 0x10, 0x1, {0x2, r3}}, 0x2) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="40090000000000000000000000000000020000002c00018006000340000000001400018008000100e000000128000200000000000c0002800500010000000000"], 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x94, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_SSID={0x7, 0x34, @random="895acf"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1d}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x40, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3f, 0x8}}, @link_id={0x65, 0x12}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0x9, 0x6, @broadcast, 0x8, 0xfffff801, 0x5}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48c4}, 0x0) 04:03:08 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xc0ed0000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2043.882791] __nla_validate_parse: 2 callbacks suppressed [ 2043.882799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:03:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 99) [ 2043.896013] FAULT_INJECTION: forcing a failure. [ 2043.896013] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.897430] CPU: 1 PID: 11509 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2043.902358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2043.903358] Call Trace: [ 2043.903684] dump_stack+0x107/0x167 [ 2043.904128] should_fail.cold+0x5/0xa [ 2043.904596] should_failslab+0x5/0x20 [ 2043.905060] __kmalloc_node_track_caller+0x74/0x3b0 [ 2043.905664] ? alloc_skb_with_frags+0x92/0x570 [ 2043.906239] __alloc_skb+0xb1/0x5b0 [ 2043.906682] alloc_skb_with_frags+0x92/0x570 [ 2043.907221] ? lock_chain_count+0x20/0x20 [ 2043.907725] sock_alloc_send_pskb+0x7af/0x930 [ 2043.908275] ? sk_alloc+0x350/0x350 [ 2043.908724] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2043.909363] ? lock_downgrade+0x6d0/0x6d0 [ 2043.910443] __ip_append_data+0x1628/0x3310 [ 2043.910976] ? fib_select_path+0x293/0x1de0 [ 2043.911504] ? ip_frag_init+0x350/0x350 [ 2043.911994] ? ip_finish_output+0x330/0x330 [ 2043.912526] ? ip_route_output_key_hash+0x19c/0x340 [ 2043.913127] ? ipv4_mtu+0x1ed/0x2c0 [ 2043.913575] ip_make_skb+0x22a/0x2a0 [ 2043.914041] ? ip_frag_init+0x350/0x350 [ 2043.914528] ? ip_flush_pending_frames+0x20/0x20 [ 2043.915108] ? lock_downgrade+0x6d0/0x6d0 [ 2043.915617] ? xfrm_lookup_route+0x65/0x210 [ 2043.916145] udp_sendmsg+0x1940/0x2160 [ 2043.916625] ? ip_frag_init+0x350/0x350 [ 2043.917116] ? udp_setsockopt+0xc0/0xc0 [ 2043.917599] ? mark_lock+0xf5/0x2df0 [ 2043.918071] ? lock_chain_count+0x20/0x20 [ 2043.918576] ? mark_lock+0xf5/0x2df0 [ 2043.919033] ? mark_lock+0xf5/0x2df0 [ 2043.919486] ? lock_chain_count+0x20/0x20 [ 2043.919990] ? lock_chain_count+0x20/0x20 [ 2043.920495] ? prep_new_page+0x16d/0x1d0 [ 2043.920990] ? lock_chain_count+0x20/0x20 [ 2043.921500] ? __lock_acquire+0x1657/0x5b00 [ 2043.922039] udpv6_sendmsg+0x1b30/0x2ad0 [ 2043.922536] ? __lock_acquire+0x1657/0x5b00 [ 2043.923068] ? udp_v6_push_pending_frames+0x360/0x360 [ 2043.923696] ? trace_hardirqs_on+0x5b/0x180 [ 2043.924226] ? lock_acquire+0x197/0x470 [ 2043.924710] ? find_held_lock+0x2c/0x110 [ 2043.925209] ? lock_acquire+0x197/0x470 [ 2043.925693] ? find_held_lock+0x2c/0x110 [ 2043.926203] ? __might_fault+0xd3/0x180 [ 2043.930059] ? lock_downgrade+0x6d0/0x6d0 [ 2043.930565] ? sock_has_perm+0x1ea/0x280 [ 2043.931058] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2043.931694] ? __import_iovec+0x458/0x590 [ 2043.932197] ? udp_v6_push_pending_frames+0x360/0x360 [ 2043.932824] inet6_sendmsg+0x105/0x140 [ 2043.933298] ? inet6_compat_ioctl+0x320/0x320 [ 2043.933864] __sock_sendmsg+0xf2/0x190 [ 2043.934352] ____sys_sendmsg+0x334/0x870 [ 2043.934847] ? sock_write_iter+0x3d0/0x3d0 [ 2043.935360] ? do_recvmmsg+0x6d0/0x6d0 [ 2043.935833] ? handle_mm_fault+0x9e9/0x3500 [ 2043.936358] ? __lock_acquire+0x1657/0x5b00 [ 2043.936882] ? find_held_lock+0x2c/0x110 [ 2043.937383] ___sys_sendmsg+0xf3/0x170 [ 2043.937910] ? sendmsg_copy_msghdr+0x160/0x160 [ 2043.938470] ? vmacache_find+0x55/0x2a0 [ 2043.938959] ? do_user_addr_fault+0x5b0/0xc60 [ 2043.939505] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2043.940139] ? exc_page_fault+0xca/0x1a0 [ 2043.940628] ? trace_hardirqs_on+0x5b/0x180 [ 2043.941151] ? exc_page_fault+0xca/0x1a0 [ 2043.941645] ? asm_exc_page_fault+0x1e/0x30 [ 2043.942205] __sys_sendmmsg+0x195/0x470 [ 2043.942696] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2043.943220] ? lock_downgrade+0x6d0/0x6d0 [ 2043.943735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2043.944329] ? wait_for_completion_io+0x270/0x270 [ 2043.944916] ? rcu_read_lock_any_held+0x75/0xa0 [ 2043.945481] ? vfs_write+0x354/0xb10 [ 2043.945957] ? fput_many+0x2f/0x1a0 [ 2043.946402] ? ksys_write+0x1a9/0x260 [ 2043.946865] ? __ia32_sys_read+0xb0/0xb0 [ 2043.947370] __x64_sys_sendmmsg+0x99/0x100 [ 2043.947884] do_syscall_64+0x33/0x40 [ 2043.948336] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2043.948958] RIP: 0033:0x7fec4fe72b19 [ 2043.949414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2043.951675] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2043.952605] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2043.953472] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2043.954371] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2043.955238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2043.956106] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:03:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800, 0x8) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000500)={0x7, &(0x7f0000000400)=[{0x80000001, 0xa5, &(0x7f0000000280)="f3f542f523b460ee337099c14271d5c64289f88d2499dbc8fbb60a2237268a526ee247079469888a15e8f32cce5684eff654b87e3edc2ce316c8f6708c07383546f5146e2f3e6dc7eb9ffde730671e7dd3f84169219b0c75137cb388c2e8739d9e086657e70ea12c79a679b83bb6ad0da9fb91e9ad4265eef3d4fc34dc656cac043777405b972cddf9054e80ac4a6999b23925f401e10a98a3e2e3e2d426b8cc5cface8b7a", 0x1, 0x1}, {0x7, 0x71, &(0x7f0000000100)="7c881e24d97526b4f429e6d63f877142c35f193316a3b3fee2fadab82061b970d8e38845134f0f7a5c1fdfebf663b791dce3794dab5992793afe62b176079ebcb1d8851600aed62ab22ceb64e1eaf6d22cff62a5ff2df6030415922423307dc928d36c0406fdd3509951048001f6f16557", 0x0, 0x1}, {0x3, 0xb, &(0x7f00000001c0)="d38800f0b84811e708588a", 0x1}, {0xc1, 0x34, &(0x7f0000000200)="7a5949dc49223170a71b203d493f1ab4719347e7f49bc012712858746cd9b2cf3ecd60f1863004afc7bf3e19ec0e0e4907cf9c87", 0x0, 0x1}, {0x8, 0x1d, &(0x7f0000000340)="be8961cbeb93e6cfdead22b5616fd6a55f78891613eb37d1d8a8aa6375", 0x0, 0x1}, {0x5, 0x0, &(0x7f0000000380), 0x1, 0x1}, {0x1, 0x37, &(0x7f00000003c0)="d945a311a3ceb9342169043dedf9d7c6b9f24c19cdf32d50cca679a6727d39fc122709b5b41a154b654d1d630c56277f65b5f743887b6f", 0x0, 0x1}]}) r2 = accept(r1, &(0x7f0000000580)=@phonet, &(0x7f0000000600)=0x80) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3}}, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000380), &(0x7f0000000540)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x4}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96333f", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @mcast1={0x0}}}}}}}, 0x0) 04:03:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 100) 04:03:08 executing program 2: syz_genetlink_get_family_id$SEG6(&(0x7f0000002000), 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x37, 0x400, 0x70bd27, 0x25dfdbfc, {0x11}, [@typed={0x8, 0x79, 0x0, 0x0, @u32=0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) 04:03:08 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r3, 0xfffffffffffffffc, r2, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r2) [ 2044.036086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2044.039710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=11524 comm=syz-executor.2 [ 2044.042011] FAULT_INJECTION: forcing a failure. [ 2044.042011] name failslab, interval 1, probability 0, space 0, times 0 [ 2044.043546] CPU: 0 PID: 11522 Comm: syz-executor.4 Not tainted 5.10.228 #1 [ 2044.044463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2044.045562] Call Trace: [ 2044.045965] dump_stack+0x107/0x167 [ 2044.046427] should_fail.cold+0x5/0xa [ 2044.046814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2044.046972] ? create_object.isra.0+0x3a/0xa20 [ 2044.048567] should_failslab+0x5/0x20 [ 2044.049129] kmem_cache_alloc+0x5b/0x310 [ 2044.049701] create_object.isra.0+0x3a/0xa20 [ 2044.050295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2044.050997] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2044.051693] ? alloc_skb_with_frags+0x92/0x570 [ 2044.052278] __alloc_skb+0xb1/0x5b0 [ 2044.052824] alloc_skb_with_frags+0x92/0x570 [ 2044.053382] ? lock_chain_count+0x20/0x20 [ 2044.053985] sock_alloc_send_pskb+0x7af/0x930 [ 2044.054561] ? sk_alloc+0x350/0x350 [ 2044.055085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2044.055791] ? lock_downgrade+0x6d0/0x6d0 [ 2044.056313] __ip_append_data+0x1628/0x3310 [ 2044.056938] ? fib_select_path+0x293/0x1de0 [ 2044.057487] ? ip_frag_init+0x350/0x350 [ 2044.058068] ? ip_finish_output+0x330/0x330 [ 2044.058667] ? ip_route_output_key_hash+0x19c/0x340 [ 2044.059302] ? ipv4_mtu+0x1ed/0x2c0 [ 2044.059820] ip_make_skb+0x22a/0x2a0 [ 2044.060294] ? ip_frag_init+0x350/0x350 [ 2044.060881] ? ip_flush_pending_frames+0x20/0x20 [ 2044.061487] ? lock_downgrade+0x6d0/0x6d0 [ 2044.062088] ? xfrm_lookup_route+0x65/0x210 [ 2044.062701] udp_sendmsg+0x1940/0x2160 [ 2044.063201] ? ip_frag_init+0x350/0x350 [ 2044.063766] ? udp_setsockopt+0xc0/0xc0 [ 2044.064278] ? mark_lock+0xf5/0x2df0 [ 2044.064834] ? mark_lock+0xf5/0x2df0 [ 2044.065306] ? lock_chain_count+0x20/0x20 [ 2044.065890] ? lock_chain_count+0x20/0x20 [ 2044.066433] ? __lock_acquire+0x1657/0x5b00 [ 2044.067046] udpv6_sendmsg+0x1b30/0x2ad0 [ 2044.067565] ? __lock_acquire+0x1657/0x5b00 [ 2044.068172] ? udp_v6_push_pending_frames+0x360/0x360 [ 2044.068896] ? lock_acquire+0x197/0x470 [ 2044.069399] ? find_held_lock+0x2c/0x110 [ 2044.069996] ? lock_acquire+0x197/0x470 [ 2044.070499] ? find_held_lock+0x2c/0x110 [ 2044.071070] ? __might_fault+0xd3/0x180 [ 2044.071577] ? lock_downgrade+0x6d0/0x6d0 [ 2044.072156] ? sock_has_perm+0x1ea/0x280 [ 2044.072747] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2044.073417] ? __import_iovec+0x458/0x590 [ 2044.074009] ? udp_v6_push_pending_frames+0x360/0x360 [ 2044.074722] inet6_sendmsg+0x105/0x140 [ 2044.075214] ? inet6_compat_ioctl+0x320/0x320 [ 2044.075838] __sock_sendmsg+0xf2/0x190 [ 2044.076331] ____sys_sendmsg+0x334/0x870 [ 2044.076926] ? sock_write_iter+0x3d0/0x3d0 [ 2044.077460] ? do_recvmmsg+0x6d0/0x6d0 [ 2044.078023] ? handle_mm_fault+0x9e9/0x3500 [ 2044.078569] ? find_held_lock+0x2c/0x110 [ 2044.079148] ___sys_sendmsg+0xf3/0x170 [ 2044.079699] ? sendmsg_copy_msghdr+0x160/0x160 [ 2044.080270] ? vmacache_find+0x55/0x2a0 [ 2044.080857] ? do_user_addr_fault+0x5b0/0xc60 [ 2044.081430] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2044.082158] ? exc_page_fault+0xca/0x1a0 [ 2044.082726] ? trace_hardirqs_on+0x5b/0x180 [ 2044.083271] ? exc_page_fault+0xca/0x1a0 [ 2044.083839] ? asm_exc_page_fault+0x1e/0x30 [ 2044.084399] __sys_sendmmsg+0x195/0x470 [ 2044.084989] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2044.085535] ? lock_downgrade+0x6d0/0x6d0 [ 2044.086146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2044.086820] ? wait_for_completion_io+0x270/0x270 [ 2044.087433] ? rcu_read_lock_any_held+0x75/0xa0 [ 2044.088072] ? vfs_write+0x354/0xb10 [ 2044.088550] ? fput_many+0x2f/0x1a0 [ 2044.089097] ? ksys_write+0x1a9/0x260 [ 2044.089580] ? __ia32_sys_read+0xb0/0xb0 [ 2044.090172] __x64_sys_sendmmsg+0x99/0x100 [ 2044.090763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2044.091410] do_syscall_64+0x33/0x40 [ 2044.091942] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2044.092588] RIP: 0033:0x7fec4fe72b19 [ 2044.093138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2044.096104] RSP: 002b:00007fec4d3e8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2044.097112] RAX: ffffffffffffffda RBX: 00007fec4ff85f60 RCX: 00007fec4fe72b19 [ 2044.098103] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2044.099060] RBP: 00007fec4d3e81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2044.100007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2044.100952] R13: 00007ffd00a8c53f R14: 00007fec4d3e8300 R15: 0000000000022000 04:03:08 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1}, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000080)=0x7fe, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 04:03:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x800, 0x8) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000500)={0x7, &(0x7f0000000400)=[{0x80000001, 0xa5, &(0x7f0000000280)="f3f542f523b460ee337099c14271d5c64289f88d2499dbc8fbb60a2237268a526ee247079469888a15e8f32cce5684eff654b87e3edc2ce316c8f6708c07383546f5146e2f3e6dc7eb9ffde730671e7dd3f84169219b0c75137cb388c2e8739d9e086657e70ea12c79a679b83bb6ad0da9fb91e9ad4265eef3d4fc34dc656cac043777405b972cddf9054e80ac4a6999b23925f401e10a98a3e2e3e2d426b8cc5cface8b7a", 0x1, 0x1}, {0x7, 0x71, &(0x7f0000000100)="7c881e24d97526b4f429e6d63f877142c35f193316a3b3fee2fadab82061b970d8e38845134f0f7a5c1fdfebf663b791dce3794dab5992793afe62b176079ebcb1d8851600aed62ab22ceb64e1eaf6d22cff62a5ff2df6030415922423307dc928d36c0406fdd3509951048001f6f16557", 0x0, 0x1}, {0x3, 0xb, &(0x7f00000001c0)="d38800f0b84811e708588a", 0x1}, {0xc1, 0x34, &(0x7f0000000200)="7a5949dc49223170a71b203d493f1ab4719347e7f49bc012712858746cd9b2cf3ecd60f1863004afc7bf3e19ec0e0e4907cf9c87", 0x0, 0x1}, {0x8, 0x1d, &(0x7f0000000340)="be8961cbeb93e6cfdead22b5616fd6a55f78891613eb37d1d8a8aa6375", 0x0, 0x1}, {0x5, 0x0, &(0x7f0000000380), 0x1, 0x1}, {0x1, 0x37, &(0x7f00000003c0)="d945a311a3ceb9342169043dedf9d7c6b9f24c19cdf32d50cca679a6727d39fc122709b5b41a154b654d1d630c56277f65b5f743887b6f", 0x0, 0x1}]}) r2 = accept(r1, &(0x7f0000000580)=@phonet, &(0x7f0000000600)=0x80) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3}}, @enc_lim, @pad1]}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000380), &(0x7f0000000540)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x4}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "96333f", 0x18, 0x3a, 0x0, @empty, @mcast2, {[], @mld={0x82, 0x0, 0x0, 0x0, 0x0, @mcast1={0x0}}}}}}}, 0x0) 04:03:08 executing program 0: msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/239) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="42c3c4b8d0c699b29083ac8ce202bdd55a5ef6d858cab050654bde32bc2ccd9b34ebe5fd414b33c815fe180e86d7f6d5e317b6b5a0bfe342d08841e1015b04e4a86227daf921ee11a6bbafe22acad7be47a2e0fc106ffc13a5780a77621065d1dd0708e58de3a46067890cf8f9184006102554f83413edf60f7837b135c96fb217e8b7b54e8a14684cf29a999b53daa370c842a321505f4774b3ffb9209ce0324632debf878e85f889e4a29a1ba8ad2ee1a435f5739e92d5fbd0ca20c7b1f95c3968d1ce7733c5d65f0d915f9b5f9030bd2b6c238129f41f403539c065c352356a099cf947b32cdcfe0e4c5ec2de7a", 0xef, 0xfffffffffffffff8) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0xffffffffffff0001, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:24 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000300)=""/169, &(0x7f0000000000)=0xa9) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) shutdown(r0, 0x1) 04:03:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 04:03:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000019b5ceedd3187d91b531d7b3ab647de8d643d9dfa8e8d7004300"/47], 0x18}}], 0x2, 0x0) 04:03:24 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x800000000, 0x101200) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000002c0)={0x3, 0xf, "9c621abd08f89b34287b71afabce394ea5554ab91a2e82ae62cbc2f3994a072f07a5d3b01004bffdb18459c84b5494d0e10ea3150ef87969b92e6578830ded6d297c86eba8eda4dc83c7091f86c23c725e79791fb3df6ffbac92ebaa23efc8e3e5b8faf6992eaabaa8e38c2dd62f1ccc7925a7e15b2b73bdb1bb78fd7cfa9c0be55c2a1cdd1c9eb6b0275224d7ca256599c44f98e5bdcde2f1a2c845"}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000040)="200000000002000019000000700100000f000000000005000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef51666aaf8d5b920ce9098349eaf80348779317fbb91da5b4360f2a8f452e82cbfd83abdc841244f8", 0x62, 0x657d}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:24 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="000bcf00"]) 04:03:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xf6ffffff, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:03:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x0, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:03:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00@'], 0x30}}, 0x0) 04:03:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x0}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x2, 0x2010, 0xffffffffffffffff, 0x8000000) r3 = syz_io_uring_setup(0x7f02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) dup3(r3, r6, 0x80000) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000180)=@sco}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r2, r5, &(0x7f00000008c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000100)=""/175, 0xaf}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000480)=""/46, 0x2e}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/68, 0x44}, {&(0x7f0000000640)=""/41, 0x29}, {&(0x7f0000000680)=""/164, 0xa4}], 0x9, &(0x7f0000000800)=""/85, 0x55}, 0x0, 0x2000, 0x0, {0x3}}, 0x3) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:24 executing program 2: perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0x8000000) 04:03:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xffff0000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2059.927945] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 04:03:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2, 0x0) [ 2059.989813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2059.992617] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 04:03:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x3, 0x0) [ 2060.060648] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 2060.061610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2060.067982] netlink: 'syz-executor.1': attribute type 64 has an invalid length. [ 2060.069004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:03:24 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='\x00', 0x1a10c0, 0x1a9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000800}, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000300)=0x6) syz_open_procfs(r3, &(0x7f0000000580)='pagemap\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x0, 0x39e6}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000740)={0x3, 0xe4, "a77c8845d507b1a16a38826dc040b60d24c055fcb7ed305860446afae55d3bb4446adb2c5d3326b928e68024729501248174a5b07465875faaae46c28195627ecffd5267d36dff12e617a3c4c54c0c692dbb45e955c7e182da40e857816b7a61e91e8e24e77c79f20c54c2d4e455a002a0d12d467152dc6ef44f78677a04dc9e69f4df8c997ec7dd8adcfc3649ec6915b4169958a33f1831a4cfe1fe57bfe502782f501c97289e1d9c1d3f17b97153e5e4821725a9b591bacc634fda321e1bd4ecc07d1ef26a77b92306d0943f40c67db0ceaa4b50f64634e21916f62f404a4fc27d6191"}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r4, &(0x7f00000005c0)=""/124, 0x7c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000210c00ed000000000000c970e11973e0000000000000000000"], 0x30}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000009c0)=ANY=[@ANYBLOB="6769643d3647175aa133c0a69bee2e042fda4008c2f5eb29eb06fe254962357b", @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d51d9c1d6110b74e3b40894f9e936172376f3528dfc1c21cba366298fd7a7b43650c0fb4c27bdc25263d8593d8f2383f1cdb581cfe961c75b1ea353add470dcde3155c96e10367c49c30b52876fbb7106f7ee86daf65f6e46a1a554a48a47d44edea709b313287cfeb224f3e566e9a735013b991b5ca1140b6279f7f49af597827a4d0d1d2de5d7117a326b882512a2772e8673b2a7982b0bf149ab7ce082d9961868d4e9ebb91b44d3228c9a4c867f79a4a4", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932"]) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 04:03:24 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xffffff8c, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2060.126037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3105 sclass=netlink_route_socket pid=11597 comm=syz-executor.2 04:03:39 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000001240)='\x00', 0x1a10c0, 0x1a9) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x801, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000800}, 0x4) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000300)=0x6) syz_open_procfs(r3, &(0x7f0000000580)='pagemap\x00') ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x0, 0x39e6}) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000740)={0x3, 0xe4, "a77c8845d507b1a16a38826dc040b60d24c055fcb7ed305860446afae55d3bb4446adb2c5d3326b928e68024729501248174a5b07465875faaae46c28195627ecffd5267d36dff12e617a3c4c54c0c692dbb45e955c7e182da40e857816b7a61e91e8e24e77c79f20c54c2d4e455a002a0d12d467152dc6ef44f78677a04dc9e69f4df8c997ec7dd8adcfc3649ec6915b4169958a33f1831a4cfe1fe57bfe502782f501c97289e1d9c1d3f17b97153e5e4821725a9b591bacc634fda321e1bd4ecc07d1ef26a77b92306d0943f40c67db0ceaa4b50f64634e21916f62f404a4fc27d6191"}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read(r4, &(0x7f00000005c0)=""/124, 0x7c) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000210c00ed000000000000c970e11973e0000000000000000000"], 0x30}}, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000009c0)=ANY=[@ANYBLOB="6769643d3647175aa133c0a69bee2e042fda4008c2f5eb29eb06fe254962357b", @ANYRESHEX=0x0, @ANYBLOB="2c73697a653d6b256d2d3474c82c6d6f64653d30303030303030303030303030303030303037373032332c6769643d51d9c1d6110b74e3b40894f9e936172376f3528dfc1c21cba366298fd7a7b43650c0fb4c27bdc25263d8593d8f2383f1cdb581cfe961c75b1ea353add470dcde3155c96e10367c49c30b52876fbb7106f7ee86daf65f6e46a1a554a48a47d44edea709b313287cfeb224f3e566e9a735013b991b5ca1140b6279f7f49af597827a4d0d1d2de5d7117a326b882512a2772e8673b2a7982b0bf149ab7ce082d9961868d4e9ebb91b44d3228c9a4c867f79a4a4", @ANYRESHEX=0xee00, @ANYBLOB="00040000ff9bd492c35891f93cc82c5208cc4494fe3e98f509c1c3338615e16a81d0bafbc05ac21892e21277a6142459205ead9b70f20dd2bec43edb079c8958f0b8b9313ab1ee5392654f9119f2c9089bc0b39b2a1e8479087932"]) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) 04:03:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x4, 0x0) 04:03:39 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000001d80)) getsockopt$sock_int(r0, 0x1, 0x2a, 0x0, &(0x7f0000000080)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1e000, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0x3, @mcast2, 0x40}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xa44e, @mcast2, 0x1}, 0x1c) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x20040000) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) getegid() ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xeff) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000000)="e8b6746e0f3da48fb1e43476e96f2c1d2ed83ac78973f13ea0d0cf3c945cb379c7065cdb849d3c72c59a99dcbd31b703fca02ca496cccb6ece151df46ae0e745328ede66a9e486a9ead4d8fa00"/95, 0x5f, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x0) 04:03:39 executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x10000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x8000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0x6) llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)=""/144, 0x90) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x100, &(0x7f0000000100)=[r4, r0], 0x2, 0x0, 0x1, {0x0, r7}}, 0x80000000) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r8, {0x8}}, './file1\x00'}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [], 0x4, "9755154351ac9a"}) sendfile(r1, r2, 0x0, 0x100000001) 04:03:39 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xfffffff6, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:03:39 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x0, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:03:39 executing program 5: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000002c0)="2ba1aef3ac0f4ecf02f8367baa2be3136b229fbeb786d917a5b80b7f82c8d5bf508a2f73a0e8e583056270888a3c7f44959b169cf0fce6e30526224c9960822ea96b61faa10857bb575b4ef4cb5a4483ec83839509560c516bb40a593e36a3d99f542295b48a7d9b706db1c07f14839554f2b7cb306ef8defb5930a15088e3926d3085c2499c1ecc3fc5cc4c932723c6a0c7fc017883d0134a7ff8aae85c6f26dc4cb2e0d01d4b08f22ad7960a71de3bdc", 0xb1}, {&(0x7f0000000140)="cd069e76d6e2779cbaecac53effd70b714e076f6e667d1e32298ae67b0c4afad5a", 0x21}, {&(0x7f00000003c0)="409adad362658a5105b582fea0e9abb13b436d8c83a0d499ec312d334ec727d23b886de3152669a4321d94a834f80cbf0135cb8630da885bfa0edc91a27962babf0db84374b6fbd3300c6c7d60b9b1fbb5594db43994833b0989088ac62eac704f1567d082af30bd5ac465758c6915923346392df74b211acfefd729ff1131783a1625323b700fe16704f615df173d130b6d764c3edb21", 0x97}, {&(0x7f0000000480)="6e7684c06596d80773e52f1822486dd744651a4d5cfb4a7678f3aeabb74d71b8347a785213c09c4e0a30c99ab3e7f567149f97080d4773aa7ca024762fa9d6b28d9dd1529d195ce20664f6e9a9dfd6f0558e5da9ae20e18e025a6b4041f2", 0x5e}, {&(0x7f0000000500)="c91065e7d115c6b0302fcaa6ed62d9485e6804c499d20df9a5d72d", 0x1b}, {&(0x7f0000000540)="a20ccd394a972ab02fc940a8e535bef95fd1ac05a7f65439eecbf573a6d0fda8599fa4182de3c0df7b2ec28738fd598e9e3670e9a3e321904b2ef12164c63c7a34b67b277745e01b54b0da7a2397fc585935cfdf21e9ed3d8b48a31500aba06e0299793165e864a5c561a156d5fd4cbc7ee283384ee134717191d05e1e847b0306c2ad9bb82fe3cb16ecf814149b720e34d10e5e69446bf84990fd22ae5db7e384733462003062226cc2115430da61b9d3", 0xb1}, {&(0x7f0000000600)="d00d6a1bea43d58a0d1da06a79fd1ef5a35a78fb7d03bad7c74fcefef94742274fed0e870ea385787a7ffed28ebc85fd5688aa7a113052e34ed3af22c43065652f312696e2134457539147b45fdbc1e239170f18cbb7e2014653cf1c6482dceb8553895588c6d4b18721110f2b809fb3a41dcc36b08b86e21ffac0fb1810b3848e23ca", 0x83}, {&(0x7f00000006c0)="505b36a0ad1e3e4c906f153a23bb6b1f9157acb6ccf2fd335765d328802388e0347a4ebd832e858c849606f42476ab6e5dc97ea5debe03aacd713e25ea9a714b927bdf30f75b981085fd9b08a14129b506875af2b588708422674cb4e53d", 0x5e}], 0x8, &(0x7f00000007c0)=[@hopopts_2292={{0xc8, 0x29, 0x36, {0x8, 0x15, '\x00', [@generic={0x86, 0xad, "526bb87c48fa009e789364a95c99b95c764ba95091fcb3e7b4494880411d7e469aef85a4618edc3633b766e571ca4295f84b542c6d6fcb038de5c515faf4d39e9ac2edd517f4d6d35951d220f205defd9b9c4567573fa9b779efcd75a012dcde0b3b86afc9fe72caef808aba956bdb5830f02a81a901542e889fb06c5becbcbd5b66f80264bade4862c4fe5a380bf6c62412392e17e220186c5f3990d7e18e1b01230387669db49534af0d30b4"}]}}}], 0xc8}}], 0x1, 0x800) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2081000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080), 0x5, 0x2000) splice(r0, &(0x7f0000000000)=0x200, r2, &(0x7f0000000100)=0x673, 0x10001, 0x7) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6e3dd541ebf18180ce54f0db8c5fdf38009b14045c3cdca7816ab71fe3ce855546eb7e1e595851075a1fdf495e4ca80d3efa2984aebba9c66d3bcd5fca03ca8c45609c564a3aa9ad7efef386d31b6195ea60729f7fd2592e2d67b242879091a9940326820f6ff8ebb31f79f8f7010823d133a42893580169bed68b2138def0", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 2074.779332] 9pnet: Insufficient options for proto=fd [ 2074.787283] 9pnet: Insufficient options for proto=fd [ 2074.790284] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:03:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x5, 0x0) [ 2074.814657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3105 sclass=netlink_route_socket pid=11612 comm=syz-executor.2 04:03:39 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xedc000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:03:39 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x1, 0x0, 0x0, 0x24, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000240), 0x3f, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000280)={0x100, 0x6, 0xffffffff, 0x4, 0x9, "494b56d703bc743fe203590fd7fc56181b2dc3"}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='nfs\x00', 0x868041, &(0x7f0000000200)='trans=fd,') 04:03:39 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x224, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1bc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2c5c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x565c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6b9}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "487b37dac6e8eff936b480dd7de1bec3a8c12e0bb8997c5a3de3fa0e2e1047e8683298dbb8f938b24af57512c0703465d913252fb5dc40098af13ef3c63462b7da"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a45885519f2a0f160c9b2507df9ff591a77ecc761209a6b5ea2937f7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "ff93e99c04c210df59813dd627c59415d3b9bdb272a71d1ed4bfd8c0e21dbb3a14c916c7ebbb4d8c949f49deade10c3df1e9dd3e0e773e029ba489745f0ff602a475f4bb39e75b95e20f042f76d506e560a696ac15c139dc79"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x196}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x2) sendfile(r2, r3, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)=@report={0x1f0, 0x20, 0x8, 0x70bd29, 0x25dfdbfd, {0x6c, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e20, 0xffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy={0xac, 0x7, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e21, 0x4, 0x4e24, 0x1, 0x2, 0xa0, 0x20, 0x84, 0x0, r4}, {0x0, 0x41f, 0x5, 0x6, 0x0, 0x100000001, 0x80000001, 0x7}, {0xb50, 0x40, 0x2, 0x1f}, 0x3, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e22, 0x2, 0x4e20, 0xffc1, 0x2, 0x60, 0x20, 0x89}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x33}, @in6=@mcast2, {0x890, 0x3, 0x0, 0x3, 0x5, 0x2, 0x2509, 0x1}, {0xad, 0x14, 0xa3, 0x1b}, {0x0, 0xfffffff9, 0x200}, 0x70bd29, 0x3502, 0x2, 0xd3f3e591ed41b74c, 0x8, 0x4a}}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, 0x1f0}}, 0x4000810) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="1d6cfdc04e6e880f235deef0b815b8fca4c6195048afcf64a0b5a3aa581c5431f4248d63b3e14a2fe6f2cb2a819639b271ddfd5e66daa220de6ead2b0cc9040f385af202aa553448b1352e57baf009ad0f8e5061b49c4dd50601609589e8dcac90200df2761020dace637057"]) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) [ 2074.932526] 9pnet: Insufficient options for proto=fd [ 2074.956645] 9pnet: Insufficient options for proto=fd [ 2075.683240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:03:54 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000300)=""/169, &(0x7f0000000000)=0xa9) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) shutdown(r0, 0x1) 04:03:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x3}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0/file0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@access_client}]}}) 04:03:54 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x224, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfe0e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1bc}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2c5c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x400}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x565c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6b9}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3a}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "487b37dac6e8eff936b480dd7de1bec3a8c12e0bb8997c5a3de3fa0e2e1047e8683298dbb8f938b24af57512c0703465d913252fb5dc40098af13ef3c63462b7da"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "a45885519f2a0f160c9b2507df9ff591a77ecc761209a6b5ea2937f7"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "ff93e99c04c210df59813dd627c59415d3b9bdb272a71d1ed4bfd8c0e21dbb3a14c916c7ebbb4d8c949f49deade10c3df1e9dd3e0e773e029ba489745f0ff602a475f4bb39e75b95e20f042f76d506e560a696ac15c139dc79"}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x196}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x2) sendfile(r2, r3, 0x0, 0x20d315) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0x20c, 0x21, 0x1, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0x114, 0x8f, 0x0, 0x1, [@generic="422c84ed1aae0b871959ed8f8d434ae92c5fde363e6171591f49295b14209cd6dfba6e041e82bda1b1931ecf6b82414044c57d8cef0349fcb2aada142075d50f6546814661a92c98fdf5205bb59e838a4484504e72c3596cdd6733bf9b52dd07f1b0562d0eefbab1543bee2d6e26a060592196caf1a02745c1360b3fa64a8f15377e1258b45ff564a03316d48e810f65185232c08cf49880c0208ac001b5a95304864c8be6ebc2213611efad97389cb2bf5b21b4afbb0810f38fe6474c7020e600671ca6d6a6019fb177662e7b0dbd497bfda17705a9fbf78cf87c4c8f6f85c8701716d16ebfe0", @generic="e44082577d2616839e4d7a10672c82041f1455d3078bccdb560ba47a381eb05c20d0a874ba9466b9c2"]}, @nested={0xda, 0x1d, 0x0, 0x1, [@generic="33591af40e446d969f92e32e146351c3013fc361d5a43a4216c5dd11a55e5579e019816bdcf9ea20e75b9fb2013535be1ecfc87e512deab6e668bef662e5ce179a710e25e2c1260cf75ffe83d1ffff5f9f31bce938fb526462b6a93e1839d2ff75ed9fcad6711c2b456f2e3fcebe0e21db7172aa796974bd119b3734373783e60b40d4cfef231d246360a5aaf20271f666c1c1310f6e3156229115ba0ce0d211b489fd4421c91e471b4c3ec56d427dade377764fb4bd80a8848e9940a8871ae4259a8527e31186f40d0b0a99ce53283070ac6ce9599a"]}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r4}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f00000006c0)=@report={0x1f0, 0x20, 0x8, 0x70bd29, 0x25dfdbfd, {0x6c, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x2, 0x4e20, 0xffc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@policy={0xac, 0x7, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e21, 0x4, 0x4e24, 0x1, 0x2, 0xa0, 0x20, 0x84, 0x0, r4}, {0x0, 0x41f, 0x5, 0x6, 0x0, 0x100000001, 0x80000001, 0x7}, {0xb50, 0x40, 0x2, 0x1f}, 0x3, 0x6e6bb7, 0x0, 0x1, 0x0, 0x1}}, @sa={0xe4, 0x6, {{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e22, 0x2, 0x4e20, 0xffc1, 0x2, 0x60, 0x20, 0x89}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x33}, @in6=@mcast2, {0x890, 0x3, 0x0, 0x3, 0x5, 0x2, 0x2509, 0x1}, {0xad, 0x14, 0xa3, 0x1b}, {0x0, 0xfffffff9, 0x200}, 0x70bd29, 0x3502, 0x2, 0xd3f3e591ed41b74c, 0x8, 0x4a}}, @srcaddr={0x14, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x11}}]}, 0x1f0}}, 0x4000810) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="1d6cfdc04e6e880f235deef0b815b8fca4c6195048afcf64a0b5a3aa581c5431f4248d63b3e14a2fe6f2cb2a819639b271ddfd5e66daa220de6ead2b0cc9040f385af202aa553448b1352e57baf009ad0f8e5061b49c4dd50601609589e8dcac90200df2761020dace637057"]) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:03:54 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x61, 0x1, 0x18, 0x1, 0x0, 0xfffffffffffffff7, 0x8021, 0xb, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0xe402, 0x1, 0x9, 0x3, 0x5, 0x2, 0x7f, 0x0, 0x8, 0x0, 0x8}, 0x0, 0x8, r0, 0x1) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:03:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x6, 0x0) 04:03:54 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:03:54 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="74fe35f600180cb3ac7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB="2c7766b7557af101165ee36900fb13693efc", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = fork() fcntl$setown(0xffffffffffffffff, 0x8, r3) socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 04:03:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x0, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 2090.077232] 9pnet: Insufficient options for proto=fd 04:03:54 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x7, 0x0) [ 2090.126894] 9pnet: Insufficient options for proto=fd 04:04:11 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:04:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r1, 0xfffffffffffffffc, r0, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r3}) r4 = getegid() r5 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0xb, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, r6, 0x1) r7 = getgid() setresgid(0x0, r4, r7) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0xb, r8, 0xfffffffffffffffc, r5, 0x0) r9 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, r8) keyctl$set_timeout(0xf, r9, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:04:11 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x3, 0x0, 0x0, 0xc020, &(0x7f0000000280)=ANY=[@ANYBLOB='vid=', @ANYRESHEX, @ANYBLOB="2c7375626a5f726f6c653d736d61636b6673666c6f6f722c726f6f74636f6e746578743d756e636f6e66696e65645f752c61756469742c7375626a5f747970653d2c736d61636b66736861743d756957f4504dcde0538b7b8b9800dda10bf9642c00"]) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file1/file0\x00', &(0x7f00000000c0)='hostfs\x00', 0x0, &(0x7f00000001c0)='smackfsdef') openat(r0, &(0x7f0000000000)='./file1\x00', 0x22400, 0x20) 04:04:11 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="7ed2909c9f24a900"]) 04:04:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x100000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:11 executing program 1: getegid() semctl$SEM_INFO(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000880)=""/4096) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000440)) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x1}]}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\\&\\^+%))#7\x00', r3) keyctl$revoke(0x3, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp6\x00') ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/182}) unshare(0x48020200) 04:04:11 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x8000) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x8, 0x0) [ 2106.414339] 9pnet: Insufficient options for proto=fd 04:04:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x9, 0x0) 04:04:11 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(r0, 0x0, r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x40}}, './file0/../file0\x00'}) read(r3, &(0x7f00000003c0)=""/4096, 0x1000) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 04:04:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x200000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:11 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001}, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000100), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001800210c000500000000cec9963cfc8efb1dff0000000000"], 0x1c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x35, 0x80, 0x4, 0x0, 0xfffffffffffffffe, 0x400, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x4, 0x2}, 0x5500, 0xfffffffffffffffd, 0xfffffffb, 0x7, 0xffe00000000000, 0xffffffff, 0x7, 0x0, 0x4, 0x0, 0x80}, r3, 0xb, r5, 0x4) 04:04:11 executing program 2: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0xc5, 0x1f, 0x3, 0x6, 0x0, 0x3f, 0x60, 0xf, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000040), 0xc}, 0x40280, 0x8001, 0xf7, 0x9, 0x0, 0x1f, 0xfffe, 0x0, 0x3, 0x0, 0x6}, r2, 0x13, r1, 0x1) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, r2, 0xfbffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="01e855000100000018000000", @ANYRES32, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES16=r4, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX, @ANYRES32], 0x24}}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r9 = accept4$bt_l2cap(r8, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r10, &(0x7f0000000380)='./file0\x00', 0x20000, 0x20) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8982, &(0x7f00000002c0)={0x8, 'batadv_slave_1\x00', {'syzkaller0\x00'}, 0x7ff}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 04:04:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x300000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xa, 0x0) 04:04:11 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x700000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2106.623193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2106.625318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2106.629275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:04:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="8600000000000000042f66696c653000"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)="9088cfc9b6eca9832ce18bf7e3e9f4e6dbb8815a14f8f1ba5ac2c2813127e030726360e56ff86450d83d6403cde8976edd093586384a1611fa7acea7c6eca1f3bedfccd087016ae35298da8cd94fe6fbe1e2c65e121ea3226d4d7a0aa3079f1a9d0d4a15b5e0bcaa8b8484e92ad7f2fbb8f93a9c09e7a45cc535ada1f26163f3718e5f9b", 0x84}], 0x1, 0x5) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="0000a0625b1eb035897f3e00f5c437d3d887f76ceccececeeafb7856d52889998967cc003cec9644c51437e6d56b2fe9196d56daa3f4acbe8d856d0573927ca7fac18b8db6c70b0817343d2a8ad955c1ab7883799f122b7e05c6b9dbadded48c84dfe59fbc437348514e7180c335ed0c4643022b4277e4a215fccf995137d5818f40ab7ec81a5f50316b44f79d18916ad1af27c5919df58c6559249be0ce5dc8638d4e50936b7550279d2c8e1133cfc82276748d"]) 04:04:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:04:27 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB="3141a25e1c98f8edccf133b7da5910ea84461364399ce0b7b5dcc2e380281bd56e65afcd9f0d24e0410b7497d30a6b1c5552eb316251a3dcb93ad50b30651dd4d088917f140050e5b7d46038ac0ab4ac1d583a66a1d390c2c0d5da65be8fca442fa7ae8e4d3d0bfeb5788a048b9e1637081d4182ee58b9759abac95e6c90ada9394132ae6a82434e45d13098a5fc10ba209d08db71d0e860b49031d5b74d0c794b097553f9f5b50afeeffcd8c4ece0a5c363981b30ab93", @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:27 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010000000000000000000000000000ff0200000000000000000000000000018f00907800000000"], 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x10001, 0x3d) r2 = fork() r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0051c2c7a6085d99ede180b92082000000e20f38cf202280ff588a"], 0x1c}}, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000280)="6143c6bfcd893df9587b318cf2f003f5ed0eda8c03c04966fc027883a7979a10d5f699448a6d5a3faeb6990ce5c946f9513a61dae442d4039254892153ac6979d7bd8e72b31eefe6bf62522494f11f", 0x4f}, {&(0x7f0000000300)="5222329748a5dac4dd2f32a54c40edc2ea826d3014dc4ae99361024b6f96afdcd463087a56bf74f55ae35e289f9a1b2826b8eaa8df411ceed48f76ead1faee28dbe4df7307af444925a56f224d8ebfc8e70acf05d93a2f660800ad5953a8bf2a87ba1c", 0x63}], 0x3, 0x0, 0x0, 0x10}, 0x44) wait4(0x0, &(0x7f0000000100), 0x80000004, &(0x7f00000001c0)) ptrace$setopts(0x4206, r2, 0x10001, 0x0) ptrace(0x10, r2) ptrace(0x4208, r2) r5 = fork() tkill(r5, 0x24) ptrace(0x10, r1) r6 = fcntl$getown(r0, 0x9) setpriority(0x2, r6, 0x3) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800fd00", @ANYRES32=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='./file0\x00']) 04:04:27 executing program 2: unshare(0x28020600) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) unshare(0x48020200) 04:04:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xb, 0x0) 04:04:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) [ 2122.754778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 04:04:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x900000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:27 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000002740)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/39, 0x27}, {&(0x7f00000001c0)=""/109, 0x6d}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}}, {{&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/181, 0xb5}], 0x3, &(0x7f0000002500)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000002580), 0x6e, &(0x7f0000002640)=[{&(0x7f0000002600)=""/58, 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/81, 0x51}], 0x1}}], 0x4, 0x0, &(0x7f0000002880)={r3, r4+60000000}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x20020, &(0x7f00000028c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@aname={'aname', 0x3d, 'trans=fd,'}}, {@version_u}]}}) r7 = socket$unix(0x1, 0x5, 0x0) connect$unix(r7, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xc, 0x0) 04:04:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xa00000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:27 executing program 0: sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xb, 0x6, 0x300, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x100000001}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:04:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xd, 0x0) 04:04:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xe, 0x0) 04:04:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xb00000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2137.753126] 9pnet: Could not find request transport: ËXMõ [ 2137.757713] 9pnet: Could not find request transport: ËXMõ [ 2137.776694] SELinux: duplicate or incompatible mount options [ 2137.789215] ieee802154 phy0 wpan0: encryption failed: -22 [ 2137.790578] ieee802154 phy0 wpan0: encryption failed: -22 [ 2137.812477] 9pnet: Insufficient options for proto=fd [ 2137.815828] ieee802154 phy0 wpan0: encryption failed: -22 04:04:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9}, 0x3a) keyctl$set_timeout(0xf, r2, 0x0) r4 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) r5 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x9, 0x1, 0x19, 0x0, 0x5e, 0x40082, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x101, 0x2, @perf_config_ext={0x1}, 0x0, 0x800, 0x0, 0x3, 0x7f, 0x1, 0x0, 0x0, 0x7, 0x0, 0x7}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r5, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r7, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {0xee01, r1}}, './file0\x00'}) 04:04:42 executing program 2: ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000006c0)={0x3, 'batadv0\x00', {0xfffffc01}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r2, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000ac0)={0x218, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT={0x144, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x42}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xb4}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xc}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8000}, 0x81) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname(r1, &(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000800)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0500006a00274e1627bd700000000000000200007b6a79f5d60000001826b10a008cc5d20f7af98b080ccfae5c58d951d6ad049caa76e831d9bfcd2c7cb1d6a696de52"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000ffdbdf25060000000c009900970000000c0000000800050001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x81) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {0x0, 0x0, 0xf00}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="f153bb30503983781c0000006a00274e000000000000000000020000"], 0x1c}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r7) 04:04:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0xf, 0x0) 04:04:42 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733dcb1e584df500d85fbb", @ANYRESHEX=r2, @ANYBLOB="2c4f02bd29402eb25fd34ca5b3298266736e6f3d84dc3158d10253ab47cb836877703a07d1071abcd6d0", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket$unix(0x1, 0x5, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x24a140, 0x63) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x81482, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, 0x0) r3 = dup2(r1, r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r7, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x7f, 0x6, {{0x16, 0x4, 0x1, 0x1, 0x58, 0x65, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop, @timestamp_prespec={0x44, 0x24, 0x8e, 0x3, 0x2, [{@remote, 0x5}, {@local, 0x4}, {@local}, {@remote, 0xbb}]}, @timestamp={0x44, 0x8, 0x53, 0x0, 0x9, [0x61]}, @lsrr={0x83, 0x7, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x88, 0x10, "506623f32d9aa9256f68753adcfd"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r10, &(0x7f0000000040)={0x11, 0x1, r12, 0x1, 0x8, 0x6, @random="190002400a00"}, 0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0xf4, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x20}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000810}, 0x800) 04:04:42 executing program 1: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) writev(r5, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000100)='./file1\x00', &(0x7f0000000380)=@random={'user.', 'version=9p2000'}, &(0x7f00000003c0)=""/171, 0xab) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x6) syz_io_uring_submit(r6, 0x0, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd_index=0x7, 0x6, &(0x7f0000000640)="ab5731c13f29466ea5a687cfa5c21410e1a5aa0a3c546de80dc54541ba7fd9dd9dfb4562658e30856c5744324cf3e44af8fbc16bba97f61e16d4e394e1dd3992d0d0ccf3b5", 0x45, 0x10, 0x1}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000004c0)={r4, 0x8, 0x0, 0x7fff}) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 04:04:42 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) [ 2137.829354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x1000000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:42 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x0, 0x1}, {0x1, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:04:42 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) accept4(r4, 0x0, &(0x7f0000000000), 0x800) 04:04:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x10, 0x0) [ 2137.847849] 9pnet: Insufficient options for proto=fd 04:04:42 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2000000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2137.881926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11832 comm=syz-executor.2 04:04:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xf7, 0x2, 0x7, 0x8, 0x0, 0x3f, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x531a0, 0x200, 0x6, 0x8, 0x4, 0xfff, 0x8, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x1, r0, 0x1) getegid() r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x10001]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x20, 0x7, 0x9, 0x9, 0x0, 0x80000001, 0x89181, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x43068, 0x4, 0x1, 0x5, 0x57, 0x20, 0x1f, 0x0, 0xe766, 0x0, 0x80000001}, 0x0, 0xc, r2, 0x2) r4 = add_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="a89bb2b47a848e4e2ae9f4d954d23e6180cf85aaee39279a8cf87398379d50a65eca091407183bca8b21ec6b1ccee3785e6d8d44769dcdd1b821fd68649ba4b1795bb10a6505151eec681c4ae42ca63d0b93dc5d416d6b6a865a05", 0x5b, r1) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r4) add_key(&(0x7f0000000480)='.request_key_auth\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r3, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2137.916908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:04:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x11, 0x0) 04:04:42 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@seclabel}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '-]'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@obj_role={'obj_role', 0x3d, 'trans=fd,'}}]}}) [ 2137.952214] SELinux: duplicate or incompatible mount options [ 2137.955640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:04:42 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7472616e733dcb1e584df500d85fbb", @ANYRESHEX=r2, @ANYBLOB="2c4f02bd29402eb25fd34ca5b3298266736e6f3d84dc3158d10253ab47cb836877703a07d1071abcd6d0", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket$unix(0x1, 0x5, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x24a140, 0x63) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x2880}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x55c9a261e770281c) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x100000000, 0x2040) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) 04:04:42 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2010000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, r1}}, './file0\x00'}) setresgid(r1, r3, r4) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2138.045541] 9pnet: Could not find request transport: ËXMõ 04:04:58 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0xb6f2, 0x7, &(0x7f0000002640)=[{&(0x7f0000000280)="3ee49fcab72d83bceabc5285102be7a8ae519f209b90261384c60524c9e8e1585c70d5962879fa526b71cc2393b7418c972c645041c0b78123def46f92fe86b575d848ca892d1ceca3745e453f592854d822ee2b587da5fdb1abb95bb8564ee998d1e366c851ccfa33f23d9fa8bf3741e78914aa53561c888ea16da8d17c51fcf32003d6426af4eac4cd182d6006f3d46cd7d04f6a582e2b36a51d5e8c92cd4ad159121ea90222d062159235c6ebf5b26f144fbacfb4720400d19c117b3e2b8280fa53d44dfb6ca08c91b000455a4de527dbc3a483177a2f639dd3e81b518edaec83a38ae93b9f16757007af", 0xec, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0x100000000}, {&(0x7f00000013c0)="2fe350e0d4eb58c03466c571c25f1a1d531eea3f05b3e47325dc1cfbfbfa4e71ed417c7a3ad9631a0e1234c6409cbdad6a463162f9220cab27a64a790ad67e0abb21bc55a036c2d2d2f44a23cf615422cfb498632d053f1f6ec87a6f35a3ead112e90c73c90c99dc92cb8ae0a770bf968fa2f28b6defe32296849a7473a766b8de89499dae43589f2735547f68a9e527c4fdffcd6a7a904118a6f9546c5c5896b086cfd6b1da724503d8bd0a74a2e6d77c5daa43ee52047ecc8b", 0xba, 0x20}, {&(0x7f0000001480)="229fe3fe8b37d4771c64e08108bac7eae5e46d4303610553b6ec19858cba0132bfc27aa9f3b00bf7e569b6cbcf7c47c15ad859d8019e4ab57eac6604c92e0df87eb5e41dee44072abdf57adbf17ebc33f9e3170e21abb7d98f8f83876cc34a526faa3c568dab6dce592e0711447f16a69ddc485130f8b5aa52822e76deb20e367fb983c638b592a20eb8eadb0d5542c35210163f3581432de0647a2cb791435fd7295f9617832172eab153df076b17e374f6364ad622d56a3231cd7d", 0xbc, 0x4}, {&(0x7f0000001540)="093e77e1ede69670cc7d1b9d5d8d0f795da74c7c6e249b2d9965f61b9a1512061f57f6462aef1087d043e43b4aaa739298d5a23400ff223b660943e629e62fafea3c92b60b1802b1f81e0a8d07772dba9ab9f3778bd3b5556e0b74dc7cdf4254018f82d3d62679fccbc9a1c594e16bb1c85f3bebe000f6e69c818f0e869c31d98040b20d6356ec38d744504f8cccb09ecd1b6b320abae8907510b34e00d607a65f676c93741c82d55d09cc47280026588847e4375f31", 0xb6, 0x3f}, {&(0x7f0000001600)="b0ac5302acd22b0efebc376fa835e658639fae2ce0fdaa30e0a40af0a522983d68d6749c47b5", 0x26, 0x7}, {&(0x7f0000001640)="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", 0x1000, 0x7ff}], 0x40000, &(0x7f0000002700)={[{@size={'size', 0x3d, [0x33, 0x78, 0x36]}}, {@size={'size', 0x3d, [0x65, 0x65, 0x36, 0x30]}}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@audit}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, 'rfdno'}}, {@obj_type={'obj_type', 0x3d, '#'}}]}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000080)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 04:04:58 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x8cffffff00000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:04:58 executing program 0: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e0, 0x0, @perf_config_ext={0x1, 0x6}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:04:58 executing program 6: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}}) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x12, 0x0) 04:04:58 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0x7}, 0x7) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x3f, 0x400, 0x0, 0x0, {0x0, 0x2}}, 0x14}}, 0x0) fallocate(r2, 0x18, 0x4, 0x6) fallocate(r1, 0x20, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000008000000000000006c6530009d19b28d"]) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000100)={'netdevsim0\x00', 0xca4}) pipe(&(0x7f0000000140)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800210c000000000000000002cc001f135e13406a104bcee008001e00", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)="d82d365e988ff0e12770eac4fc3139d571e2f7748d623f1da688f4037ea98abcd458bba97bbbf1a7f2d975366e8e30", 0x2f, 0x101}, 0x8001) r6 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x9, 0x5289, 0x0, 0x6, 0x3, 0x0, {0x0, r8}}, 0x6) socket$netlink(0x10, 0x3, 0x0) 04:04:58 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x1, 0x800, 0x800}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:04:58 executing program 2: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r5, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10691020}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004854}, 0x24042000) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x8, 0x0, 0x20, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x40, 0x7fff, 0x1}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, &(0x7f0000000000)='0', 0x80000, 0xfffffffffffffffb) [ 2153.466693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2153.484651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:58 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xf6ffffff00000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2153.513080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:04:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4300, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffffff9) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080), 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0xb, 0x44) 04:04:58 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="38df906e6f3d0000000000000000", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa8, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80010000, 0x7a}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x9, 0x2}, {0x20, 0x7}, {0x3f}, {0x18, 0x6}, {0x1, 0x2}, {0x80, 0x3}, {0x4}, {0x6, 0x5}, {0x93, 0x7}, {0x0, 0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x5}], "37480d8d0cf26127"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x6, 0x3}, {0x5, 0x6}, {0x1, 0x3}, {0x1, 0x1}, {0xe0, 0x4}, {0x80, 0x3}, {0xff, 0x1}], "31dfb7287d84b2f2"}}, @NL80211_ATTR_QOS_MAP={0x16, 0xc7, {[{0x3, 0x2}, {0x82, 0x6}, {0x70, 0x7}, {0x3f, 0x7}, {0x2, 0x4}], "66d859670bdf3c22"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x6, 0x5}, {0x3, 0x6}, {0x80, 0x3}, {0x20, 0x5}, {0x3f, 0x6}, {0x20, 0x6}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x5}, {0xfb, 0x5}, {0x2, 0x5}, {0x3, 0x6}, {0xd8, 0x6}, {0x5, 0x2}, {0x40, 0x6}, {0x1, 0x1}], "169162e84626e721"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40004}, 0x40001) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:04:58 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x13, 0x0) 04:04:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r1, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x48, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x66}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4048081) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c", 0x4000}, 0x48, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, 0x0) getegid() r5 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000380)) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffff01, 0xc000, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xfdef15fce8705f87, 0x7fffffff, 0xee8, 0x4, 0x10000, 0x9, 0x5836, 0x0, 0x7ff, 0x0, 0x5}, r6, 0x7, r7, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f00000004c0)=ANY=[@ANYBLOB="d5f8459dc1e4acb3f3ffded98c08d53d3808e7a05685437ddc97f0dd332f1885f59da176fdf5730d5e8cc78e0d5a7c490ce01ff0c1b8187efda699da93e7335d03622a15f5757d95c978f19e08cfbe219cbb8465c23ce7b42c40c841e7ed8f3bc1fe1460b5fb95974dbd7a6fa25ccf3a09ab3e692f9a8a9b496166f76abe207269", @ANYRES32=r3, @ANYBLOB="00240000000000002e2f666974818a6f98279113b6fab16e2e7b6c651dfc1f463000"]) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r8, 0x100) request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)='user\x00', r4) add_key$keyring(&(0x7f00000002c0), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) [ 2153.586486] 9pnet: Insufficient options for proto=fd 04:04:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x2020, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) close_range(r1, r0, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r2 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x8001, 0x4) add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000001300)={'fscrypt:', @desc4}, &(0x7f0000001340)={0x0, "0ce94ebfc19fc575b93c20195346a8fb6080faea883e9ae1cc2b0a1280631112901f85624f2c82f1a8b311a4f8467203c7df81e370ac047d7dfeb0605831ddcc", 0x1d}, 0x48, r3) add_key$keyring(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r5) r6 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, r6, 0xa) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1c7a02, 0x0) unshare(0x48020200) [ 2153.589969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=618 sclass=netlink_route_socket pid=11908 comm=syz-executor.6 [ 2153.604910] 9pnet: Insufficient options for proto=fd 04:04:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x1ff, 0x7fff, 0xa) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000003f00274eb600000000000000fc000000e3001f804648d50279f7bafcef3d1b4f4287c4b44d2090daa62ebf668577c2c690a2170c65ca234467a345804bb703716beac3ad57e24b66bbfb590800780001000100078ff14f6c0141fa16ca17ed6f11ecdee4150c474fda4508ffec28a09e62083d588d9bb7888a8905d883adb8068198472fe73f5b1ceccc5b80cb5d7c2b45ced4d800208eeedbe4586524fffd0bec186369bf05040210b05037fe80eb83e0b59c7ddca9d93fd0517d02451cd5308d073897bf21580d4da7045e6602e18747a57ed3f5c5c83abd568877265eb31d00b20ae9b78b42b82382f25ce380c9"], 0xf8}}, 0x0) [ 2153.610416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=618 sclass=netlink_route_socket pid=11908 comm=syz-executor.6 [ 2153.636917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=11915 comm=syz-executor.1 [ 2153.644238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11918 comm=syz-executor.2 04:04:58 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0xffff000000000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2153.651755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=11920 comm=syz-executor.2 04:05:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="8900"]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/ip6_tables_names\x00') setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000280)=0x80000001, 0x4) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, &(0x7f0000000140)='wfdno') 04:05:12 executing program 1: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20044, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xd}, 0x0, 0x0, 0x3, 0x7, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') timerfd_settime(r0, 0x0, &(0x7f0000000000), &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/pps', 0x82000, 0x26) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xff, 0x5, 0x4, 0x3, 0x0, 0x10000, 0x84390, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000140)}, 0x1, 0x5, 0x3, 0x5, 0x0, 0xfffffe01, 0x401, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xb, r1, 0x1) readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) timerfd_gettime(r0, &(0x7f0000000200)) getpgrp(0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0) timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000100)) creat(&(0x7f0000000240)='./file0\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) timerfd_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x3938700}}, &(0x7f0000000380)) unshare(0x48020200) 04:05:12 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x1, 0x2, 0x5, 0x6, 0x3, 0x3, 0x3f, 0x1aa, 0x40, 0x394, 0x7fff, 0x3f, 0x38, 0x2, 0x8, 0x9558, 0x401}, [{0x5, 0x4227, 0x3f, 0xfffffffffffffff8, 0x6, 0x5, 0x5, 0x1ff}, {0x1, 0x7, 0x2, 0x4a, 0x5, 0xf2, 0x3, 0x3ff}], "2225c22a308fb3cd4d2a2bf3b1c3ce6cff8add553bd1bcd88ea009be5e502df059dee2d402374e2013096b5c3a39418ae71fcf507bace0f133f6630bddc6ccdf770023051fb1f309e3d4dcb198d1c9a1a76afc0db04a0ab6da", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa09) [ 2168.138111] 9pnet: Insufficient options for proto=fd [ 2168.140954] devtmpfs: Unknown parameter 'wfdno' [ 2168.143343] 9pnet: Insufficient options for proto=fd 04:05:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5e, 0x2b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x9, 0xffffffffffffffff, 0x1) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="cc", 0x1, r1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r2, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:05:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x14, 0x0) 04:05:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8000, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) syz_io_uring_setup(0x283d, &(0x7f0000000000)={0x0, 0x90fe, 0x10, 0x0, 0x286, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x4}], 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x208302) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0xbc, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@nested={0xa8, 0x33, 0x0, 0x1, [@typed={0x8, 0x42, 0x0, 0x0, @uid}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0x2}, @generic="fa31f9c2643d1c38", @generic="310cae030420d88c46ae2c38e22ff0b131a2bf3af1da989678ab99925aa287ea6d25b4865dea16353b009756eb5ca9899201e9cb1527ed94d4a92e850c8c64a20685", @generic="8a649d312689bcaa4da73db2391156e6e811979c934e75dc1e287f85a21369f19cca26ec01ee02ca43eddcb027b5451c83268e0bcee9a37eec616fab3eb3e3bd3e9233080d18", @typed={0x4, 0x28}]}]}, 0xbc}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x4010, r3, 0x0) 04:05:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x1, 0x800, 0x800}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:05:12 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x22, r2}, 0x2c, {'wfdno', 0x3d, r0}}) [ 2168.180884] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2168.194606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2168.197408] 9pnet: Insufficient options for proto=fd 04:05:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x15, 0x0) 04:05:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 2168.205600] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. 04:05:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r2 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000040)="a3", 0x1, r1) keyctl$set_timeout(0xf, r2, 0x0) keyctl$revoke(0x3, r1) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:05:12 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7}, 0x7) fallocate(r2, 0x20, 0x0, 0x8000) fallocate(r1, 0x0, 0x0, 0x8000) fallocate(r0, 0x20, 0x2000, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5ff, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000080)={0x7, 0x1b, 0x2}, 0x7) 04:05:12 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x2c, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 04:05:12 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000000)={0x7, 0x9}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 04:05:13 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {0x1, 0x800, 0x800}], 0x3) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:05:13 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x16, 0x0) [ 2168.295700] 9pnet: Insufficient options for proto=fd [ 2168.317565] 9pnet: Insufficient options for proto=fd [ 2168.324108] 9pnet: Insufficient options for proto=fd [ 2168.986923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 04:05:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3f, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:05:27 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x2008002, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '9p\x00'}}, {@msize={'msize', 0x3d, 0x10001}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '9p\x00'}}, {@fsname={'fsname', 0x3d, '9p\x00'}}, {@smackfsdef}, {@permit_directio}]}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) r7 = syz_open_pts(r4, 0x4003) fallocate(r7, 0x5c, 0x6, 0x2008000000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000006a0027510000000000000000000200007b6a7912d70000009c0f22a1531a3a3fe85aa82eab8973a9e0480f28de159b7d3d61c72c42d143f6eb87cf9a749a6112f5181a7019d90760a608778ed12e6a4209ced732320cccde1eff39"], 0x1c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES16=r5, @ANYBLOB="6879e3e8ade37c7fc1dd2644646c3c1d6141ec6a6a82b81367e6a63945584b18cc51d9c440579ea42b8d26ef6f520943197694150120374ca37f3c2cb88648fcc7939bb0aa9de826b9b8312754f64af0680e4725ece7e34cb0b74707275cf4c2d985ec365625161793d54aff", @ANYRESDEC=r8, @ANYRESHEX=r6]) 04:05:27 executing program 6: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) 04:05:27 executing program 2: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r3, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7530dce4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffb}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4044000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbf1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) 04:05:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x17, 0x0) 04:05:27 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x204000, 0x15) openat(r0, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write(r1, &(0x7f0000000240)="01", 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000a80)={0x101000, 0x1, 0xd}, &(0x7f0000000e80)='./file1\x00', 0x18, 0x0, 0x12345}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) [ 2182.845825] 9pnet: Insufficient options for proto=fd [ 2182.851784] 9pnet: Insufficient options for proto=fd [ 2182.853178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file1\x00', 0xfffffffffffffffe, 0xa, &(0x7f0000000d40)=[{&(0x7f0000000440)="60377ee2a46472e76f7b9b8abbc606e7586720fe551907d505e013765484a2b7035f9e3f62a0cbfe4c04eef02d8a3e7cec5dcd91a843aa5a172be9e149a0596e12ce6cac2dfa4132595b75333b71ba87a977038f4048e6c479a941fb93124a8948cb21642492a8ed0f0f86365cd7ef5829c9457e7f27a9e911c65cebe81b14cfac46265308532e68e363fbcab2265a903f1111b3a94f", 0x96, 0x600000000}, {&(0x7f0000000940)="1df0607b22caa6f83baf", 0xa, 0x7200000000}, {&(0x7f0000000980)="45da76b074ffd2e7274cdda899e1d94efe4734b2291a665cf1d75d25c70ce056e50f2d257ea0f2e34a6eea474746a41810bd88aa92a88f58dd9c28465db9d523e78b7eec10b412647de52f8fa574cd72474f0e2f3e06", 0x56, 0xd73}, {&(0x7f0000000a00)="b2c00ab0a7a9e518344a3c92e45417dc7423fd1a20c8572b382f115b8b1426850bf6d3c6ac2d2260070f68bf5bcb05a52ff828c3a2cb237617b4f70e96b1581728bc33a860b1f8aa5567bbfc1906599f123906616efad57dc941202a6870046eea573cfd3980e724545772f3f78dace676a92f841e0a", 0x76, 0x3}, {&(0x7f0000000a80), 0x0, 0x4}, {&(0x7f0000000ac0)="bf94ab8808a521fffc9b673b358fd61142362bff7db91321c713fedca02874fcf91485d9465c47a6b6b8863f82d9a0e25a0626dcf965f6d2a6d6dbb27d5e9b08388b230bc289875c034292fe18c7360b698ce1a35253fa929df74c4197d9a90f59e349e1998cf7d28151a87d308a3aa7a1c32d519270db7e39a38d6efc1ea54188e2280ced660d2a806f2c0c94a3f32f737c20c586c54fd5ad2bfabdd2ef9b2faf797b27106a99f2e011c1378a5bb12cd5a921d1de27327bd0472ecc69931011", 0xc0, 0xf1a}, {&(0x7f0000000b80)="55bd89102cae43ea6cbeb03cbf221d175c73a6e73ee674e54f592081457fc9a7d3a439e9a341eb29ae7162d044d0c18836f090d0c05b6eff532702220da60ec949cae68b63a235f3d01d43904e99028cdbaf21fa0880523ec93d4a0701df432b3791858e38848330715cc89f8611ec3437ade96bea673f45", 0x78, 0xf6f2}, {&(0x7f0000001380)="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", 0x1000, 0x3}, {&(0x7f0000000c00)="aebcec85e00017bd320a57194723161f7b313dacc242f828df2eae45a3e5b6a1c40d82a6c10ab4a601b83890ce06800107f33be1a9d8defb61c235d05c93f6543175fc293e1a5c2972dc6a9d91562a7d027a7cd98bc30b7ee8158aa803b499387d4cbfac48611da68aead77de5631ad1129f1dc31b414e08208861b4be83633d9908b531ced4886f36736f492730b736d5c7ff8ba39a177d6ef878108cb56a60e0d4feb7e040f604ad5df244d873cabfa6b6707f4c60", 0xb6, 0x2}, {&(0x7f0000000cc0)="0684cef6fe2ab611dc4a98640edc12333f9e020b8f88e4797075d2b51fd15f37d0b68a09f924f04663c09f475875f6b40cea8f4fb3592221cb108fecc8995dba83adb3c3bc830d4ee55cb1f84062110954b62fc06aa4b76dd54a6054bfe3fa36042f10b5a962a7878d8ea7d127da0edf2590c07b", 0x74, 0xfffffffffffffffd}], 0x1000004, &(0x7f0000000e40)={[{@map_normal}], [{@subj_role={'subj_role', 0x3d, '#\\&}[\x1e'}}, {@smackfsdef={'smackfsdef', 0x3d, '$\\}'}}, {@appraise}]}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1c0000001a00000100000000fedbdf25020008000800ef00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0xd4) openat(r4, &(0x7f00000002c0)='./file1\x00', 0x62c840, 0x1e5) r5 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(r5, &(0x7f0000000140), 0x0, 0x20, &(0x7f00000001c0)={r6, r7+60000000}) r8 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r8, 0x0, r2, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) 04:05:27 executing program 7: perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x1, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semop(r1, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x7, 0x3800}, {0x2, 0x9, 0x800}, {}, {0x1, 0x800, 0x800}], 0x4) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000002c0)=""/191) semop(r0, &(0x7f00000000c0), 0x0) clock_gettime(0x1, &(0x7f0000000040)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0xf000}], 0x1, &(0x7f0000000080)={0x0, r2+10000000}) r3 = semget$private(0x0, 0x1, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semop(0x0, &(0x7f00000010c0)=[{0x0, 0x57f2}], 0x1) r4 = semget(0x3, 0x0, 0x580) r5 = semget(0x1, 0x2, 0x20) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000200)=""/147) semctl$IPC_RMID(r4, 0x0, 0x0) semtimedop(r4, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) r6 = semget$private(0x0, 0x1, 0x2a2) semctl$IPC_RMID(r6, 0x0, 0x0) 04:05:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x22, {'wfdno', 0x3d, r0}}) [ 2182.858422] 9pnet: Insufficient options for proto=fd [ 2182.859792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2182.862541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2182.872888] 9pnet: Insufficient options for proto=fd [ 2182.892400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2182.899942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:27 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x22, r0}}) 04:05:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x18, 0x0) 04:05:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) getegid() r1 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x5}, {0x0}], 0x0, &(0x7f0000000040)=ANY=[]) 04:05:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @loopback}}}}], 0x28}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x48, 0x1e, 0xc21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x2c, 0x4d, 0x0, 0x1, [@typed={0x14, 0x27, 0x0, 0x0, @ipv6=@local}, @generic="72298b389d3868e3b2066b26339936e732fc96e8"]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48080}, 0x0) [ 2182.952077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 04:05:27 executing program 5: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) close(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 2182.999080] 9pnet: Insufficient options for proto=fd 04:05:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa42, 0x22) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000)="d9", 0x1}]) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x6a, 0x878c5bf8df414e27, 0x0, 0x0, {0x0, 0x2}, [@generic="7b6a7912d7"]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f0000000040)={0x1, 0x100000001}) io_setup(0x2, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x10, 0x1, 0x0, r2, &(0x7f0000000240)="1b", 0x1}]) 04:05:27 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x19, 0x0) [ 2183.107969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2183.171584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. VM DIAGNOSIS: 13:28:14 Registers: info registers vcpu 0 RAX=ffffffff83e7b910 RBX=0000000000000000 RCX=ffffffff83e634ec RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7bf18 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677708 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7b91e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffffc90000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8cdb33b010 CR3=000000000d818000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041666dad00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e7b910 RBX=0000000000000001 RCX=ffffffff83e634ec RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7bf18 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677708 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7b91e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055782b12e52c CR3=000000000d818000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=008602fe016c6c6f502e726567616e61 XMM02=73616d7320636578650a0a0100010101 XMM03=7473657220726f747563657865110068 XMM04=09006e65672063657865080073747261 XMM05=20636578650e007a7a75662063657865 XMM06=20636578650a006574616469646e6163 XMM07=61746f7420636578650a007364656573 XMM08=726f74756365786511006873616d7320 XMM09=20636578650800737472617473657220 XMM10=0e007a7a7566206365786509006e6567 XMM11=0a006574616469646e61632063657865 XMM12=636578650a0073646565732063657865 XMM13=69727420636578650b006c61746f7420 XMM14=696d696e696d20636578650d00656761 XMM15=000073746e696820636578650a00657a