ure. [ 2230.571588] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.573109] CPU: 0 PID: 11131 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2230.573893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.574840] Call Trace: [ 2230.575146] dump_stack+0x107/0x167 [ 2230.575557] should_fail.cold+0x5/0xa [ 2230.576000] ? __alloc_skb+0x6d/0x5b0 [ 2230.576433] ? __alloc_skb+0x6d/0x5b0 [ 2230.576870] should_failslab+0x5/0x20 [ 2230.577301] kmem_cache_alloc_node+0x55/0x330 [ 2230.577809] __alloc_skb+0x6d/0x5b0 [ 2230.578229] alloc_skb_with_frags+0x92/0x570 [ 2230.578734] ? quarantine_put+0x8b/0x1a0 [ 2230.579195] ? kmem_cache_free+0xa7/0x2d0 [ 2230.579665] sock_alloc_send_pskb+0x7af/0x930 [ 2230.580177] ? sk_alloc+0x350/0x350 [ 2230.580598] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2230.581194] ? __local_bh_enable_ip+0x9d/0x100 [ 2230.581709] ? trace_hardirqs_on+0x5b/0x180 [ 2230.582200] ? __dev_queue_xmit+0xdf8/0x2690 [ 2230.582706] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2230.583273] ? ip6_mtu+0x1bb/0x3d0 [ 2230.583691] ? lock_downgrade+0x6d0/0x6d0 [ 2230.584159] ? ip_frag_init+0x350/0x350 [ 2230.584610] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2230.585157] ? ip6_mtu+0x1e9/0x3d0 [ 2230.585558] ? ip6_setup_cork+0xfb7/0x1740 [ 2230.586035] ip6_make_skb+0x2de/0x4e0 [ 2230.586472] ? ip_frag_init+0x350/0x350 [ 2230.586932] ? ip_frag_init+0x350/0x350 [ 2230.587383] ? ip6_push_pending_frames+0xf0/0xf0 [ 2230.587923] ? ip6_dst_check+0x389/0x8d0 [ 2230.588383] ? sk_dst_check+0x235/0x4c0 [ 2230.588838] udpv6_sendmsg+0x20d3/0x2ad0 [ 2230.589300] ? ip_frag_init+0x350/0x350 [ 2230.589762] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.590347] ? perf_event_task_disable+0x390/0x390 [ 2230.590917] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2230.591462] ? lock_acquire+0x197/0x470 [ 2230.591907] ? find_held_lock+0x2c/0x110 [ 2230.592372] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.592958] ? sock_has_perm+0x1ea/0x280 [ 2230.593429] ? __import_iovec+0x458/0x590 [ 2230.593901] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.594491] inet6_sendmsg+0x105/0x140 [ 2230.594937] ? inet6_compat_ioctl+0x320/0x320 [ 2230.595444] __sock_sendmsg+0xf2/0x190 [ 2230.595883] ____sys_sendmsg+0x334/0x870 [ 2230.596346] ? sock_write_iter+0x3d0/0x3d0 [ 2230.596834] ? do_recvmmsg+0x6d0/0x6d0 [ 2230.597274] ? __lock_acquire+0x1657/0x5b00 [ 2230.597773] ___sys_sendmsg+0xf3/0x170 [ 2230.598218] ? sendmsg_copy_msghdr+0x160/0x160 [ 2230.598750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.599348] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2230.599853] ? trace_hardirqs_on+0x5b/0x180 [ 2230.600345] ? lock_acquire+0x197/0x470 [ 2230.600798] ? find_held_lock+0x2c/0x110 [ 2230.601260] ? __might_fault+0xd3/0x180 [ 2230.601710] ? lock_downgrade+0x6d0/0x6d0 [ 2230.602181] ? io_schedule_timeout+0x140/0x140 [ 2230.602717] __sys_sendmmsg+0x195/0x470 [ 2230.603169] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2230.603663] ? lock_downgrade+0x6d0/0x6d0 [ 2230.604142] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2230.604689] ? wait_for_completion_io+0x270/0x270 [ 2230.605240] ? rcu_read_lock_any_held+0x75/0xa0 [ 2230.605769] ? vfs_write+0x354/0xb10 [ 2230.606190] ? fput_many+0x2f/0x1a0 [ 2230.606618] ? ksys_write+0x1a9/0x260 [ 2230.607053] ? __ia32_sys_read+0xb0/0xb0 [ 2230.607524] __x64_sys_sendmmsg+0x99/0x100 [ 2230.608002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.608595] do_syscall_64+0x33/0x40 [ 2230.609028] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2230.609607] RIP: 0033:0x7f6413bdcb19 [ 2230.610035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.612130] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2230.612993] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2230.613811] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2230.614628] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.615437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.616248] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2230.620226] FAT-fs (loop4): Directory bread(block 10) failed [ 2230.622003] FAT-fs (loop4): Directory bread(block 11) failed 01:31:45 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 25) 01:31:45 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 44) 01:31:45 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xff03, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:31:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x3, 0x3f}}, './file0/file0\x00'}) write$P9_RCLUNK(r1, 0x0, 0x0) 01:31:45 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00000001300000125bd7000fedbdf2526ff09044e214e2401000080ff03000001010000090000007f000093e39a4600060000003f000000", @ANYRES32=0x0, @ANYBLOB="20000000000800000200000007000000a20001005acb1998ef279647309011b0fb494d9ef529989b5f6579db1b45a8ae9e89dc319f8011b8560ce3e60d108cfa5271b36a95ea1c1995ca2a791e7aacc3a42aa0d6e782fe571f4338f489ac978ef416342a67007b3f78ad1b401c83f751b06a8e3a8e0f4e981b99272957b61a52f89759b3f5fff5242ab30abffc3b354c8b2899be27e8f7cf232173af7c4baf010d199a76f9e2d341f3f4e9b2c92b1fe0ecc90000"], 0xf0}, 0x1, 0x0, 0x0, 0x2000c815}, 0x20008041) [ 2230.725403] FAULT_INJECTION: forcing a failure. [ 2230.725403] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.726926] CPU: 0 PID: 11136 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2230.727704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.728638] Call Trace: [ 2230.728939] dump_stack+0x107/0x167 [ 2230.729350] should_fail.cold+0x5/0xa [ 2230.729778] ? create_object.isra.0+0x3a/0xa20 [ 2230.730290] ? create_object.isra.0+0x3a/0xa20 [ 2230.730816] should_failslab+0x5/0x20 [ 2230.731244] kmem_cache_alloc+0x5b/0x310 [ 2230.731702] create_object.isra.0+0x3a/0xa20 [ 2230.732198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2230.732771] kmem_cache_alloc_node+0x169/0x330 [ 2230.733286] __alloc_skb+0x6d/0x5b0 [ 2230.733704] alloc_skb_with_frags+0x92/0x570 [ 2230.734196] ? quarantine_put+0x8b/0x1a0 [ 2230.734660] ? kmem_cache_free+0xa7/0x2d0 [ 2230.735125] sock_alloc_send_pskb+0x7af/0x930 [ 2230.735631] ? sk_alloc+0x350/0x350 [ 2230.736042] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2230.736662] ? __ip6_append_data.isra.0+0x19ae/0x3a70 [ 2230.737242] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2230.737814] ? ip6_mtu+0x1bb/0x3d0 [ 2230.738219] ? lock_downgrade+0x6d0/0x6d0 [ 2230.738704] ? ip_frag_init+0x350/0x350 [ 2230.739156] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2230.739703] ? ip6_mtu+0x1e9/0x3d0 [ 2230.740101] ? ip6_setup_cork+0xfb7/0x1740 [ 2230.740574] ip6_make_skb+0x2de/0x4e0 [ 2230.741004] ? ip_frag_init+0x350/0x350 [ 2230.741463] ? ip_frag_init+0x350/0x350 [ 2230.741914] ? ip6_push_pending_frames+0xf0/0xf0 [ 2230.742452] ? ip6_dst_check+0x389/0x8d0 [ 2230.742924] ? sk_dst_check+0x235/0x4c0 [ 2230.743376] udpv6_sendmsg+0x20d3/0x2ad0 [ 2230.743843] ? ip_frag_init+0x350/0x350 [ 2230.744301] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.744890] ? perf_event_task_disable+0x390/0x390 [ 2230.745441] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2230.745990] ? lock_acquire+0x197/0x470 [ 2230.746437] ? find_held_lock+0x2c/0x110 [ 2230.746915] ? sock_has_perm+0x1ea/0x280 [ 2230.747383] ? __import_iovec+0x458/0x590 [ 2230.747849] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.748439] inet6_sendmsg+0x105/0x140 [ 2230.748876] ? inet6_compat_ioctl+0x320/0x320 [ 2230.749384] __sock_sendmsg+0xf2/0x190 [ 2230.749817] ____sys_sendmsg+0x334/0x870 [ 2230.750284] ? sock_write_iter+0x3d0/0x3d0 [ 2230.750777] ? do_recvmmsg+0x6d0/0x6d0 [ 2230.751226] ? find_held_lock+0x2c/0x110 [ 2230.751686] ___sys_sendmsg+0xf3/0x170 [ 2230.752124] ? sendmsg_copy_msghdr+0x160/0x160 [ 2230.752643] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2230.753230] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2230.753745] ? trace_hardirqs_on+0x5b/0x180 [ 2230.754250] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2230.754773] ? finish_task_switch+0x126/0x5d0 [ 2230.755276] ? finish_task_switch+0xef/0x5d0 [ 2230.755777] ? __switch_to+0x572/0xf70 [ 2230.756211] ? __switch_to_asm+0x3a/0x60 [ 2230.756676] ? __switch_to_asm+0x34/0x60 [ 2230.757134] ? __schedule+0x82c/0x1ea0 [ 2230.757574] ? io_schedule_timeout+0x140/0x140 [ 2230.758097] __sys_sendmmsg+0x195/0x470 [ 2230.758548] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2230.759049] ? lock_downgrade+0x6d0/0x6d0 [ 2230.759522] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2230.760072] ? wait_for_completion_io+0x270/0x270 [ 2230.760617] ? rcu_read_lock_any_held+0x75/0xa0 [ 2230.761149] ? vfs_write+0x354/0xb10 [ 2230.761566] ? fput_many+0x2f/0x1a0 [ 2230.761979] ? ksys_write+0x1a9/0x260 [ 2230.762404] ? __ia32_sys_read+0xb0/0xb0 [ 2230.762878] __x64_sys_sendmmsg+0x99/0x100 [ 2230.763358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.763950] do_syscall_64+0x33/0x40 [ 2230.764379] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2230.764953] RIP: 0033:0x7f6413bdcb19 [ 2230.765376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.767472] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2230.768329] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2230.769130] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2230.769939] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.770759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.771561] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:31:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xff01, 0x8000) [ 2230.819167] FAULT_INJECTION: forcing a failure. [ 2230.819167] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.821847] CPU: 1 PID: 11140 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2230.823396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2230.825240] Call Trace: [ 2230.825842] dump_stack+0x107/0x167 [ 2230.826673] should_fail.cold+0x5/0xa [ 2230.827540] should_failslab+0x5/0x20 [ 2230.828405] __kmalloc_node_track_caller+0x74/0x3b0 [ 2230.829520] ? skb_copy+0x183/0x350 [ 2230.830344] __alloc_skb+0xb1/0x5b0 [ 2230.831172] skb_copy+0x183/0x350 [ 2230.831959] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2230.833295] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2230.834455] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2230.835742] ? lock_acquire+0x160/0x470 [ 2230.836630] ? find_held_lock+0x2c/0x110 [ 2230.837551] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2230.838700] mac80211_hwsim_tx+0x574/0x12a0 [ 2230.839675] ? trace_hardirqs_on+0x5b/0x180 [ 2230.840650] ieee80211_tx_frags+0x59c/0x9f0 [ 2230.841633] ? fq_skb_free_func+0x20/0x20 [ 2230.842582] __ieee80211_tx+0x1ad/0x640 [ 2230.843503] ieee80211_tx+0x329/0x410 [ 2230.844361] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2230.845499] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2230.846839] ? ieee80211_skb_resize+0x116/0x630 [ 2230.847890] ieee80211_xmit+0x220/0x2a0 [ 2230.848791] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2230.849956] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2230.851121] ieee80211_subif_start_xmit+0xef/0xf70 [ 2230.852226] ? lock_chain_count+0x20/0x20 [ 2230.853155] ? skb_crc32c_csum_help+0x80/0x80 [ 2230.854161] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2230.855371] ? lock_acquire+0x197/0x470 [ 2230.856257] ? sch_direct_xmit+0x31a/0x790 [ 2230.857213] ? lock_release+0x680/0x680 [ 2230.858119] dev_hard_start_xmit+0x1cb/0x6f0 [ 2230.859132] sch_direct_xmit+0x25f/0x790 [ 2230.860064] ? lock_acquire+0x197/0x470 [ 2230.860974] ? find_held_lock+0x2c/0x110 [ 2230.861905] ? dev_watchdog+0xbc0/0xbc0 [ 2230.862824] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2230.863864] __qdisc_run+0x4aa/0x1570 [ 2230.864753] __dev_queue_xmit+0xd43/0x2690 [ 2230.865717] ? ip6_finish_output2+0x158f/0x1cf0 [ 2230.866792] ? find_held_lock+0x2c/0x110 [ 2230.867721] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2230.868767] ? lock_downgrade+0x6d0/0x6d0 [ 2230.869711] ? do_softirq+0x53/0xc0 [ 2230.870537] ? trace_hardirqs_on+0x5b/0x180 [ 2230.871543] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2230.872744] ip6_finish_output2+0x158f/0x1cf0 [ 2230.873784] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2230.874939] ip6_output+0x3b8/0x7e0 [ 2230.875785] ip6_local_out+0xb4/0x1a0 [ 2230.876659] ip6_send_skb+0x112/0x460 [ 2230.877538] udp_v6_send_skb+0x7aa/0x15b0 [ 2230.878505] udpv6_sendmsg+0x2116/0x2ad0 [ 2230.879446] ? ip_frag_init+0x350/0x350 [ 2230.880367] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.881557] ? perf_event_task_disable+0x390/0x390 [ 2230.882692] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2230.883801] ? lock_acquire+0x197/0x470 [ 2230.884713] ? find_held_lock+0x2c/0x110 [ 2230.885661] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2230.886908] ? sock_has_perm+0x1ea/0x280 [ 2230.887866] ? __import_iovec+0x458/0x590 [ 2230.888818] ? udp_v6_push_pending_frames+0x360/0x360 [ 2230.890003] inet6_sendmsg+0x105/0x140 [ 2230.890905] ? inet6_compat_ioctl+0x320/0x320 [ 2230.891927] __sock_sendmsg+0xf2/0x190 [ 2230.892821] ____sys_sendmsg+0x334/0x870 [ 2230.893756] ? sock_write_iter+0x3d0/0x3d0 [ 2230.894728] ? do_recvmmsg+0x6d0/0x6d0 [ 2230.895622] ? __lock_acquire+0x1657/0x5b00 [ 2230.896626] ___sys_sendmsg+0xf3/0x170 [ 2230.897519] ? sendmsg_copy_msghdr+0x160/0x160 [ 2230.898563] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2230.899597] ? _raw_spin_unlock_irq+0x27/0x30 [ 2230.900633] ? lock_acquire+0x197/0x470 [ 2230.901541] ? find_held_lock+0x2c/0x110 [ 2230.902477] ? __might_fault+0xd3/0x180 [ 2230.903394] ? lock_downgrade+0x6d0/0x6d0 [ 2230.904348] ? io_schedule_timeout+0x140/0x140 [ 2230.905413] __sys_sendmmsg+0x195/0x470 [ 2230.906329] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2230.907324] ? lock_downgrade+0x6d0/0x6d0 [ 2230.908297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2230.909407] ? wait_for_completion_io+0x270/0x270 [ 2230.910517] ? rcu_read_lock_any_held+0x75/0xa0 [ 2230.911588] ? vfs_write+0x354/0xb10 [ 2230.912443] ? fput_many+0x2f/0x1a0 [ 2230.913277] ? ksys_write+0x1a9/0x260 [ 2230.914150] ? __ia32_sys_read+0xb0/0xb0 [ 2230.915102] __x64_sys_sendmmsg+0x99/0x100 [ 2230.916069] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2230.917243] do_syscall_64+0x33/0x40 [ 2230.918096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2230.919275] RIP: 0033:0x7f9d078eeb19 [ 2230.920127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2230.924337] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2230.926365] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2230.928208] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2230.929853] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2230.931456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2230.933045] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2230.987198] FAT-fs (loop4): Directory bread(block 10) failed [ 2230.987988] FAT-fs (loop4): Directory bread(block 11) failed [ 2230.989820] FAT-fs (loop4): Directory bread(block 10) failed [ 2230.991701] FAT-fs (loop4): Directory bread(block 11) failed [ 2230.993903] FAT-fs (loop4): Directory bread(block 10) failed [ 2230.994931] FAT-fs (loop4): Directory bread(block 11) failed 01:31:59 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x30000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:31:59 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 45) 01:31:59 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x10, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:31:59 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:31:59 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x80000) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:31:59 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:31:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x80000, 0x8000) 01:31:59 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 26) [ 2244.775762] FAULT_INJECTION: forcing a failure. [ 2244.775762] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.781991] CPU: 0 PID: 11174 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2244.783340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2244.784897] Call Trace: 01:31:59 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') [ 2244.785419] dump_stack+0x107/0x167 [ 2244.786452] should_fail.cold+0x5/0xa [ 2244.787248] should_failslab+0x5/0x20 [ 2244.788009] __kmalloc_node_track_caller+0x74/0x3b0 [ 2244.788994] ? alloc_skb_with_frags+0x92/0x570 [ 2244.789904] __alloc_skb+0xb1/0x5b0 [ 2244.790633] alloc_skb_with_frags+0x92/0x570 [ 2244.791505] ? quarantine_put+0x8b/0x1a0 [ 2244.792303] ? kmem_cache_free+0xa7/0x2d0 [ 2244.793122] sock_alloc_send_pskb+0x7af/0x930 [ 2244.794004] ? sk_alloc+0x350/0x350 [ 2244.794723] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2244.795748] ? __local_bh_enable_ip+0x9d/0x100 [ 2244.796640] ? trace_hardirqs_on+0x5b/0x180 [ 2244.797494] ? __dev_queue_xmit+0xdf8/0x2690 [ 2244.798371] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2244.799365] ? ip6_mtu+0x1bb/0x3d0 [ 2244.800068] ? lock_downgrade+0x6d0/0x6d0 [ 2244.800881] ? ip_frag_init+0x350/0x350 [ 2244.801661] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2244.802603] ? ip6_mtu+0x1e9/0x3d0 [ 2244.803317] ? ip6_setup_cork+0xfb7/0x1740 [ 2244.804142] ip6_make_skb+0x2de/0x4e0 [ 2244.804880] ? ip_frag_init+0x350/0x350 [ 2244.805662] ? ip_frag_init+0x350/0x350 [ 2244.806452] ? ip6_push_pending_frames+0xf0/0xf0 [ 2244.807242] ? ip6_dst_check+0x389/0x8d0 [ 2244.807819] ? sk_dst_check+0x235/0x4c0 [ 2244.808373] udpv6_sendmsg+0x20d3/0x2ad0 [ 2244.809008] ? ip_frag_init+0x350/0x350 [ 2244.809613] ? udp_v6_push_pending_frames+0x360/0x360 [ 2244.810394] ? lock_acquire+0x197/0x470 [ 2244.810988] ? find_held_lock+0x2c/0x110 [ 2244.811602] ? sock_has_perm+0x1ea/0x280 [ 2244.812224] ? __import_iovec+0x458/0x590 [ 2244.812832] ? udp_v6_push_pending_frames+0x360/0x360 [ 2244.813590] inet6_sendmsg+0x105/0x140 [ 2244.814160] ? inet6_compat_ioctl+0x320/0x320 [ 2244.814820] __sock_sendmsg+0xf2/0x190 [ 2244.815402] ____sys_sendmsg+0x334/0x870 [ 2244.816002] ? sock_write_iter+0x3d0/0x3d0 [ 2244.816620] ? do_recvmmsg+0x6d0/0x6d0 [ 2244.817195] ? __lock_acquire+0x1657/0x5b00 [ 2244.817837] ___sys_sendmsg+0xf3/0x170 [ 2244.818417] ? sendmsg_copy_msghdr+0x160/0x160 [ 2244.819103] ? __fget_files+0x2cf/0x520 [ 2244.819695] ? lock_acquire+0x197/0x470 [ 2244.820274] ? find_held_lock+0x2c/0x110 [ 2244.820877] ? __might_fault+0xd3/0x180 [ 2244.821467] ? lock_downgrade+0x6d0/0x6d0 [ 2244.822089] __sys_sendmmsg+0x195/0x470 [ 2244.822677] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2244.823321] ? lock_downgrade+0x6d0/0x6d0 [ 2244.823948] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2244.824655] ? wait_for_completion_io+0x270/0x270 [ 2244.825367] ? rcu_read_lock_any_held+0x75/0xa0 [ 2244.826052] ? vfs_write+0x354/0xb10 [ 2244.826597] ? fput_many+0x2f/0x1a0 [ 2244.827143] ? ksys_write+0x1a9/0x260 [ 2244.827701] ? __ia32_sys_read+0xb0/0xb0 [ 2244.828301] __x64_sys_sendmmsg+0x99/0x100 [ 2244.828918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2244.829669] do_syscall_64+0x33/0x40 [ 2244.830214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2244.830962] RIP: 0033:0x7f6413bdcb19 [ 2244.831525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.834196] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2244.835315] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2244.836360] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2244.837399] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2244.838441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2244.839512] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2244.852697] FAT-fs (loop4): Directory bread(block 10) failed [ 2244.862758] FAULT_INJECTION: forcing a failure. [ 2244.862758] name failslab, interval 1, probability 0, space 0, times 0 [ 2244.864359] CPU: 0 PID: 11173 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2244.865271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2244.866483] Call Trace: [ 2244.866833] dump_stack+0x107/0x167 [ 2244.867343] should_fail.cold+0x5/0xa [ 2244.867846] ? create_object.isra.0+0x3a/0xa20 [ 2244.868571] should_failslab+0x5/0x20 [ 2244.869274] kmem_cache_alloc+0x5b/0x310 [ 2244.869918] create_object.isra.0+0x3a/0xa20 [ 2244.870616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2244.871444] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2244.872261] ? skb_copy+0x183/0x350 [ 2244.872853] __alloc_skb+0xb1/0x5b0 [ 2244.873445] skb_copy+0x183/0x350 [ 2244.874004] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2244.874950] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2244.875777] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2244.876697] ? lock_acquire+0x160/0x470 [ 2244.877335] ? find_held_lock+0x2c/0x110 [ 2244.877984] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2244.878797] mac80211_hwsim_tx+0x574/0x12a0 [ 2244.879494] ? trace_hardirqs_on+0x5b/0x180 [ 2244.880182] ieee80211_tx_frags+0x59c/0x9f0 [ 2244.880880] ? fq_skb_free_func+0x20/0x20 [ 2244.881554] __ieee80211_tx+0x1ad/0x640 [ 2244.882199] ieee80211_tx+0x329/0x410 [ 2244.882801] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2244.883617] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2244.884568] ? ieee80211_skb_resize+0x116/0x630 [ 2244.885729] ieee80211_xmit+0x220/0x2a0 [ 2244.886291] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2244.887207] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2244.888104] ieee80211_subif_start_xmit+0xef/0xf70 [ 2244.888964] ? lock_chain_count+0x20/0x20 [ 2244.889673] ? skb_crc32c_csum_help+0x80/0x80 [ 2244.890444] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2244.891376] ? lock_acquire+0x197/0x470 [ 2244.892061] ? sch_direct_xmit+0x31a/0x790 [ 2244.892795] ? lock_release+0x680/0x680 [ 2244.893488] dev_hard_start_xmit+0x1cb/0x6f0 [ 2244.894255] sch_direct_xmit+0x25f/0x790 [ 2244.894951] ? lock_acquire+0x197/0x470 [ 2244.895645] ? find_held_lock+0x2c/0x110 [ 2244.896346] ? dev_watchdog+0xbc0/0xbc0 [ 2244.897030] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2244.897828] __qdisc_run+0x4aa/0x1570 [ 2244.898498] __dev_queue_xmit+0xd43/0x2690 [ 2244.899235] ? ip6_finish_output2+0x158f/0x1cf0 [ 2244.900046] ? find_held_lock+0x2c/0x110 [ 2244.900748] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2244.901532] ? lock_downgrade+0x6d0/0x6d0 [ 2244.902251] ? do_softirq+0x53/0xc0 [ 2244.902875] ? trace_hardirqs_on+0x5b/0x180 [ 2244.903634] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2244.904373] ip6_finish_output2+0x158f/0x1cf0 [ 2244.905162] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2244.905865] ip6_output+0x3b8/0x7e0 [ 2244.906501] ip6_local_out+0xb4/0x1a0 [ 2244.907037] ip6_send_skb+0x112/0x460 [ 2244.907718] udp_v6_send_skb+0x7aa/0x15b0 [ 2244.908320] udpv6_sendmsg+0x2116/0x2ad0 [ 2244.909029] ? ip_frag_init+0x350/0x350 [ 2244.909595] ? udp_v6_push_pending_frames+0x360/0x360 [ 2244.910496] ? perf_event_task_disable+0x390/0x390 [ 2244.911199] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2244.912022] ? lock_acquire+0x197/0x470 [ 2244.912615] ? find_held_lock+0x2c/0x110 [ 2244.913331] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2244.914264] ? sock_has_perm+0x1ea/0x280 [ 2244.914981] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2244.915915] ? trace_hardirqs_on+0x5b/0x180 [ 2244.916562] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2244.917492] ? udp_v6_push_pending_frames+0x360/0x360 [ 2244.918272] inet6_sendmsg+0x105/0x140 [ 2244.918948] ? inet6_compat_ioctl+0x320/0x320 [ 2244.919590] __sock_sendmsg+0xf2/0x190 [ 2244.920268] ____sys_sendmsg+0x334/0x870 [ 2244.920846] ? sock_write_iter+0x3d0/0x3d0 [ 2244.921576] ? do_recvmmsg+0x6d0/0x6d0 [ 2244.922123] ? find_held_lock+0x2c/0x110 [ 2244.922831] ___sys_sendmsg+0xf3/0x170 [ 2244.923392] ? sendmsg_copy_msghdr+0x160/0x160 [ 2244.924180] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2244.924910] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2244.925678] ? trace_hardirqs_on+0x5b/0x180 [ 2244.926292] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2244.927056] ? finish_task_switch+0x126/0x5d0 [ 2244.927685] ? finish_task_switch+0xef/0x5d0 [ 2244.928438] ? __switch_to+0x572/0xf70 [ 2244.928980] ? __switch_to_asm+0x3a/0x60 [ 2244.929668] ? __switch_to_asm+0x34/0x60 [ 2244.930243] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2244.931147] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2244.931896] ? trace_hardirqs_on+0x5b/0x180 [ 2244.932637] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2244.933400] ? __sys_sendmmsg+0x249/0x470 [ 2244.934109] __sys_sendmmsg+0x195/0x470 [ 2244.934676] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2244.935419] ? lock_downgrade+0x6d0/0x6d0 [ 2244.936014] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2244.936854] ? wait_for_completion_io+0x270/0x270 [ 2244.937531] ? rcu_read_lock_any_held+0x75/0xa0 [ 2244.938342] ? vfs_write+0x354/0xb10 [ 2244.938875] ? fput_many+0x2f/0x1a0 [ 2244.939513] ? ksys_write+0x1a9/0x260 [ 2244.940048] ? __ia32_sys_read+0xb0/0xb0 [ 2244.940762] __x64_sys_sendmmsg+0x99/0x100 [ 2244.941354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2244.942231] do_syscall_64+0x33/0x40 [ 2244.942759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2244.943649] RIP: 0033:0x7f9d078eeb19 [ 2244.944178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2244.947361] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2244.948436] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2244.949429] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2244.950413] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2244.951423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2244.952399] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2244.955472] FAT-fs (loop4): Directory bread(block 11) failed 01:32:13 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x200001, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) write$P9_RCLUNK(r0, 0x0, 0x0) 01:32:13 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 27) 01:32:13 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 46) 01:32:13 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x12, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:32:13 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:32:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x100000, 0x8000) 01:32:13 executing program 7: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x98, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8004}, 0x10000000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) syz_io_uring_submit(r1, r4, &(0x7f0000000080)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r7, &(0x7f0000000000)={0x2, 0x25, 0xe}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0xd72) pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:32:13 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x34000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2258.537192] FAULT_INJECTION: forcing a failure. [ 2258.537192] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.539974] CPU: 0 PID: 11205 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2258.540971] FAULT_INJECTION: forcing a failure. [ 2258.540971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2258.541413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.541421] Call Trace: [ 2258.541445] dump_stack+0x107/0x167 [ 2258.541466] should_fail.cold+0x5/0xa [ 2258.541487] ? create_object.isra.0+0x3a/0xa20 [ 2258.541509] should_failslab+0x5/0x20 [ 2258.541528] kmem_cache_alloc+0x5b/0x310 [ 2258.541555] create_object.isra.0+0x3a/0xa20 [ 2258.551297] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2258.552375] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2258.553417] ? alloc_skb_with_frags+0x92/0x570 [ 2258.554359] __alloc_skb+0xb1/0x5b0 [ 2258.555118] alloc_skb_with_frags+0x92/0x570 [ 2258.556046] ? quarantine_put+0x8b/0x1a0 [ 2258.556896] ? kmem_cache_free+0xa7/0x2d0 [ 2258.557755] sock_alloc_send_pskb+0x7af/0x930 [ 2258.558689] ? sk_alloc+0x350/0x350 [ 2258.559447] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2258.560556] ? __local_bh_enable_ip+0x9d/0x100 [ 2258.561493] ? trace_hardirqs_on+0x5b/0x180 [ 2258.562384] ? __dev_queue_xmit+0xdf8/0x2690 [ 2258.563300] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2258.564367] ? ip6_mtu+0x1bb/0x3d0 [ 2258.565105] ? lock_downgrade+0x6d0/0x6d0 [ 2258.565961] ? ip_frag_init+0x350/0x350 [ 2258.566783] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2258.567803] ? ip6_mtu+0x1e9/0x3d0 [ 2258.568532] ? ip6_setup_cork+0xfb7/0x1740 [ 2258.569420] ip6_make_skb+0x2de/0x4e0 [ 2258.570199] ? ip_frag_init+0x350/0x350 [ 2258.571028] ? ip_frag_init+0x350/0x350 [ 2258.571884] ? ip6_push_pending_frames+0xf0/0xf0 [ 2258.572879] ? ip6_dst_check+0x389/0x8d0 [ 2258.573733] ? sk_dst_check+0x235/0x4c0 [ 2258.574577] udpv6_sendmsg+0x20d3/0x2ad0 [ 2258.575416] ? ip_frag_init+0x350/0x350 [ 2258.576267] ? udp_v6_push_pending_frames+0x360/0x360 [ 2258.577450] ? lock_acquire+0x197/0x470 [ 2258.578347] ? find_held_lock+0x2c/0x110 [ 2258.579260] ? sock_has_perm+0x1ea/0x280 [ 2258.580189] ? __import_iovec+0x458/0x590 [ 2258.581110] ? udp_v6_push_pending_frames+0x360/0x360 [ 2258.582341] inet6_sendmsg+0x105/0x140 [ 2258.583164] ? inet6_compat_ioctl+0x320/0x320 [ 2258.584110] __sock_sendmsg+0xf2/0x190 [ 2258.584918] ____sys_sendmsg+0x334/0x870 [ 2258.585766] ? sock_write_iter+0x3d0/0x3d0 [ 2258.586637] ? do_recvmmsg+0x6d0/0x6d0 [ 2258.587439] ? __lock_acquire+0x1657/0x5b00 [ 2258.588365] ___sys_sendmsg+0xf3/0x170 [ 2258.589175] ? sendmsg_copy_msghdr+0x160/0x160 [ 2258.590133] ? __fget_files+0x2cf/0x520 [ 2258.590963] ? lock_acquire+0x197/0x470 [ 2258.591822] ? find_held_lock+0x2c/0x110 [ 2258.592672] ? __might_fault+0xd3/0x180 [ 2258.593491] ? lock_downgrade+0x6d0/0x6d0 [ 2258.594361] __sys_sendmmsg+0x195/0x470 [ 2258.595189] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2258.596130] ? lock_downgrade+0x6d0/0x6d0 [ 2258.597003] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2258.598000] ? wait_for_completion_io+0x270/0x270 [ 2258.599001] ? rcu_read_lock_any_held+0x75/0xa0 [ 2258.599994] ? vfs_write+0x354/0xb10 [ 2258.600773] ? fput_many+0x2f/0x1a0 [ 2258.601524] ? ksys_write+0x1a9/0x260 [ 2258.602317] ? __ia32_sys_read+0xb0/0xb0 [ 2258.603158] __x64_sys_sendmmsg+0x99/0x100 [ 2258.604062] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2258.605123] do_syscall_64+0x33/0x40 [ 2258.605896] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2258.606950] RIP: 0033:0x7f6413bdcb19 [ 2258.607754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.611560] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2258.613164] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2258.614638] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2258.616139] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.617617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2258.619085] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2258.620638] CPU: 1 PID: 11200 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2258.622246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.624105] Call Trace: [ 2258.624706] dump_stack+0x107/0x167 [ 2258.625516] should_fail.cold+0x5/0xa [ 2258.626373] _copy_from_user+0x2e/0x1b0 [ 2258.627272] __copy_msghdr_from_user+0x91/0x4b0 [ 2258.628330] ? __ia32_sys_shutdown+0x80/0x80 [ 2258.629319] ? udp_v6_push_pending_frames+0x360/0x360 [ 2258.630470] ? inet6_sendmsg+0xbd/0x140 [ 2258.631358] ? inet6_compat_ioctl+0x320/0x320 [ 2258.632365] ? __sock_sendmsg+0x55/0x190 [ 2258.633267] sendmsg_copy_msghdr+0xa1/0x160 [ 2258.634248] ? do_recvmmsg+0x6d0/0x6d0 [ 2258.635137] ? __lock_acquire+0x1657/0x5b00 [ 2258.636132] ___sys_sendmsg+0xc6/0x170 [ 2258.637011] ? sendmsg_copy_msghdr+0x160/0x160 [ 2258.638044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2258.639215] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2258.640222] ? trace_hardirqs_on+0x5b/0x180 [ 2258.641198] ? lock_acquire+0x197/0x470 [ 2258.642084] ? find_held_lock+0x2c/0x110 [ 2258.642997] ? __might_fault+0xd3/0x180 [ 2258.643914] ? lock_downgrade+0x6d0/0x6d0 [ 2258.644856] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2258.646089] __sys_sendmmsg+0x195/0x470 [ 2258.646982] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2258.647967] ? lock_downgrade+0x6d0/0x6d0 [ 2258.648914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2258.649990] ? wait_for_completion_io+0x270/0x270 [ 2258.651074] ? rcu_read_lock_any_held+0x75/0xa0 [ 2258.652145] ? vfs_write+0x354/0xb10 [ 2258.652975] ? fput_many+0x2f/0x1a0 [ 2258.653802] ? ksys_write+0x1a9/0x260 [ 2258.654664] ? __ia32_sys_read+0xb0/0xb0 [ 2258.655602] __x64_sys_sendmmsg+0x99/0x100 [ 2258.656552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2258.657706] do_syscall_64+0x33/0x40 [ 2258.658548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2258.659699] RIP: 0033:0x7f9d078eeb19 [ 2258.660537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.664662] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2258.666381] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2258.667979] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2258.669573] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.671164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2258.672763] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2258.674976] FAT-fs (loop4): Directory bread(block 10) failed 01:32:13 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5) [ 2258.676439] FAT-fs (loop4): Directory bread(block 11) failed 01:32:13 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:32:13 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x64, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:32:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x800000, 0x8000) 01:32:14 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 28) 01:32:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) splice(r0, &(0x7f00000000c0)=0xc000000, r1, &(0x7f0000000080)=0x400, 0x80000000, 0x8) 01:32:14 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/145, 0x91}, {&(0x7f00000000c0)=""/226, 0xe2}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)}, {&(0x7f0000001300)=""/8, 0x8}, {&(0x7f0000001340)=""/204, 0xcc}, {&(0x7f0000001440)=""/203, 0xcb}, {&(0x7f0000001540)=""/105, 0x69}], 0xa) [ 2258.898568] FAULT_INJECTION: forcing a failure. [ 2258.898568] name failslab, interval 1, probability 0, space 0, times 0 [ 2258.901321] CPU: 1 PID: 11226 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2258.902978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2258.904983] Call Trace: [ 2258.905618] dump_stack+0x107/0x167 [ 2258.906492] should_fail.cold+0x5/0xa [ 2258.907410] ? skb_clone+0x14f/0x3d0 [ 2258.908313] should_failslab+0x5/0x20 [ 2258.909227] kmem_cache_alloc+0x5b/0x310 [ 2258.910208] skb_clone+0x14f/0x3d0 [ 2258.911064] ip6_finish_output2+0x10bf/0x1cf0 [ 2258.912165] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2258.913366] ip6_output+0x3b8/0x7e0 [ 2258.914257] ip6_local_out+0xb4/0x1a0 [ 2258.915173] ip6_send_skb+0x112/0x460 [ 2258.916108] udp_v6_send_skb+0x7aa/0x15b0 [ 2258.917123] udpv6_sendmsg+0x2116/0x2ad0 [ 2258.918095] ? ip_frag_init+0x350/0x350 [ 2258.919060] ? udp_v6_push_pending_frames+0x360/0x360 [ 2258.920337] ? lock_acquire+0x197/0x470 [ 2258.921282] ? find_held_lock+0x2c/0x110 [ 2258.922268] ? sock_has_perm+0x1ea/0x280 [ 2258.923265] ? __import_iovec+0x458/0x590 [ 2258.924266] ? udp_v6_push_pending_frames+0x360/0x360 [ 2258.925511] inet6_sendmsg+0x105/0x140 [ 2258.926442] ? inet6_compat_ioctl+0x320/0x320 [ 2258.927519] __sock_sendmsg+0xf2/0x190 [ 2258.928467] ____sys_sendmsg+0x334/0x870 [ 2258.929454] ? sock_write_iter+0x3d0/0x3d0 [ 2258.930470] ? do_recvmmsg+0x6d0/0x6d0 [ 2258.931402] ? __lock_acquire+0x1657/0x5b00 [ 2258.932467] ___sys_sendmsg+0xf3/0x170 [ 2258.933402] ? sendmsg_copy_msghdr+0x160/0x160 [ 2258.934494] ? __fget_files+0x2cf/0x520 [ 2258.935455] ? lock_acquire+0x197/0x470 [ 2258.936419] ? find_held_lock+0x2c/0x110 [ 2258.937394] ? __might_fault+0xd3/0x180 [ 2258.938341] ? lock_downgrade+0x6d0/0x6d0 [ 2258.939363] __sys_sendmmsg+0x195/0x470 [ 2258.940335] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2258.941369] ? lock_downgrade+0x6d0/0x6d0 [ 2258.942383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2258.943545] ? wait_for_completion_io+0x270/0x270 [ 2258.944722] ? rcu_read_lock_any_held+0x75/0xa0 [ 2258.945838] ? vfs_write+0x354/0xb10 [ 2258.946730] ? fput_many+0x2f/0x1a0 [ 2258.947630] ? ksys_write+0x1a9/0x260 [ 2258.948577] ? __ia32_sys_read+0xb0/0xb0 [ 2258.949564] __x64_sys_sendmmsg+0x99/0x100 [ 2258.950579] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2258.951829] do_syscall_64+0x33/0x40 [ 2258.952722] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2258.953950] RIP: 0033:0x7f6413bdcb19 [ 2258.954839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2258.959241] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2258.961074] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2258.962780] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2258.964501] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2258.966207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2258.967922] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:32:14 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x40000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:32:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x1000000, 0x8000) 01:32:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x102, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2259.094414] FAT-fs (loop4): Directory bread(block 10) failed [ 2259.112104] FAT-fs (loop4): Directory bread(block 11) failed [ 2259.127070] FAT-fs (loop4): Directory bread(block 10) failed [ 2259.131890] FAT-fs (loop4): Directory bread(block 11) failed [ 2259.137116] FAT-fs (loop4): Directory bread(block 10) failed [ 2259.141900] FAT-fs (loop4): Directory bread(block 11) failed 01:32:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x2000000, 0x8000) 01:32:30 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 29) 01:32:30 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') 01:32:30 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 01:32:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x3e2576a2f73f845e, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$FIOCLEX(r1, 0x5451) 01:32:30 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 47) 01:32:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x201, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:32:30 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x400300, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2275.572698] FAULT_INJECTION: forcing a failure. [ 2275.572698] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.574393] CPU: 0 PID: 11272 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2275.575355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.576531] Call Trace: [ 2275.576905] dump_stack+0x107/0x167 [ 2275.577413] should_fail.cold+0x5/0xa [ 2275.577950] ? __alloc_skb+0x6d/0x5b0 [ 2275.578484] should_failslab+0x5/0x20 [ 2275.579017] kmem_cache_alloc_node+0x55/0x330 [ 2275.579644] __alloc_skb+0x6d/0x5b0 [ 2275.580169] alloc_skb_with_frags+0x92/0x570 [ 2275.580798] ? sch_direct_xmit+0x1fb/0x790 [ 2275.581388] ? lock_acquire+0x197/0x470 [ 2275.581949] ? find_held_lock+0x2c/0x110 [ 2275.582515] sock_alloc_send_pskb+0x7af/0x930 [ 2275.583146] FAT-fs (loop4): Directory bread(block 10) failed [ 2275.583172] ? sk_alloc+0x350/0x350 [ 2275.585066] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2275.585788] ? __local_bh_enable_ip+0x9d/0x100 [ 2275.586426] ? trace_hardirqs_on+0x5b/0x180 [ 2275.587033] ? __dev_queue_xmit+0xdf8/0x2690 [ 2275.587648] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2275.588349] ? ip6_mtu+0x1bb/0x3d0 [ 2275.588842] ? lock_downgrade+0x6d0/0x6d0 [ 2275.589416] ? ip_frag_init+0x350/0x350 [ 2275.589972] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2275.590102] FAT-fs (loop4): Directory bread(block 11) failed [ 2275.590639] ? ip6_mtu+0x1e9/0x3d0 [ 2275.590652] ? ip6_setup_cork+0xfb7/0x1740 [ 2275.590675] ip6_make_skb+0x2de/0x4e0 [ 2275.593562] ? ip_frag_init+0x350/0x350 [ 2275.594115] ? ip_frag_init+0x350/0x350 [ 2275.594670] ? ip6_push_pending_frames+0xf0/0xf0 [ 2275.595049] FAULT_INJECTION: forcing a failure. [ 2275.595049] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.595338] ? ip6_dst_check+0x389/0x8d0 [ 2275.595351] ? sk_dst_check+0x235/0x4c0 [ 2275.595370] udpv6_sendmsg+0x20d3/0x2ad0 [ 2275.595386] ? ip_frag_init+0x350/0x350 [ 2275.595405] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.595423] ? perf_event_task_disable+0x390/0x390 [ 2275.595447] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2275.602203] ? lock_acquire+0x197/0x470 [ 2275.602759] ? find_held_lock+0x2c/0x110 [ 2275.603330] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2275.604075] ? sock_has_perm+0x1ea/0x280 [ 2275.604658] ? __import_iovec+0x458/0x590 [ 2275.605232] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.605949] inet6_sendmsg+0x105/0x140 [ 2275.606494] ? inet6_compat_ioctl+0x320/0x320 [ 2275.607115] __sock_sendmsg+0xf2/0x190 [ 2275.607659] ____sys_sendmsg+0x334/0x870 [ 2275.608234] ? sock_write_iter+0x3d0/0x3d0 [ 2275.608823] ? do_recvmmsg+0x6d0/0x6d0 [ 2275.609368] ? __lock_acquire+0x1657/0x5b00 [ 2275.609971] ___sys_sendmsg+0xf3/0x170 [ 2275.610514] ? sendmsg_copy_msghdr+0x160/0x160 [ 2275.611149] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2275.611879] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2275.612498] ? trace_hardirqs_on+0x5b/0x180 [ 2275.613091] ? lock_acquire+0x197/0x470 [ 2275.613647] ? find_held_lock+0x2c/0x110 [ 2275.614208] ? __might_fault+0xd3/0x180 [ 2275.614755] ? lock_downgrade+0x6d0/0x6d0 [ 2275.615325] ? io_schedule_timeout+0x140/0x140 [ 2275.615961] __sys_sendmmsg+0x195/0x470 [ 2275.616520] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2275.617109] ? lock_downgrade+0x6d0/0x6d0 [ 2275.617690] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2275.618353] ? wait_for_completion_io+0x270/0x270 [ 2275.619016] ? rcu_read_lock_any_held+0x75/0xa0 [ 2275.619668] ? vfs_write+0x354/0xb10 [ 2275.620178] ? fput_many+0x2f/0x1a0 [ 2275.620686] ? ksys_write+0x1a9/0x260 [ 2275.621207] ? __ia32_sys_read+0xb0/0xb0 [ 2275.621770] __x64_sys_sendmmsg+0x99/0x100 [ 2275.622351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.623056] do_syscall_64+0x33/0x40 [ 2275.623581] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.624289] RIP: 0033:0x7f9d078eeb19 [ 2275.624804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.627342] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2275.628412] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2275.629393] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2275.630378] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.631356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.632349] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2275.633415] CPU: 1 PID: 11269 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2275.635449] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.637849] Call Trace: [ 2275.638620] dump_stack+0x107/0x167 [ 2275.639680] should_fail.cold+0x5/0xa [ 2275.640797] ? create_object.isra.0+0x3a/0xa20 [ 2275.642124] should_failslab+0x5/0x20 [ 2275.643236] kmem_cache_alloc+0x5b/0x310 [ 2275.644456] create_object.isra.0+0x3a/0xa20 [ 2275.645734] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2275.647217] kmem_cache_alloc+0x159/0x310 [ 2275.648456] skb_clone+0x14f/0x3d0 [ 2275.649500] ip6_finish_output2+0x10bf/0x1cf0 [ 2275.650810] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2275.652266] ip6_output+0x3b8/0x7e0 [ 2275.653333] ip6_local_out+0xb4/0x1a0 [ 2275.654431] ip6_send_skb+0x112/0x460 [ 2275.655544] udp_v6_send_skb+0x7aa/0x15b0 [ 2275.656662] udpv6_sendmsg+0x2116/0x2ad0 [ 2275.657594] ? ip_frag_init+0x350/0x350 [ 2275.658499] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.659684] ? perf_event_task_disable+0x390/0x390 [ 2275.660820] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2275.661934] ? lock_acquire+0x197/0x470 [ 2275.662843] ? find_held_lock+0x2c/0x110 [ 2275.663787] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2275.665020] ? sock_has_perm+0x1ea/0x280 [ 2275.665968] ? __import_iovec+0x458/0x590 [ 2275.666929] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.668108] inet6_sendmsg+0x105/0x140 [ 2275.669012] ? inet6_compat_ioctl+0x320/0x320 [ 2275.670031] __sock_sendmsg+0xf2/0x190 [ 2275.670925] ____sys_sendmsg+0x334/0x870 [ 2275.671846] ? sock_write_iter+0x3d0/0x3d0 01:32:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:32:30 executing program 7: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:32:30 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 2275.673017] ? do_recvmmsg+0x6d0/0x6d0 [ 2275.673943] ? __lock_acquire+0x1657/0x5b00 [ 2275.674948] ___sys_sendmsg+0xf3/0x170 [ 2275.675843] ? sendmsg_copy_msghdr+0x160/0x160 [ 2275.676888] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2275.677909] ? _raw_spin_unlock_irq+0x27/0x30 [ 2275.678961] ? lock_acquire+0x197/0x470 [ 2275.679853] ? find_held_lock+0x2c/0x110 [ 2275.680827] ? __might_fault+0xd3/0x180 [ 2275.681747] ? lock_downgrade+0x6d0/0x6d0 [ 2275.682691] ? io_schedule_timeout+0x140/0x140 [ 2275.683750] __sys_sendmmsg+0x195/0x470 [ 2275.684679] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2275.685660] ? lock_downgrade+0x6d0/0x6d0 [ 2275.686617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2275.687742] ? wait_for_completion_io+0x270/0x270 [ 2275.688844] ? rcu_read_lock_any_held+0x75/0xa0 [ 2275.689886] ? vfs_write+0x354/0xb10 [ 2275.690733] ? fput_many+0x2f/0x1a0 [ 2275.691543] ? ksys_write+0x1a9/0x260 [ 2275.692423] ? __ia32_sys_read+0xb0/0xb0 [ 2275.693346] __x64_sys_sendmmsg+0x99/0x100 [ 2275.694317] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.695503] do_syscall_64+0x33/0x40 [ 2275.696391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.697593] RIP: 0033:0x7f6413bdcb19 [ 2275.698432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.702595] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2275.704342] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2275.705965] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2275.707605] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.709232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.710849] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2275.720645] FAT-fs (loop4): Directory bread(block 10) failed [ 2275.721583] FAT-fs (loop4): Directory bread(block 11) failed [ 2275.722539] FAT-fs (loop4): Directory bread(block 10) failed [ 2275.727871] FAT-fs (loop4): Directory bread(block 11) failed 01:32:30 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 30) 01:32:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x281, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:32:31 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200200, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2275.828097] FAULT_INJECTION: forcing a failure. [ 2275.828097] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.830819] CPU: 1 PID: 11287 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2275.832333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2275.834148] Call Trace: [ 2275.834736] dump_stack+0x107/0x167 [ 2275.835664] should_fail.cold+0x5/0xa [ 2275.836618] ? create_object.isra.0+0x3a/0xa20 [ 2275.837615] should_failslab+0x5/0x20 [ 2275.838418] kmem_cache_alloc+0x5b/0x310 [ 2275.839308] create_object.isra.0+0x3a/0xa20 [ 2275.840235] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2275.841343] kmem_cache_alloc+0x159/0x310 [ 2275.842245] skb_clone+0x14f/0x3d0 [ 2275.843028] ip6_finish_output2+0x10bf/0x1cf0 [ 2275.844006] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2275.845092] ip6_output+0x3b8/0x7e0 [ 2275.845888] ip6_local_out+0xb4/0x1a0 [ 2275.846700] ip6_send_skb+0x112/0x460 [ 2275.847545] udp_v6_send_skb+0x7aa/0x15b0 [ 2275.848463] udpv6_sendmsg+0x2116/0x2ad0 [ 2275.849345] ? ip_frag_init+0x350/0x350 [ 2275.850207] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.851341] ? kernel_text_address+0xf2/0x120 [ 2275.852315] ? __kernel_text_address+0x9/0x40 [ 2275.853293] ? lock_acquire+0x197/0x470 [ 2275.854138] ? find_held_lock+0x2c/0x110 [ 2275.855037] ? stack_trace_save+0x8c/0xc0 [ 2275.855936] ? stack_trace_consume_entry+0x160/0x160 [ 2275.857037] ? sock_has_perm+0x1ea/0x280 [ 2275.857928] ? __import_iovec+0x458/0x590 [ 2275.858813] ? udp_v6_push_pending_frames+0x360/0x360 [ 2275.859943] inet6_sendmsg+0x105/0x140 [ 2275.860788] ? inet6_compat_ioctl+0x320/0x320 [ 2275.861748] __sock_sendmsg+0xf2/0x190 [ 2275.862581] ____sys_sendmsg+0x334/0x870 [ 2275.863467] ? sock_write_iter+0x3d0/0x3d0 [ 2275.864380] ? do_recvmmsg+0x6d0/0x6d0 [ 2275.865231] ? lock_downgrade+0x6d0/0x6d0 [ 2275.866140] ___sys_sendmsg+0xf3/0x170 [ 2275.866997] ? sendmsg_copy_msghdr+0x160/0x160 [ 2275.867981] ? put_task_struct_rcu_user+0x7f/0xb0 [ 2275.869040] ? finish_task_switch+0x42c/0x5d0 [ 2275.870005] ? __switch_to+0x572/0xf70 [ 2275.870845] ? __switch_to_asm+0x3a/0x60 [ 2275.871720] ? __switch_to_asm+0x34/0x60 [ 2275.872622] ? __schedule+0x82c/0x1ea0 [ 2275.873467] ? io_schedule_timeout+0x140/0x140 [ 2275.874449] __sys_sendmmsg+0x195/0x470 [ 2275.875318] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2275.876251] ? lock_downgrade+0x6d0/0x6d0 [ 2275.877151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2275.878176] ? wait_for_completion_io+0x270/0x270 [ 2275.879228] ? rcu_read_lock_any_held+0x75/0xa0 [ 2275.880239] ? vfs_write+0x354/0xb10 [ 2275.881038] ? fput_many+0x2f/0x1a0 [ 2275.881833] ? ksys_write+0x1a9/0x260 [ 2275.882636] ? __ia32_sys_read+0xb0/0xb0 [ 2275.883535] __x64_sys_sendmmsg+0x99/0x100 [ 2275.884472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2275.885583] do_syscall_64+0x33/0x40 [ 2275.886383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2275.887494] RIP: 0033:0x7f6413bdcb19 [ 2275.888311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2275.892275] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2275.893917] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2275.895453] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2275.897001] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2275.898518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.900064] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:32:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) fchdir(r0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) 01:32:44 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 01:32:44 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x2010000, 0x8000) 01:32:44 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 31) 01:32:44 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 48) 01:32:44 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf0ffff, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:32:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x300, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:32:44 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, &(0x7f0000000000)) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0xfffffff7, 0x7f27, 0x8001, 0x1, 0x3588}) [ 2289.521099] FAT-fs (loop4): Directory bread(block 10) failed [ 2289.521956] FAT-fs (loop4): Directory bread(block 11) failed [ 2289.524084] FAULT_INJECTION: forcing a failure. [ 2289.524084] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.525599] CPU: 1 PID: 11316 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2289.526439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.527450] Call Trace: [ 2289.527771] dump_stack+0x107/0x167 [ 2289.528205] should_fail.cold+0x5/0xa [ 2289.528672] ? create_object.isra.0+0x3a/0xa20 [ 2289.529230] should_failslab+0x5/0x20 [ 2289.529693] kmem_cache_alloc+0x5b/0x310 [ 2289.530178] create_object.isra.0+0x3a/0xa20 [ 2289.530706] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2289.531322] kmem_cache_alloc_node+0x169/0x330 [ 2289.531885] __alloc_skb+0x6d/0x5b0 [ 2289.532329] alloc_skb_with_frags+0x92/0x570 [ 2289.532879] ? sch_direct_xmit+0x1fb/0x790 [ 2289.533393] ? lock_acquire+0x197/0x470 [ 2289.533870] ? find_held_lock+0x2c/0x110 [ 2289.534360] sock_alloc_send_pskb+0x7af/0x930 [ 2289.534930] ? sk_alloc+0x350/0x350 [ 2289.535374] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2289.536009] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2289.536653] ? mark_lock+0xf5/0x2df0 [ 2289.537117] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2289.537718] ? ip6_mtu+0x1bb/0x3d0 [ 2289.538142] ? lock_downgrade+0x6d0/0x6d0 [ 2289.538638] ? ip_frag_init+0x350/0x350 [ 2289.539115] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2289.539689] ? ip6_mtu+0x1e9/0x3d0 [ 2289.540116] ? ip6_setup_cork+0xfb7/0x1740 [ 2289.540629] ip6_make_skb+0x2de/0x4e0 [ 2289.541089] ? ip_frag_init+0x350/0x350 [ 2289.541576] ? ip_frag_init+0x350/0x350 [ 2289.542050] ? ip6_push_pending_frames+0xf0/0xf0 [ 2289.542617] ? ip6_dst_check+0x389/0x8d0 [ 2289.543097] ? sk_dst_check+0x235/0x4c0 [ 2289.543586] udpv6_sendmsg+0x20d3/0x2ad0 [ 2289.544085] ? ip_frag_init+0x350/0x350 [ 2289.544561] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.545234] ? perf_event_task_disable+0x390/0x390 [ 2289.545813] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2289.546400] ? lock_acquire+0x197/0x470 [ 2289.546869] ? find_held_lock+0x2c/0x110 [ 2289.547367] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2289.548023] ? inet_send_prepare+0x5a/0x540 [ 2289.548532] ? inet_send_prepare+0xd0/0x540 [ 2289.549053] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.549667] inet6_sendmsg+0x105/0x140 [ 2289.550132] ? inet6_compat_ioctl+0x320/0x320 [ 2289.550677] __sock_sendmsg+0xf2/0x190 [ 2289.551133] ____sys_sendmsg+0x334/0x870 [ 2289.551618] ? sock_write_iter+0x3d0/0x3d0 [ 2289.552123] ? do_recvmmsg+0x6d0/0x6d0 [ 2289.552586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2289.553238] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2289.553899] ? trace_hardirqs_on+0x5b/0x180 [ 2289.554426] ___sys_sendmsg+0xf3/0x170 [ 2289.554889] ? sendmsg_copy_msghdr+0x160/0x160 [ 2289.555439] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2289.555980] ? _raw_spin_unlock_irq+0x27/0x30 [ 2289.556514] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2289.557056] ? finish_task_switch+0x126/0x5d0 [ 2289.557589] ? finish_task_switch+0xef/0x5d0 [ 2289.558107] ? __switch_to+0x572/0xf70 [ 2289.558574] ? __switch_to_asm+0x3a/0x60 [ 2289.559059] ? __switch_to_asm+0x34/0x60 [ 2289.559547] ? __schedule+0x82c/0x1ea0 [ 2289.560023] ? io_schedule_timeout+0x140/0x140 [ 2289.560573] __sys_sendmmsg+0x195/0x470 [ 2289.561059] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2289.561580] ? lock_downgrade+0x6d0/0x6d0 [ 2289.562085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2289.562661] ? wait_for_completion_io+0x270/0x270 [ 2289.563241] ? rcu_read_lock_any_held+0x75/0xa0 [ 2289.563818] ? vfs_write+0x354/0xb10 [ 2289.564353] ? fput_many+0x2f/0x1a0 [ 2289.564860] ? ksys_write+0x1a9/0x260 [ 2289.565373] ? __ia32_sys_read+0xb0/0xb0 [ 2289.565940] __x64_sys_sendmmsg+0x99/0x100 [ 2289.566520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2289.567212] do_syscall_64+0x33/0x40 [ 2289.567713] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.568379] RIP: 0033:0x7f9d078eeb19 [ 2289.568883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.571363] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2289.572390] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2289.573384] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2289.574396] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.575395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.576411] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2289.589820] FAT-fs (loop4): Directory bread(block 10) failed [ 2289.591895] FAT-fs (loop4): Directory bread(block 11) failed [ 2289.599908] FAT-fs (loop4): Directory bread(block 10) failed [ 2289.599969] FAULT_INJECTION: forcing a failure. [ 2289.599969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2289.602779] CPU: 1 PID: 11318 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2289.603597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.604552] Call Trace: [ 2289.604878] dump_stack+0x107/0x167 [ 2289.605300] should_fail.cold+0x5/0xa [ 2289.605743] _copy_from_user+0x2e/0x1b0 [ 2289.606213] __copy_msghdr_from_user+0x91/0x4b0 [ 2289.606770] ? __ia32_sys_shutdown+0x80/0x80 [ 2289.607291] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.607894] ? inet6_sendmsg+0xbd/0x140 [ 2289.608366] ? inet6_compat_ioctl+0x320/0x320 [ 2289.608894] ? __sock_sendmsg+0x55/0x190 [ 2289.609365] sendmsg_copy_msghdr+0xa1/0x160 [ 2289.609879] ? do_recvmmsg+0x6d0/0x6d0 [ 2289.610324] ? __lock_acquire+0x1657/0x5b00 [ 2289.610838] ___sys_sendmsg+0xc6/0x170 [ 2289.611285] ? sendmsg_copy_msghdr+0x160/0x160 [ 2289.611741] FAT-fs (loop4): Directory bread(block 11) failed [ 2289.611829] ? __fget_files+0x2cf/0x520 [ 2289.613639] ? lock_acquire+0x197/0x470 [ 2289.614099] ? find_held_lock+0x2c/0x110 [ 2289.614565] ? __might_fault+0xd3/0x180 [ 2289.615034] ? lock_downgrade+0x6d0/0x6d0 [ 2289.615520] __sys_sendmmsg+0x195/0x470 [ 2289.615988] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2289.616491] ? lock_downgrade+0x6d0/0x6d0 [ 2289.616996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2289.617548] ? wait_for_completion_io+0x270/0x270 [ 2289.618109] ? rcu_read_lock_any_held+0x75/0xa0 [ 2289.618636] ? vfs_write+0x354/0xb10 [ 2289.619078] ? fput_many+0x2f/0x1a0 [ 2289.619508] ? ksys_write+0x1a9/0x260 [ 2289.619956] ? __ia32_sys_read+0xb0/0xb0 [ 2289.620425] __x64_sys_sendmmsg+0x99/0x100 [ 2289.620935] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2289.621526] do_syscall_64+0x33/0x40 [ 2289.621953] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.622542] RIP: 0033:0x7f6413bdcb19 [ 2289.622969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.625084] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2289.625957] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2289.626762] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2289.627581] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.628489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.629475] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:32:44 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa09e42, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:32:44 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 49) 01:32:44 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 01:32:44 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 32) 01:32:44 executing program 7: pidfd_send_signal(0xffffffffffffffff, 0x1d, &(0x7f0000000000)={0x3f, 0x401, 0x48}, 0x0) pipe2$9p(&(0x7f00000002c0), 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000003000000008000000000000007000000000000000200000008000000060000000000000000000000000000000000000000000000000000000000000003000000040000000000000000000000000000000000000020000000000000000500"/192]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5}) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f0000000100)="47e65e5b74276fc8eab570d227eaa047c2aeff3be59ab24fea113c594cbb00f4e1f0178c862562ff441b21842b9d71c341aa2853a15b01d0797ce749e38178e7737247bf010f9211e8edfb48c878bc277f136cc6e99faa020f73e944b61edaba0d06f081d45b7a94ab91c8efdae3"}], 0x1000041f) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000003c0)) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f00000001c0)={0x8, 0x5, 0xf, 0x1, 0x3, 0x8, 0x1, 0x10b, 0x1}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') [ 2289.749217] FAULT_INJECTION: forcing a failure. [ 2289.749217] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.750699] CPU: 1 PID: 11332 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2289.751502] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.752461] Call Trace: [ 2289.752782] dump_stack+0x107/0x167 [ 2289.753205] should_fail.cold+0x5/0xa [ 2289.753643] ? create_object.isra.0+0x3a/0xa20 [ 2289.754166] should_failslab+0x5/0x20 [ 2289.754598] kmem_cache_alloc+0x5b/0x310 [ 2289.755060] ? ____sys_sendmsg+0x334/0x870 [ 2289.755558] ? ___sys_sendmsg+0xf3/0x170 [ 2289.756025] create_object.isra.0+0x3a/0xa20 [ 2289.756546] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2289.757153] kmem_cache_alloc_node+0x169/0x330 [ 2289.757699] __alloc_skb+0x6d/0x5b0 [ 2289.758129] alloc_skb_with_frags+0x92/0x570 [ 2289.758645] ? quarantine_put+0x8b/0x1a0 [ 2289.759130] ? kmem_cache_free+0xa7/0x2d0 [ 2289.759627] sock_alloc_send_pskb+0x7af/0x930 [ 2289.760158] ? sk_alloc+0x350/0x350 [ 2289.760594] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2289.760900] FAULT_INJECTION: forcing a failure. [ 2289.760900] name failslab, interval 1, probability 0, space 0, times 0 [ 2289.761221] ? __local_bh_enable_ip+0x9d/0x100 [ 2289.761232] ? trace_hardirqs_on+0x5b/0x180 [ 2289.761243] ? __dev_queue_xmit+0xdf8/0x2690 [ 2289.761268] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2289.766033] ? ip6_mtu+0x1bb/0x3d0 [ 2289.766453] ? lock_downgrade+0x6d0/0x6d0 [ 2289.766941] ? ip_frag_init+0x350/0x350 [ 2289.767404] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2289.767973] ? ip6_mtu+0x1e9/0x3d0 [ 2289.768387] ? ip6_setup_cork+0xfb7/0x1740 [ 2289.768895] ip6_make_skb+0x2de/0x4e0 [ 2289.769338] ? ip_frag_init+0x350/0x350 [ 2289.769806] ? ip_frag_init+0x350/0x350 [ 2289.770269] ? ip6_push_pending_frames+0xf0/0xf0 [ 2289.770836] ? ip6_dst_check+0x389/0x8d0 [ 2289.771308] ? sk_dst_check+0x235/0x4c0 [ 2289.771781] udpv6_sendmsg+0x20d3/0x2ad0 [ 2289.772250] ? ip_frag_init+0x350/0x350 [ 2289.772737] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.773350] ? lock_acquire+0x197/0x470 [ 2289.773818] ? find_held_lock+0x2c/0x110 [ 2289.774296] ? sock_has_perm+0x1ea/0x280 [ 2289.774784] ? __import_iovec+0x458/0x590 [ 2289.775268] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.775880] inet6_sendmsg+0x105/0x140 [ 2289.776329] ? inet6_compat_ioctl+0x320/0x320 [ 2289.776875] __sock_sendmsg+0xf2/0x190 [ 2289.777332] ____sys_sendmsg+0x334/0x870 [ 2289.777817] ? sock_write_iter+0x3d0/0x3d0 [ 2289.778305] ? do_recvmmsg+0x6d0/0x6d0 [ 2289.778769] ? __lock_acquire+0x1657/0x5b00 [ 2289.779276] ___sys_sendmsg+0xf3/0x170 [ 2289.779736] ? sendmsg_copy_msghdr+0x160/0x160 [ 2289.780269] ? __fget_files+0x2cf/0x520 [ 2289.780756] ? lock_acquire+0x197/0x470 [ 2289.781213] ? find_held_lock+0x2c/0x110 [ 2289.781696] ? __might_fault+0xd3/0x180 [ 2289.782159] ? lock_downgrade+0x6d0/0x6d0 [ 2289.782656] __sys_sendmmsg+0x195/0x470 [ 2289.783126] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2289.783635] ? lock_downgrade+0x6d0/0x6d0 [ 2289.784129] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2289.784698] ? wait_for_completion_io+0x270/0x270 [ 2289.785286] ? rcu_read_lock_any_held+0x75/0xa0 [ 2289.785832] ? vfs_write+0x354/0xb10 [ 2289.786270] ? fput_many+0x2f/0x1a0 [ 2289.786698] ? ksys_write+0x1a9/0x260 [ 2289.787143] ? __ia32_sys_read+0xb0/0xb0 [ 2289.787627] __x64_sys_sendmmsg+0x99/0x100 [ 2289.788124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2289.788742] do_syscall_64+0x33/0x40 [ 2289.789182] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.789797] RIP: 0033:0x7f6413bdcb19 [ 2289.790233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.792413] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2289.793316] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2289.794161] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2289.795007] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.795831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.796670] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2289.797544] CPU: 0 PID: 11330 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2289.799092] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2289.800948] Call Trace: [ 2289.801540] dump_stack+0x107/0x167 [ 2289.802350] should_fail.cold+0x5/0xa [ 2289.803198] should_failslab+0x5/0x20 [ 2289.804030] __kmalloc_node_track_caller+0x74/0x3b0 [ 2289.805156] ? alloc_skb_with_frags+0x92/0x570 [ 2289.806180] __alloc_skb+0xb1/0x5b0 [ 2289.806997] alloc_skb_with_frags+0x92/0x570 [ 2289.807947] ? sch_direct_xmit+0x1fb/0x790 [ 2289.808901] ? lock_acquire+0x197/0x470 [ 2289.809789] ? find_held_lock+0x2c/0x110 [ 2289.810699] sock_alloc_send_pskb+0x7af/0x930 [ 2289.811678] ? sk_alloc+0x350/0x350 [ 2289.812498] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2289.813685] ? __local_bh_enable_ip+0x9d/0x100 [ 2289.814708] ? trace_hardirqs_on+0x5b/0x180 [ 2289.815640] ? __dev_queue_xmit+0xdf8/0x2690 [ 2289.816609] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2289.817713] ? ip6_mtu+0x1bb/0x3d0 [ 2289.818494] ? lock_downgrade+0x6d0/0x6d0 [ 2289.819388] ? ip_frag_init+0x350/0x350 [ 2289.820265] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2289.821345] ? ip6_mtu+0x1e9/0x3d0 [ 2289.822139] ? ip6_setup_cork+0xfb7/0x1740 [ 2289.823076] ip6_make_skb+0x2de/0x4e0 [ 2289.823883] ? ip_frag_init+0x350/0x350 [ 2289.824788] ? ip_frag_init+0x350/0x350 [ 2289.825675] ? ip6_push_pending_frames+0xf0/0xf0 [ 2289.826756] ? ip6_dst_check+0x389/0x8d0 [ 2289.827670] ? sk_dst_check+0x235/0x4c0 01:32:44 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) [ 2289.828530] udpv6_sendmsg+0x20d3/0x2ad0 [ 2289.829571] ? ip_frag_init+0x350/0x350 [ 2289.830422] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.831479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2289.832549] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2289.833663] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2289.834724] ? lock_acquire+0x197/0x470 [ 2289.835529] ? find_held_lock+0x2c/0x110 [ 2289.836366] ? sock_has_perm+0x1ea/0x280 [ 2289.837214] ? __import_iovec+0x458/0x590 [ 2289.838049] ? udp_v6_push_pending_frames+0x360/0x360 [ 2289.839107] inet6_sendmsg+0x105/0x140 [ 2289.839896] ? inet6_compat_ioctl+0x320/0x320 [ 2289.840820] __sock_sendmsg+0xf2/0x190 [ 2289.841617] ____sys_sendmsg+0x334/0x870 [ 2289.842440] ? sock_write_iter+0x3d0/0x3d0 [ 2289.843291] ? do_recvmmsg+0x6d0/0x6d0 [ 2289.844078] ? __lock_acquire+0x1657/0x5b00 [ 2289.844969] ___sys_sendmsg+0xf3/0x170 [ 2289.845757] ? sendmsg_copy_msghdr+0x160/0x160 [ 2289.846685] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2289.847589] ? _raw_spin_unlock_irq+0x27/0x30 [ 2289.848499] ? lock_acquire+0x197/0x470 [ 2289.849322] ? find_held_lock+0x2c/0x110 [ 2289.850153] ? __might_fault+0xd3/0x180 [ 2289.850965] ? lock_downgrade+0x6d0/0x6d0 [ 2289.851802] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2289.852928] __sys_sendmmsg+0x195/0x470 [ 2289.853737] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2289.854610] ? lock_downgrade+0x6d0/0x6d0 [ 2289.855459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2289.856438] ? wait_for_completion_io+0x270/0x270 [ 2289.857429] ? rcu_read_lock_any_held+0x75/0xa0 [ 2289.858366] ? vfs_write+0x354/0xb10 [ 2289.859120] ? fput_many+0x2f/0x1a0 [ 2289.859864] ? ksys_write+0x1a9/0x260 [ 2289.860634] ? __ia32_sys_read+0xb0/0xb0 [ 2289.861469] __x64_sys_sendmmsg+0x99/0x100 [ 2289.862325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2289.863360] do_syscall_64+0x33/0x40 [ 2289.864107] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2289.865145] RIP: 0033:0x7f9d078eeb19 [ 2289.865902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2289.869604] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2289.871129] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2289.872577] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2289.874029] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2289.875456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2289.876902] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:32:59 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:32:59 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r1 = creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) flock(r1, 0x6) r2 = socket$inet(0x2, 0x2, 0x7fffffff) copy_file_range(r0, 0x0, r2, &(0x7f0000000040)=0x100, 0x13, 0x0) 01:32:59 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 50) 01:32:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x3000000, 0x8000) 01:32:59 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 33) 01:32:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000300)={r1, 0x8, 0x3, 0xdf}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000380)={{r4}, 0x9, 0x6, 0x806}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @local}, 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) r7 = accept4(r1, &(0x7f0000000240)=@rc={0x1f, @fixed}, &(0x7f00000001c0)=0x80, 0x800) bind$packet(r7, &(0x7f00000002c0)={0x11, 0x1a, r2, 0x1, 0x40, 0x6, @remote}, 0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000180)={0x6, 'sit0\x00', {0x4b24}, 0x9}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x37, r2}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x9b) bind$packet(r5, &(0x7f0000000340)={0x11, 0x1b, r2, 0x1, 0x2}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x401, r2}) write$P9_RCLUNK(r8, 0x0, 0x0) 01:32:59 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x0, 0x0) 01:32:59 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x321, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2304.132910] FAULT_INJECTION: forcing a failure. [ 2304.132910] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.136564] CPU: 1 PID: 11362 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2304.138178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.140376] Call Trace: [ 2304.141012] dump_stack+0x107/0x167 [ 2304.141837] should_fail.cold+0x5/0xa [ 2304.142688] should_failslab+0x5/0x20 [ 2304.143565] __kmalloc_node_track_caller+0x74/0x3b0 [ 2304.144716] ? alloc_skb_with_frags+0x92/0x570 [ 2304.145761] __alloc_skb+0xb1/0x5b0 [ 2304.146593] alloc_skb_with_frags+0x92/0x570 [ 2304.147608] ? quarantine_put+0x8b/0x1a0 [ 2304.148566] ? kmem_cache_free+0xa7/0x2d0 [ 2304.149673] sock_alloc_send_pskb+0x7af/0x930 [ 2304.150680] ? sk_alloc+0x350/0x350 [ 2304.151500] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2304.152931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2304.154112] ? mark_lock+0xf5/0x2df0 [ 2304.154939] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2304.156066] ? ip6_mtu+0x1bb/0x3d0 [ 2304.156885] ? lock_downgrade+0x6d0/0x6d0 [ 2304.157814] ? ip_frag_init+0x350/0x350 [ 2304.158733] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2304.159830] ? ip6_mtu+0x1e9/0x3d0 [ 2304.160654] ? ip6_setup_cork+0xfb7/0x1740 [ 2304.161616] ip6_make_skb+0x2de/0x4e0 [ 2304.162655] ? ip_frag_init+0x350/0x350 [ 2304.163548] ? ip_frag_init+0x350/0x350 [ 2304.164432] ? ip6_push_pending_frames+0xf0/0xf0 [ 2304.165512] ? ip6_dst_check+0x389/0x8d0 [ 2304.166416] ? sk_dst_check+0x235/0x4c0 [ 2304.167395] udpv6_sendmsg+0x20d3/0x2ad0 [ 2304.168413] ? ip_frag_init+0x350/0x350 [ 2304.169348] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.170540] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.171713] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.172941] ? trace_hardirqs_on+0x5b/0x180 [ 2304.174144] ? lock_acquire+0x1b9/0x470 [ 2304.175075] ? find_held_lock+0x2c/0x110 [ 2304.176203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.177413] ? sock_has_perm+0x1ea/0x280 [ 2304.178353] ? __import_iovec+0x9a/0x590 [ 2304.179272] ? __import_iovec+0x458/0x590 [ 2304.180242] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.181411] inet6_sendmsg+0x105/0x140 [ 2304.182273] ? inet6_compat_ioctl+0x320/0x320 [ 2304.183305] __sock_sendmsg+0xf2/0x190 [ 2304.184183] ____sys_sendmsg+0x334/0x870 [ 2304.185128] ? sock_write_iter+0x3d0/0x3d0 [ 2304.186290] ? do_recvmmsg+0x6d0/0x6d0 [ 2304.187248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.188404] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.189617] ? trace_hardirqs_on+0x5b/0x180 [ 2304.190594] ___sys_sendmsg+0xf3/0x170 [ 2304.191649] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.192706] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2304.193746] ? _raw_spin_unlock_irq+0x27/0x30 [ 2304.194769] ? finish_task_switch+0x1a4/0x5d0 [ 2304.195810] ? __switch_to+0x572/0xf70 [ 2304.196698] ? __switch_to_asm+0x3a/0x60 [ 2304.197588] ? __switch_to_asm+0x34/0x60 [ 2304.198477] ? __schedule+0x82c/0x1ea0 [ 2304.199339] ? io_schedule_timeout+0x140/0x140 [ 2304.200387] __sys_sendmmsg+0x195/0x470 [ 2304.201383] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2304.202341] ? lock_downgrade+0x6d0/0x6d0 [ 2304.203296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2304.204405] ? wait_for_completion_io+0x270/0x270 [ 2304.205522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.206640] ? vfs_write+0x354/0xb10 [ 2304.207488] ? fput_many+0x2f/0x1a0 [ 2304.208471] ? ksys_write+0x1a9/0x260 [ 2304.209360] ? __ia32_sys_read+0xb0/0xb0 [ 2304.210259] __x64_sys_sendmmsg+0x99/0x100 [ 2304.211215] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.212365] do_syscall_64+0x33/0x40 [ 2304.213240] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2304.214656] RIP: 0033:0x7f6413bdcb19 [ 2304.215561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.220326] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2304.222455] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2304.224058] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2304.225682] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.227241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2304.228823] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2304.242576] FAT-fs (loop4): Directory bread(block 10) failed [ 2304.247037] FAULT_INJECTION: forcing a failure. [ 2304.247037] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.249535] CPU: 0 PID: 11363 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2304.250983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.252732] Call Trace: [ 2304.253297] dump_stack+0x107/0x167 [ 2304.254072] should_fail.cold+0x5/0xa [ 2304.254899] ? create_object.isra.0+0x3a/0xa20 [ 2304.255885] should_failslab+0x5/0x20 [ 2304.256712] kmem_cache_alloc+0x5b/0x310 [ 2304.257610] create_object.isra.0+0x3a/0xa20 [ 2304.258559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2304.259662] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2304.260760] ? alloc_skb_with_frags+0x92/0x570 [ 2304.261795] __alloc_skb+0xb1/0x5b0 [ 2304.262583] alloc_skb_with_frags+0x92/0x570 [ 2304.263533] ? sch_direct_xmit+0x1fb/0x790 [ 2304.264452] ? lock_acquire+0x197/0x470 [ 2304.265318] ? find_held_lock+0x2c/0x110 [ 2304.266195] sock_alloc_send_pskb+0x7af/0x930 [ 2304.267173] ? sk_alloc+0x350/0x350 [ 2304.267962] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2304.269095] ? __local_bh_enable_ip+0x9d/0x100 [ 2304.270079] ? trace_hardirqs_on+0x5b/0x180 [ 2304.271009] ? __dev_queue_xmit+0xdf8/0x2690 [ 2304.271960] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2304.273044] ? ip6_mtu+0x1bb/0x3d0 [ 2304.273816] ? lock_downgrade+0x6d0/0x6d0 [ 2304.274700] ? ip_frag_init+0x350/0x350 [ 2304.275562] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2304.276588] ? ip6_mtu+0x1e9/0x3d0 [ 2304.277357] ? ip6_setup_cork+0xfb7/0x1740 [ 2304.278254] ip6_make_skb+0x2de/0x4e0 [ 2304.279072] ? ip_frag_init+0x350/0x350 [ 2304.279925] ? ip_frag_init+0x350/0x350 [ 2304.280776] ? ip6_push_pending_frames+0xf0/0xf0 [ 2304.281796] ? ip6_dst_check+0x389/0x8d0 [ 2304.282660] ? sk_dst_check+0x235/0x4c0 [ 2304.283514] udpv6_sendmsg+0x20d3/0x2ad0 [ 2304.284368] ? ip_frag_init+0x350/0x350 [ 2304.285219] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.286352] ? lock_acquire+0x197/0x470 [ 2304.287195] ? find_held_lock+0x2c/0x110 [ 2304.288079] ? sock_has_perm+0x1ea/0x280 [ 2304.288946] ? __import_iovec+0x458/0x590 [ 2304.289482] FAULT_INJECTION: forcing a failure. [ 2304.289482] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.289843] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.293422] inet6_sendmsg+0x105/0x140 [ 2304.294242] ? inet6_compat_ioctl+0x320/0x320 [ 2304.295186] __sock_sendmsg+0xf2/0x190 [ 2304.296007] ____sys_sendmsg+0x334/0x870 [ 2304.296858] ? sock_write_iter+0x3d0/0x3d0 [ 2304.297773] ? do_recvmmsg+0x6d0/0x6d0 [ 2304.298601] ? __lock_acquire+0x1657/0x5b00 [ 2304.299521] ___sys_sendmsg+0xf3/0x170 [ 2304.300339] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.301313] ? __fget_files+0x2cf/0x520 [ 2304.302144] ? lock_acquire+0x197/0x470 [ 2304.302980] ? find_held_lock+0x2c/0x110 [ 2304.303836] ? __might_fault+0xd3/0x180 [ 2304.304675] ? lock_downgrade+0x6d0/0x6d0 [ 2304.305570] __sys_sendmmsg+0x195/0x470 [ 2304.306419] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2304.307326] ? lock_downgrade+0x6d0/0x6d0 [ 2304.308222] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2304.309248] ? wait_for_completion_io+0x270/0x270 [ 2304.310267] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.311246] ? vfs_write+0x354/0xb10 [ 2304.312025] ? fput_many+0x2f/0x1a0 [ 2304.312790] ? ksys_write+0x1a9/0x260 [ 2304.313620] ? __ia32_sys_read+0xb0/0xb0 [ 2304.314502] __x64_sys_sendmmsg+0x99/0x100 [ 2304.315415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.316527] do_syscall_64+0x33/0x40 [ 2304.317333] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2304.318436] RIP: 0033:0x7f9d078eeb19 [ 2304.319239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.323233] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2304.324825] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2304.326333] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2304.327879] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.329395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2304.330940] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2304.332518] CPU: 1 PID: 11369 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2304.334099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.335937] Call Trace: [ 2304.336534] dump_stack+0x107/0x167 [ 2304.337378] should_fail.cold+0x5/0xa [ 2304.338239] ? create_object.isra.0+0x3a/0xa20 [ 2304.339359] should_failslab+0x5/0x20 [ 2304.340204] kmem_cache_alloc+0x5b/0x310 [ 2304.341120] create_object.isra.0+0x3a/0xa20 [ 2304.342112] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2304.343256] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2304.344394] ? alloc_skb_with_frags+0x92/0x570 [ 2304.345419] __alloc_skb+0xb1/0x5b0 [ 2304.346229] alloc_skb_with_frags+0x92/0x570 [ 2304.347194] ? quarantine_put+0x8b/0x1a0 [ 2304.348103] ? kmem_cache_free+0xa7/0x2d0 [ 2304.349038] sock_alloc_send_pskb+0x7af/0x930 [ 2304.350073] ? sk_alloc+0x350/0x350 [ 2304.350912] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2304.352104] ? __local_bh_enable_ip+0x9d/0x100 [ 2304.353157] ? trace_hardirqs_on+0x5b/0x180 [ 2304.354183] ? __dev_queue_xmit+0xdf8/0x2690 01:32:59 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 34) [ 2304.355185] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2304.356568] ? ip6_mtu+0x1bb/0x3d0 [ 2304.357499] ? lock_downgrade+0x6d0/0x6d0 [ 2304.358440] ? ip_frag_init+0x350/0x350 [ 2304.359422] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2304.360523] ? ip6_mtu+0x1e9/0x3d0 [ 2304.361383] ? ip6_setup_cork+0xfb7/0x1740 [ 2304.361588] FAT-fs (loop4): Directory bread(block 11) failed [ 2304.362339] ip6_make_skb+0x2de/0x4e0 [ 2304.362368] ? ip_frag_init+0x350/0x350 [ 2304.365613] ? ip_frag_init+0x350/0x350 [ 2304.366500] ? ip6_push_pending_frames+0xf0/0xf0 [ 2304.367557] ? ip6_dst_check+0x389/0x8d0 [ 2304.368466] ? sk_dst_check+0x235/0x4c0 [ 2304.369388] udpv6_sendmsg+0x20d3/0x2ad0 [ 2304.370387] ? ip_frag_init+0x350/0x350 [ 2304.371294] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.372466] ? lock_acquire+0x197/0x470 [ 2304.373368] ? find_held_lock+0x2c/0x110 [ 2304.374390] ? sock_has_perm+0x1ea/0x280 [ 2304.375322] ? __import_iovec+0x458/0x590 [ 2304.376241] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.377486] inet6_sendmsg+0x105/0x140 [ 2304.378372] ? inet6_compat_ioctl+0x320/0x320 [ 2304.379373] __sock_sendmsg+0xf2/0x190 [ 2304.380339] ____sys_sendmsg+0x334/0x870 [ 2304.381268] ? sock_write_iter+0x3d0/0x3d0 [ 2304.382214] ? do_recvmmsg+0x6d0/0x6d0 [ 2304.383232] ? __lock_acquire+0x1657/0x5b00 [ 2304.384208] ___sys_sendmsg+0xf3/0x170 [ 2304.385074] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.386108] ? __fget_files+0x2cf/0x520 [ 2304.386992] ? lock_acquire+0x197/0x470 [ 2304.387873] ? find_held_lock+0x2c/0x110 [ 2304.388799] ? __might_fault+0xd3/0x180 [ 2304.389690] ? lock_downgrade+0x6d0/0x6d0 [ 2304.390619] __sys_sendmmsg+0x195/0x470 [ 2304.391501] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2304.392449] ? lock_downgrade+0x6d0/0x6d0 [ 2304.393395] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2304.394476] ? wait_for_completion_io+0x270/0x270 [ 2304.395559] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.396678] ? vfs_write+0x354/0xb10 [ 2304.397530] ? fput_many+0x2f/0x1a0 [ 2304.398343] ? ksys_write+0x1a9/0x260 [ 2304.399294] ? __ia32_sys_read+0xb0/0xb0 [ 2304.400216] __x64_sys_sendmmsg+0x99/0x100 [ 2304.401158] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.402300] do_syscall_64+0x33/0x40 [ 2304.403140] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2304.404372] RIP: 0033:0x7f6413bdcb19 [ 2304.405199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.409423] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2304.411385] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2304.413097] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2304.414779] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.416367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2304.418174] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:32:59 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:32:59 executing program 5: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x17dc00, 0x9, 0x1c, 0x5, "c93128d126a4ed28ca5c40bf121da893d5c79fceb6622c5a129619cf8feb911f1642a3b975204b2a42377b9852f2dc4169e39e41a5cca7ce953a455dc4253836", "58d486531d157cae72b0549574cb6cf1f5fa8363d5710f55d867facc58ba9753", [0x7ff, 0x4]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:32:59 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') fcntl$notify(r0, 0x402, 0x80000004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000002}) 01:32:59 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x500, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2304.521857] audit: type=1400 audit(1737941579.716:12): avc: denied { block_suspend } for pid=11371 comm="syz-executor.7" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 01:32:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x4000000, 0x8000) 01:32:59 executing program 7: pipe2$9p(&(0x7f0000000080), 0x2000) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') pipe2$9p(&(0x7f0000000000), 0x4000) 01:32:59 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_complete(0x0) write$P9_RCLUNK(r1, 0x0, 0x0) splice(r0, &(0x7f0000000040)=0x5, r0, &(0x7f0000000080)=0x1ff, 0xbea0, 0x8) 01:32:59 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:32:59 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 51) 01:32:59 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 35) 01:32:59 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x600, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2304.850020] FAULT_INJECTION: forcing a failure. [ 2304.850020] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.853166] CPU: 1 PID: 11393 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2304.853821] FAULT_INJECTION: forcing a failure. [ 2304.853821] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.854897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.854908] Call Trace: [ 2304.854933] dump_stack+0x107/0x167 [ 2304.854960] should_fail.cold+0x5/0xa [ 2304.854992] ? skb_clone+0x14f/0x3d0 [ 2304.855026] should_failslab+0x5/0x20 [ 2304.855065] kmem_cache_alloc+0x5b/0x310 [ 2304.865812] skb_clone+0x14f/0x3d0 [ 2304.866696] ip6_finish_output2+0x10bf/0x1cf0 [ 2304.867807] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2304.869028] ip6_output+0x3b8/0x7e0 [ 2304.869941] ip6_local_out+0xb4/0x1a0 [ 2304.870878] ip6_send_skb+0x112/0x460 [ 2304.871811] udp_v6_send_skb+0x7aa/0x15b0 [ 2304.872828] udpv6_sendmsg+0x2116/0x2ad0 [ 2304.873974] ? ip_frag_init+0x350/0x350 [ 2304.875056] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.876319] ? perf_event_task_disable+0x390/0x390 [ 2304.877537] ? lock_acquire+0x197/0x470 [ 2304.878568] ? find_held_lock+0x2c/0x110 [ 2304.879569] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.880841] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.882175] ? sock_has_perm+0x1ea/0x280 [ 2304.883191] ? __import_iovec+0x458/0x590 [ 2304.884207] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.885480] inet6_sendmsg+0x105/0x140 [ 2304.886444] ? inet6_compat_ioctl+0x320/0x320 [ 2304.887535] __sock_sendmsg+0xf2/0x190 [ 2304.888501] ____sys_sendmsg+0x334/0x870 [ 2304.889511] ? sock_write_iter+0x3d0/0x3d0 [ 2304.890600] ? do_recvmmsg+0x6d0/0x6d0 [ 2304.891571] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2304.892910] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.894219] ? trace_hardirqs_on+0x5b/0x180 [ 2304.895286] ___sys_sendmsg+0xf3/0x170 [ 2304.896393] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.897536] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2304.898631] ? _raw_spin_unlock_irq+0x27/0x30 [ 2304.899799] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2304.900967] ? finish_task_switch+0x126/0x5d0 [ 2304.902073] ? finish_task_switch+0xef/0x5d0 [ 2304.903254] ? __switch_to+0x572/0xf70 [ 2304.904212] ? __switch_to_asm+0x3a/0x60 [ 2304.905202] ? __switch_to_asm+0x34/0x60 [ 2304.906206] ? __schedule+0x82c/0x1ea0 [ 2304.907168] ? io_schedule_timeout+0x140/0x140 [ 2304.908300] __sys_sendmmsg+0x195/0x470 [ 2304.909297] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2304.910353] ? lock_downgrade+0x6d0/0x6d0 [ 2304.911521] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2304.912775] ? wait_for_completion_io+0x270/0x270 [ 2304.913977] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.915111] ? vfs_write+0x354/0xb10 [ 2304.916132] ? fput_many+0x2f/0x1a0 [ 2304.917021] ? ksys_write+0x1a9/0x260 [ 2304.917970] ? __ia32_sys_read+0xb0/0xb0 [ 2304.919082] __x64_sys_sendmmsg+0x99/0x100 [ 2304.920130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2304.921485] do_syscall_64+0x33/0x40 [ 2304.922391] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2304.923770] RIP: 0033:0x7f9d078eeb19 [ 2304.924664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2304.929445] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2304.931419] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2304.933289] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2304.935204] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2304.936897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2304.938735] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2304.940668] CPU: 0 PID: 11398 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2304.942559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2304.944714] Call Trace: [ 2304.945444] dump_stack+0x107/0x167 [ 2304.946374] should_fail.cold+0x5/0xa [ 2304.947375] ? skb_clone+0x14f/0x3d0 [ 2304.948333] should_failslab+0x5/0x20 [ 2304.949371] kmem_cache_alloc+0x5b/0x310 [ 2304.950354] skb_clone+0x14f/0x3d0 [ 2304.951207] ip6_finish_output2+0x10bf/0x1cf0 [ 2304.952293] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2304.953508] ip6_output+0x3b8/0x7e0 [ 2304.954426] ip6_local_out+0xb4/0x1a0 [ 2304.955331] ip6_send_skb+0x112/0x460 [ 2304.956248] udp_v6_send_skb+0x7aa/0x15b0 [ 2304.957290] udpv6_sendmsg+0x2116/0x2ad0 [ 2304.958344] ? ip_frag_init+0x350/0x350 [ 2304.959385] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.960678] ? perf_event_task_disable+0x390/0x390 [ 2304.961990] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2304.963243] ? lock_acquire+0x197/0x470 [ 2304.964312] ? find_held_lock+0x2c/0x110 [ 2304.965442] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.966914] ? sock_has_perm+0x1ea/0x280 [ 2304.968041] ? __import_iovec+0x458/0x590 [ 2304.969145] ? udp_v6_push_pending_frames+0x360/0x360 [ 2304.970435] inet6_sendmsg+0x105/0x140 [ 2304.971497] ? inet6_compat_ioctl+0x320/0x320 [ 2304.972699] __sock_sendmsg+0xf2/0x190 [ 2304.973757] ____sys_sendmsg+0x334/0x870 [ 2304.974870] ? sock_write_iter+0x3d0/0x3d0 [ 2304.976001] ? do_recvmmsg+0x6d0/0x6d0 [ 2304.977013] ? __lock_acquire+0x1657/0x5b00 [ 2304.978232] ___sys_sendmsg+0xf3/0x170 [ 2304.979330] ? sendmsg_copy_msghdr+0x160/0x160 [ 2304.980579] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2304.981813] ? _raw_spin_unlock_irq+0x27/0x30 [ 2304.983047] ? lock_acquire+0x197/0x470 [ 2304.984134] ? find_held_lock+0x2c/0x110 [ 2304.985266] ? __might_fault+0xd3/0x180 [ 2304.986370] ? lock_downgrade+0x6d0/0x6d0 [ 2304.987480] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2304.988923] __sys_sendmmsg+0x195/0x470 [ 2304.989929] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2304.990904] ? lock_downgrade+0x6d0/0x6d0 [ 2304.991857] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2304.992934] ? wait_for_completion_io+0x270/0x270 [ 2304.994045] ? rcu_read_lock_any_held+0x75/0xa0 [ 2304.995095] ? vfs_write+0x354/0xb10 [ 2304.995930] ? fput_many+0x2f/0x1a0 [ 2304.996749] ? ksys_write+0x1a9/0x260 [ 2304.997620] ? __ia32_sys_read+0xb0/0xb0 [ 2304.998535] __x64_sys_sendmmsg+0x99/0x100 [ 2304.999488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2305.000627] do_syscall_64+0x33/0x40 [ 2305.001471] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2305.002602] RIP: 0033:0x7f6413bdcb19 [ 2305.003442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2305.007589] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2305.009294] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2305.010863] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2305.012429] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2305.014025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.015592] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:33:14 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 36) 01:33:14 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000000, 0x12, r1, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) io_uring_enter(r5, 0x4560, 0x858, 0x2, &(0x7f0000000200), 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@phonet={0x23, 0xfe, 0x3, 0x9}, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x1ff, 0x3, &(0x7f0000000080)="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", 0x3, 0x0, 0x1, {0x1, r4}}, 0x3) fallocate(r2, 0x0, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 01:33:14 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 52) 01:33:14 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x2000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:33:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x5000000, 0x8000) 01:33:14 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)=ANY=[@ANYBLOB="010000de5e8851a1fb935400", @ANYRES32=0xffffffffffffffff, @ANYRESOCT=r0]) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x521400) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x801, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x8004) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x1, 0x2, {0x0, 0x3, 0x55, 0x3, 0xf9c}, 0xffffffff}) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r7, 0x0, 0x0) 01:33:14 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:33:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x700, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2318.870384] FAT-fs (loop4): Directory bread(block 10) failed [ 2318.879345] FAT-fs (loop4): Directory bread(block 11) failed [ 2318.885657] FAULT_INJECTION: forcing a failure. [ 2318.885657] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.888805] CPU: 1 PID: 11409 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2318.890565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.892551] Call Trace: [ 2318.893243] dump_stack+0x107/0x167 [ 2318.894127] should_fail.cold+0x5/0xa [ 2318.895055] ? create_object.isra.0+0x3a/0xa20 [ 2318.896212] should_failslab+0x5/0x20 [ 2318.897121] kmem_cache_alloc+0x5b/0x310 [ 2318.898152] create_object.isra.0+0x3a/0xa20 [ 2318.899254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2318.900474] kmem_cache_alloc+0x159/0x310 [ 2318.901495] skb_clone+0x14f/0x3d0 [ 2318.902414] ip6_finish_output2+0x10bf/0x1cf0 [ 2318.903524] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2318.904758] ip6_output+0x3b8/0x7e0 [ 2318.905689] ip6_local_out+0xb4/0x1a0 [ 2318.906647] ip6_send_skb+0x112/0x460 [ 2318.907602] udp_v6_send_skb+0x7aa/0x15b0 [ 2318.908648] udpv6_sendmsg+0x2116/0x2ad0 [ 2318.909671] ? ip_frag_init+0x350/0x350 [ 2318.910657] ? udp_v6_push_pending_frames+0x360/0x360 [ 2318.911948] ? perf_event_task_disable+0x390/0x390 [ 2318.913157] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2318.914352] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.915627] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.916758] ? trace_hardirqs_on+0x5b/0x180 [ 2318.917682] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.918868] ? trace_hardirqs_on+0x5b/0x180 [ 2318.919804] ? sock_has_perm+0x1ea/0x280 [ 2318.920726] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.921900] ? udp_v6_push_pending_frames+0x360/0x360 [ 2318.923032] inet6_sendmsg+0x105/0x140 [ 2318.923863] ? inet6_compat_ioctl+0x320/0x320 [ 2318.924843] __sock_sendmsg+0xf2/0x190 [ 2318.925659] ____sys_sendmsg+0x334/0x870 [ 2318.926567] ? sock_write_iter+0x3d0/0x3d0 [ 2318.927503] ? do_recvmmsg+0x6d0/0x6d0 [ 2318.928364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.929475] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.930634] ? trace_hardirqs_on+0x5b/0x180 [ 2318.931609] ___sys_sendmsg+0xf3/0x170 [ 2318.932464] ? sendmsg_copy_msghdr+0x160/0x160 [ 2318.933460] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2318.934451] ? _raw_spin_unlock_irq+0x27/0x30 [ 2318.935440] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2318.936404] ? finish_task_switch+0x126/0x5d0 [ 2318.937394] ? finish_task_switch+0xef/0x5d0 [ 2318.938329] ? __switch_to+0x572/0xf70 [ 2318.939201] ? __switch_to_asm+0x3a/0x60 [ 2318.940044] ? __switch_to_asm+0x34/0x60 [ 2318.940916] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2318.942043] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.943190] ? trace_hardirqs_on+0x5b/0x180 [ 2318.944102] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2318.945310] ? __sys_sendmmsg+0x249/0x470 [ 2318.946205] __sys_sendmmsg+0x195/0x470 [ 2318.947074] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2318.948024] ? lock_downgrade+0x6d0/0x6d0 [ 2318.948946] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2318.950010] ? wait_for_completion_io+0x270/0x270 [ 2318.951058] ? rcu_read_lock_any_held+0x75/0xa0 [ 2318.952068] ? vfs_write+0x354/0xb10 [ 2318.952892] ? fput_many+0x2f/0x1a0 [ 2318.953696] ? ksys_write+0x1a9/0x260 [ 2318.954552] ? __ia32_sys_read+0xb0/0xb0 [ 2318.955442] __x64_sys_sendmmsg+0x99/0x100 [ 2318.956350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2318.957478] do_syscall_64+0x33/0x40 [ 2318.958484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2318.959828] RIP: 0033:0x7f9d078eeb19 [ 2318.960807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2318.965117] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2318.966762] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2318.968293] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2318.969818] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.971336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2318.972855] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2318.986148] FAT-fs (loop4): Directory bread(block 10) failed [ 2318.991747] FAULT_INJECTION: forcing a failure. [ 2318.991747] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.994492] CPU: 0 PID: 11423 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2318.995889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2318.997929] Call Trace: [ 2318.998595] dump_stack+0x107/0x167 [ 2318.999496] should_fail.cold+0x5/0xa [ 2319.000437] ? create_object.isra.0+0x3a/0xa20 [ 2319.001373] should_failslab+0x5/0x20 [ 2319.002310] kmem_cache_alloc+0x5b/0x310 [ 2319.003177] create_object.isra.0+0x3a/0xa20 [ 2319.004248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2319.005281] kmem_cache_alloc+0x159/0x310 [ 2319.006288] skb_clone+0x14f/0x3d0 [ 2319.007021] ip6_finish_output2+0x10bf/0x1cf0 [ 2319.008143] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2319.009379] ip6_output+0x3b8/0x7e0 [ 2319.010192] ip6_local_out+0xb4/0x1a0 [ 2319.011128] ip6_send_skb+0x112/0x460 [ 2319.011896] udp_v6_send_skb+0x7aa/0x15b0 [ 2319.012744] udpv6_sendmsg+0x2116/0x2ad0 [ 2319.013573] ? ip_frag_init+0x350/0x350 [ 2319.014398] ? udp_v6_push_pending_frames+0x360/0x360 [ 2319.015460] ? perf_event_task_disable+0x390/0x390 [ 2319.016464] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2319.017446] ? lock_acquire+0x197/0x470 [ 2319.018235] ? find_held_lock+0x2c/0x110 [ 2319.019223] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2319.020315] ? sock_has_perm+0x1ea/0x280 [ 2319.021325] ? __import_iovec+0x458/0x590 [ 2319.022211] ? udp_v6_push_pending_frames+0x360/0x360 [ 2319.023252] inet6_sendmsg+0x105/0x140 [ 2319.024043] ? inet6_compat_ioctl+0x320/0x320 [ 2319.024945] __sock_sendmsg+0xf2/0x190 [ 2319.025744] ____sys_sendmsg+0x334/0x870 [ 2319.026575] ? sock_write_iter+0x3d0/0x3d0 [ 2319.027423] ? do_recvmmsg+0x6d0/0x6d0 [ 2319.028213] ? __lock_acquire+0x1657/0x5b00 [ 2319.029059] ___sys_sendmsg+0xf3/0x170 [ 2319.029995] ? sendmsg_copy_msghdr+0x160/0x160 [ 2319.030914] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2319.031992] ? _raw_spin_unlock_irq+0x27/0x30 [ 2319.032887] ? lock_acquire+0x197/0x470 [ 2319.033890] ? find_held_lock+0x2c/0x110 [ 2319.034889] ? __might_fault+0xd3/0x180 [ 2319.035681] ? lock_downgrade+0x6d0/0x6d0 [ 2319.036694] ? io_schedule_timeout+0x140/0x140 [ 2319.037628] __sys_sendmmsg+0x195/0x470 [ 2319.038608] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2319.039486] ? lock_downgrade+0x6d0/0x6d0 [ 2319.040338] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2319.041304] ? wait_for_completion_io+0x270/0x270 [ 2319.042466] ? rcu_read_lock_any_held+0x75/0xa0 [ 2319.043585] ? vfs_write+0x354/0xb10 [ 2319.044332] ? fput_many+0x2f/0x1a0 [ 2319.045202] ? ksys_write+0x1a9/0x260 [ 2319.046007] ? __ia32_sys_read+0xb0/0xb0 [ 2319.046993] __x64_sys_sendmmsg+0x99/0x100 [ 2319.047855] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2319.049109] do_syscall_64+0x33/0x40 [ 2319.049872] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2319.051118] RIP: 0033:0x7f6413bdcb19 [ 2319.051862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.056283] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2319.058120] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2319.059822] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2319.061532] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.063253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2319.064968] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2319.071786] FAT-fs (loop4): Directory bread(block 11) failed [ 2319.089248] FAT-fs (loop4): Directory bread(block 10) failed [ 2319.117451] FAT-fs (loop4): Directory bread(block 11) failed 01:33:14 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 01:33:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r0, 0x0) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) write$binfmt_aout(r6, &(0x7f0000000340)={{0x108, 0x7, 0x3f, 0x7, 0x14e, 0x6ae, 0x19f}, "33bdcf8507e3373fbeb83a7a9f9e522a72e5535b190108fdf932fee7000bc70a6f5e7090294ddcdb049428dd323e59d5232325ae926cdd7db8d5a7bdad9a59dff57b719b206263d14f592d70ea020cc81bfe115725cbe9892b9da9e20a373f97919ccb5d715a330ce8c9ff7f7b60c8", ['\x00', '\x00', '\x00', '\x00']}, 0x48f) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x240, 0x6000, 0x1}, 0x7fffffff) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:33:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ftruncate(r0, 0x3f) pipe2$9p(&(0x7f00000002c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x8000, 0x10000, 0x435}) r2 = pidfd_getfd(r1, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000003940)="ba020000008ad62e75da1684ffe460aea20cc5118005000000000000008b2fafc9288a11a1d6fd0d56009e4e6709a4e20ed8c47edb6c10f7083829ac71ab1eaef6c3d38e6fec4c2427cace43f35d2fe1edcf81542d61fb938af469ca97fc7e44dd7f", 0x62}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) readv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000001300)=""/148, 0x94}], 0x4) r5 = open$dir(&(0x7f0000000080)='./file1\x00', 0x0, 0x10) linkat(r3, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x1000) r6 = syz_mount_image$nfs(&(0x7f0000001400), &(0x7f0000001440)='./file1\x00', 0x0, 0x5, &(0x7f0000003780)=[{&(0x7f0000001480)="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", 0xfe, 0x3}, {&(0x7f0000001580)="da6a39aa05eccf44622b4c5c462e1e1dcf88fa8950fab2e629a06b00b2d86b1c606270cee2bdba3ee3197c15bb387a037be9a9011ae78f5818717ee16d3025f1e2723e061b290c49763593b3ad010ddc3a591c0e139d2c204459fa415d4d6bca9e2854dbe36be2d643830fc3750b44f298a0bcf18106b11dd694a84e69aa84a6530063be1da4c1a0a45693de596af4685892b20032b04db6c51b5c57756d248370bc76f4a4777437a801cfdd6f77cbfeb26e2277cc5395694ad13b4efc1d4dd5319751b46e2edc289ddf8b60b20ade2fecb36da7e134ceef18f0e2b72d813aa2947485f689435b187a179a4223811851b3f17e2690d88d18", 0xf8, 0x101}, {&(0x7f0000001680)="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", 0x1000, 0x100000000}, {&(0x7f0000002680)="c8b7006cac6b69937201e8ba30d8bedc0c419b9ff3d23b62038551fa7eda7bfc857e9f27397275c440d7de31d2961afb24c1f9fda3ef792076c8fe120c0e76da7171a5943756842772499d666d892182f8ca59c2a22c988385b52c14b459708064e4e788ed33dae712349752c93a4ce2b62203ecddfc44b2cb491744d843d26c46e0d5600bf663497a10cd481a63153554058e2957de219e142342f14a6139c0a5c6396c324bef26c43145062b1b9c0a5860144f230f3ba6672c958c6c8797187279cd02065e3cfd2d450669f53d35c545e9c95b3f55bc75841af51c6f6d422f70138e18d3d457e3da4e819ccecf063ee40b950441420dfa10a44025", 0xfc, 0x58fe}, {&(0x7f0000002780)="fb2adc0e81fd16e7ebecb2becc9c1046658893c64965f11273b9e30153c3044345173e589781d42a838abdf6075244e53648ef9837160322af06c3ac3f41350997d192526ca1f683a73c160d18c0e02bdceaf5133bffc712f057d2877b8775d699902b49cdb73c8eba27a3d4ecf1f82425470ef5638a674c763538338cf691f21b24e6c8f218ee6c4e80ec263f7ea5d6e763b0c6d85fcbdb6efdfb6dd2d0e71441c8a271ae9f31ae36d38e39cede4f08fdaf26310f6b49a93fef65db0caac0636abcc0c587df589aa3814704f61f9d7154d71c8935b4926fab8132fbfd812921216df6551ba4404af6fda1aac73a82d1f7f9c22f05be8cbf52fcdb138968c5e6e1f12b11662b8e55e37a64c95c93cf6e64e585ac68527ecd539b66828390af40ca164ced906f3bd6aab9b6edea7dffc892fc2beac6160ebb6379c043c4bb386b3868048a2ddab565241a16346ff930adc2b77b8daff986f24c5e3c83b98329739eded3b04414bda41e32f2717b4ec3d7da1ee225c7a733391438c7ca0d5e66bc65fc2540c8faa56271372f35d77b70b269e423f9d4018ec8ddbf25805e9602cd483101173362804ed43856be10fe696b99f6f5b7260710b2131bba162701b9361a324678fb49b82c6061f352b808ee732fb3d4049dcab1c5e08356a710ed83e6ec64a465a498cac8c3b0105c53dba3c83644afe89f7ddd01f0bd360edc132aa995293ec85b215b9617b2102b3698a36c4e0d87b87dedc2a6c85c4866d0bad0cc9ca9ebeea1a58743133d64c1c1d84d24c4e40c685cfdb26b46bd48cfc1bed4e2a3e07ec7b9961d4da06e0fc48406c8337bdca82a2bf346432ff263717a9ad82cd89fc5fc8ac6e071defe1c081fcac98efc31a51d153526305d023345357f9208ef18767aa79cd1b7c3d22fcf1d51449d0554945d56cb1d556834e36e760d840784fb36909aca843504f4cc3d403ec1dfb83d443c16fb7570a5a6c0d24686d502fcc540c26e6396cadab6efa7071f26de7e2927aa0262962e6298957f484afb0a98167bc61c8c36ff45ccaa9626b6c36b499d2a7dc4707338c6bf1ee32d3bf0e491d9b65d88d12c14d47ef605ed2c1b2759bb5a4e34a5ca9a867d8d1cd5f7fc0d280ed30e97d688662710613f866d2b24a3b93320a2331432c545386143ebfa6e92bb3a280c9d48a868e868100a448fccdc6510838645556f497c81982d4aedaa25a7ee0f55b94929be94bcbf0549083c115d4b2d4e0993340d4481a099ce0b93a4481e368c510cd1ea14f01dc2344824051b033d91b65835308416f38a56bc7c0509dec2380b30426f7f685367a7ba47beff88e58921bdd094417786c069b160be8bee8850d49f94a397183b20095eaf20dfeb086aa19cab02a181fc056ddb8bdba369efa4a8c4076591cd6cfbb9fc64eebb0f50c7ab5414bf6a4d082c29830c9c4bb45ee044be47701d7e2fe196a689db8690dc6598843f2f8f941d07a7623659a0335597ecd12afc79d04525c46a2bc1fc1371d9499c68e97eb8712c09541889481ed8b96cfbd8e3d6a18c3de7b331b341a3daa5ea9f39669ff7442334ee24f61a2e6ba4e1dc6d2259a8b731d0b63bb7ac5f6cfc185f128606fa8c7ad616a5e6fd4becd3d64ca67171064279e6f3cf78b0b07b343fbd538e32e4b1dc9717eb0584e3bcd3ae03f9a33f499bf953893859ae340ab57e4f6034d3f0e3ee3fd392e684fc13ab6a939bcfb14a96508af8ae9164a803be7704fd96d6dd4dbbb3124ec8975993a43b595f7e31719e4e490be0df6f01bfbbc1fe2d3c4900437980c0815f244baa1b4ce159088ca78e46ee093c4ae187cb5955b563ee31efc4b5b798a34f1b49ff40fb625ef51f369b3c2d85e15f814a36b72e1a33c291f9198f20ce02413dc330fd0f49e1359415de27f0749eb5b3c5e2482ca4c19802b9cfc72dcb440a6a9e2cabd1ff73b75da5e5713e5c47e0506862106f7c62ebaf767eaf2ddedf4a8abbf743857e8722e74581faa6faba5e1a1eee1fe70912ebaad34a2d7455858bb3d8bd197de8263cf642eef56c64f35015076902291d4c7525d876e5e7fdafdf47bd89c3ffa70ef4f093f62cf77ce5f031b24a1c3f9ea0e05051e4645c1e9df6b09a3555ca48ee1287f49f8103d71869cbd5ea49fc708ae49424fbf40bc611eabe3239cbec036daca59d68eb34c77f81e70ad5cbd81d759b7f1268f8f84ec8c73869d89ff9e958fb066d10cd1366b9823a23b3a1dca66500761c3c0918b86085c871efde7c3680c590fdf5d28c84bcbe518e8bdb5124084b839c4108abfc11e96912a627067415df16319b656eb7a7cb9a4703c42f102e034c7aac8cd474b6e713a5004ee29978dcbbf59b421959a0dc5efc9440dfee6806da59728a4ebe84027df2d75a1bc0ece88d361131e1a509c72f8d7da8b8b64ec6333b6623e3915a0e7e81ac4bde973fa61edd09479c22b55b3fb4baa223112e14ef7d0dcc439c63e23c1d852169e51012e792cacb582c974ea62ccf74131dd621f639d03798efdc9c4c88a8984cf614ca2d2f1e4e7e431fbf1ec8e7b71b4c38419d888ba8bec7ad037dfbb63f5e74ec26e51663f3f0a6e02c703b284fa4f6802fd85328c3e0612f51dccec8effa3c259771156a8515f998d086882cb1dda972cac5d47775920ee4e10afba9d8bcab2c94f311e32f11e746f271356bfbdd6a6347cedae752fe1106c2149987ff278e064e39e7b7d912b5d43832495d2f69165c09d6d485bc101c9bdda08ef9a489c023fc1bb98062ffed7338c85f3b04ffdd58efa15cfd3efd25b073655b384fa72c6dab6b19aca4802b71ab76e1921bc74082ef1d9c8c37257c6d401736f73f20ab34155a7178b3c7fdfa7d012a3d6d2a7bd1bae531c03f21ddb74a2764454c5d3959cd64e52f3c9c8b40f2a3b58ad2b6996c3aa2a315054c2d23677ca88be75f294129d493b58224a4b7deb5c817f6deff553c78ca7abf118d9c90c7a591f2979308082378d52c9bf8cafb26c717c55f8420b9bc6c0a764c26e45602c05418b54a5517672dbfac3c118fccecdfc782f53246aca75c09db7ed9af7e5c49d565e5366669b4dfa8fab8b89441e6c83a63a68d8e7c6a75f1d092723a9da92128d965eadbec07cba71241cddbec6b2b6a4bc8920ca7985dc12b5e10d6dd4a6e87427915bc6f203cc26cf6a4f14aba6920685fd52fb92617a5801936138551773074b5401d3ee5b9dea690c658cb3cab77d62d88b10e6ecdfbc7714b007870d884592d17635ff1f663a1e42aa4e6d7a50cfd02abff8d09ca0812cdf699bf7450016869f6408a18abeab2280189621c364aaff98d3e31a7e160f81e8886f3fc3be980dbee113cce4296d3eba8db43bc961aa4106eb5ff41f4af6e1b78941783cf6064bb744e4de9dabb88b96be5021eea776f65ed8bf3a0f3d57e73e9150cc7a31f26f7e1582cc20a4ff9815e061fba84997a5b65653ebddca3885ce8097110aeb7359fcb24ff92d4fb06ca2a43c126d6d30582d8b4a0c07f41392025afe5e7150326f6f52700b87c8dd213a5034712b66a64acdc5c8b4a088ec17dfd6705e4416948f6652369a1def1b736ee6e45cfaea7998b1249f3136b75efc32ba3f85a354f01975185cdc8ef30fbb4e484c8d7abdd8436860605bcef3560c7949e0a4210f4b32a70576aa6b66f893e3fa210a0066cc9a9ece55d26a5e3102e9641a09813766a5a2da399a21f9428f61905881d39a814fbada9f76e8e81b7b1a3f303a702e377dd6a3c19e470304bfa5c6b38cd0ea116fd27aff0f0fee007b5dcd362aaaad2d799a71660875575fa222ac8cad4de99fd254c1dd0f73dca61871eeecdc54b77300e646d89b792083e8027e32f38277317b9c085e06c9c4b482dae8046817aee8850d8f01cce802b7d4baff19cc5af98f8583da1ce5dc1570bacc2235f91e81b4f9b1346106af2034779123f4dcd1fa50fd585e28edf93af832a708b1867f7880c8366ff51bfba7db6bd9e180f24c4801793a4f81e2b891b8f0c8bc1ce365fed5699f3f627427f5b2c05b8df597462785389592a7e824c3789c051c4f388d07b2209c72aca16054b73d687627d4b0feaa3f30c3c12669ee60673f6917661a292d62b5f0d9aeed13066e1568acaa8b300e623ddf745e3ed83fe42941bdf89ce770b0d3db1c79cdbb009093f3fef98f559cb64d7d8bd41e84e9482a91ec406be5f75ec3789eb138d10b60a6361ab64e0f0879fc364af7d670124b7153e67fe998b2e8b070d6ebb282405b312b09f31f9ea5475dccc900fa4fe9f6760bcb93fe4d58fd9b16963d9acbbd96ab2e1dde42a6377b4005203ec0e7b5f3082834ffb855445dbf9857463da9a79ad6e31b1ee3afd0be53807bfd100f49edc6c83002527eb770cbba4b19ab85b2e340fd3d484a0c49a33f57e4030d140d9296cbec49adeaa6fb9adc2cc5c73046d772f9793a22f6a063453ba3e358cf50e9f7a7fbcb29b1182f578da040196999beaf8be69213e27c95d3265c98a2432f7fb8060ccda9c662a567b489efc5376c13de5a5bbe5f59720f8f29bd86c7febdfa04adfd7030f5fb4f907707bdcd61044ae88313cfeaed25b23952ef77a9544c15afd6609ae4758cef1dbdc481faeb2fb81224d0b75a0b089553bf8fe6d9b30dae287745b4903d083fb8c3c53e6849e20ca302b9198d9e2fadcf68261a1a40e43f7597fa7295b5b71dc228a0996f54cfc8713b2bc766e9c0d0560daf111ae23c7272eb4b32cddc24ee3d554d640fc7e3f4dce0849afbd2043b4ae890173f1c407f1576e65bd9ff05fae7905e9323319b9eb68b98ce340ed80f59b3ba15f0bf62ede0247fe8b2a3cee6d33a47af9b342b2acb88aa48133b2a526ee97058e1d25a626acc6f5c80f95c0bd535aa848e55037b0dad9d52f53f0f08481f9caea33dc371301d82d8c6118a0e823bdb1deb8f3c26602c72be7eeb253c03619d719c3dc833a3ffe92de9184febb30301dc9abfc2617e4c80ebcae2d7babe921c036a3acf58f9c01d6daecacbdc7070395d91ea5391a21770d50a3cf355ad4497e3b341921cae8f53150f74ece3266e296eeb25a19a75905e4871ae3fa3440d20770971a0311c67bb155029d281512ce951a35b3d6dad8cde5ac1632382bb065637a3e9be6a00a87482e844dfaf51e1263ae2fcb2fbad335528f2017a55f007cf2f7ae92493b6fb8b5113785c9797a109e7cfa85a49d10b436398935212675f3767bed511f1e30b8afcb6cabbf60cb9f31beea4b5ab5fa804b968daac8b63b938a7988bf7aa46e9e74b3dac3a99d474d563deea05366aa947b5df6684df3a361f33dd3c7933ce6bf7ac6f970a8cc9b3b1b6db35ec77cf9a920d1055ae13120faba41fca3f7a678b1a3ab23d984f6f3871d13ad65eada3458e7cc710da4af62e07015c5fd4583f9f87a1cb057c83dcb5026554b79c7a9fb24f3e022537263605e5d2b3273b5170e62b32bdfe8d4d61189f1b523929b265ed2f051058bf3630e113b314a10955e4e3417e97d9a2ec468044be8195f6616cc9b1f21107f2af1777fb307bd73c288397a5eaeeb91f3c7e90912e844aa1a5ded2b2e24ad458a2a536c214c9fc2acd251c3e014fcd719f77a4c3472f92d9fed2779676decb0606deacc122383f13db1245f3deb86ec5841bc25c6bd9242aae35dfa82b4a15ab845d8e8ad61341d7e56aea920a69ae4d681981d5aa68086744bc78a40ae789e979663a1c9389359857342ef723066c617348cc842a0923453d27f4ee1f69b135d06f0be7250efe478ecb362", 0x1000, 0x7}], 0xc0, &(0x7f0000003800)=ANY=[@ANYBLOB='fd/4\x00,fd/4\x00,permit_directio,euid<', @ANYRESDEC, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f6d6561737572652c6d77079e65723d", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) readv(r6, &(0x7f0000003900)=[{&(0x7f0000003880)=""/25, 0x19}, {&(0x7f00000038c0)=""/39, 0x27}], 0x2) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f00000039c0)="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", 0x1000, 0xa85, &(0x7f00000049c0)={r7, r8+60000000}) 01:33:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x6000000, 0x8000) 01:33:14 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) [ 2319.314057] nfs: Unknown parameter 'fd/4' 01:33:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xc00, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:14 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 53) [ 2319.367217] nfs: Unknown parameter 'fd/4' 01:33:14 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 37) 01:33:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x7000000, 0x8000) 01:33:14 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2319.433910] FAULT_INJECTION: forcing a failure. [ 2319.433910] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.435846] CPU: 0 PID: 11457 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2319.436914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2319.438213] Call Trace: [ 2319.438636] dump_stack+0x107/0x167 [ 2319.439209] should_fail.cold+0x5/0xa [ 2319.439800] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x695/0x13d0 [ 2319.440737] ? __alloc_skb+0x6d/0x5b0 [ 2319.441328] should_failslab+0x5/0x20 [ 2319.441924] kmem_cache_alloc_node+0x55/0x330 [ 2319.442652] __alloc_skb+0x6d/0x5b0 [ 2319.443235] skb_copy+0x183/0x350 [ 2319.443770] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2319.444711] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2319.445527] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2319.446435] ? lock_acquire+0x160/0x470 [ 2319.447066] ? find_held_lock+0x2c/0x110 [ 2319.447711] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2319.448507] mac80211_hwsim_tx+0x574/0x12a0 [ 2319.449162] ? trace_hardirqs_on+0x5b/0x180 [ 2319.449838] ieee80211_tx_frags+0x59c/0x9f0 [ 2319.450519] ? fq_skb_free_func+0x20/0x20 [ 2319.451193] __ieee80211_tx+0x1ad/0x640 [ 2319.451824] ieee80211_tx+0x329/0x410 [ 2319.452420] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2319.453223] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2319.454131] ? ieee80211_skb_resize+0x116/0x630 [ 2319.454862] ieee80211_xmit+0x220/0x2a0 [ 2319.455498] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2319.456299] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2319.457091] ieee80211_subif_start_xmit+0xef/0xf70 [ 2319.457865] ? lock_chain_count+0x20/0x20 [ 2319.458521] ? skb_crc32c_csum_help+0x80/0x80 [ 2319.459218] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2319.460029] ? lock_acquire+0x197/0x470 [ 2319.460627] ? sch_direct_xmit+0x31a/0x790 [ 2319.461276] ? lock_release+0x680/0x680 [ 2319.461911] dev_hard_start_xmit+0x1cb/0x6f0 [ 2319.462586] sch_direct_xmit+0x25f/0x790 [ 2319.463199] ? lock_acquire+0x197/0x470 [ 2319.463796] ? find_held_lock+0x2c/0x110 [ 2319.464407] ? dev_watchdog+0xbc0/0xbc0 [ 2319.464990] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2319.465683] __qdisc_run+0x4aa/0x1570 [ 2319.466286] __dev_queue_xmit+0xd43/0x2690 [ 2319.466925] ? ip6_finish_output2+0x158f/0x1cf0 [ 2319.467633] ? find_held_lock+0x2c/0x110 [ 2319.468247] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2319.468937] ? lock_downgrade+0x6d0/0x6d0 [ 2319.469561] ? do_softirq+0x53/0xc0 [ 2319.470108] ? trace_hardirqs_on+0x5b/0x180 [ 2319.470762] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2319.471558] ip6_finish_output2+0x158f/0x1cf0 [ 2319.472232] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2319.472985] ip6_output+0x3b8/0x7e0 [ 2319.473541] ip6_local_out+0xb4/0x1a0 [ 2319.474130] ip6_send_skb+0x112/0x460 [ 2319.474703] udp_v6_send_skb+0x7aa/0x15b0 [ 2319.475332] udpv6_sendmsg+0x2116/0x2ad0 [ 2319.475939] ? ip_frag_init+0x350/0x350 [ 2319.476548] ? udp_v6_push_pending_frames+0x360/0x360 [ 2319.477326] ? perf_event_task_disable+0x390/0x390 [ 2319.478093] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2319.478827] ? lock_acquire+0x197/0x470 [ 2319.479431] ? find_held_lock+0x2c/0x110 [ 2319.480055] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2319.480833] ? sock_has_perm+0x1ea/0x280 [ 2319.481453] ? __import_iovec+0x4c3/0x590 [ 2319.482079] ? __import_iovec+0x458/0x590 [ 2319.482672] ? udp_v6_push_pending_frames+0x360/0x360 [ 2319.483455] inet6_sendmsg+0x105/0x140 [ 2319.484046] ? inet6_compat_ioctl+0x320/0x320 [ 2319.484712] __sock_sendmsg+0xf2/0x190 [ 2319.485297] ____sys_sendmsg+0x334/0x870 [ 2319.485934] ? sock_write_iter+0x3d0/0x3d0 [ 2319.486563] ? do_recvmmsg+0x6d0/0x6d0 [ 2319.487144] ? find_held_lock+0x2c/0x110 [ 2319.487759] ___sys_sendmsg+0xf3/0x170 [ 2319.488329] ? sendmsg_copy_msghdr+0x160/0x160 [ 2319.489008] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2319.489787] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2319.490455] ? trace_hardirqs_on+0x5b/0x180 [ 2319.491114] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2319.491785] ? finish_task_switch+0x126/0x5d0 [ 2319.492451] ? finish_task_switch+0xef/0x5d0 [ 2319.493112] ? __switch_to+0x572/0xf70 [ 2319.493714] ? __switch_to_asm+0x3a/0x60 [ 2319.494324] ? __switch_to_asm+0x34/0x60 [ 2319.494933] ? __schedule+0x82c/0x1ea0 [ 2319.495527] ? io_schedule_timeout+0x140/0x140 [ 2319.496235] __sys_sendmmsg+0x195/0x470 [ 2319.496848] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2319.497491] ? lock_downgrade+0x6d0/0x6d0 [ 2319.498152] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2319.498878] ? wait_for_completion_io+0x270/0x270 [ 2319.499591] ? rcu_read_lock_any_held+0x75/0xa0 [ 2319.500280] ? vfs_write+0x354/0xb10 [ 2319.500833] ? fput_many+0x2f/0x1a0 [ 2319.501343] ? ksys_write+0x1a9/0x260 [ 2319.501891] ? __ia32_sys_read+0xb0/0xb0 [ 2319.502503] __x64_sys_sendmmsg+0x99/0x100 [ 2319.503123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2319.503879] do_syscall_64+0x33/0x40 [ 2319.504429] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2319.505193] RIP: 0033:0x7f9d078eeb19 [ 2319.505746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.508446] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2319.509560] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2319.510615] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2319.511650] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.512669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2319.513691] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2319.529573] FAULT_INJECTION: forcing a failure. [ 2319.529573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2319.532977] CPU: 0 PID: 11458 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2319.533997] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2319.535180] Call Trace: [ 2319.535557] dump_stack+0x107/0x167 [ 2319.536079] should_fail.cold+0x5/0xa [ 2319.536641] _copy_from_user+0x2e/0x1b0 [ 2319.537220] __copy_msghdr_from_user+0x91/0x4b0 [ 2319.537890] ? __ia32_sys_shutdown+0x80/0x80 [ 2319.538563] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2319.539291] sendmsg_copy_msghdr+0xa1/0x160 [ 2319.539592] FAT-fs (loop4): Directory bread(block 10) failed [ 2319.539876] ? do_recvmmsg+0x6d0/0x6d0 [ 2319.539896] ? find_held_lock+0x2c/0x110 [ 2319.542291] ___sys_sendmsg+0xc6/0x170 [ 2319.542397] FAT-fs (loop4): Directory bread(block 11) failed [ 2319.542828] ? sendmsg_copy_msghdr+0x160/0x160 [ 2319.544669] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2319.545423] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2319.546055] ? trace_hardirqs_on+0x5b/0x180 [ 2319.546678] ? finish_task_switch+0x1a4/0x5d0 [ 2319.547320] ? __switch_to+0x572/0xf70 [ 2319.547890] ? __switch_to_asm+0x3a/0x60 [ 2319.548099] FAT-fs (loop4): Directory bread(block 10) failed [ 2319.548475] ? __switch_to_asm+0x34/0x60 [ 2319.548491] ? __schedule+0x82c/0x1ea0 [ 2319.548510] ? io_schedule_timeout+0x140/0x140 [ 2319.548533] __sys_sendmmsg+0x195/0x470 [ 2319.552046] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2319.552110] FAT-fs (loop4): Directory bread(block 11) failed [ 2319.552658] ? lock_downgrade+0x6d0/0x6d0 [ 2319.552682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2319.552698] ? wait_for_completion_io+0x270/0x270 [ 2319.552718] ? rcu_read_lock_any_held+0x75/0xa0 [ 2319.555715] FAT-fs (loop4): Directory bread(block 10) failed [ 2319.555843] ? vfs_write+0x354/0xb10 [ 2319.555861] ? fput_many+0x2f/0x1a0 [ 2319.558112] FAT-fs (loop4): Directory bread(block 11) failed [ 2319.559421] ? ksys_write+0x1a9/0x260 [ 2319.559966] ? __ia32_sys_read+0xb0/0xb0 [ 2319.560546] __x64_sys_sendmmsg+0x99/0x100 [ 2319.561135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2319.561873] do_syscall_64+0x33/0x40 [ 2319.562409] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2319.563125] RIP: 0033:0x7f6413bdcb19 [ 2319.563650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2319.566165] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2319.567203] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2319.568181] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2319.569160] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2319.570165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2319.571157] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:33:29 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 54) 01:33:29 executing program 5: sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e880c70001010101000000000000000003000005bc0002800c00028005000100060000001400018008000100ac1414bb080002000a0101020c00028005000100010000000c00028005000100110000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000bb0c000280050001002f0000000c00028005000100840000002c00018014000300fe80000000000000000000000000001414000400fc01000000000000000000000000000106000340000100000600034000000000100005800a000100512e3933310000000800154000000002"], 0xe8}, 0x1, 0x0, 0x0, 0x40048c4}, 0x24050805) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x5, 0x8}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e23, 0xffff, @loopback, 0x3}, 0x1c) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) splice(r1, &(0x7f0000000080)=0x5, r2, &(0x7f00000000c0)=0x80000001, 0x5, 0x4) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000380)=0x400, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) splice(r4, &(0x7f0000000100)=0x8, r6, &(0x7f0000000140)=0x101, 0x401, 0x0) 01:33:29 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 38) 01:33:29 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x1200, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:29 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') fallocate(r1, 0x3, 0xe8f, 0x8) r2 = dup3(r1, r0, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x10000, 0x40) 01:33:29 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0) 01:33:29 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x4000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:33:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x8000000, 0x8000) [ 2334.795023] FAULT_INJECTION: forcing a failure. [ 2334.795023] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.797601] CPU: 1 PID: 11483 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2334.799041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.800748] Call Trace: [ 2334.801288] dump_stack+0x107/0x167 [ 2334.802039] should_fail.cold+0x5/0xa [ 2334.802816] ? __alloc_skb+0x6d/0x5b0 [ 2334.803591] should_failslab+0x5/0x20 [ 2334.804387] kmem_cache_alloc_node+0x55/0x330 [ 2334.805287] __alloc_skb+0x6d/0x5b0 [ 2334.806039] alloc_skb_with_frags+0x92/0x570 [ 2334.806959] ? quarantine_put+0x8b/0x1a0 [ 2334.807802] ? kmem_cache_free+0xa7/0x2d0 [ 2334.808681] sock_alloc_send_pskb+0x7af/0x930 [ 2334.809601] ? sk_alloc+0x350/0x350 [ 2334.810364] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2334.811466] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2334.812534] ? mark_lock+0xf5/0x2df0 [ 2334.813308] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2334.814373] ? ip6_mtu+0x1bb/0x3d0 [ 2334.815138] ? lock_downgrade+0x6d0/0x6d0 [ 2334.815993] ? ip_frag_init+0x350/0x350 [ 2334.816845] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2334.817854] ? ip6_mtu+0x1e9/0x3d0 [ 2334.818585] ? ip6_setup_cork+0xfb7/0x1740 [ 2334.819467] ip6_make_skb+0x2de/0x4e0 [ 2334.820261] ? ip_frag_init+0x350/0x350 [ 2334.821087] ? ip_frag_init+0x350/0x350 [ 2334.821926] ? ip6_push_pending_frames+0xf0/0xf0 [ 2334.822933] ? ip6_dst_check+0x389/0x8d0 [ 2334.823776] ? sk_dst_check+0x235/0x4c0 [ 2334.824592] udpv6_sendmsg+0x20d3/0x2ad0 [ 2334.825431] ? ip_frag_init+0x350/0x350 [ 2334.826261] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.827350] ? perf_event_task_disable+0x390/0x390 [ 2334.828361] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2334.829352] ? lock_acquire+0x197/0x470 [ 2334.830174] ? find_held_lock+0x2c/0x110 [ 2334.831049] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2334.832198] ? inet_send_prepare+0x1f/0x540 [ 2334.833085] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 2334.834082] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.835191] inet6_sendmsg+0x105/0x140 [ 2334.835993] ? inet6_compat_ioctl+0x320/0x320 [ 2334.836937] __sock_sendmsg+0xf2/0x190 [ 2334.837739] ____sys_sendmsg+0x334/0x870 [ 2334.838579] ? sock_write_iter+0x3d0/0x3d0 [ 2334.839446] ? do_recvmmsg+0x6d0/0x6d0 [ 2334.840267] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.841341] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2334.842457] ? trace_hardirqs_on+0x5b/0x180 [ 2334.843359] ___sys_sendmsg+0xf3/0x170 [ 2334.844162] ? sendmsg_copy_msghdr+0x160/0x160 [ 2334.845107] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2334.846036] ? _raw_spin_unlock_irq+0x27/0x30 [ 2334.846977] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2334.847895] ? finish_task_switch+0x126/0x5d0 [ 2334.848826] ? finish_task_switch+0xef/0x5d0 [ 2334.849727] ? __switch_to+0x572/0xf70 [ 2334.850534] ? __switch_to_asm+0x3a/0x60 [ 2334.851360] ? __switch_to_asm+0x34/0x60 [ 2334.852208] ? __schedule+0x82c/0x1ea0 [ 2334.853030] ? io_schedule_timeout+0x140/0x140 [ 2334.853982] __sys_sendmmsg+0x195/0x470 [ 2334.854829] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2334.855717] ? lock_downgrade+0x6d0/0x6d0 [ 2334.856576] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2334.857584] ? wait_for_completion_io+0x270/0x270 [ 2334.858606] ? rcu_read_lock_any_held+0x75/0xa0 [ 2334.859562] ? vfs_write+0x354/0xb10 [ 2334.860338] ? fput_many+0x2f/0x1a0 [ 2334.861091] ? ksys_write+0x1a9/0x260 [ 2334.861889] ? __ia32_sys_read+0xb0/0xb0 [ 2334.862740] __x64_sys_sendmmsg+0x99/0x100 [ 2334.863602] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2334.864659] do_syscall_64+0x33/0x40 [ 2334.865506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2334.866806] RIP: 0033:0x7f6413bdcb19 [ 2334.867767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2334.871719] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2334.873299] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2334.874797] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2334.876271] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2334.877760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2334.879239] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2334.887630] FAULT_INJECTION: forcing a failure. [ 2334.887630] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.890639] CPU: 0 PID: 11486 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2334.892598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2334.894941] Call Trace: [ 2334.895552] dump_stack+0x107/0x167 [ 2334.896409] should_fail.cold+0x5/0xa [ 2334.897287] ? create_object.isra.0+0x3a/0xa20 [ 2334.898355] should_failslab+0x5/0x20 [ 2334.899234] kmem_cache_alloc+0x5b/0x310 [ 2334.900183] create_object.isra.0+0x3a/0xa20 [ 2334.901198] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2334.902378] kmem_cache_alloc_node+0x169/0x330 [ 2334.903437] __alloc_skb+0x6d/0x5b0 [ 2334.904297] skb_copy+0x183/0x350 [ 2334.905104] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2334.906492] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2334.907676] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2334.909027] ? lock_acquire+0x160/0x470 [ 2334.909938] ? find_held_lock+0x2c/0x110 [ 2334.910899] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2334.912087] mac80211_hwsim_tx+0x574/0x12a0 [ 2334.913084] ? trace_hardirqs_on+0x5b/0x180 [ 2334.914083] ieee80211_tx_frags+0x59c/0x9f0 [ 2334.915095] ? fq_skb_free_func+0x20/0x20 [ 2334.916077] __ieee80211_tx+0x1ad/0x640 [ 2334.917004] ieee80211_tx+0x329/0x410 [ 2334.917884] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2334.919070] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2334.920445] ? ieee80211_skb_resize+0x116/0x630 [ 2334.921520] ieee80211_xmit+0x220/0x2a0 [ 2334.922458] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2334.923649] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2334.924856] ieee80211_subif_start_xmit+0xef/0xf70 [ 2334.925986] ? lock_chain_count+0x20/0x20 [ 2334.926951] ? skb_crc32c_csum_help+0x80/0x80 [ 2334.927998] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2334.929212] ? lock_acquire+0x197/0x470 [ 2334.930142] ? sch_direct_xmit+0x31a/0x790 [ 2334.931269] ? lock_release+0x680/0x680 [ 2334.932438] dev_hard_start_xmit+0x1cb/0x6f0 [ 2334.933744] sch_direct_xmit+0x25f/0x790 [ 2334.934947] ? lock_acquire+0x197/0x470 [ 2334.936095] ? find_held_lock+0x2c/0x110 [ 2334.937265] ? dev_watchdog+0xbc0/0xbc0 [ 2334.938423] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2334.939764] __qdisc_run+0x4aa/0x1570 [ 2334.940873] __dev_queue_xmit+0xd43/0x2690 [ 2334.941910] ? ip6_finish_output2+0x158f/0x1cf0 [ 2334.943278] ? find_held_lock+0x2c/0x110 [ 2334.944495] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2334.945842] ? lock_downgrade+0x6d0/0x6d0 [ 2334.947028] ? do_softirq+0x53/0xc0 [ 2334.947884] ? trace_hardirqs_on+0x5b/0x180 [ 2334.949097] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2334.950650] ip6_finish_output2+0x158f/0x1cf0 [ 2334.951993] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2334.953470] ip6_output+0x3b8/0x7e0 [ 2334.954521] ip6_local_out+0xb4/0x1a0 [ 2334.955657] ip6_send_skb+0x112/0x460 [ 2334.956775] udp_v6_send_skb+0x7aa/0x15b0 [ 2334.958050] udpv6_sendmsg+0x2116/0x2ad0 [ 2334.959253] ? ip_frag_init+0x350/0x350 [ 2334.960272] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.961589] ? perf_event_task_disable+0x390/0x390 [ 2334.962881] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.964058] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2334.965263] ? trace_hardirqs_on+0x5b/0x180 [ 2334.966231] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2334.967472] ? sock_has_perm+0x1ea/0x280 [ 2334.968413] ? __import_iovec+0x458/0x590 [ 2334.969343] ? udp_v6_push_pending_frames+0x360/0x360 [ 2334.970514] inet6_sendmsg+0x105/0x140 [ 2334.971386] ? inet6_compat_ioctl+0x320/0x320 [ 2334.972393] __sock_sendmsg+0xf2/0x190 [ 2334.973302] ____sys_sendmsg+0x334/0x870 [ 2334.974232] ? sock_write_iter+0x3d0/0x3d0 [ 2334.975198] ? do_recvmmsg+0x6d0/0x6d0 [ 2334.976086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2334.977266] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2334.978495] ? trace_hardirqs_on+0x5b/0x180 [ 2334.979471] ___sys_sendmsg+0xf3/0x170 [ 2334.980339] ? sendmsg_copy_msghdr+0x160/0x160 [ 2334.981364] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2334.982377] ? _raw_spin_unlock_irq+0x27/0x30 [ 2334.983384] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2334.984381] ? finish_task_switch+0x126/0x5d0 [ 2334.985382] ? finish_task_switch+0xef/0x5d0 [ 2334.986381] ? __switch_to+0x572/0xf70 [ 2334.987249] ? __switch_to_asm+0x3a/0x60 [ 2334.988156] ? __switch_to_asm+0x34/0x60 [ 2334.989072] ? __schedule+0x82c/0x1ea0 [ 2334.989959] ? io_schedule_timeout+0x140/0x140 [ 2334.991012] __sys_sendmmsg+0x195/0x470 [ 2334.991914] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2334.992882] ? lock_downgrade+0x6d0/0x6d0 [ 2334.993837] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2334.994934] ? wait_for_completion_io+0x270/0x270 [ 2334.996021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2334.997063] ? vfs_write+0x354/0xb10 [ 2334.997900] ? fput_many+0x2f/0x1a0 [ 2334.998717] ? ksys_write+0x1a9/0x260 [ 2334.999572] ? __ia32_sys_read+0xb0/0xb0 [ 2335.000496] __x64_sys_sendmmsg+0x99/0x100 [ 2335.001444] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2335.002609] do_syscall_64+0x33/0x40 [ 2335.003447] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2335.004596] RIP: 0033:0x7f9d078eeb19 [ 2335.005434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.009565] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2335.011277] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2335.012877] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2335.014483] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.016085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2335.017683] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2335.032139] FAT-fs (loop4): Directory bread(block 10) failed [ 2335.044161] FAT-fs (loop4): Directory bread(block 11) failed 01:33:30 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write$P9_RCLUNK(r1, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000003ec0)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file1\x00'}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000003f00)={{r2}, "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"}) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:33:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x1881, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:33:30 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 01:33:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x9050000, 0x8000) 01:33:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x200) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) write$P9_RCLUNK(r0, 0x0, 0x0) 01:33:30 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x6000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:33:30 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = eventfd(0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2335.227445] FAT-fs (loop4): Directory bread(block 10) failed [ 2335.228205] FAT-fs (loop4): Directory bread(block 11) failed [ 2335.232216] FAT-fs (loop4): Directory bread(block 10) failed [ 2335.252778] FAT-fs (loop4): Directory bread(block 11) failed [ 2335.253521] FAT-fs (loop4): Directory bread(block 10) failed [ 2335.254179] FAT-fs (loop4): Directory bread(block 11) failed 01:33:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x2000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:43 executing program 7: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff00, 0x4}}, './file0\x00'}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000140)={0x0, 0x0, 0x17, 0x1f, 0x1ed, &(0x7f0000000300)="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"}) pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fd/4\x00') r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40200, 0x104, 0x1}, 0x18) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x4) 01:33:43 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 55) 01:33:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xc000000, 0x8000) 01:33:43 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 39) 01:33:43 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 01:33:43 executing program 5: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r0) keyctl$search(0xa, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, 0xfffffffffffffffd) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) write$P9_RCLUNK(r1, 0x0, 0x0) 01:33:43 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x7000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2347.979859] FAULT_INJECTION: forcing a failure. [ 2347.979859] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.983045] CPU: 1 PID: 11532 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2347.984802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.986894] Call Trace: [ 2347.987560] dump_stack+0x107/0x167 [ 2347.988487] should_fail.cold+0x5/0xa [ 2347.989472] ? create_object.isra.0+0x3a/0xa20 [ 2347.990639] should_failslab+0x5/0x20 [ 2347.991620] kmem_cache_alloc+0x5b/0x310 [ 2347.992656] ? ____sys_sendmsg+0x334/0x870 [ 2347.993734] ? ___sys_sendmsg+0xf3/0x170 [ 2347.994766] create_object.isra.0+0x3a/0xa20 [ 2347.995883] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2347.996954] kmem_cache_alloc_node+0x169/0x330 [ 2347.997924] __alloc_skb+0x6d/0x5b0 [ 2347.998694] alloc_skb_with_frags+0x92/0x570 [ 2347.999617] ? quarantine_put+0x8b/0x1a0 [ 2348.000475] ? kmem_cache_free+0xa7/0x2d0 [ 2348.001343] sock_alloc_send_pskb+0x7af/0x930 [ 2348.002294] ? sk_alloc+0x350/0x350 [ 2348.003076] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2348.004175] ? __local_bh_enable_ip+0x9d/0x100 [ 2348.005126] ? trace_hardirqs_on+0x5b/0x180 [ 2348.006030] ? __dev_queue_xmit+0xdf8/0x2690 [ 2348.006961] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2348.008027] ? ip6_mtu+0x1bb/0x3d0 [ 2348.008776] ? lock_downgrade+0x6d0/0x6d0 [ 2348.009645] ? ip_frag_init+0x350/0x350 [ 2348.010483] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2348.011490] ? ip6_mtu+0x1e9/0x3d0 [ 2348.012234] ? ip6_setup_cork+0xfb7/0x1740 [ 2348.013119] ip6_make_skb+0x2de/0x4e0 [ 2348.013918] ? ip_frag_init+0x350/0x350 [ 2348.014753] ? ip_frag_init+0x350/0x350 [ 2348.015596] ? ip6_push_pending_frames+0xf0/0xf0 [ 2348.016593] ? ip6_dst_check+0x389/0x8d0 [ 2348.017441] ? sk_dst_check+0x235/0x4c0 [ 2348.018288] udpv6_sendmsg+0x20d3/0x2ad0 [ 2348.019147] ? ip_frag_init+0x350/0x350 [ 2348.019986] ? udp_v6_push_pending_frames+0x360/0x360 [ 2348.021065] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.022048] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.022169] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2348.023973] ? lock_acquire+0x197/0x470 [ 2348.023982] FAT-fs (loop4): Directory bread(block 11) failed [ 2348.025991] ? find_held_lock+0x2c/0x110 [ 2348.026866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.027959] ? sock_has_perm+0x1ea/0x280 [ 2348.028834] ? __import_iovec+0x458/0x590 [ 2348.029709] ? udp_v6_push_pending_frames+0x360/0x360 [ 2348.030796] inet6_sendmsg+0x105/0x140 [ 2348.031621] ? inet6_compat_ioctl+0x320/0x320 [ 2348.032559] __sock_sendmsg+0xf2/0x190 [ 2348.033377] ____sys_sendmsg+0x334/0x870 [ 2348.034224] ? sock_write_iter+0x3d0/0x3d0 [ 2348.035125] ? do_recvmmsg+0x6d0/0x6d0 [ 2348.035944] ? __lock_acquire+0x1657/0x5b00 [ 2348.036856] ___sys_sendmsg+0xf3/0x170 [ 2348.037671] ? sendmsg_copy_msghdr+0x160/0x160 [ 2348.038626] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2348.039578] ? _raw_spin_unlock_irq+0x27/0x30 [ 2348.040524] ? lock_acquire+0x197/0x470 [ 2348.041356] ? find_held_lock+0x2c/0x110 [ 2348.042204] ? __might_fault+0xd3/0x180 [ 2348.043059] ? lock_downgrade+0x6d0/0x6d0 [ 2348.043925] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2348.045083] __sys_sendmmsg+0x195/0x470 [ 2348.045929] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2348.046838] ? lock_downgrade+0x6d0/0x6d0 [ 2348.047725] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2348.048739] ? wait_for_completion_io+0x270/0x270 [ 2348.049748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2348.050719] ? vfs_write+0x354/0xb10 [ 2348.051502] ? fput_many+0x2f/0x1a0 [ 2348.052274] ? ksys_write+0x1a9/0x260 [ 2348.053073] ? __ia32_sys_read+0xb0/0xb0 [ 2348.054086] __x64_sys_sendmmsg+0x99/0x100 [ 2348.055182] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2348.056408] do_syscall_64+0x33/0x40 [ 2348.057343] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2348.058512] RIP: 0033:0x7f6413bdcb19 [ 2348.059332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2348.063286] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2348.065063] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2348.066765] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2348.068485] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.070101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2348.071605] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2348.086951] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.091614] FAT-fs (loop4): Directory bread(block 11) failed [ 2348.092395] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.093044] FAT-fs (loop4): Directory bread(block 11) failed 01:33:43 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x0) 01:33:43 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r2}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@phonet={0x23, 0xfe, 0x3, 0x9}, 0x0, 0x0, 0x1, {0x0, r2}}, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r1, 0x7fff, 0x0, 0xffffffff, 0x0, 0x1, {0x0, r2}}, 0x2) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2348.121755] FAULT_INJECTION: forcing a failure. [ 2348.121755] name failslab, interval 1, probability 0, space 0, times 0 [ 2348.123054] CPU: 0 PID: 11544 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2348.123799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2348.124683] Call Trace: [ 2348.124975] dump_stack+0x107/0x167 [ 2348.125371] should_fail.cold+0x5/0xa [ 2348.125781] ? skb_clone+0x14f/0x3d0 [ 2348.126182] should_failslab+0x5/0x20 [ 2348.126595] kmem_cache_alloc+0x5b/0x310 [ 2348.127040] skb_clone+0x14f/0x3d0 [ 2348.127427] ip6_finish_output2+0x10bf/0x1cf0 [ 2348.127913] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2348.128446] ip6_output+0x3b8/0x7e0 [ 2348.128840] ip6_local_out+0xb4/0x1a0 [ 2348.129246] ip6_send_skb+0x112/0x460 [ 2348.129654] udp_v6_send_skb+0x7aa/0x15b0 [ 2348.130104] udpv6_sendmsg+0x2116/0x2ad0 [ 2348.130548] ? ip_frag_init+0x350/0x350 [ 2348.130987] ? udp_v6_push_pending_frames+0x360/0x360 [ 2348.131547] ? perf_event_task_disable+0x390/0x390 [ 2348.132074] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2348.132594] ? lock_acquire+0x197/0x470 [ 2348.133018] ? find_held_lock+0x2c/0x110 [ 2348.133459] ? sock_has_perm+0x1ea/0x280 [ 2348.133906] ? __import_iovec+0x458/0x590 [ 2348.134357] ? udp_v6_push_pending_frames+0x360/0x360 [ 2348.134918] inet6_sendmsg+0x105/0x140 [ 2348.135335] ? inet6_compat_ioctl+0x320/0x320 [ 2348.135814] __sock_sendmsg+0xf2/0x190 [ 2348.136229] ____sys_sendmsg+0x334/0x870 [ 2348.136665] ? sock_write_iter+0x3d0/0x3d0 [ 2348.137115] ? do_recvmmsg+0x6d0/0x6d0 [ 2348.137540] ? __lock_acquire+0x1657/0x5b00 [ 2348.138021] ___sys_sendmsg+0xf3/0x170 [ 2348.138449] ? sendmsg_copy_msghdr+0x160/0x160 [ 2348.138983] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2348.139557] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2348.140045] ? trace_hardirqs_on+0x5b/0x180 [ 2348.140519] ? lock_acquire+0x197/0x470 [ 2348.140954] ? find_held_lock+0x2c/0x110 [ 2348.141398] ? __might_fault+0xd3/0x180 [ 2348.141828] ? lock_downgrade+0x6d0/0x6d0 [ 2348.142276] ? io_schedule_timeout+0x140/0x140 [ 2348.142771] __sys_sendmmsg+0x195/0x470 [ 2348.143209] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2348.143671] ? lock_downgrade+0x6d0/0x6d0 [ 2348.144122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2348.144644] ? wait_for_completion_io+0x270/0x270 [ 2348.145164] ? rcu_read_lock_any_held+0x75/0xa0 [ 2348.145661] ? vfs_write+0x354/0xb10 [ 2348.146060] ? fput_many+0x2f/0x1a0 [ 2348.146450] ? ksys_write+0x1a9/0x260 [ 2348.146870] ? __ia32_sys_read+0xb0/0xb0 [ 2348.147443] __x64_sys_sendmmsg+0x99/0x100 [ 2348.148035] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2348.148759] do_syscall_64+0x33/0x40 [ 2348.149285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2348.149999] RIP: 0033:0x7f9d078eeb19 [ 2348.150522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2348.153103] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2348.154187] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2348.155199] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2348.156192] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2348.157192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2348.158184] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:33:43 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x8000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:33:43 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/hci\x00') 01:33:43 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20c80, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x8000000) r1 = syz_io_uring_setup(0x6456, &(0x7f0000000040)={0x0, 0x423c, 0x0, 0x2, 0x1a3, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f00000002c0)={0x200800, 0x1, 0x17}, &(0x7f0000000300)='./file0\x00', 0x18, 0x0, 0x12345}, 0x101) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100001118000000", @ANYRES32=r1, @ANYBLOB="03000000005528663b680f00002e2f66696c653100"]) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x50000001}) fstat(0xffffffffffffffff, &(0x7f0000000540)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) fchmodat(r7, &(0x7f00000005c0)='./file1\x00', 0x46) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000040)={0x0, r6}) vmsplice(r6, &(0x7f00000004c0)=[{&(0x7f0000000140)="4fa7c64c870387980ae9cab0b4ea2b85c6d2c91b11a4b898f697d8bec3e04e2cf10acaea89763362f4d042b54302f22df47c8a34a9aa8658aa23281434133436987018de908a7f28f5b4dc3ae04e28b2e204e08254a0f497e49481afc13d094d1436cc855e1967733078c5f08e1d4ebe9510b8ed68dc505dd69ad3c5ed5b0282", 0x80}, {&(0x7f0000000340)="3d0c651cd2aed81e758cabcea76e9e2014c93eb7052e6f7dfa0bff1545b2f37d574eb050701ee26dcd258ae8af01991f29bdef9c3bdfaa2d89f5831c0a572e55c3519eefde281380cd845388561d8d32294688f30f5b1001a6f3b20827a7771935b6331d2eb995c6e8cc1ffb139e728f2f9135f8ea000935693724d2f43edfc71538130b7b4b1ebe89c3107e87b002d67abc27abd9ac3a520b9f686360844f501d7b33afd5e6084bf5c8231c661ad20ba0c3f1a758877d13229655d9c21471d4194ce2355641ab29663a9389bd5ccfd64cd3c6bd84b4", 0xd6}, {&(0x7f00000001c0)="4f4735af3e295783688bb16a05f228e7782eaf1cc9", 0x15}, {&(0x7f0000000440)="22009005d87c0a8087985182ae1b7fca623bf6e272aa60eb6e0130", 0x1b}, {&(0x7f0000000480)="288684807fa161a3", 0x8}], 0x5, 0x0) 01:33:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x2103, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x10000000, 0x8000) [ 2348.308458] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.311025] FAT-fs (loop4): Directory bread(block 11) failed [ 2348.319205] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.322839] FAT-fs (loop4): Directory bread(block 11) failed [ 2348.326535] FAT-fs (loop4): Directory bread(block 10) failed [ 2348.332380] FAT-fs (loop4): Directory bread(block 11) failed 01:33:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x12000000, 0x8000) 01:33:55 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x9, 0x0, 0x7f, 0x6, 0x0, 0x0, 0x8000, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0xffff}, 0x2000, 0x10000, 0x5, 0x1, 0x7705, 0x80, 0x2251, 0x0, 0xe2, 0x0, 0x1}, r1, 0x5, r0, 0x3) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000001640)=0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/tty/ldiscs\x00', 0x0, 0x0) readv(r2, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/162, 0xa2}, {&(0x7f00000013c0)=""/165, 0xa5}, {&(0x7f0000001480)=""/41, 0x29}, {&(0x7f00000014c0)=""/203, 0xcb}], 0x7) 01:33:55 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 01:33:55 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) 01:33:55 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 56) 01:33:55 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 40) 01:33:55 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x3f00, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:55 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x9000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2360.802904] FAT-fs (loop4): Directory bread(block 10) failed [ 2360.823745] FAULT_INJECTION: forcing a failure. [ 2360.823745] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.827146] CPU: 1 PID: 11594 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2360.829096] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.830444] FAT-fs (loop4): Directory bread(block 11) failed [ 2360.831308] Call Trace: [ 2360.831344] dump_stack+0x107/0x167 [ 2360.831374] should_fail.cold+0x5/0xa [ 2360.835762] should_failslab+0x5/0x20 [ 2360.836192] FAULT_INJECTION: forcing a failure. [ 2360.836192] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.836845] __kmalloc_node_track_caller+0x74/0x3b0 [ 2360.836874] ? alloc_skb_with_frags+0x92/0x570 [ 2360.836901] __alloc_skb+0xb1/0x5b0 [ 2360.836928] alloc_skb_with_frags+0x92/0x570 [ 2360.836944] ? quarantine_put+0x8b/0x1a0 [ 2360.836978] ? kmem_cache_free+0xa7/0x2d0 [ 2360.846204] sock_alloc_send_pskb+0x7af/0x930 [ 2360.847447] ? sk_alloc+0x350/0x350 [ 2360.848448] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2360.849858] ? __local_bh_enable_ip+0x9d/0x100 [ 2360.851081] ? trace_hardirqs_on+0x5b/0x180 [ 2360.852289] ? __dev_queue_xmit+0xdf8/0x2690 [ 2360.853492] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2360.854845] ? ip6_mtu+0x1bb/0x3d0 [ 2360.855880] ? lock_downgrade+0x6d0/0x6d0 [ 2360.857001] ? ip_frag_init+0x350/0x350 [ 2360.858093] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2360.859398] ? ip6_mtu+0x1e9/0x3d0 [ 2360.860388] ? ip6_setup_cork+0xfb7/0x1740 [ 2360.861525] ip6_make_skb+0x2de/0x4e0 [ 2360.862554] ? ip_frag_init+0x350/0x350 [ 2360.863647] ? ip_frag_init+0x350/0x350 [ 2360.864723] ? ip6_push_pending_frames+0xf0/0xf0 [ 2360.865855] ? ip6_dst_check+0x389/0x8d0 [ 2360.866948] ? sk_dst_check+0x235/0x4c0 [ 2360.867936] udpv6_sendmsg+0x20d3/0x2ad0 [ 2360.869028] ? ip_frag_init+0x350/0x350 [ 2360.869993] ? udp_v6_push_pending_frames+0x360/0x360 [ 2360.872111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.873385] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2360.874771] ? lock_acquire+0x197/0x470 [ 2360.875786] ? find_held_lock+0x2c/0x110 [ 2360.876824] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2360.878176] ? sock_has_perm+0x1ea/0x280 [ 2360.879229] ? __import_iovec+0x458/0x590 [ 2360.880285] ? udp_v6_push_pending_frames+0x360/0x360 [ 2360.881651] inet6_sendmsg+0x105/0x140 [ 2360.882727] ? inet6_compat_ioctl+0x320/0x320 [ 2360.883817] __sock_sendmsg+0xf2/0x190 [ 2360.884639] ____sys_sendmsg+0x334/0x870 [ 2360.885494] ? sock_write_iter+0x3d0/0x3d0 [ 2360.886851] ? do_recvmmsg+0x6d0/0x6d0 [ 2360.888070] ? __lock_acquire+0x1657/0x5b00 [ 2360.889230] ___sys_sendmsg+0xf3/0x170 [ 2360.890191] ? sendmsg_copy_msghdr+0x160/0x160 [ 2360.891429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2360.892703] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2360.893781] ? trace_hardirqs_on+0x5b/0x180 [ 2360.894833] ? lock_acquire+0x197/0x470 [ 2360.895964] ? find_held_lock+0x2c/0x110 [ 2360.897105] ? __might_fault+0xd3/0x180 [ 2360.898084] ? lock_downgrade+0x6d0/0x6d0 [ 2360.899113] ? io_schedule_timeout+0x140/0x140 [ 2360.900284] __sys_sendmmsg+0x195/0x470 [ 2360.901283] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2360.902343] ? lock_downgrade+0x6d0/0x6d0 [ 2360.903410] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2360.904617] ? wait_for_completion_io+0x270/0x270 [ 2360.905826] ? rcu_read_lock_any_held+0x75/0xa0 [ 2360.906984] ? vfs_write+0x354/0xb10 [ 2360.907914] ? fput_many+0x2f/0x1a0 [ 2360.908824] ? ksys_write+0x1a9/0x260 [ 2360.909757] ? __ia32_sys_read+0xb0/0xb0 [ 2360.910778] __x64_sys_sendmmsg+0x99/0x100 [ 2360.911835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2360.913090] do_syscall_64+0x33/0x40 [ 2360.914018] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2360.915301] RIP: 0033:0x7f6413bdcb19 [ 2360.916232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2360.920778] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2360.922656] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2360.924424] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2360.926169] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2360.927922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2360.929662] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2360.931489] CPU: 0 PID: 11593 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2360.933235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2360.935228] Call Trace: [ 2360.935891] dump_stack+0x107/0x167 [ 2360.936793] should_fail.cold+0x5/0xa [ 2360.937729] ? create_object.isra.0+0x3a/0xa20 [ 2360.938855] should_failslab+0x5/0x20 [ 2360.939789] kmem_cache_alloc+0x5b/0x310 [ 2360.940797] create_object.isra.0+0x3a/0xa20 [ 2360.941951] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2360.943373] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2360.944779] ? skb_copy+0x183/0x350 [ 2360.945821] __alloc_skb+0xb1/0x5b0 [ 2360.946852] skb_copy+0x183/0x350 [ 2360.947853] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2360.949527] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2360.950765] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2360.952127] ? lock_acquire+0x160/0x470 [ 2360.953021] ? find_held_lock+0x2c/0x110 [ 2360.953974] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2360.955161] mac80211_hwsim_tx+0x574/0x12a0 [ 2360.956194] ? trace_hardirqs_on+0x5b/0x180 [ 2360.957206] ieee80211_tx_frags+0x59c/0x9f0 [ 2360.958233] ? fq_skb_free_func+0x20/0x20 [ 2360.959218] __ieee80211_tx+0x1ad/0x640 [ 2360.960165] ieee80211_tx+0x329/0x410 [ 2360.961044] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2360.962240] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2360.963639] ? ieee80211_skb_resize+0x116/0x630 [ 2360.964730] ieee80211_xmit+0x220/0x2a0 [ 2360.965681] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2360.966886] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2360.968102] ieee80211_subif_start_xmit+0xef/0xf70 [ 2360.969265] ? lock_chain_count+0x20/0x20 [ 2360.970224] ? skb_crc32c_csum_help+0x80/0x80 [ 2360.971283] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2360.972538] ? lock_acquire+0x197/0x470 [ 2360.973464] ? sch_direct_xmit+0x31a/0x790 [ 2360.974453] ? lock_release+0x680/0x680 [ 2360.975408] dev_hard_start_xmit+0x1cb/0x6f0 [ 2360.976454] sch_direct_xmit+0x25f/0x790 [ 2360.977396] ? lock_acquire+0x197/0x470 [ 2360.978332] ? find_held_lock+0x2c/0x110 [ 2360.979287] ? dev_watchdog+0xbc0/0xbc0 [ 2360.980231] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2360.981479] __qdisc_run+0x4aa/0x1570 [ 2360.982681] __dev_queue_xmit+0xd43/0x2690 [ 2360.983836] ? ip6_finish_output2+0x158f/0x1cf0 [ 2360.985097] ? find_held_lock+0x2c/0x110 [ 2360.986173] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2360.987419] ? lock_downgrade+0x6d0/0x6d0 [ 2360.988539] ? do_softirq+0x53/0xc0 [ 2360.989500] ? trace_hardirqs_on+0x5b/0x180 [ 2360.990764] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2360.992122] ip6_finish_output2+0x158f/0x1cf0 [ 2360.993280] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2360.994551] ip6_output+0x3b8/0x7e0 [ 2360.995504] ip6_local_out+0xb4/0x1a0 [ 2360.996426] ip6_send_skb+0x112/0x460 [ 2360.997338] udp_v6_send_skb+0x7aa/0x15b0 [ 2360.998359] udpv6_sendmsg+0x2116/0x2ad0 [ 2360.999373] ? ip_frag_init+0x350/0x350 [ 2361.000402] ? udp_v6_push_pending_frames+0x360/0x360 [ 2361.001709] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.003165] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.004586] ? lock_acquire+0x197/0x470 [ 2361.005604] ? find_held_lock+0x2c/0x110 [ 2361.006738] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.008227] ? sock_has_perm+0x1ea/0x280 [ 2361.009385] ? __import_iovec+0x458/0x590 [ 2361.010512] ? udp_v6_push_pending_frames+0x360/0x360 [ 2361.011900] inet6_sendmsg+0x105/0x140 [ 2361.012780] ? inet6_compat_ioctl+0x320/0x320 [ 2361.013967] __sock_sendmsg+0xf2/0x190 [ 2361.015027] ____sys_sendmsg+0x334/0x870 [ 2361.016155] ? sock_write_iter+0x3d0/0x3d0 [ 2361.017303] ? do_recvmmsg+0x6d0/0x6d0 [ 2361.018370] ? __lock_acquire+0x1657/0x5b00 [ 2361.019579] ___sys_sendmsg+0xf3/0x170 [ 2361.020642] ? sendmsg_copy_msghdr+0x160/0x160 [ 2361.021880] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2361.023091] ? _raw_spin_unlock_irq+0x27/0x30 [ 2361.024333] ? lock_acquire+0x197/0x470 [ 2361.025409] ? find_held_lock+0x2c/0x110 [ 2361.026495] ? __might_fault+0xd3/0x180 [ 2361.027520] ? lock_downgrade+0x6d0/0x6d0 [ 2361.028581] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.029994] __sys_sendmmsg+0x195/0x470 [ 2361.031087] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2361.032233] ? lock_downgrade+0x6d0/0x6d0 [ 2361.033414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.034742] ? wait_for_completion_io+0x270/0x270 [ 2361.036024] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.037073] ? vfs_write+0x354/0xb10 [ 2361.037914] ? fput_many+0x2f/0x1a0 [ 2361.038735] ? ksys_write+0x1a9/0x260 [ 2361.039620] ? __ia32_sys_read+0xb0/0xb0 [ 2361.040544] __x64_sys_sendmmsg+0x99/0x100 [ 2361.041495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.042647] do_syscall_64+0x33/0x40 [ 2361.043489] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.044637] RIP: 0033:0x7f9d078eeb19 [ 2361.045473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.049601] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2361.051313] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2361.052912] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2361.054504] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.056104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.057705] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:33:56 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x101, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) splice(r1, &(0x7f0000000100)=0x7, r2, &(0x7f0000000140)=0x3ff, 0x2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) sendfile(r4, r0, &(0x7f0000000040)=0x6c, 0x401) 01:33:56 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 01:33:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x18810000, 0x8000) 01:33:56 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x6400, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:33:56 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xc000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:33:56 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 41) [ 2361.326701] FAT-fs (loop4): Directory bread(block 10) failed [ 2361.329017] FAT-fs (loop4): Directory bread(block 11) failed [ 2361.333764] FAULT_INJECTION: forcing a failure. [ 2361.333764] name failslab, interval 1, probability 0, space 0, times 0 [ 2361.336735] CPU: 1 PID: 11617 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2361.338396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.340339] Call Trace: [ 2361.340968] dump_stack+0x107/0x167 [ 2361.341992] should_fail.cold+0x5/0xa [ 2361.343100] ? create_object.isra.0+0x3a/0xa20 [ 2361.344399] should_failslab+0x5/0x20 [ 2361.345489] kmem_cache_alloc+0x5b/0x310 [ 2361.346653] create_object.isra.0+0x3a/0xa20 01:33:56 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 57) 01:33:56 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x8102, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2361.347923] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2361.349651] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2361.351076] ? alloc_skb_with_frags+0x92/0x570 [ 2361.352385] __alloc_skb+0xb1/0x5b0 [ 2361.353426] alloc_skb_with_frags+0x92/0x570 [ 2361.354584] ? quarantine_put+0x8b/0x1a0 [ 2361.355734] ? kmem_cache_free+0xa7/0x2d0 [ 2361.356850] sock_alloc_send_pskb+0x7af/0x930 [ 2361.358053] ? sk_alloc+0x350/0x350 [ 2361.359062] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2361.360511] ? __local_bh_enable_ip+0x9d/0x100 [ 2361.361726] ? trace_hardirqs_on+0x5b/0x180 [ 2361.362868] ? __dev_queue_xmit+0xdf8/0x2690 [ 2361.364118] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2361.365453] ? ip6_mtu+0x1bb/0x3d0 [ 2361.366414] ? lock_downgrade+0x6d0/0x6d0 [ 2361.367626] ? ip_frag_init+0x350/0x350 [ 2361.368741] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2361.370108] ? ip6_mtu+0x1e9/0x3d0 [ 2361.371093] ? ip6_setup_cork+0xfb7/0x1740 [ 2361.372316] ip6_make_skb+0x2de/0x4e0 [ 2361.373407] ? ip_frag_init+0x350/0x350 [ 2361.374510] ? ip_frag_init+0x350/0x350 [ 2361.375647] ? ip6_push_pending_frames+0xf0/0xf0 [ 2361.376994] ? ip6_dst_check+0x389/0x8d0 01:33:56 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) sendfile(r0, r0, &(0x7f0000000100)=0x1ff, 0xfff) pread64(r0, &(0x7f0000000040)=""/189, 0xbd, 0x4) write$P9_RCLUNK(r0, 0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/180, 0xb4, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) [ 2361.378060] ? sk_dst_check+0x235/0x4c0 [ 2361.379412] udpv6_sendmsg+0x20d3/0x2ad0 [ 2361.380508] ? ip_frag_init+0x350/0x350 [ 2361.381646] ? udp_v6_push_pending_frames+0x360/0x360 [ 2361.383118] ? lock_acquire+0x197/0x470 [ 2361.384210] ? find_held_lock+0x2c/0x110 [ 2361.385300] ? sock_has_perm+0x1ea/0x280 [ 2361.386420] ? __import_iovec+0x458/0x590 [ 2361.387612] ? udp_v6_push_pending_frames+0x360/0x360 [ 2361.389097] inet6_sendmsg+0x105/0x140 [ 2361.390126] ? inet6_compat_ioctl+0x320/0x320 [ 2361.391301] __sock_sendmsg+0xf2/0x190 [ 2361.392387] ____sys_sendmsg+0x334/0x870 [ 2361.393521] ? sock_write_iter+0x3d0/0x3d0 [ 2361.394705] ? do_recvmmsg+0x6d0/0x6d0 [ 2361.395788] ? __lock_acquire+0x1657/0x5b00 [ 2361.397016] ___sys_sendmsg+0xf3/0x170 [ 2361.398068] ? sendmsg_copy_msghdr+0x160/0x160 [ 2361.399246] ? __fget_files+0x2cf/0x520 [ 2361.400189] ? lock_acquire+0x197/0x470 [ 2361.401268] ? find_held_lock+0x2c/0x110 [ 2361.402416] ? __might_fault+0xd3/0x180 [ 2361.403538] ? lock_downgrade+0x6d0/0x6d0 [ 2361.404716] __sys_sendmmsg+0x195/0x470 [ 2361.405811] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2361.406998] ? lock_downgrade+0x6d0/0x6d0 [ 2361.408141] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.409345] ? wait_for_completion_io+0x270/0x270 [ 2361.410458] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.411550] ? vfs_write+0x354/0xb10 [ 2361.412404] ? fput_many+0x2f/0x1a0 [ 2361.413260] ? ksys_write+0x1a9/0x260 [ 2361.414136] ? __ia32_sys_read+0xb0/0xb0 [ 2361.415100] __x64_sys_sendmmsg+0x99/0x100 [ 2361.416094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.417304] do_syscall_64+0x33/0x40 [ 2361.418184] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.419404] RIP: 0033:0x7f6413bdcb19 [ 2361.420297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.425253] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2361.427456] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2361.429502] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2361.431566] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.433607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.435664] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2361.466152] FAULT_INJECTION: forcing a failure. [ 2361.466152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2361.469504] CPU: 1 PID: 11622 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2361.471120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2361.473062] Call Trace: [ 2361.473679] dump_stack+0x107/0x167 [ 2361.474529] should_fail.cold+0x5/0xa [ 2361.475445] _copy_from_user+0x2e/0x1b0 [ 2361.476380] __copy_msghdr_from_user+0x91/0x4b0 [ 2361.477469] ? __ia32_sys_shutdown+0x80/0x80 [ 2361.478508] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2361.479749] sendmsg_copy_msghdr+0xa1/0x160 [ 2361.480758] ? do_recvmmsg+0x6d0/0x6d0 [ 2361.481680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.482893] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.484154] ? trace_hardirqs_on+0x5b/0x180 [ 2361.485157] ___sys_sendmsg+0xc6/0x170 [ 2361.486059] ? sendmsg_copy_msghdr+0x160/0x160 [ 2361.487136] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2361.488217] ? _raw_spin_unlock_irq+0x27/0x30 [ 2361.489264] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2361.490288] ? finish_task_switch+0x126/0x5d0 [ 2361.491325] ? finish_task_switch+0xef/0x5d0 [ 2361.492402] ? __switch_to+0x572/0xf70 [ 2361.493456] ? __switch_to_asm+0x3a/0x60 [ 2361.494664] ? __switch_to_asm+0x34/0x60 [ 2361.495794] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2361.497185] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.498634] ? trace_hardirqs_on+0x5b/0x180 [ 2361.499796] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2361.501363] ? _cond_resched+0x5d/0x80 [ 2361.502415] __sys_sendmmsg+0x195/0x470 [ 2361.503507] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2361.504670] ? lock_downgrade+0x6d0/0x6d0 [ 2361.505818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2361.507137] ? wait_for_completion_io+0x270/0x270 [ 2361.508664] ? rcu_read_lock_any_held+0x75/0xa0 [ 2361.509928] ? vfs_write+0x354/0xb10 [ 2361.510950] ? fput_many+0x2f/0x1a0 [ 2361.512140] ? ksys_write+0x1a9/0x260 [ 2361.513169] ? __ia32_sys_read+0xb0/0xb0 [ 2361.514327] __x64_sys_sendmmsg+0x99/0x100 [ 2361.515386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2361.516755] do_syscall_64+0x33/0x40 [ 2361.517774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2361.519217] RIP: 0033:0x7f9d078eeb19 [ 2361.520248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2361.525216] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2361.527268] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2361.529209] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2361.531137] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2361.533072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2361.535001] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:34:11 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 58) 01:34:11 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xe000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:34:11 executing program 5: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="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", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r9, 0x0, 0x0) 01:34:11 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@audit}]}}) r3 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r6, &(0x7f0000000380)='./file0\x00', r3, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x181000, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000001300)=0xc) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/207, 0xcf}, {&(0x7f00000014c0)=""/27, 0x1b}], 0x2, &(0x7f0000001540)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x1000) sendmmsg$unix(r1, &(0x7f00000016c0)=[{{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000100)="10e590ec95364cd1ec9242a8b564cf16f5c90c8e21680f83f35e319bfa6c7a317ff9be1fb0b8494097b38b30677fc46c39654f69835d514b026ad5a65c8445f9c7c43af83cbc2f5579a14b0dbfe48120690d4873d95ef8add4fe9c1cc4c3a09c8ec5702e3076ff129a8a20bf986566db585f19adf788037090798bf93bb35c8ff0994331492255d15deba0d71742d27dae56cc6d33d9ecb5828c11c2b705dda8d8cc6287bd55fc314f45a6131aeb85d0fee38d2d09d3ec2d66b84e90a3821e0745849ab8553e49dcac2a20b6b7c9113ceb1cb7007e966cb1e7a7aac67a7fe548ed360399bc89", 0xe6}], 0x2, &(0x7f0000001600)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r5}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r9, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee01, r11}}}], 0xb8}}], 0x1, 0x8000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x11, r1, 0xb76a0000) syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') [ 2376.288611] FAULT_INJECTION: forcing a failure. [ 2376.288611] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.290467] CPU: 0 PID: 11644 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2376.291408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.292539] Call Trace: [ 2376.292904] dump_stack+0x107/0x167 [ 2376.293392] should_fail.cold+0x5/0xa [ 2376.293916] ? skb_clone+0x14f/0x3d0 [ 2376.294419] should_failslab+0x5/0x20 [ 2376.294937] kmem_cache_alloc+0x5b/0x310 [ 2376.295488] skb_clone+0x14f/0x3d0 [ 2376.295989] ip6_finish_output2+0x10bf/0x1cf0 [ 2376.296590] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2376.297270] ip6_output+0x3b8/0x7e0 [ 2376.297765] ip6_local_out+0xb4/0x1a0 [ 2376.298292] ip6_send_skb+0x112/0x460 [ 2376.298807] udp_v6_send_skb+0x7aa/0x15b0 [ 2376.299403] udpv6_sendmsg+0x2116/0x2ad0 [ 2376.299975] ? ip_frag_init+0x350/0x350 [ 2376.300520] ? udp_v6_push_pending_frames+0x360/0x360 [ 2376.301216] ? perf_event_task_disable+0x390/0x390 [ 2376.301881] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2376.302541] ? lock_acquire+0x197/0x470 [ 2376.303074] ? find_held_lock+0x2c/0x110 [ 2376.303636] ? sock_has_perm+0x1ea/0x280 [ 2376.304219] ? __import_iovec+0x458/0x590 [ 2376.304784] ? udp_v6_push_pending_frames+0x360/0x360 [ 2376.305679] inet6_sendmsg+0x105/0x140 [ 2376.306198] ? inet6_compat_ioctl+0x320/0x320 [ 2376.306810] __sock_sendmsg+0xf2/0x190 [ 2376.307346] ____sys_sendmsg+0x334/0x870 [ 2376.307917] ? sock_write_iter+0x3d0/0x3d0 [ 2376.308477] ? do_recvmmsg+0x6d0/0x6d0 [ 2376.309009] ? __lock_acquire+0x1657/0x5b00 [ 2376.309595] ___sys_sendmsg+0xf3/0x170 [ 2376.310129] ? sendmsg_copy_msghdr+0x160/0x160 [ 2376.310754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.311466] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2376.312090] ? trace_hardirqs_on+0x5b/0x180 [ 2376.312687] ? lock_acquire+0x197/0x470 [ 2376.313239] ? find_held_lock+0x2c/0x110 [ 2376.313783] ? __might_fault+0xd3/0x180 [ 2376.314320] ? lock_downgrade+0x6d0/0x6d0 [ 2376.314887] ? io_schedule_timeout+0x140/0x140 [ 2376.315512] __sys_sendmmsg+0x195/0x470 [ 2376.316066] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2376.316648] ? lock_downgrade+0x6d0/0x6d0 [ 2376.317217] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.317867] ? wait_for_completion_io+0x270/0x270 [ 2376.318541] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.319172] ? vfs_write+0x354/0xb10 [ 2376.319684] ? fput_many+0x2f/0x1a0 [ 2376.320205] ? ksys_write+0x1a9/0x260 [ 2376.320726] ? __ia32_sys_read+0xb0/0xb0 [ 2376.321292] __x64_sys_sendmmsg+0x99/0x100 [ 2376.321866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.322556] do_syscall_64+0x33/0x40 [ 2376.323056] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2376.323736] RIP: 0033:0x7f6413bdcb19 [ 2376.324250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.326732] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2376.327759] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2376.328739] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2376.329703] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.330654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.330677] SELinux: duplicate or incompatible mount options 01:34:11 executing program 6: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 01:34:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x20000000, 0x8000) 01:34:11 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x8118, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:11 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 42) [ 2376.331615] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2376.351971] FAT-fs (loop4): Directory bread(block 10) failed [ 2376.352846] FAT-fs (loop4): Directory bread(block 11) failed [ 2376.365631] FAT-fs (loop4): Directory bread(block 10) failed [ 2376.367164] FAT-fs (loop4): Directory bread(block 11) failed [ 2376.374434] FAT-fs (loop4): Directory bread(block 10) failed [ 2376.377422] FAT-fs (loop4): Directory bread(block 11) failed [ 2376.382207] FAULT_INJECTION: forcing a failure. [ 2376.382207] name failslab, interval 1, probability 0, space 0, times 0 [ 2376.383844] CPU: 0 PID: 11642 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2376.384756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2376.385841] Call Trace: [ 2376.386190] dump_stack+0x107/0x167 [ 2376.386667] should_fail.cold+0x5/0xa [ 2376.387165] ? __alloc_skb+0x6d/0x5b0 [ 2376.387660] should_failslab+0x5/0x20 [ 2376.388168] kmem_cache_alloc_node+0x55/0x330 [ 2376.388750] __alloc_skb+0x6d/0x5b0 [ 2376.389231] alloc_skb_with_frags+0x92/0x570 [ 2376.389806] ? sch_direct_xmit+0x1fb/0x790 [ 2376.390370] ? lock_acquire+0x197/0x470 [ 2376.390891] ? find_held_lock+0x2c/0x110 [ 2376.391431] sock_alloc_send_pskb+0x7af/0x930 [ 2376.392028] ? sk_alloc+0x350/0x350 [ 2376.392503] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2376.393188] ? __local_bh_enable_ip+0x9d/0x100 [ 2376.393785] ? trace_hardirqs_on+0x5b/0x180 [ 2376.394358] ? __dev_queue_xmit+0xdf8/0x2690 [ 2376.394942] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2376.395600] ? ip6_mtu+0x1bb/0x3d0 [ 2376.396063] ? lock_downgrade+0x6d0/0x6d0 [ 2376.396606] ? ip_frag_init+0x350/0x350 [ 2376.397128] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2376.397766] ? ip6_mtu+0x1e9/0x3d0 [ 2376.398222] ? ip6_setup_cork+0xfb7/0x1740 [ 2376.398769] ip6_make_skb+0x2de/0x4e0 [ 2376.399266] ? ip_frag_init+0x350/0x350 [ 2376.399782] ? ip_frag_init+0x350/0x350 [ 2376.400316] ? ip6_push_pending_frames+0xf0/0xf0 [ 2376.400938] ? ip6_dst_check+0x389/0x8d0 [ 2376.401457] ? sk_dst_check+0x235/0x4c0 [ 2376.401975] udpv6_sendmsg+0x20d3/0x2ad0 [ 2376.402499] ? ip_frag_init+0x350/0x350 [ 2376.403026] ? udp_v6_push_pending_frames+0x360/0x360 [ 2376.403697] ? perf_event_task_disable+0x390/0x390 [ 2376.404342] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2376.404970] ? lock_acquire+0x197/0x470 [ 2376.405487] ? find_held_lock+0x2c/0x110 [ 2376.406018] ? sock_has_perm+0x1ea/0x280 [ 2376.406561] ? __import_iovec+0x458/0x590 [ 2376.407096] ? udp_v6_push_pending_frames+0x360/0x360 [ 2376.407764] inet6_sendmsg+0x105/0x140 [ 2376.408281] ? inet6_compat_ioctl+0x320/0x320 [ 2376.408865] __sock_sendmsg+0xf2/0x190 [ 2376.409371] ____sys_sendmsg+0x334/0x870 [ 2376.409899] ? sock_write_iter+0x3d0/0x3d0 [ 2376.410443] ? do_recvmmsg+0x6d0/0x6d0 [ 2376.410942] ? __lock_acquire+0x1657/0x5b00 [ 2376.411509] ___sys_sendmsg+0xf3/0x170 [ 2376.412024] ? sendmsg_copy_msghdr+0x160/0x160 [ 2376.412615] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2376.413301] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2376.413882] ? trace_hardirqs_on+0x5b/0x180 [ 2376.414455] ? lock_acquire+0x197/0x470 [ 2376.414971] ? find_held_lock+0x2c/0x110 [ 2376.415503] ? __might_fault+0xd3/0x180 [ 2376.416015] ? lock_downgrade+0x6d0/0x6d0 [ 2376.416551] ? io_schedule_timeout+0x140/0x140 [ 2376.417150] __sys_sendmmsg+0x195/0x470 [ 2376.417667] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2376.418216] ? lock_downgrade+0x6d0/0x6d0 [ 2376.418759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2376.419377] ? wait_for_completion_io+0x270/0x270 [ 2376.420003] ? rcu_read_lock_any_held+0x75/0xa0 [ 2376.420595] ? vfs_write+0x354/0xb10 [ 2376.421073] ? fput_many+0x2f/0x1a0 [ 2376.421535] ? ksys_write+0x1a9/0x260 [ 2376.422025] ? __ia32_sys_read+0xb0/0xb0 [ 2376.422549] __x64_sys_sendmmsg+0x99/0x100 [ 2376.423097] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2376.423754] do_syscall_64+0x33/0x40 [ 2376.424243] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2376.424904] RIP: 0033:0x7f9d078eeb19 [ 2376.425385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2376.427754] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2376.428735] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2376.429648] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2376.430569] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2376.431484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.432405] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2376.438012] SELinux: duplicate or incompatible mount options 01:34:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x21030000, 0x8000) 01:34:11 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xff01, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:11 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8002, 0x0) splice(r1, &(0x7f0000000080)=0x1f, r2, &(0x7f0000000100)=0x9, 0x7, 0x2) write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7) [ 2376.535795] FAT-fs (loop4): Directory bread(block 10) failed [ 2376.540650] FAT-fs (loop4): Directory bread(block 11) failed [ 2376.549586] FAT-fs (loop4): Directory bread(block 10) failed 01:34:11 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000240)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000040)) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2376.555558] FAT-fs (loop4): Directory bread(block 11) failed [ 2376.560325] FAT-fs (loop4): Directory bread(block 10) failed [ 2376.561076] FAT-fs (loop4): Directory bread(block 11) failed 01:34:11 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="0e0e99fd2cd60b25adcca0353448e2606fe3467e01f29a7621203df9a042c66b5308fb44f6b054691e5f222274058fd0dc1a371581f85a91c73bbe673fa165563cd2efb8b86c9639369d9307764009d82720d878355d2a69e4741f89f15c9335f1e6e887d1d992ce6e1d03a4d6199d1ed7fe5312a2c47c76bbf10f672a99c32a1dfd817f43930684649190362e01e17123872a68366d6e6a1d8135c6594c1706269c31395fc0968492607639ec244dc36014972b3c187df1de44ead32bf2bde8369de5dbb49d3e9c76b21e4a250c0e5ccaa51b55625ea92867a4b256877cd564ccf5438001b7843cc6a1a83c7f09ab48d060cfc4eafd58428867f3f54cb2cf99b80c241b1a1825f8998a159ec679917e24043325cefa94678ffeac9fdc9df8a2806f62adfdb5e0f20cc39a11e7f1d5a21a97965205f0e70fa849fca704a8b035f1cf2552fe12d170db836febe51eb2693dc90a47fa76d460da4949bee362e38dab7cdea5b0cd3cdccbb29dcf16fc8fa028bb956f1f77be80d242e4a3b072787a1ea4b23ac8da54688840e0a3cce68161db86ebcdeb973387df49c746164183cc629e007d960c3031333b2d5d5b1110d95fc2f71189a7cb9eb401ec50be2091eb22910d4e3c67cd6747711f8043d6a85e7a975fcd57177694b8ee7aee88496bcf436c4f8c32d2610c4c79ef1588d3953509f2ff68d0cb2d2fe410f8f0da7bbf511b7b866fb2fe38db2cdd87268a1bd571adec19cb50d53c41470e4c37cade830294638db3be84528181a62fd14fd82b0a7115a6b7d410aa8054f6583ae68ccd124caa3bc9e5a8bafa59867c6f098b4cd4c1afdcb1c26394517f6afc7c51e788c177d6c6371d069c812d7b7f7e07c6c35371f2fbe0984a445efd09ac3e11dc67e3a824ff8b2073e0dce0f46459a84042549456b93332236c1ba346a71f45323dbe34ca3ea33982d0692573513d871f1aaaec3a1636dac07514a652c41fb9ef4701c0474ac8eb1c7539bcb8a5c3695c3f69e975a3b012b8de895956d949190701c65cfb16a3605d9bda254924a8f06aba8e576ed486faa13c7f8d823f4961a0dabcd13b2c5f29674fbf8f5a4ae515273e1f65b3a6c28730ef171f16b1b21948030c0f93c8cd688e71b3f366587144d93a4da8afb9f01267adb92634fdb64d253cf700b596a86e594d7022fc32d74491d59d731c6f25c73eeb43624c7bc922d82505e1e6cbf7c9e85b2edb9408c2f6e365adc5abfc9531b26d2c80d91a5b1bff6844c3d3a0f895783d5021971a932fe77e827a3f76057c07838925dc9b690259753424b9a9b8460494479f13328c3ef79c7a873e12391a0de2aab36e3135a06aacc527cbe0c704179d41c74422da1b498f70bc55b66940a99c487ba15b5635e1d65d0d9caf6c8a672066c939faa5309b69dc4c47c8023a94e47b23ed8f3aea73361d2d57eb6b922ad26fbabbdf9b5b727a397ec94db506f40604c07caa0905a71360b17301e329559737883f96f589c2a67ea36e601fe5de222aa16e54e1bbafa87ebaf73cecc27474f93315498589e35a46eaff1d66739b8832811bed0d5303e3f119fa8b2124ff1a1720e97306e4f84ad2f2fbb11bcc062aa33c28ccd3a079e5fa11525fba1a8433eed2afaa6a33460ada596a8a74083ff991477ad20120fdfacb2cb5085cad3602dc0fa24ca4f44e2d37e3006a6c1cdb5613b29b908374c6b914514e753040b78f102532ec38fb63be1db822ab781148759a4b738234b6832c3894bce0d7dc21857c3ce0fa049678366bb4c7d0e290f683c4ad70593fd86e599da78beb02840bfd09ee742a175a041e2358448ec62c083f79c27edb998ba3743a80c99138d17c2dc2bd664014664410fcd55423149b07def18d6189b0fd8b880379ba12c17c81b94874c516454b753e00ec8e7e368dfef3017c735fab26639f2c82165f47cdc35b188ccc000335912349a4c0bc135113163a2dd29c8d4fe8045965bac91aaa3eb91d09949911acdbc78da9cb437122c73d5923d066f88f703e0a8fef12f9ce56b01b8e79521693f59a6ee79cdbd09b997a65298b6c6e7d1a540f1eaff83455770932a8ba5e8667da737ebf4ee4a7e2ade310e9408e083863a881f1581a41f14e9997326607b21c3506a6770bc25dde5faaab59d849fc5d0cac5a245e8016e7243e22d7dffd973774e8e1dcbac5060f67b5b17820a9ca8107ca45ee380b93ddc94a06bee459f7e21b13318f3732d2e26ec4a86319bc76f63ca11d9985c1ad7bbc6ea72b8807ba4b6668d54a42bc4c5561fddc35030001b882936b57d8f91161606eadbd5b0fba1ea09d1ef5cfcc663bd3c81c9536d605aa48f2d4bca6a3e669e94a9f79c4c7264ff666a7c8c6d9aef9cd685a8c5e7554c1555a8185e6b705e596c1716f6d56f0dbeab6290aad568695568832367b87a51a76e6b46873bdffd0b5b09a4f9d925167c8ed460acfcbc43a7f1a455a758dffff4cd485d11e08fe2b159cb6bf94aac14f423d01eb7bcd2381eae0e011046727af1600335b80677094e13cba4ea67d3e4b8b44905b8fca9cf23d38f0be6863725df0883a3051ea05bd9f77dbe46559a42e402482679ab11cdc5364957a40190f7b0e53a7ed700e0ff368eb01895d1d53ee2ca756e5696851a4fe811b1884c7df28a5040f6136444157536beb51601a5a05d7a5ebb0e69e2619a0d9302c99f59a5d92da1ee787089ee269968582d54b3c49ba45c829dfbb3fed47dad8000274c5b1d8f9e061da885630b215dc20a2a3c1caff554610031c4403d8983de4ce187c547b16383f69f4244af06f15ff367ebc373ebf8b7425870e12e6efde6deb2ae13a6b225200d3ea7502f49c24daf4863adac7da7e5014902bc5696fbf86268c3a328d4dcdf1fe759b7a32056e5a631bfa1d4a85e7cf365003090e466545ba15fa589f9a623f53c31f13fb70e0ab1ceeca4cd16e488814f8ccb3a1af611c726e9108d6c115da82dca26b75ea97fb82f3354581b4cbb2afcded6f9d1344d9d25a7b5f9b87ccb4657f5076e32159fa161bfe541187e0c9263c54a90d05e40cfb2b9c61cf1d9424bb7a7cf063a797158591d7b570c36a551a59ea0ca712f99f3f4b4178ebd8de4eeb8d36fc5bef066007bdc02b19ad43221e27deb72d8f4be020a45c435d6bad1f0a147ea472865699f388371cf1990c080ccf30f8120d044cd53c290429137b32180bf0f85d8569a2351279d7a113ea19da82e4426b4f29824f48478f35486064071976c187dade2cdd166825e8b6577a48850af202643ceae108357003feee5b8c3620b8b9a99502d80b7cc345e5a5320b18fe9e2e41ca56391bee1621563f67911224e14f576ff5c734bdd446d8ad91a8a55d8d4c55fb9c63a9a24b45b4104b1a1f61ceab5862ea5610a506a42be35b7f01728eaed3dfc15e8879eedd4bb732b32cfaf420e9ea4965a05adc8651852fd5d856cf54f921d82e950ce60918b1da64294c53f7a89b57bc93396d2042bd47b73d32357d77078a28e7e5662f290e7a67607f322319e1abfb7aa934e9481b94be302e1e7ea2b2ef8e8ee6caf70f819310aab2998e9890d9971185e349f23c5bed57f937d336866b17fac451d08175c5a230b39758486fcc26111347e57b5864814c1d4f59c4bfac45596ae33b21f6c06f6ccffb61176473699d3f73308f7313e29b4907a89716812db946e7e598e6791c801af23b531cbedc73f6b5f1a0a654f8bcd88d500fde958201664b2113caac06441f9093bab05eb75dc6edd12d84479c1d286f15119e1dff516945a1066b371f9f156efe8f7ffcaf28d54a5d26d4cb2a7fdf9ca382055cb7f7a9309e9c2c070c7844cbb9ecf5a3cb63da8e9ad5cb60a85298e9673c816db137f3d5f5edf623c707b31556d6721da5273bf6ed10f335b6bb098c370725ddd698dc79517e6cd60e3a2092c516b838806644568d61659becfbb659ab8837cf24d88a70bc284028e924535427d9978e28d726deff14a493ec80e8e126a3288f70825570b3939b6278fff08fd5af5db3357d765b7d472a02909f65e208666339af92a26986acc18b1ed393a68d113a4b94a690e7fad0b2c1fc01c3854164d66b0724032bfe5105ae6e6e7e5f682f3cbbabeb264f02798e1231103622f4cfa59266eccecaebbf88107dbdd6e218ab1476297b14af2b4738774f1d3e44afc8e5b8189e3ff6a19d8d66de4f612ff31378cd9175cbef094c2dd5ac69069021b488584d6eaf2043ab21e58009214442c926d77e573e9701d9497625399561e93698d0a61f151942a442a762b1b02a7621518a7d307562cbd6ae42af640a758ce7eee6ce8d4c4d6e3f3bcac5384eae0146e0f4625e46abb27a6ff7651b59d1cc2e63c0750e3e56070e8e0bf46bb30cfa084f240a1ab63fb9ce275993a71e6f32889fec411b476d6bffda3aad4338f37a9840fa4b3476ec5bc308afe2170b66dd147d524658f860686f9554f2af981bcdb130fc7d1a6ce8a756b587fa8bbdd72427db811515cf6271f83afd7e010c983a59430e2fa660ff595ed36bacc6c57e7a2f2c412f6f63fa4712c055f76a107997cb87c22b0e53319648f18522b7dcb23fd2a8fbcef7c0ed02d3f93419ccf9994bd1133fb6145b804dc7f2bd03a9793656e0e62628e79cdf9d6d1068153aa793f1683247f97b69733f17706d27414d53ac7c7e0981266114fff8ddbabbf32fc461818bba4aa81be7223aa0e41c5d22b6ea83b3912b56343b98a99d37ff1830b0a73e4c09e7b1042b66fb4445c7fef8eb1320e525bce79308bd26a53594b33ae385ebc120528571d5cfd09ac736639ce47cb26765d3d5a533149cebf1d4366c323f75a2a6296c36f8740d0382d5db91bebff641a17fd28b1f7b43b92e87eb1b938781da10ff8b714caa9bfbcb9ce3e414ff9e92f2a1d20fe6ab1be9f13f3f6d538fb47ac0e8c0565dcbfad3bd56bbf051de6d378ee72f3a51829bf660f4a11645e17b8d54e6f546c26790e52b4550eeee68f0647a2c84df4740d6d8707bd98b92e26b560fa23d96c826d6e46086537f575cd7214be639710b11cc7d4ebc8871416725490f7e4d156a602dcd8a24c1835179e9d9d829f9c85e92431f20ee3ea2647f115a32e969ed3515e21fc270947a1ae73f0ef328fdca47cfa8a2a6f677286e0d65ab6256324a5ede6c68549a9f28c6cb74d18fad9fd3e0140b9a5fff85129e2a5ca6cac4198058ad8494510d2e073861a23517b468c23e060318f7ed89e78bc60e1a4bbb351144eda39c4cd6a55a4e1c276e1c2c46f9dc4b85d6a80ed5d75fac3f99dd2717be6baab4cbcc094aa64b670d06c019e121becd614fc56deed7bd030f6ab5a95318e2a83822f1ecb1793a6cbcfda26ab558b7bba18d642d51e92848acff93208c8338a613428436415805c10ead857e0538dedae72cdccb96cd1623e4994c5a396a08530352a005993bb0130f2017073e3b183e5a61e7561e5ace238c298fed857a1626850123ca6775f8446638831986498aa2264a35fd18286b821987086e9270095e3f15cae844cbd5ea8b6e2c89b8464957bc272447ca638947562e1b37c986f61bb4efb7bd213bfd21deeed220f85519024abb93693edeaf77aeac1cc9b99328394a48e0f5e674fbabab34d7334e3ecf6a93d831001089e039dd47c1a29e1bc8ade64c0c0caab9531114a46cb3cd4ad30796a59f03767de5c009b3302c4fd995cbd1e324a0fead96b444b0e987347394256267a9dc084500bc47cdfc2edc020253b66c2a481166e8c6da9ea06630732f549005", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r9, 0x0, 0x0) 01:34:11 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:34:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x3f000000, 0x8000) 01:34:26 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x30000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:34:26 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x80000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:26 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 43) 01:34:26 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 59) 01:34:26 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="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", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r9, 0x0, 0x0) [ 2390.967770] FAULT_INJECTION: forcing a failure. [ 2390.967770] name failslab, interval 1, probability 0, space 0, times 0 [ 2390.968898] FAT-fs (loop4): Directory bread(block 10) failed [ 2390.969139] CPU: 0 PID: 11701 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2390.970514] FAT-fs (loop4): Directory bread(block 11) failed [ 2390.971149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2390.971160] Call Trace: [ 2390.973687] dump_stack+0x107/0x167 [ 2390.974102] should_fail.cold+0x5/0xa [ 2390.974539] ? create_object.isra.0+0x3a/0xa20 [ 2390.975068] should_failslab+0x5/0x20 [ 2390.975501] kmem_cache_alloc+0x5b/0x310 [ 2390.975964] create_object.isra.0+0x3a/0xa20 [ 2390.976469] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2390.977052] kmem_cache_alloc+0x159/0x310 [ 2390.977273] FAT-fs (loop4): Directory bread(block 10) failed [ 2390.977530] skb_clone+0x14f/0x3d0 [ 2390.979196] ip6_finish_output2+0x10bf/0x1cf0 [ 2390.979707] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2390.980065] FAT-fs (loop4): Directory bread(block 11) failed [ 2390.980274] ip6_output+0x3b8/0x7e0 [ 2390.980291] ip6_local_out+0xb4/0x1a0 [ 2390.980311] ip6_send_skb+0x112/0x460 [ 2390.982843] udp_v6_send_skb+0x7aa/0x15b0 [ 2390.982908] FAT-fs (loop4): Directory bread(block 10) failed [ 2390.983319] udpv6_sendmsg+0x2116/0x2ad0 [ 2390.983333] ? ip_frag_init+0x350/0x350 [ 2390.983356] ? udp_v6_push_pending_frames+0x360/0x360 [ 2390.984774] FAT-fs (loop4): Directory bread(block 11) failed [ 2390.985104] ? perf_event_task_disable+0x390/0x390 [ 2390.987730] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2390.988283] ? lock_acquire+0x197/0x470 [ 2390.988740] ? find_held_lock+0x2c/0x110 [ 2390.989207] ? sock_has_perm+0x1ea/0x280 [ 2390.989683] ? __import_iovec+0x458/0x590 [ 2390.990155] ? udp_v6_push_pending_frames+0x360/0x360 [ 2390.990755] inet6_sendmsg+0x105/0x140 [ 2390.991198] ? inet6_compat_ioctl+0x320/0x320 [ 2390.991709] __sock_sendmsg+0xf2/0x190 [ 2390.992149] ____sys_sendmsg+0x334/0x870 [ 2390.992619] ? sock_write_iter+0x3d0/0x3d0 [ 2390.993099] ? do_recvmmsg+0x6d0/0x6d0 [ 2390.993543] ? find_held_lock+0x2c/0x110 [ 2390.994012] ___sys_sendmsg+0xf3/0x170 [ 2390.994455] ? sendmsg_copy_msghdr+0x160/0x160 [ 2390.994977] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2390.995569] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2390.996077] ? trace_hardirqs_on+0x5b/0x180 [ 2390.996576] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2390.997085] ? finish_task_switch+0x126/0x5d0 [ 2390.997596] ? finish_task_switch+0xef/0x5d0 [ 2390.998095] ? __switch_to+0x572/0xf70 [ 2390.998539] ? __switch_to_asm+0x3a/0x60 [ 2390.998997] ? __switch_to_asm+0x34/0x60 [ 2390.999467] ? __schedule+0x82c/0x1ea0 [ 2390.999913] ? io_schedule_timeout+0x140/0x140 [ 2391.000442] __sys_sendmmsg+0x195/0x470 [ 2391.000895] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2391.001387] ? lock_downgrade+0x6d0/0x6d0 [ 2391.001866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2391.002414] ? wait_for_completion_io+0x270/0x270 [ 2391.002962] ? rcu_read_lock_any_held+0x75/0xa0 [ 2391.003487] ? vfs_write+0x354/0xb10 [ 2391.003908] ? fput_many+0x2f/0x1a0 [ 2391.004320] ? ksys_write+0x1a9/0x260 [ 2391.004756] ? __ia32_sys_read+0xb0/0xb0 [ 2391.005215] __x64_sys_sendmmsg+0x99/0x100 [ 2391.005694] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2391.006274] do_syscall_64+0x33/0x40 [ 2391.006696] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2391.007273] RIP: 0033:0x7f6413bdcb19 [ 2391.007695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.009769] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2391.010639] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2391.011444] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2391.012245] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.013055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.013858] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2391.032968] FAULT_INJECTION: forcing a failure. [ 2391.032968] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.034499] CPU: 0 PID: 11694 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2391.035284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.036223] Call Trace: [ 2391.036532] dump_stack+0x107/0x167 [ 2391.036945] should_fail.cold+0x5/0xa [ 2391.037382] ? create_object.isra.0+0x3a/0xa20 [ 2391.037904] should_failslab+0x5/0x20 [ 2391.038335] kmem_cache_alloc+0x5b/0x310 [ 2391.038799] create_object.isra.0+0x3a/0xa20 [ 2391.039295] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2391.039872] kmem_cache_alloc_node+0x169/0x330 [ 2391.040403] __alloc_skb+0x6d/0x5b0 [ 2391.040818] alloc_skb_with_frags+0x92/0x570 [ 2391.041322] ? sch_direct_xmit+0x1fb/0x790 [ 2391.041803] ? lock_acquire+0x197/0x470 [ 2391.042261] ? find_held_lock+0x2c/0x110 [ 2391.042725] sock_alloc_send_pskb+0x7af/0x930 [ 2391.043237] ? sk_alloc+0x350/0x350 [ 2391.043651] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2391.044264] ? __ip6_append_data.isra.0+0x1b76/0x3a70 [ 2391.044864] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2391.045441] ? ip6_mtu+0x1bb/0x3d0 [ 2391.045845] ? lock_downgrade+0x6d0/0x6d0 [ 2391.046316] ? ip_frag_init+0x350/0x350 [ 2391.046771] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2391.047314] ? ip6_mtu+0x1e9/0x3d0 [ 2391.047715] ? ip6_setup_cork+0xfb7/0x1740 [ 2391.048194] ip6_make_skb+0x2de/0x4e0 [ 2391.048666] ? ip_frag_init+0x350/0x350 [ 2391.049119] ? ip_frag_init+0x350/0x350 [ 2391.049570] ? ip6_push_pending_frames+0xf0/0xf0 [ 2391.050109] ? fib6_clean_tohost+0x2c1/0x4c0 [ 2391.050622] ? ip6_dst_check+0x389/0x8d0 [ 2391.051083] ? sk_dst_check+0x235/0x4c0 [ 2391.051544] udpv6_sendmsg+0x20d3/0x2ad0 [ 2391.052007] ? ip_frag_init+0x350/0x350 [ 2391.052471] ? udp_v6_push_pending_frames+0x360/0x360 [ 2391.053051] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2391.053649] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2391.054264] ? trace_hardirqs_on+0x5b/0x180 [ 2391.054766] ? lock_acquire+0x1b9/0x470 [ 2391.055217] ? find_held_lock+0x2c/0x110 [ 2391.055691] ? sock_has_perm+0x1ea/0x280 [ 2391.056167] ? security_socket_sendmsg+0x6c/0xb0 [ 2391.056719] ? udp_v6_push_pending_frames+0x360/0x360 [ 2391.057315] inet6_sendmsg+0x105/0x140 [ 2391.057758] ? inet6_compat_ioctl+0x320/0x320 [ 2391.058268] __sock_sendmsg+0xf2/0x190 [ 2391.058711] ____sys_sendmsg+0x334/0x870 [ 2391.059171] ? sock_write_iter+0x3d0/0x3d0 [ 2391.059656] ? do_recvmmsg+0x6d0/0x6d0 [ 2391.060100] ? find_held_lock+0x2c/0x110 [ 2391.060578] ___sys_sendmsg+0xf3/0x170 [ 2391.061027] ? sendmsg_copy_msghdr+0x160/0x160 [ 2391.061550] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2391.062144] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2391.062650] ? trace_hardirqs_on+0x5b/0x180 [ 2391.063140] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2391.063654] ? finish_task_switch+0x126/0x5d0 [ 2391.064157] ? finish_task_switch+0xef/0x5d0 [ 2391.064672] ? __switch_to+0x572/0xf70 [ 2391.065113] ? __switch_to_asm+0x3a/0x60 [ 2391.065569] ? __switch_to_asm+0x34/0x60 [ 2391.066036] ? __schedule+0x82c/0x1ea0 [ 2391.066487] ? io_schedule_timeout+0x140/0x140 [ 2391.067010] __sys_sendmmsg+0x195/0x470 [ 2391.067465] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2391.067950] ? lock_downgrade+0x6d0/0x6d0 [ 2391.068441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2391.068989] ? wait_for_completion_io+0x270/0x270 [ 2391.069540] ? rcu_read_lock_any_held+0x75/0xa0 [ 2391.070063] ? vfs_write+0x354/0xb10 [ 2391.070485] ? fput_many+0x2f/0x1a0 [ 2391.070896] ? ksys_write+0x1a9/0x260 [ 2391.071545] ? __ia32_sys_read+0xb0/0xb0 [ 2391.072062] __x64_sys_sendmmsg+0x99/0x100 [ 2391.072554] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2391.073139] do_syscall_64+0x33/0x40 [ 2391.073558] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2391.074138] RIP: 0033:0x7f9d078eeb19 [ 2391.074563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.076658] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2391.077524] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2391.078334] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2391.079144] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.079960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.080777] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:34:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) recvmsg$unix(r0, &(0x7f0000000800)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)=""/68, 0x44}, {&(0x7f00000001c0)=""/254, 0xfe}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/153, 0x99}], 0x7, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}, 0x10003) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 01:34:26 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@audit}]}}) getgroups(0x1, &(0x7f000000a5c0)=[0xee01]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) r9 = pidfd_getfd(r2, r0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f000000b8c0)=0x0) r11 = getuid() r12 = openat$rtc(0xffffffffffffff9c, &(0x7f000000b980), 0x8000, 0x0) openat(r9, &(0x7f00000006c0)='./file1\x00', 0x240, 0x19) [ 2391.156866] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.157619] FAT-fs (loop4): Directory bread(block 11) failed [ 2391.159671] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.161486] FAT-fs (loop4): Directory bread(block 11) failed [ 2391.162187] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.162878] FAT-fs (loop4): Directory bread(block 11) failed [ 2391.299160] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.300196] FAT-fs (loop4): Directory bread(block 11) failed [ 2391.322529] FAULT_INJECTION: forcing a failure. [ 2391.322529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2391.323922] CPU: 0 PID: 11728 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2391.324724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.325667] Call Trace: [ 2391.325974] dump_stack+0x107/0x167 [ 2391.326391] should_fail.cold+0x5/0xa [ 2391.326828] _copy_from_user+0x2e/0x1b0 [ 2391.327286] __copy_msghdr_from_user+0x91/0x4b0 [ 2391.327822] ? __ia32_sys_shutdown+0x80/0x80 [ 2391.328325] ? udp_v6_push_pending_frames+0x360/0x360 [ 2391.329081] ? inet6_sendmsg+0xbd/0x140 [ 2391.329583] ? inet6_compat_ioctl+0x320/0x320 [ 2391.330093] ? __sock_sendmsg+0x55/0x190 [ 2391.330559] sendmsg_copy_msghdr+0xa1/0x160 [ 2391.331051] ? do_recvmmsg+0x6d0/0x6d0 [ 2391.331497] ? __lock_acquire+0x1657/0x5b00 [ 2391.331994] ___sys_sendmsg+0xc6/0x170 [ 2391.332450] ? sendmsg_copy_msghdr+0x160/0x160 [ 2391.332971] ? __fget_files+0x2cf/0x520 [ 2391.333424] ? lock_acquire+0x197/0x470 [ 2391.333876] ? find_held_lock+0x2c/0x110 [ 2391.334347] ? __might_fault+0xd3/0x180 [ 2391.334797] ? lock_downgrade+0x6d0/0x6d0 [ 2391.335277] __sys_sendmmsg+0x195/0x470 [ 2391.335729] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2391.336221] ? lock_downgrade+0x6d0/0x6d0 [ 2391.336708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2391.337260] ? wait_for_completion_io+0x270/0x270 [ 2391.337806] ? rcu_read_lock_any_held+0x75/0xa0 [ 2391.338335] ? vfs_write+0x354/0xb10 [ 2391.338758] ? fput_many+0x2f/0x1a0 [ 2391.339178] ? ksys_write+0x1a9/0x260 [ 2391.339617] ? __ia32_sys_read+0xb0/0xb0 [ 2391.340079] __x64_sys_sendmmsg+0x99/0x100 [ 2391.340582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2391.341163] do_syscall_64+0x33/0x40 [ 2391.341587] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2391.342165] RIP: 0033:0x7f6413bdcb19 [ 2391.342592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.344693] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2391.345556] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2391.346367] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2391.347184] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.347994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.348817] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 sendmmsg$unix(r2, &(0x7f000000ba80)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="b8060764acd7e7d4a243d142891792417bfd3be30b0be73cf1bb6f8a56e8f158e771410b18039c429f4de860520b653ee6bf72e956a6e7d348cf0b0e95a2c467f1ee9d20886b06bc20c6f1b5619299d219924df55b0e0fae3e99d4c5a3d98381d9b700a93463da3c2a8f9d5cc12de699a7f3b5d822b03892cbb3fd5ff6df7e56423a87a0733f3f650f29264503944223d840995929de902e12f9117167695003a43d5f9395643d4830b6af09159292338041bc3d579b85ec29f231a5d186263eb3d214a05ce11d", 0xc7}, {&(0x7f0000000180)="782acac422d32f50c850038252edf6c9633ac17903f4d5a5cb1655d6835f6dcf904408366abe391a9d57df0d98835390b8435d27b436e2262ad7bb6e37b2699d4e", 0x41}], 0x2, &(0x7f0000000240)=[@rights={{0x2c, 0x1, 0x1, [r2, r1, r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30, 0x1}}, {{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000380)="39b382439f78828542951b060dc46c6f5f390a617f1423c68c005d4db14d3ea51ee6eed615ae00cf98db2c133b73935786ad389b8f8f53c5d48a9dd804100b827df9199a4d2fa7ef8b0eb7171840fc1f0db4a86d747c7d9a4a17092837cadded77a9d5f4cd2e4169d7ba4caa9fc6f18dc183246046feff196afd3840bc9c89f5bed18c2abce2c4963c8bfe1f59cf47874fa0589bd68720e9ad47d24935336fb245e8191adce7f07343c6b297bea200633dca47cc3dd96244cd99f6309e215603f8dd3d76cdf9312470d721ebd281e2efb09bccf2c09bc7c890de9a574d0e27ab09cb7b435dec21e668baeb6674505e", 0xef}, {&(0x7f0000000480)="b245c32f16845c9262dc51a415362cb4c6d27c1825624abbd109fc38fcb180bad3cf70e84dc3b31dc8d2be82fef7a1cfc246072209d6e4e3", 0x38}, {&(0x7f00000004c0)="10352143281d6889baffec05201dec5b2fc297d2990a4e6e355fae74f319b6a1c6dbf5006e3935bbd7ead1b1d19a13c3b7ad1b3e4d887d10", 0x38}, {&(0x7f0000000500)="1a6c7b9e63ec3d0d18aaecd746deb524be9db49c6fe165606d59eb46ad2b89687b21c34a48a3842c42671b52e2650812b58b75bc88154fdfa9e81d6de98d6780edc5464836481477a4c565e24fd26b40792c4cb89894405ea36dc0f3cd84c7cfa9d0a16a1340f22c6a162065f5316a69c51495eab333eb8934bf8c0077ece2bfc19dea570e29c3a28cbc90bdf9c2978e8d5c13786e1062437afb7338a3987747260484f4c217507a18ead8dc84eaf0d31f1ecb33e0d51c97b766e1", 0xbb}, {&(0x7f00000005c0)="9ec4bf502e02fc99269035eac4a8b7c24c7b4418a9c76a7d1d670ff8f022f5a347b5f7de39aea6259a8b329523361500446187b13e6ea05bb515a883b2d9ae3d5c2d67ccd8a7d82f270d5549af07913334b0bb78", 0x54}], 0x5, &(0x7f0000000d80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r0, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1]}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}], 0x150, 0x8c0}}, {{&(0x7f0000000f00)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="b3d1e96be89611749392125260273e0a71270e6a8042d406a117ae9bbaed2ce3c61a5afcdccc8f1249fe8920f344891d36dfa1e481bcc8670aa00bf0bd4d09e593d45e588ff8f3a2e1ff9f805bdbeef83d4f3afba19f500d5b59112d6a848cd808321e9e691597d9f688b58e94a6dbaeb3a9604d9cd7a7ab747859171784f00369ff4ad928712a295d3e2202616558582083ecd2eae1904aec582e", 0x9b}, {&(0x7f0000002040)="a58f8b4b4d7a74aa63ea53b2758df656d31af09b47cde28893e50d015c6afae8dc6a32b22f477d26f14ddd5cba5d3fde8473e6d252b0f518a201c74621fd7207ab2cded0742ec603fc917c47605c7e4d5e274c20e4ded35659af456df85a3c897eed0d738aeb6589256d73a0f17e46ad0644a1ad63a617dd47ba02adbdf9606cf9b7faadc392c3225ee6ec46ae7771c3028ffa8f9a9da4d6b2e2f8c2f0b6593b88ab67fca09b4c261e96eb4e3b8cfa680e315a9da669ebf065c7de78fa3c0a", 0xbf}, {&(0x7f0000002100)="a1cee9e7fa4312e074219263fd112664090b4d9d2199472a0295c60a7a35cd342a6cfd73afd2ac5c13d849b3d89a569d7b1e549a2dbb5294b089fcd1ee1e3ccc752ecabaedbce0fca7bdcff18ff4c6d78d5b25fe457f1088b960027f61715ded061b22fd4782e3b53282d7e2275d21fbe2286336dc8ea1a8", 0x78}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="9fd7c4a10ba99871b59508ff2581ce51288217f5342fb4fe5b52a4acdb371366b99bedf0b29f506e2bc01e16e68a2701cf05b2af0ea4acb0daf48a8743bebfa3e54eb5b7dc057876613ccc82ba4d17d237a213c4f170011d54531237331a787fae293b555136bbd690c29b3f203511fa722c28c7996d15494d0d56fb50c05fdab4f35c54f0fe54c8b124a8aa272eb744790d7af247c6331db615ed7c61fd3d3148a92a75a9f687be950b4e6a59fd6945a2e03183308cb3f1b623b4d1845d5e9186e263e6", 0xc4}, {&(0x7f0000003280)="8da04e2df13fa6", 0x7}, {&(0x7f00000032c0)="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", 0xfa}, {&(0x7f00000033c0)="dc1a4be3b1f66237e68edbe7c0463fab2a64611015f102739d16cacbd7a4ee588911431cb6f6fc8d1a67c9588e5558d5b91d734521b8ab3463ca6ffbd2b9e5f7b1c43c98c2fc9b47cd93bca7b0ab0a0e0a1b3b1e457c13d2425e8aa15870323b34dfd80303de96230ceb979eef4c1f7b3f", 0x71}, {&(0x7f0000003440)="5e77f60bbfc3a17aee90eb1a9a6e5ad73717bf5591eec28756862e1e8b16ad0153f8a944b0e23d01fe27478d5316204ff13378138fff1a38ab634b06d8dbd15a44be6e7a601a45bfd4442883a1e6ed07c0acf40874bf82039a719c7052838c41444f3186213992497e9c1b936587230bcba4d868884a0ddd0347ca8eb87bacb28f38c47df2962c87bacf827966162c20a34ccbcb141b9e246e2e56aa4b900ea837a1f5b70098b38392e775f6efa472dc035db73691532bb84738a22c8ad2ba6d9260ed834bb07318c2e852c11b5bfea4c851445e2619ed23cd5616438837a69f7ecde0a2d56de1e999f0521c4904", 0xee}], 0xa, 0x0, 0x0, 0x20000004}}, {{&(0x7f0000003600)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003940)=[{&(0x7f0000003680)="9a0f693938e508161805d074429702d21c90485971cd335c8e700dfad84e06b2a4365903d504bed3f224c10a4f0b0cfe346061", 0x33}, {&(0x7f00000036c0)="e38b9777c86d3973ca82fc4463a8ef2f2470e13596bc26518b5b71c8a6e81b49664b4b220f13c2353712478f357940f18d5e2e1a38940f3d9e09319d8321542a357c2f1d4a95f1f6b9ebc325ceb881b929b30293548a25166f9860ba27ca70fe0fb0598d2ecc", 0x66}, {&(0x7f0000003740)="f4e8d71e81d3444ccd0d7d9494510e7ac576e7ab254469c8adf05c1f3f675d706eaf000ca1fb537cf2ee372a22652a54f6c11337b0017e1d13eff48ccab918c7f35ed31a5796e104c731b055a230d89b7d80aa15e50eb7a1eba60da7e84cb4c76e868514a9639e56e7cf3c6eb9d0cf05f1510d558af1e31a6be08700a22d278eb39758290b560d1401ef4a18bda6e35d10cddf549e7fe9d701317cc6197a824740de0d636426e289ef772e16b7b958ee0992da33c120e53ae43383af854c116c26c9cc9fdd00da9ff73a0da96699f153c228f4908971e9353e416c1c", 0xdc}, {&(0x7f0000003840)="cbf21f52ec7455cd3ec47b4956f5f83dfd92c6947f1276f0348ace485329ce4d99107f4dc2e8766507836fdc90c93d9e902e77741863d105cb6d07a0c713316da2df4c99f377ca1cd251f8fe3a238632eb29e95cb29cd9", 0x57}, {&(0x7f00000038c0)="891bbee5f1e8a3ba0ced34dafccc4a322f8e19faf90fc213836d7b52f98b98055fe433e789a5ce8a21f2871842c6ed323fd2c5ef20eee1514141f3a6095022a297425531a12290214c50b11edc35424085ceabcef8446b16eb3ef8a8d836afe96ed133b1adf8ffa6159efd09ccce79", 0x6f}], 0x5, &(0x7f0000003c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0, 0x8000}}, {{&(0x7f0000003d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003d80)="63b4b610439497dd5aa34e34a4e2deeb896d624e04557705ae624484c15b5e3aa2bbe2965cbf9b13b71c4e0745b02798105578bd55a28364109eac58afefb28e4a4cf3234c11c693ce8bb72d9f84b24a5e3f4c740f67ef721c8313cf50bd772a1aa87d68e8c11ae56a68f5a224bd78205868d8085fcbc938661f46ed847d65584935d34ebdb2b387b5e89cd166bb", 0x8e}, {&(0x7f0000003e40)="2acf57a2fd4420b62632373401834d19a988b29d48dc0e53b62370aea87bd754bb975350f6dc9e6da95b4f8e82461b7f41c0f16a7cf43705af3c6c1d78ae3a5f04a786e1c4a0247f9f6793574e96edc59ee032a2247f483d30881cc362abb931e8be879c7d028bd53baf2b9b93c5e5e63dc5b7a8b8c8789096d1d0ccd2b2087eac1fbc6b369c9449fcb638b52956cd0a69a249302ab95fa941678303ea341c7a716bd6aa4de79465a3b5d7a7c87fe7666d040f60c2333217787784c2bc8697c560dfbf0dc1b80f1c9a3d", 0xca}, {&(0x7f0000003f40)="e6fd8d7c1f51d421e4f424f9932a14846b080e0d59625be3d1881d3c74c8f0403eb765579a35c8d5c5a691c07f7586e196aeb8edd0508017ef58a44ca5457b93effe400ab31f2a30b70814db9c220f22db6f72099ff4798895ee", 0x5a}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="b59c06d358145c994deb78ee8acaf50e43389fdc2ffbd99b28062686805cb23b06242d8c5e0224cfc549b8c8c2c7c44268087c57789df9981820e1e0b5bb581bb214930e5cf6c4160011c749c52f6013e2e25a8a55665824a1bf0f3fe2945f9c1de67af64ff7134b9de09e09ac24aa4be1b808a536761c921954b736f8fec3d5cdfa3f2f2318f4e2543ade2a28b7794f6b3ad50c9dcea2b40eccf14c606fb2732badd48c292bf37447cd0fb970326e096efdc8d2f86739dd08261def", 0xbc}, {&(0x7f0000005080)="170c0c38905305f7e37d27e77098f4c110fb76221af1707fd1e18ee86cd1caff0a272280f08aa0ff7eed9756d2fa4b2e231af6a5838f816eba279591d481dd12843328ce4bea25fdcee42299992d0923af5d1a79c9608e3d66527da010e5058011004da3b364b8cfe75a72abca9511fe3d654f8ebc28aa1e2668606cdf09dce646e1833e3de3bb504c5c7799a56891d45f48137780ba6cc619c1b52b5ff2749d", 0xa0}, {&(0x7f0000005140)="572ed39c3a7bd199675869ad0619fa8f9d486def1e60e03bdaabf0eca8c9a2e7695725f438995fb01cd344f0301bddbf5859618d923cad19ba6576f11dfa7fea2c69ed52bbfe5b1e7f6e", 0x4a}], 0x7, 0x0, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005240)="f984f7674756a38beac1f12e58ca50da35cf142810bbcffb08d7f48cfef0b595b57ff6452c2a19008243bd0bc196791c370fc9d742349791f050069aa7726961551f9319b0aa33d989255fb06c97071e19d37105d4001a0a105cd7fab15a2ae6f6cbddb38a4846618c4f4a0ae7c532f1ef65a7fe1fb8e5fdca7b7089ac71583aa52e28c9ca2e1f6e868308a1481f165eba10356159e32dc9cb16fdd2ca17420ae6771e69d44d89fb4ee6d0941706130539a3", 0xb2}, {&(0x7f0000005300)="83e15006278729ac386382f820e8b41ce80d3d281bfc4a92bee3aa99049c72b52f11d11e3fe2f51f8c51b94090d18e9d0ce32f70cdb45025a4924d75637f94d604ffddda7482d046765cbd6a5e61024afe513a134bd33d3cb90b235102311b1193375c9490f8684aebe4a4916bc713ece689c93b37fb0d80e144f073dfa7adbf7b9654d58fe18bad75a4460d84703989b66044657d79318d1cb936700e8fc587ba1931a15c1ec7e949a02d3c097f7fa5ec0d2642a0b0ddf295d752cd6763d1759a43bd84a741bb89b8a6c1d95b3671fe29e0087eba0510892a5ff090782973f7ed48161409138a10", 0xe8}, {&(0x7f0000005400)}, {&(0x7f0000005440)="1274dd175598160123cf99fb65a480a5288d83aba37518465ed17d5890a64a89bcaaf9832ef4b98b3ff89393d62dc3b6f9b2594e5ccce443a669b9274416780d7959fb1094105c229d456ce8c952e5f96263fc54f7a7f08821163f664779d556f432ee6b4a3509481f0bc148f625c2c70e0964f9e0d75bb9c35c9c9a47fefdf31ec4db351fc6ebb6eca1e34a94c064b0b744", 0x92}, {&(0x7f0000005500)="229499899fbd8f5eaad95599cbb9fb80803f7d3346abd0c3c57c6ed26ddd4eb5c8aba5e89fd1cfb2ba6876d71c2b4604f3938a77923923d6fc5131903a74e715fe362cafcda72a8c", 0x48}, {&(0x7f0000005580)="90fc8e9ac60041b2025203d5ded1a33278a695bbd0588455ad82f28cb40f2391d91d2bc7d23b73b97f211722617f619467138ee827b27011b27dfa7ff23082332f70d3e538f3bf222e24046e47f54d49a87490f74da9644337b051ce3805558c8028d2c8d4dfd5868cc67f17e1544bda675d87c5dcab0e2eecb58876cf40714fcdb0ecf8a2de77859f2729459feb30fe3e77133f7171bc32f4576f4440160d77e3f716a221fcd4a64b823f47", 0xac}, {&(0x7f0000005640)="70a84dd5ac545ea8e1d579f29d8a2591f34dc427363416d7e5be2d310b05c2296e2c9eca97d5f50310c3aaa3693b21267fb9d0bf1762009ce9e1a1abf520b5ec84886a5388da94ebfbd56276deb542c4641d76c33e234df943ad9012989d6b79716c0b92e27055e1cc5f78f649e36241ddbc2f07da204dd2b6e3c93c28fdc39fe91993365c692e5a3ba3c9c2455e6afee03a5321b52ac7634e0347", 0x9b}], 0x7, &(0x7f0000005840)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x60, 0x40c1}}, {{&(0x7f00000058c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005b40)=[{&(0x7f0000005940)="1252928786585fa4051a3e19e11a3bbc3d405f1c93f1df1a28d3841d84023f95dcbcd9491aa012abb81821912b1cf7cfcc2c82e8f9971058d078590596b20b19fb9f5cce", 0x44}, {&(0x7f00000059c0)="39fd3779fc9b97b0d480cb6e6e2c5d8077dbfa8bf7f55977ff23356b3d23597d22f5be8def1ee85c5e96083ff76c13f0dcee691e428fc7e60021a0579050726b01b1", 0x42}, {&(0x7f0000005a40)="760dd586b8e41ad3a6ccceca571514e8a2e01207901ef952e6f73b4698f90af0e38b02b87f49ec938bfd636d91b867bf5499f9883f8052f4e46ff2df910580914de4f75f1afe3ceff8beb2d54ab39fcddbf580878777978ef9147c0b0c7a26241a2765a7b0a195bc0faca4c9b6aa58abd1c562b6557a97d94bd3571cc017dd734ed558b36f70937eedc2fa7c5cac34e7414e38bbddfb48f09e92c204a0695a0ec5892cb7dfdb6332", 0xa8}, {&(0x7f0000005b00)="749df5855c11f92be4130d", 0xb}], 0x4, &(0x7f0000005c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x48080}}, {{&(0x7f0000005c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005f40)=[{&(0x7f0000005d00)="9bc00a28c6d86303493699510729420af6d9aea7d855f2aa4ae419ccd0fa90b6ebe934f9b7e177a9bc188ebc58a97cef073ddbcf41a5f25cd81a6ca7c0e1034913e29e4e058920219cbd3476286c1fc65a0532995e4688ca58b95aac52a30c3d2a94e7c9650497eb6ea94004add76b2194f0668cd2727c168dcf3894f09edd5efbb0343ee25c54aedadaf7062bffe9efe27cbc76d6714f9b547ff348269fe2da261d7b4a06678d8b608f3148b9dd0f57a8ca78cf72e4f4c69a8caa4b48a1f4e5f220", 0xc2}, {&(0x7f0000005e00)="883b361242fad1fe91d868c49bf4be2f657f9a36ea408071367559d8baed5697840d30a888c3334f0a71c3f62c21a9cf13a0d8bda0815ff3ab136e37acce23b987ff3628d55c3662f1e10a7bb4e19b54e3cf32d075b8814a9f399bdb6f33b33d8b610ca5ea40e8882c3cc9b4226330944f914b298886fce8b629f3ca02c8d2c49b1cf17f0e86aacb195e253fd26f8d6deee67fb7a4fd2b", 0x97}, {&(0x7f0000005ec0)="fbb4c3237529262d88ebf911eafcc50f0eee8cf08f4072d91ea353c414ab7aa63578a9054e2eb28484a6abc98b7be7da24f7f4bb25226d5f0d2d24c78a92296257809ae47ccb6f6ad7dbd4d2e82d9692c26c2b9e0c98eb5eeca55ecc20", 0x5d}], 0x3, &(0x7f0000006240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff}}}], 0x110, 0x88e0}}, {{&(0x7f0000006380)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f000000a500)=[{&(0x7f0000006400)="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", 0x1000}, {&(0x7f0000007400)="9e22e515c9f86995f06812e7bdec1689daddac5d183a8f3152bb4d53da08a5574b9e0aff02", 0x25}, {&(0x7f0000007440)="b169c7760f802478376b58771b05bfc1426c475f1f6fa234a51cfcb983c08f7ed0559634d6a18210c2615cb4f867ba182befb9407184086155f9b7c3b076f813e922bc252cf079c3913b2998b1e4d334ef115958a201533900228a915c6e16e9a514322980c475a050cf9b2a3d25e938530ee934bfbd55d6fb795bbf4119b92903c1a1e4b25f2ebfdca5213feabb15e3fb6da1ce3fd21ed0f09a9c94b3acdf9a04484b9061cddcc62d960868131f8b5b6ac556ca28ac910519dfe2", 0xbb}, {&(0x7f0000007500)="e1fa4274b2605f144ea999be702ef47845364b2d9179e6cc1eb22b017d51703fb32540f1af316830d9d1937bb10dc526fb7c5d2e91aba67c7fa6fdb1ef180d1c58e5072aefdd34726e21c3b39a63eb74150f47715e05873e155fe967cef2c190f93d027b599e7c5d905ee0db31a4c06665091b84fb6ee768a3798ecf145cfc2865f0da6f7cc79c2f41b47366681dedbafd00ecd35ac547f5233eaa5347bf429343d6bb1e9b6184c87e1a6d24384cf339fd1b7250eb8dc37a3ee84a230f3812290adde88e68be130065eee3e554c146dbd426f820f1b3b1dc4e382cc37de70708159815b7c54a305da4d150170d89e9e12c6eaf6f0713db83cddb5e5b3c9b9a3f3b5ed2c2f30a85cc17f9fcd098fc36e41f42d26c341c03a6dc5e25292700ffabdec502fa1878e93a5a8fa498cd232fea817567b15cf40a80c7d565f64a91cc33e0e7c30df3039e527a81702e9925ee16fe294355b32b669fc99ca20085dfcef91bb12269c31c8eeb4368c031e10e184262efe54d3bfcbdcb822e80c6f0fa9c2afc56712d6bb85bfef27e563b2d2d978b5ab8ab27c357d042868c537d656a2b3476af6ab34969466b6e5aa902cb63c402558542037dbbd126fc233669ddbc0d83b7cd710985c22f458b0049a7d707a0cc4236cda1cfd9421b61bbe89aa804383eeebd49b4461ea32a9fe074555c2ecbda3c05a96f10684b8396a4f4daa869f800cad182e29888d851231daafa857ac083778e6cbbf7b3c8daa313735890d915f00d23037350e67c3166b804466811bc158fda33a3c8574a070b4b2a412d81cf0f8585bdb242bdc2e647f46c6d5f5db1578f4bac19d81caf30579460522a1e1ed011409ef6b5133fb548635a122e7958143066deb4e2a9e9ad9d6e693d82514ecc68a3e1957fa42d979c15a932d3b52098a6598502d81134daa4f02f45543a49ef7162e29b05f7ca3e634a3fede051de4143bd20c8b8d1a85bca57c278f58cf3bd3f57009ca1fa186185ddfe680d9e22738cd2516c776d2bd3be19d05d04d43006bd1ca549696c0983d0d42150b896bf353fdb91a37a8d14c7684933bb149fc10eb1f82345d09431c99d04c82c279ba3f51c3d226e6f5b0317396e41ba3298a3cb615f1dd47a0bb32dc986f8c81ad6b5ea170644f52601c2cb6a927b812e7019d2ada591f9eef9b5eed95c6237cb1762fb7e34f5c5c61d418fc2a550a909f99cecb5610da0235de8c7295465f84f61033e13e3acd312b9ba1b146d8c81132e2537da3361f72ccbe4443c41073760b23ccf41cf553e8a8924f46d020cf3c3a0e9017f696778057764af5c141ec96a43514819b5b796c66b9693da054ac5cdaf4afaf26627e3e546bcebc48b88a4860ecf56ad25a43b985fc59b9005a3ee62a9c81fc9fe00bd25d36b1d511555fd8a9b608bbe694469a139ae8f10235286bae3ca35e4aa8edb0dc0f98321124cfe1fd9a11694f4fba101a2bb2eedd46da6e9351f5bc38e46a7309fa18e18821519c2d265e5022e01edaebc2715e8b120a0cc5215a4a860ba8a13ca2c62abdfe7d8aff94a56d75714a1613a7c4c93ce370ba1c3172ccd00168d4d9f6e64ac6c9fd623ca7d147b221d0553ec378cda9dacf5d2655110621657fdb98fea20d318b4f593d043b5110ed7294f77d3f08f678235b830c2c155ff8297fc4c706be9d96f6c5174f7784c2c823f94b5a7bb44bd6749e789146288b7ab6da90621dff63418793e25c37b61d01a0a8dcef3595a2ec80bf6d5da37f98ebb24dfc6f662b1393777a483416e794f01d8ce59ae0f0e805aa938d48ad2eda10449606b7711d9501132d799240ef3047346adb51cc3dbe48a418b1297e16e94909d9b1904400beb3c7b440ba9ab2e14fabe145b7260a7e8df19edf3d82302a7786b59b740f7e90901d9378c88557f39043418289194acde9bfc777108fc4efb9ce53692041a505cfb5ea645b9346aef6e86e950b6a7d2ed26d16ec795de7498f7971006190012d266c7cc874f6916a60b7efe7c5a55b24f9ae265ada2f15aa207c5230465ad4cf19f4d4c1b2c40f64ac548b53ddc32113a827966ee61adda5acca69c7d7cd10fa9b5b6abeac82746358bbe266422354d83b62ca7635c9eaec2c846d67112309b626529be32a51c074fcd46ae04bb6464be2dfb178d85c1d7e0c7075032090a242d49c5ec891da387a437cbb5f7ff51172315dee1229317741ae8588d69a1e04e6489114f5a68440712d029fc60b59446aed99f250d2b73aa2ed220928079c375fde56ab44e7e968c461019a40847511a3c90bbbc02c26dff0d1511f511abb3a7f8ddbad519889df0499c9e87f2c0f1efbe03e494c5a07cc2b1979f258adece29e806e9a4d4ad970d7586a554371b01b13373321ae12bf7c9d1311f482bdf05349a284adcb00379486e446800a051f97c83fc40116448f9410dd812e724a2889fb010a643e402dcd0f85f1f92d309566fbc9f881cfdfb2a3d9e32444d1085f64e027849fceb186dac85ec17bea961a1981e971e5981f4fa1b89e7c9931e70a53dd42b7e700f06d2ed5a1f5cbcf7ee4dc78c77314e00eba65b3311e1d1d6d7f6862f9d5403a59ef4e88e24752681c3fc0f176f7fe62a9262d3c237b0f0f3c367ce7e267e23677ba4c2ab07a07a40908744d0a61e3f3e216c38918f71851c1a20a22b6e6855e110b5727354c2c711d58698313a69cc6cfaf63181e638b88b32ccdc2b3948f03e71cf91bd6facfa98eb86b60901f4dc7cf7af3f85e0df5d952e050bb20caabfa237ab31cd064948dac08ce4d097a0bbe5ac5275e5537bfb04baa15577e2a385ca98b2e9b093c1639ecb7576c6827f6dd9c37675c7907026acd41c29d5836b106b6612d1491c31c1a7663846e8e4ddf69edc7210b34b0f1b2357ae93376ce33a86c2ea45e0d29d066f5081dfc04d916dd1bde12db901bcd939c8fef77d43221b162832dbe6f23745f40b25793c5b44b860434cb7b0d5fae738b25f5e74412eb18c4699b1a009e5b4ab572725fb793d0ca82853858ab357d3834bb4b58e9693a75ce2a9106f5c4469846e3144b80a508be8f884cf5acbe22c69f224ea21438ac335b1020902aae3996d20797bb6cb5e551bb11cfd63dd012c745b61839c74b5435a1383f5509f85e8a4e749419c6ec9ac811036b846dffb5bf38e6785c18a6cb944829d9b1183db6dbcf6a960595b766926475b63804fb94c426cf55d7daf27541a70d0ecfb6de5a742ae854f9c079d4d3b632fe30269655ca0ac9bd26e32c08dfa1824e1551c4baf6c1dd3318f787d48827f04f71df3bac1a9f8f032f06690766fad8dd98dd99490e39037ba97065f1f174166d00e2b3f48cbea5927f186572fd0ceefd2a3c793a449da4a7df5939bb0a587622399699c03255194fb507aea4c137a15ada4e66f4fc2d112412cbfe59493023ddc22502e1a407af461e10c0ef629dde013f4d0f263ef65013b5aa02ab4569784c540b29ad65cd4eef7a135eec6d1bf73c705045742bcfc9f322abab3f464c74b1585c224a102c58975b004c4aabd3682aa0d08a60d30792699bf2a57d9b43bb31e82493b67a089d3d59aa14bb5dbf5d918d32c4a5137c823ff5e728ba44bcab056cddbcb7ad647ba385c47c74085e694fde94cb1401c2c916b690feea63a4c8d0935d118506a0e734a1333fd48e13569b48bdf56588d1e6eb6b470d46939e622556afdff4064ffb90c3e0316cb852912b0ed3fece7af0330420bcf7df60c43dfa31eb2e2b7fcf76d82e9d9cd217390cc42f536700b54a6305549e2e7bb09f4a7ceaf61c0a918c0c990854edbfbbcc5de24ce5a96222665f331bd26c46e39769491e9efb72b164fc3767c8951b6fbf04924ce2667462e83faea71de4196ee2444fd7a5dd8db8d71b12dc8bd6110d60dd7bb71c92ba80f3309417f0190ada34106dd75ef350fff546447dc4aee8c8ab645b6c966e3a987190489a0f9f76766f7f33df6d559bfad984cbf7313b5e6b7cfc001f552c36f61208956a725f34850bc9fdbdce5a7a5ce84b152f6d6c83328d7e89f8c103ed446146ecca68a9d248f3c98e904452b98c5837beb65dcc4eeda09d31ec34fa541eeea4f5514dc51522eb50c1419539c8d944ad69f74cc5c770e302534bf69624fd5d028fdfa672150a17787ea36b0f7190344d821bbd958576997ce35a843f1a3394f7b6096e56ef23d2296ec4f0ea3610d808ce5b81455953d294938587d94000561cdb9091839f73d5d13e38d6b298c97c37f4b645b2b541103d2e9e4eaad9aaca0b3ddedad51f41314eafa0ca0e46c220494ea4d8ef7b98a8455faad675325750090bee706fe45240f7b8668643c3f7e7510a6bf8ebfc827dabff9424d1715bb4dca767a27071aad03e445c31af4c534ea95395b6bcfb07ed366ade383f2d81ff41d717d4db07d6edcf56be9c877df5e19e9086ef23f781a69546c164f976261e882d95df08010b98b60a1f98ec97c89a823ab9ddb1cd639c2b2f661cb93b9b925b63fae637297c39c3a5a05d7bacc5d481a3c30f8af02850a2c13c98c08843772fa8d918f43923e8cec3832a88356a3f25cb963adb0f31c4fd2832c3bf553653ec298b4350a61d91ccc67eb3b3590f872e3b692d739ac870a9f0919fd777e32c818c82e4c163549b9d2814ba494c55b7530382cc8a90ebaf138b955a2c30bd11636511012fd30301f153fea6592697438760d4739bdfa356d334aacd0aa6bc2785f81850025adec6bd83a571a29a5876c7b9333db38de2885bf560fefc304f93e2c153aeb1873f284b0db9c1993f12d833cfabb6cd93b34b492bed1cc71fff962a38a016559a6700ea64a416f0e44fbada7f6ed13d638e0798c56f4bcfe2b9c12ffcbd090236d92d89d8fdc0971623d6b78ac1677969b6eac3bc66b44ac00e1cc14c1c6cd1c3f3f1ef33158f425cd07b25e6069567e1e9c12aaaf87d7ea7241f2487195b4ffdea82864ecd7c9c88a9d3bdd376511ac1992fe508cd14d8a0a60206fdd1eb427da240ff4d6b911167bc30be9d3a287a47fcc17ee7ac53c47cd15d6d5c71d9abbe63150de87c7f904d08c5efbee6666a73a5a79586dbc7e6598ca41f280258130fa574850c1b5d65c422e42c4c4ddb05536b1bf55bc2404b5d5453a4a684185d04bf2127fcbf7f35be5098e2979a331a5a3f7487f5d43f03e08f2be422401bab1fe4ab03afb220e0bef750a096219c12d80802f07e8985985c992c624211ef52d843cc4be5070e8823316324c5a37a041a240f8868113cee190575bdcf6f9c7f405776317258ee3240a1acbd583b3064637a8938a0a80f05787b68a8cbc50ea6637a9fcb3a43e5153731a649de54db28b38a15b1fc5b86a8282af547b8b9ad8a870b5cc5956648b1ae8527b5c9fd5cdb7ace45022be62c2954eedbe987b63e619e30bb94f21234893eac072903974cd8ed73603d40bc3bd4c690e4ef7af2371c8805626e043a8f10f5d0aaef884585f2eb804f7526abe2c548f0a460af211f3e69ef08340a161b9c9104b76737631ea948b3c2acbd56dbaff2dfc3fe03a8ca062d5c30d8769c2d65ab24169cc8a5dbeb4e76b7dfae7cbcd79ce67d58c8e633e6e19ec59695e03c1fe0d360d5958fd56d35609fb1bcd3f33ed7b714247864650133327f0d4229aa7c00f1393559863d30229b90922e8f200e21d6dbd55d7e80cacb6454fdecb798f3452355e817acf272246b03552a7613c7cf08619306d76711f1d113eebfccf29cdc0ee270091033073161cf193c49b108cfbb5673d236df20df6cad881", 0x1000}, {&(0x7f0000008500)="909d014b1e02d2e104b5f5b669d7f90dbad4dd09e326ee74ac36009bf0abd48c47eaa4eb865cc1d08b5b7fa7b3b29033fc6f7e798b16397f3952c7f9cd0b7bd5a7189af41aad7ab573b2b5dffe05dea886dee7213e9110ecd1c5db1bb293ce728a8b8bf72d46a033dbbc4f1b7b43e8286e25f433eaf20b8eb90b2fbc3eb0bd270fa7112c99693fb8751fd842158e63b897434780759adecea1c66889c612c19a19f6099abcebb8ecf40b7ca64e1813d8afb3cd55b7565215d14cd9f40545f6fdef572776206e98158c2de54d387624ff59c718597f9f70fdab5e0b6f85c390e36f9322d274670eb8135f1597c0ffcab1b9241bca1efa58f835eb7a341722a7bf1ba6c68aeaf02ab42ab68955e2026b090f46288d076fec3919adb1a85aa7294d80d5397aef31d879ac4d922061a916570ff63e1f7720346a404127d9fe173eaa1b4eebdb1961e4f02c1ea2e9b730ce112395d633707d9393987f6c0500214e71934751775ab35f9ec407c9b02675501bdc99da83a751b869b431e32f5e2335f78679d3ecb842513946bd038227fddd12b719ee1c1fab5c255766a319e377472cc9e2b9bbf7a685725adef0345e33ccc1c71535e9d4488c1bc1b718031011ee6d8bf11d9ae0151507fc3dcad4dbd0126fcc572cb40483ad072f79864eab3c38230c8fd472b27df54453b559273cc5f77d5fe0d56a59bbb821ec3b50eaba5ba68bc0cdb8716381cd5b21eff59c1c09228add88631c62d3fdd76a6f0568205c91a05c45a4a908d7970e80c9e30450bce3a63d06ef69e866a2f896bd8c7e1c30d2e318fd1e3eb17b51a8805d32bb9d9927caa6d1b628ff8754f1e6f7f624646ab95eaf25e0f436425f98498e35d5ddf92f09467151349d49270bd5c4a3b95bfa029705808560df682143c534d996e2ef57316705f35f03f1c18b8c0db7d08da2d3852b510d08c99961d0d80d45a21fc120ce0bb003f84c0893563735f9a3c82da6574c530d6330757c67d810d39346f8395d927f24078ceba3ce132cfa098499f82117dd83c61d433c222708bb9cdc0ff4cf6654104a0d904c960abc3e1f39fe5f1173687b925512a7ac2d68e29f02cd34563f8e236fc8b6969fa7fbe3fae1130711e204ff838afbe88a044fbc3edf455bea67749e244878d4436d8b3969c7e09f53395fd863d1f61eb658ac544c7de7e18c0834c83d390a738793fb914add455943706c5ca119293b7ea7704cd926d074c8a5d8b3e864227b7845fa37907d0646afde7feb406576c2d35968e404637152118e44a0fd8114d36285ec0dd7ae209a738052e00cc1e7e1eea92ff66e015cb4f71a01857d855d2cfa4f441245c46e33b3155c275eababa7575e00e61f19184982f027d6b5b4e9df3099bb4031b77bf0c0d7656cdc49dd25e98c16ae210762acaf3a05faa2727a699388ca229e13233cbeb2200f07f19202a674fbf19d5306bf2727a9524fdae22d6864456bf2b0f13abf475c280385debd93dc72cfbecaf482d4680fb80307380218038b9e687a1768687a3be750a23ebc28f8c6b3762ebf5dff330fc9321e8a180af1a9960fa82473a15ac0a52bbe076594768898ae53ffd036cbd489be741600a5eeadd86d36b870d00e4981bbbffb31fb4229ff874c61ac83b6cde9d4a7086f5991e5e7013435556a0fad835278d3bd53bfb7a7ab71d5ea4044367be09415d8c8e5a0535bd9baba641cfbf6bbc0e5f57588851aef3ff37779256691c5a8d2b67c1c01ba41191bb04e037688b61ed62da464735222210fad57c5cac46fce0b68b2f744e73cc4dbe7d701480dc33bd34a41a0ce6d416033f1476eb6185b0f84e93adc6d9eb9cbf95d0c7b340c83c55649057937d9b2ebe94fcc3f6c63b4ef28add1bfd77c5458c3159ab1ecd5d647435a2920be277b776fe7cfbc8b85f4e1eed4c7e537e6ec748ed0d168afa11f44c5364572d34899dcdc7ab2307d306ee155a60d8f5a827ac15a10b23bca5813b95da005f5aaebb8b291a3d745ac6eca34943e9e877b92c767ecb4e5e38f31bbcac5bec706e63265e815c25d9ed7eabc5ceb5b504f510184f1ca185bada0d8940acf948038317a7a2b4d825f3ccfe35add3c5d3b70bf1597f685a356f910a7f73c6aa60fe501061db36c2d3e93a3730acbf138b291724b0043bb822da9a6d78656b0f912e1eeb2e89879d201d886c6932168cd9a86b31332b093e707a49614c406b6dc483bc28db7d1147c4e3352e9c16ca487e3c1b969912edbaa2632ab48ad92151239e76df883b60472509fab8e4850b1d7e3f4435d3b9fb32d99f0cc937787e49549c2d6d439f334b5f77abafe7c01712e9a8bdec6f88a169bc20e5981b54c9fe8837f5f184d6e442e79c1f4ce5f4bbc75a390941365cf1bfa1d132cfd1008f0bc37653af1c186c5ebe8f4adc15045e3d0af709cf5da895bb71c1d4403a8c3c180d2d9e7ff5584c101e42f365e4daa0a75822d119eb0329c1d91a9bd8ba2560f379f64704762f8a2095924e2e54fffabc437f5cd023a5308d63cec16f6ebdd8844f76a391dbcd62efcc76324866b9c2f78dfb335498ba253ddeffcce41877816dd551fa0a35325280c0c6e365bbd97bd33f84af504a7d382637fc4bc0907979949ec5613dc8aa0db326ff0f71b17b9fbc7097dceaabd5e9ddb7399ad6fca1b9bf278b16185bd6f91fb9b4f0927a2fb701e71b7608f9f335141312b873ec4d24b77a7d26590b2e2d9e3db2e720e70def970a75afbb3711083dee06597ca16a3a6e59662b8108ad4b6ebb7a99921dfffddb8a16e4b27664f5797539796cc05157c284383b836d1b6040de89a4db3e5fe69ce0f2c5c61c0af95743caf884a18aa4a106b2d18c95142d673633e1788bf3794aebf1af737ae4fad87ede8569eb014be73ca1e2732ea5015657514d6d252d639d994496cbe0f87ef89a9673cb9913b30b0b1102daf75d925b219bfe0291fc3d6514e15353899d8c97e051d162d98273dcd19fa5013b71300c1f62338c6d4f8cf4bda5ea11420452308dc16c87d72c7b20da8f730b74236319fb4fa60419032e835782cc59335515799a03164cd2e59d8b95934441861b4af9f74831548aa695a2e38613bf6be8e8cff1586771fa085f0335815537f6a7583d47d8cf4df1bc77a8ad9d9c0f4af3e0250db833c10a8c394277a7842851a9a044e120e9612ce774417b3214ab1c0e852c61c411b030084e6ec4e6e45a9cf04de0e35307de796d420eea000407e996d3cf3878f3b2891b0f3cc13fa0cb8be743a957c9aa9a6e493e56ee3671301bc46073282ba177f9513560bb27b48c142d088d3b9e0c689639bb1b3ddc3afdde211f6b65cd74a827f2efb75b6be5c98313ce222a3e803652d43ec75c2e6fc8b67bfea3dad0c1923a45d3dc7b6137c5eea4e41ea6c019d3319a24092c0dd41bc599514209b823be7b9a7103e5519cf18b95d5d6407d68d2164ec8dd1034f38ebebe4172e64318d1cdf44b246854c3ec69799c1fcf00ca28ed89b4cf9b127c010de0750f66d2bfcbefbb7b9f33b3b5e7e63413a9e9fe4abdf0c19e106dfdb07e2b86bdb367a994c5ae41aeeece919b1fd939acb2df58f4f8ce1f9f48e474a22b6ba53e2bf74cdfb938a3cbab7515910cb535059f49d20b11b276f68953a5f227207150c8e2c1267afbc61bb28f19c9de4b8c154f0ccd06dfd7dffe266370edd0871d744c582412adf34aeab1de1f68d011fb88559f4735f0ab914ddbb90adf60be7dec4cf0bf987b37aebb6b693e919e6db7c245f5283df6bfadd36d11022d18be6d9d7eb51a8ba2e6f4a52f2a3ee8db6957e482de07bac5baa90f85e548b5169f182dc63811e042549a1b9a7cb5463f0feeca50e519df76115ae908da527605e0cbaa29d12b88a14568ba9f5f1e2de02470fa604f1cd6c8df0e3ec321f01cf94cfbbdadbcf04b2da39e5d23b3b23f36996680b50ba8fe1f7c33e49264d250f6f8b1f99e1b46caff011d22d4da49ac98c2b3d27604b68ac165a05c79391114dc00a55a03477d93159debc96e30d7de53d0d0c641e9dc224362600786f493c4d5dcd0a877031e7d46d8164ec31d57cb8ac0c4fe67af50029c1b3559c4c1d2274266f5cac0ce9309bf1baade0f1b59d65b4802273406ab59f6b465f599a1da6ebd52de3afa7196a03757f51e8e84d58e3145c6fad91cb18321eca20fe2fb552cb6fc88c35a4042afe2b8aa505ae1db02383a5d4a5804c8483326935177b8dc7dfcaafe92a521b6bc09bbe527646a021864aac4da40e9fb0eca3b6961d6ad3329f38985b3042872cb426340022424cef1a88f22d1fe2b25d2516c6c6b6d68a740fdf4dae97708147acc03b7685ce728ceba6094c1c8aed56fb888b5ecbdf7464aaa8947c34958b4826a7cd14f902cff08fb10145f3401923b83d73c0c275be155f9ea9e942deb8ea1d095015ec6288fa39e1f798377d008173b56776f3337cf8327200ef0f5a47f193b3fd6d0deda62eedc877c850492d9a4bc36023421b50d80f6dc98cb1a053d1645bcc02874b37bb8ba39681d37b788767817462b820f72a6054eba03430d2f6f767cc763ddf254254eb284de629186434b8406760965c13bc0b6169a4b079d338fe1d20ebaa65a6aeba47d4487cd6fbd6bb79f524866872ad6c248439f6b759de5bee0888c15860e935b7e08810be33875eb62c5f77ce9e580b0bce90a000b7836eb8806d812bee640ecbf3bde90d79a9c26fcc032af6d2eaf761abe92e43776a51133554bdc25267f1b73b802562f7d5168bba4718049e845f6cdc20c345ccfdf12246fbfe99b17ef606b43afc6e99e1e148993b3a88986ac4009179ebe9af71858795c398cd46845eb028505ac2f407eeb9c5019efff3eef81e18fdc8225ef42a7ff7064f9836151d792dab4e6278088b5c4572d187851858ad1ef204634cf4e8e661938d9dafd76da4d11b2a30fbb7abbc68c25b019a69c348d45ad05ab456ef6621581633c2c73c2dd5aa0e65193e7e5d76bb0951517cdb9df67c62e6da70560c61de71df4b8609dbd115050ee977a97cec383e1324d0b1c2ec858d3bbd5f1204bbdb7c27f221fedfb04edd2583e9eda4d0fbfb490ab814f7f545d954ce146814e512a44c7c1d974506b988df2f1b21e8319f27ef618a004ce77e0852161d0916aefd93081e27768c8bbed3216ae3c4b8d91c8672a991cca59d25bc441b5a1d57ce68aec6743f73111c1c6742e437fde4537437fd78ee19dae4bddba2e89cd503b3c7d18f8fa5f03d115817ecdb9c67ea426dc464f8d4be06bc0c63387f8258a048a7fbcbc16610f1e59bf285d7025b5fd9950f85d022d75db42b621bc4afb519c9566889ef62e08c991e886ba677b612a83ca9ee432f91c9df75fde0c9750b81e5c2f3c4ddf4125d7172f4e94d5be5b8c482d59c40a072aa1002e8fc0650431fbacc5d816810f8ffa8169df26f76a0796452388fe4fd82678360c8b05d82060e8f7a61a2f8c5ffe840721cd42a898d5d396c7a17f9e8421c7ffc71e2be8b092970f2f888d89641e0d5f83c3cda75d3367525cb32602932451d2cbe8aa5d99b44265b4874d6b75cbf63863235edddc9e95bf85e81b16ca01ffb4b5fdfad364b323910368a6469a5545b0a1fd378fe28904bcccc7013ee11cc5ed59de3eaccbfade5400776e3eeda7341b97afd1a60caf1dc833093368567a26bd185a2f75d8af1237162550a2ed2ffad0eed5623b2697a1a68555c77e781f8896140e65fd0f6ad18f8d4df0460a9bf752dd775e855d150f3b64978dd36a2304f76d540", 0x1000}, {&(0x7f0000009500)="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", 0x1000}], 0x6, &(0x7f000000a600)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r1, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xf8, 0x80}}, {{&(0x7f000000a700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000b880)=[{&(0x7f000000a780)="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", 0x1000}, {&(0x7f000000b780)="4c9e3cd4e0fa4b2baef8f1161fca84ec8a765f2f7852f9f4be24def78fbb485da87c362166ff8c5412005b37e2f7200b0dd259d02f19c4f00157b640d8dbab0e01b8ad04ad8aaff8727786560b6a83fa5029a74c8b21d5d70326719e852b2d7c05b990b54379c54b4d4d6b4d8df513b8a303ea2ffb27ef55ef9689c4955453845ed91c8a33f9a26a4a0c000a69f92ef8585a55015ee0e478a00e40c543fcec0da0c5c8271379e807b4b7763d0fcde2f1abec2f855975fe5b", 0xb8}, {&(0x7f000000b840)="b88ad0266718c586889add06bdb068c9ef50544f07c994a652059601e7ed77e9e7522f8578d3221308ae9119b49d71a2838fcb6150c3", 0x36}], 0x3, &(0x7f000000b9c0)=[@rights={{0x28, 0x1, 0x1, [r8, r9, r0, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x98, 0x814}}], 0xa, 0x2000) 01:34:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x64000000, 0x8000) 01:34:26 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 60) 01:34:26 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="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", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r9, 0x0, 0x0) 01:34:26 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x100000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x81020000, 0x8000) 01:34:26 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 44) 01:34:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = fsmount(r0, 0x1, 0x77) r2 = fsmount(r1, 0x1, 0x70) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x3b, 0x5, [{0xb9ac, 0x3}, {0x0, 0x9}, {0x7c6c, 0x9}, {}, {0x0, 0x101}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r3, 0x8, 0x8, 0x7}) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0x8001) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2391.357691] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.359684] FAULT_INJECTION: forcing a failure. [ 2391.359684] name failslab, interval 1, probability 0, space 0, times 0 [ 2391.361044] CPU: 0 PID: 11722 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2391.361830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2391.362773] Call Trace: [ 2391.363073] dump_stack+0x107/0x167 [ 2391.363485] should_fail.cold+0x5/0xa [ 2391.363923] should_failslab+0x5/0x20 [ 2391.364369] __kmalloc_node_track_caller+0x74/0x3b0 [ 2391.364936] ? alloc_skb_with_frags+0x92/0x570 [ 2391.365454] __alloc_skb+0xb1/0x5b0 [ 2391.365868] alloc_skb_with_frags+0x92/0x570 [ 2391.366368] ? sch_direct_xmit+0x1fb/0x790 [ 2391.366858] ? lock_acquire+0x197/0x470 [ 2391.367309] ? find_held_lock+0x2c/0x110 [ 2391.367772] sock_alloc_send_pskb+0x7af/0x930 [ 2391.368283] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2391.368906] ? sk_alloc+0x350/0x350 [ 2391.369321] ? sock_alloc_send_skb+0x17/0x40 [ 2391.369821] ? __sanitizer_cov_trace_pc+0x42/0x60 [ 2391.370373] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2391.370945] ? ip6_mtu+0x1bb/0x3d0 [ 2391.371349] ? lock_downgrade+0x6d0/0x6d0 [ 2391.371818] ? ip_frag_init+0x350/0x350 [ 2391.372276] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2391.372832] ? ip6_mtu+0x1e9/0x3d0 [ 2391.373234] ? ip6_setup_cork+0xfb7/0x1740 [ 2391.373717] ip6_make_skb+0x2de/0x4e0 [ 2391.374147] ? ip_frag_init+0x350/0x350 [ 2391.374608] ? ip_frag_init+0x350/0x350 [ 2391.375059] ? ip6_push_pending_frames+0xf0/0xf0 [ 2391.375599] ? ip6_dst_check+0x389/0x8d0 [ 2391.376056] ? sk_dst_check+0x235/0x4c0 [ 2391.376520] udpv6_sendmsg+0x20d3/0x2ad0 [ 2391.376981] ? ip_frag_init+0x350/0x350 [ 2391.377437] ? udp_v6_push_pending_frames+0x360/0x360 [ 2391.378027] ? perf_event_task_disable+0x390/0x390 [ 2391.378587] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2391.379137] ? lock_acquire+0x197/0x470 [ 2391.379585] ? find_held_lock+0x2c/0x110 [ 2391.380050] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2391.380668] ? trace_hardirqs_on+0x5b/0x180 [ 2391.381159] ? sock_has_perm+0x1ea/0x280 [ 2391.381629] ? __import_iovec+0x458/0x590 [ 2391.382095] ? udp_v6_push_pending_frames+0x360/0x360 [ 2391.382686] inet6_sendmsg+0x105/0x140 [ 2391.383130] ? inet6_compat_ioctl+0x320/0x320 [ 2391.383637] __sock_sendmsg+0xf2/0x190 [ 2391.384079] ____sys_sendmsg+0x334/0x870 [ 2391.384550] ? sock_write_iter+0x3d0/0x3d0 [ 2391.385031] ? do_recvmmsg+0x6d0/0x6d0 [ 2391.385475] ? find_held_lock+0x2c/0x110 [ 2391.385938] ___sys_sendmsg+0xf3/0x170 [ 2391.386381] ? sendmsg_copy_msghdr+0x160/0x160 [ 2391.386899] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2391.387494] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2391.387995] ? trace_hardirqs_on+0x5b/0x180 [ 2391.388493] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2391.389001] ? finish_task_switch+0x126/0x5d0 [ 2391.389504] ? finish_task_switch+0xef/0x5d0 [ 2391.390002] ? __switch_to+0x572/0xf70 [ 2391.390445] ? __switch_to_asm+0x3a/0x60 [ 2391.390904] ? __switch_to_asm+0x34/0x60 [ 2391.391366] ? __schedule+0x82c/0x1ea0 [ 2391.391813] ? io_schedule_timeout+0x140/0x140 [ 2391.392337] __sys_sendmmsg+0x195/0x470 [ 2391.392793] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2391.393278] ? lock_downgrade+0x6d0/0x6d0 [ 2391.393761] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2391.394305] ? wait_for_completion_io+0x270/0x270 [ 2391.394851] ? rcu_read_lock_any_held+0x75/0xa0 [ 2391.395377] ? vfs_write+0x354/0xb10 [ 2391.395797] ? fput_many+0x2f/0x1a0 [ 2391.396206] ? ksys_write+0x1a9/0x260 [ 2391.396653] ? __ia32_sys_read+0xb0/0xb0 [ 2391.397114] __x64_sys_sendmmsg+0x99/0x100 [ 2391.397593] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2391.398173] do_syscall_64+0x33/0x40 [ 2391.398594] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2391.399176] RIP: 0033:0x7f9d078eeb19 [ 2391.399600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2391.401703] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2391.402566] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2391.403375] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2391.404191] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2391.405011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2391.405821] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:34:26 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {r3}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r6, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x190, r6, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8fc6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e4a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x300}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff929}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) [ 2391.413619] FAT-fs (loop4): Directory bread(block 11) failed 01:34:26 executing program 7: pipe2$9p(&(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') [ 2391.425544] FAT-fs (loop4): Directory bread(block 10) failed [ 2391.426210] FAT-fs (loop4): Directory bread(block 11) failed [ 2391.493700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 01:34:41 executing program 5: ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f00000000c0)={0x2, 0x9, @start={0x0, 0x1, "4ddde20dab8b131eeab747349951c7541f671f07e51c48bc1916f251cae6aec440bb46e7eb7eb01c89d7c7d5b9bd4b3882fa815e6318c5c2306ec8aca9b06a75734d6df190ca81a20a209900c44e6e3083d7328971d6235bccaab697d13d3caee78153803de537990b7089367b7d0495a5867c9cd9e45bb35d6c8d1c8da8b1255d955ec9bb10c2c0709ca02612e608c6e17be21f7a93510fc0aee1851e5c308875459459aa8646e6f0a876a8423d2393c602239f331283ae8ee644bb359720e5cbe5bdcaf9a526745aa00b6d4fcb3d329c5b32d5b5c15ec07324a166fac9bd64fd65379cce6f2ffc2257d54ee9a625266271d3bbe1e03655bb9d96312468402c762626a33fff6bbacf7fedeee4c851d6bb6b644f44ba3bcc58669591844ad5df9387a6a7cc13b41feffdf91ad471ba3d49e8db720155a17d0aa52a0d647f0b574fe517e0893dc90354e455a073ac1a7070be007b046cdb3d60c464c1a13f12d7c82f5e5faf1bbcc40c3f487349f6666c6442ee06fe1f776f6fdf8b274058fc061ceb24b18464c797bb630cad5c4da1801bd3e855cce485662f81f4376a2aaf2f18c48f379d0d38857dad3fcbc62562154f68820682bd8e7db57ae5ddbdb92af9dbfd0a89beefdc06b3f699fd94b01ca208e455f5cd8af756297afb32756154092ebc24093421082d151c21f9a14413e791b1d66bc58dfa168055ccd18e91eeacb025fd3060b94c974c9387e7dbd422a63885a231a5e88a250f240fb835264c65d097b2596ef5bda2d5b40aa6998d56a02b3f030a2cc90267116ff5772c6f4cc6a63650ef57ed44dd26f7584b5774e1aa8f474ffa333a07607fb3f57fb7464f674d52cbab07188ac5f4a8f8fd126893323fe836437cf8d7d6dbff91125af8baa628aa29d984af3c014636b544e58b907f009d4988ca4a26f805830fb65ec6c215ce88c579204e879086c981b885d95b33064b4d010ec169042f3444100803d34996a2e9c0ebb9579aee3eb0605bc14fcf7f579ae36d19a33a72401227a546d67a3866ae10068f4b67f3caa00e197e27358411db9f9c8531c9dcf6a23f55d2cc882d260a80f20c74ebbef7fd0e0fb224b4aed4c43143e368db7d914ebc7ffcb9ed8bf5509cd7cc5de4c61a915e837258e8c1026d681bccb631c7771b057056f2540663dcd27a5cc525bee6bede1e5196ae3879f132cf8d42007abd297cb398a057d1b6ea8ef99ff5d7df6da1da48091c0ad3b2a20f6642e4e22b8a397d48e84827b9e69003573017c7d3d41965841435048f041d2b2e262c47a671441ac3f0e3df64187dd3c6944d7adc5b248362783733d3ce04cae6fb8be854eb8b22f898b0246264aafd1cca85754378a78e066f70388c85a9e7df6328c67a7965f0b957c76bbba4091e4734b05e9d7fee6f7447c6f14e21bc7bf58cf67be8e7010b38c8ad40fa", "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"}, [0x6, 0xf7, 0x3, 0x7f, 0x1, 0x1, 0x3, 0x1, 0xdf40, 0x6, 0x4, 0x7c, 0xa9910a7, 0x1, 0x5, 0x8, 0x9, 0x7fff, 0x5, 0x8000, 0x10001, 0x100000000, 0x401, 0x72, 0x7, 0x3, 0x8001, 0x1, 0x62c, 0x100000001, 0x9, 0x100, 0xfff, 0xaa2e, 0x5, 0x0, 0x7f, 0x29, 0xdf, 0x20, 0x87, 0x6, 0x4, 0x8, 0xa1dc, 0x7f, 0x3f, 0x3, 0x2f3, 0x8, 0xb8, 0x6, 0x2, 0x6, 0x4, 0x0, 0x800, 0x8001, 0x3, 0x8001, 0x6, 0x2, 0x8]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2d00, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) 01:34:41 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x800000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:41 executing program 7: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xcc, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xa000000}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x1ff}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x18, 0x17, [0x2, 0xff, 0x8, 0x5, 0x2]}, @CTA_ZONE={0x6}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x307}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x7]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4008080}, 0x4041) r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4, 0x4100) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xc041, 0xc33e, 0x7a1, 0x1000, 0x7, "80ccd5d33b2440f0a198aae4197a7e1eb3457a", 0x80, 0x10000}) flock(0xffffffffffffffff, 0xc) pipe2$9p(&(0x7f00000002c0), 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000000c0)) r2 = open_tree(r0, &(0x7f0000000200)='./file0\x00', 0x8100) fremovexattr(r2, &(0x7f0000000240)=@known='system.posix_acl_default\x00') syz_io_uring_setup(0x15a9, &(0x7f00000004c0)={0x0, 0xdc1d, 0x10, 0x2, 0xc5, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) getsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000640)=""/4096, &(0x7f0000000080)=0x1000) syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_NOP={0x0, 0x4}, 0x3ff) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)='./file0\x00', 0x1, 0x0, 0x23456}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@phonet={0x23, 0xfe, 0x3, 0x9}, 0x0, 0x0, 0x1, {0x0, r5}}, 0x2) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x2a5f4, 0x0, 0x0, 0x0, {0x0, r5}}, 0x1) 01:34:41 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x31000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:34:41 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="0e0e99fd2cd60b25adcca0353448e2606fe3467e01f29a7621203df9a042c66b5308fb44f6b054691e5f222274058fd0dc1a371581f85a91c73bbe673fa165563cd2efb8b86c9639369d9307764009d82720d878355d2a69e4741f89f15c9335f1e6e887d1d992ce6e1d03a4d6199d1ed7fe5312a2c47c76bbf10f672a99c32a1dfd817f43930684649190362e01e17123872a68366d6e6a1d8135c6594c1706269c31395fc0968492607639ec244dc36014972b3c187df1de44ead32bf2bde8369de5dbb49d3e9c76b21e4a250c0e5ccaa51b55625ea92867a4b256877cd564ccf5438001b7843cc6a1a83c7f09ab48d060cfc4eafd58428867f3f54cb2cf99b80c241b1a1825f8998a159ec679917e24043325cefa94678ffeac9fdc9df8a2806f62adfdb5e0f20cc39a11e7f1d5a21a97965205f0e70fa849fca704a8b035f1cf2552fe12d170db836febe51eb2693dc90a47fa76d460da4949bee362e38dab7cdea5b0cd3cdccbb29dcf16fc8fa028bb956f1f77be80d242e4a3b072787a1ea4b23ac8da54688840e0a3cce68161db86ebcdeb973387df49c746164183cc629e007d960c3031333b2d5d5b1110d95fc2f71189a7cb9eb401ec50be2091eb22910d4e3c67cd6747711f8043d6a85e7a975fcd57177694b8ee7aee88496bcf436c4f8c32d2610c4c79ef1588d3953509f2ff68d0cb2d2fe410f8f0da7bbf511b7b866fb2fe38db2cdd87268a1bd571adec19cb50d53c41470e4c37cade830294638db3be84528181a62fd14fd82b0a7115a6b7d410aa8054f6583ae68ccd124caa3bc9e5a8bafa59867c6f098b4cd4c1afdcb1c26394517f6afc7c51e788c177d6c6371d069c812d7b7f7e07c6c35371f2fbe0984a445efd09ac3e11dc67e3a824ff8b2073e0dce0f46459a84042549456b93332236c1ba346a71f45323dbe34ca3ea33982d0692573513d871f1aaaec3a1636dac07514a652c41fb9ef4701c0474ac8eb1c7539bcb8a5c3695c3f69e975a3b012b8de895956d949190701c65cfb16a3605d9bda254924a8f06aba8e576ed486faa13c7f8d823f4961a0dabcd13b2c5f29674fbf8f5a4ae515273e1f65b3a6c28730ef171f16b1b21948030c0f93c8cd688e71b3f366587144d93a4da8afb9f01267adb92634fdb64d253cf700b596a86e594d7022fc32d74491d59d731c6f25c73eeb43624c7bc922d82505e1e6cbf7c9e85b2edb9408c2f6e365adc5abfc9531b26d2c80d91a5b1bff6844c3d3a0f895783d5021971a932fe77e827a3f76057c07838925dc9b690259753424b9a9b8460494479f13328c3ef79c7a873e12391a0de2aab36e3135a06aacc527cbe0c704179d41c74422da1b498f70bc55b66940a99c487ba15b5635e1d65d0d9caf6c8a672066c939faa5309b69dc4c47c8023a94e47b23ed8f3aea73361d2d57eb6b922ad26fbabbdf9b5b727a397ec94db506f40604c07caa0905a71360b17301e329559737883f96f589c2a67ea36e601fe5de222aa16e54e1bbafa87ebaf73cecc27474f93315498589e35a46eaff1d66739b8832811bed0d5303e3f119fa8b2124ff1a1720e97306e4f84ad2f2fbb11bcc062aa33c28ccd3a079e5fa11525fba1a8433eed2afaa6a33460ada596a8a74083ff991477ad20120fdfacb2cb5085cad3602dc0fa24ca4f44e2d37e3006a6c1cdb5613b29b908374c6b914514e753040b78f102532ec38fb63be1db822ab781148759a4b738234b6832c3894bce0d7dc21857c3ce0fa049678366bb4c7d0e290f683c4ad70593fd86e599da78beb02840bfd09ee742a175a041e2358448ec62c083f79c27edb998ba3743a80c99138d17c2dc2bd664014664410fcd55423149b07def18d6189b0fd8b880379ba12c17c81b94874c516454b753e00ec8e7e368dfef3017c735fab26639f2c82165f47cdc35b188ccc000335912349a4c0bc135113163a2dd29c8d4fe8045965bac91aaa3eb91d09949911acdbc78da9cb437122c73d5923d066f88f703e0a8fef12f9ce56b01b8e79521693f59a6ee79cdbd09b997a65298b6c6e7d1a540f1eaff83455770932a8ba5e8667da737ebf4ee4a7e2ade310e9408e083863a881f1581a41f14e9997326607b21c3506a6770bc25dde5faaab59d849fc5d0cac5a245e8016e7243e22d7dffd973774e8e1dcbac5060f67b5b17820a9ca8107ca45ee380b93ddc94a06bee459f7e21b13318f3732d2e26ec4a86319bc76f63ca11d9985c1ad7bbc6ea72b8807ba4b6668d54a42bc4c5561fddc35030001b882936b57d8f91161606eadbd5b0fba1ea09d1ef5cfcc663bd3c81c9536d605aa48f2d4bca6a3e669e94a9f79c4c7264ff666a7c8c6d9aef9cd685a8c5e7554c1555a8185e6b705e596c1716f6d56f0dbeab6290aad568695568832367b87a51a76e6b46873bdffd0b5b09a4f9d925167c8ed460acfcbc43a7f1a455a758dffff4cd485d11e08fe2b159cb6bf94aac14f423d01eb7bcd2381eae0e011046727af1600335b80677094e13cba4ea67d3e4b8b44905b8fca9cf23d38f0be6863725df0883a3051ea05bd9f77dbe46559a42e402482679ab11cdc5364957a40190f7b0e53a7ed700e0ff368eb01895d1d53ee2ca756e5696851a4fe811b1884c7df28a5040f6136444157536beb51601a5a05d7a5ebb0e69e2619a0d9302c99f59a5d92da1ee787089ee269968582d54b3c49ba45c829dfbb3fed47dad8000274c5b1d8f9e061da885630b215dc20a2a3c1caff554610031c4403d8983de4ce187c547b16383f69f4244af06f15ff367ebc373ebf8b7425870e12e6efde6deb2ae13a6b225200d3ea7502f49c24daf4863adac7da7e5014902bc5696fbf86268c3a328d4dcdf1fe759b7a32056e5a631bfa1d4a85e7cf365003090e466545ba15fa589f9a623f53c31f13fb70e0ab1ceeca4cd16e488814f8ccb3a1af611c726e9108d6c115da82dca26b75ea97fb82f3354581b4cbb2afcded6f9d1344d9d25a7b5f9b87ccb4657f5076e32159fa161bfe541187e0c9263c54a90d05e40cfb2b9c61cf1d9424bb7a7cf063a797158591d7b570c36a551a59ea0ca712f99f3f4b4178ebd8de4eeb8d36fc5bef066007bdc02b19ad43221e27deb72d8f4be020a45c435d6bad1f0a147ea472865699f388371cf1990c080ccf30f8120d044cd53c290429137b32180bf0f85d8569a2351279d7a113ea19da82e4426b4f29824f48478f35486064071976c187dade2cdd166825e8b6577a48850af202643ceae108357003feee5b8c3620b8b9a99502d80b7cc345e5a5320b18fe9e2e41ca56391bee1621563f67911224e14f576ff5c734bdd446d8ad91a8a55d8d4c55fb9c63a9a24b45b4104b1a1f61ceab5862ea5610a506a42be35b7f01728eaed3dfc15e8879eedd4bb732b32cfaf420e9ea4965a05adc8651852fd5d856cf54f921d82e950ce60918b1da64294c53f7a89b57bc93396d2042bd47b73d32357d77078a28e7e5662f290e7a67607f322319e1abfb7aa934e9481b94be302e1e7ea2b2ef8e8ee6caf70f819310aab2998e9890d9971185e349f23c5bed57f937d336866b17fac451d08175c5a230b39758486fcc26111347e57b5864814c1d4f59c4bfac45596ae33b21f6c06f6ccffb61176473699d3f73308f7313e29b4907a89716812db946e7e598e6791c801af23b531cbedc73f6b5f1a0a654f8bcd88d500fde958201664b2113caac06441f9093bab05eb75dc6edd12d84479c1d286f15119e1dff516945a1066b371f9f156efe8f7ffcaf28d54a5d26d4cb2a7fdf9ca382055cb7f7a9309e9c2c070c7844cbb9ecf5a3cb63da8e9ad5cb60a85298e9673c816db137f3d5f5edf623c707b31556d6721da5273bf6ed10f335b6bb098c370725ddd698dc79517e6cd60e3a2092c516b838806644568d61659becfbb659ab8837cf24d88a70bc284028e924535427d9978e28d726deff14a493ec80e8e126a3288f70825570b3939b6278fff08fd5af5db3357d765b7d472a02909f65e208666339af92a26986acc18b1ed393a68d113a4b94a690e7fad0b2c1fc01c3854164d66b0724032bfe5105ae6e6e7e5f682f3cbbabeb264f02798e1231103622f4cfa59266eccecaebbf88107dbdd6e218ab1476297b14af2b4738774f1d3e44afc8e5b8189e3ff6a19d8d66de4f612ff31378cd9175cbef094c2dd5ac69069021b488584d6eaf2043ab21e58009214442c926d77e573e9701d9497625399561e93698d0a61f151942a442a762b1b02a7621518a7d307562cbd6ae42af640a758ce7eee6ce8d4c4d6e3f3bcac5384eae0146e0f4625e46abb27a6ff7651b59d1cc2e63c0750e3e56070e8e0bf46bb30cfa084f240a1ab63fb9ce275993a71e6f32889fec411b476d6bffda3aad4338f37a9840fa4b3476ec5bc308afe2170b66dd147d524658f860686f9554f2af981bcdb130fc7d1a6ce8a756b587fa8bbdd72427db811515cf6271f83afd7e010c983a59430e2fa660ff595ed36bacc6c57e7a2f2c412f6f63fa4712c055f76a107997cb87c22b0e53319648f18522b7dcb23fd2a8fbcef7c0ed02d3f93419ccf9994bd1133fb6145b804dc7f2bd03a9793656e0e62628e79cdf9d6d1068153aa793f1683247f97b69733f17706d27414d53ac7c7e0981266114fff8ddbabbf32fc461818bba4aa81be7223aa0e41c5d22b6ea83b3912b56343b98a99d37ff1830b0a73e4c09e7b1042b66fb4445c7fef8eb1320e525bce79308bd26a53594b33ae385ebc120528571d5cfd09ac736639ce47cb26765d3d5a533149cebf1d4366c323f75a2a6296c36f8740d0382d5db91bebff641a17fd28b1f7b43b92e87eb1b938781da10ff8b714caa9bfbcb9ce3e414ff9e92f2a1d20fe6ab1be9f13f3f6d538fb47ac0e8c0565dcbfad3bd56bbf051de6d378ee72f3a51829bf660f4a11645e17b8d54e6f546c26790e52b4550eeee68f0647a2c84df4740d6d8707bd98b92e26b560fa23d96c826d6e46086537f575cd7214be639710b11cc7d4ebc8871416725490f7e4d156a602dcd8a24c1835179e9d9d829f9c85e92431f20ee3ea2647f115a32e969ed3515e21fc270947a1ae73f0ef328fdca47cfa8a2a6f677286e0d65ab6256324a5ede6c68549a9f28c6cb74d18fad9fd3e0140b9a5fff85129e2a5ca6cac4198058ad8494510d2e073861a23517b468c23e060318f7ed89e78bc60e1a4bbb351144eda39c4cd6a55a4e1c276e1c2c46f9dc4b85d6a80ed5d75fac3f99dd2717be6baab4cbcc094aa64b670d06c019e121becd614fc56deed7bd030f6ab5a95318e2a83822f1ecb1793a6cbcfda26ab558b7bba18d642d51e92848acff93208c8338a613428436415805c10ead857e0538dedae72cdccb96cd1623e4994c5a396a08530352a005993bb0130f2017073e3b183e5a61e7561e5ace238c298fed857a1626850123ca6775f8446638831986498aa2264a35fd18286b821987086e9270095e3f15cae844cbd5ea8b6e2c89b8464957bc272447ca638947562e1b37c986f61bb4efb7bd213bfd21deeed220f85519024abb93693edeaf77aeac1cc9b99328394a48e0f5e674fbabab34d7334e3ecf6a93d831001089e039dd47c1a29e1bc8ade64c0c0caab9531114a46cb3cd4ad30796a59f03767de5c009b3302c4fd995cbd1e324a0fead96b444b0e987347394256267a9dc084500bc47cdfc2edc020253b66c2a481166e8c6da9ea06630732f549005", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 01:34:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xf4ffffff, 0x8000) 01:34:41 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 45) 01:34:41 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 61) [ 2406.183317] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.186470] FAT-fs (loop4): Directory bread(block 11) failed [ 2406.193104] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.196699] FAT-fs (loop4): Directory bread(block 11) failed [ 2406.199328] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.200639] FAULT_INJECTION: forcing a failure. [ 2406.200639] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.202300] CPU: 1 PID: 11754 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2406.203265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.204422] Call Trace: [ 2406.204799] dump_stack+0x107/0x167 [ 2406.205319] should_fail.cold+0x5/0xa [ 2406.205859] ? create_object.isra.0+0x3a/0xa20 [ 2406.206504] should_failslab+0x5/0x20 [ 2406.207034] kmem_cache_alloc+0x5b/0x310 [ 2406.207608] create_object.isra.0+0x3a/0xa20 [ 2406.208223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2406.208937] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2406.209645] ? alloc_skb_with_frags+0x92/0x570 [ 2406.210320] __alloc_skb+0xb1/0x5b0 [ 2406.210852] alloc_skb_with_frags+0x92/0x570 [ 2406.211491] ? sch_direct_xmit+0x1fb/0x790 [ 2406.212102] ? lock_acquire+0x197/0x470 [ 2406.212673] ? find_held_lock+0x2c/0x110 [ 2406.213259] sock_alloc_send_pskb+0x7af/0x930 [ 2406.213912] ? sk_alloc+0x350/0x350 [ 2406.214439] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2406.215192] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2406.215933] ? trace_hardirqs_on+0x5b/0x180 [ 2406.216560] ? __dev_queue_xmit+0xdf8/0x2690 [ 2406.217194] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2406.217931] ? ip6_mtu+0x1bb/0x3d0 [ 2406.218443] ? lock_downgrade+0x6d0/0x6d0 [ 2406.219041] ? ip_frag_init+0x350/0x350 [ 2406.219621] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2406.220313] ? ip6_mtu+0x1e9/0x3d0 [ 2406.220818] ? ip6_setup_cork+0xfb7/0x1740 [ 2406.221420] ip6_make_skb+0x2de/0x4e0 [ 2406.221976] ? ip_frag_init+0x350/0x350 [ 2406.222548] ? ip_frag_init+0x350/0x350 [ 2406.223124] ? ip6_push_pending_frames+0xf0/0xf0 [ 2406.223803] ? ip6_dst_check+0x389/0x8d0 [ 2406.224382] ? sk_dst_check+0x235/0x4c0 [ 2406.225024] udpv6_sendmsg+0x20d3/0x2ad0 [ 2406.225609] ? ip_frag_init+0x350/0x350 [ 2406.226182] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.226926] ? perf_event_task_disable+0x390/0x390 [ 2406.227630] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2406.228324] ? lock_acquire+0x197/0x470 [ 2406.228900] ? find_held_lock+0x2c/0x110 [ 2406.229493] ? sock_has_perm+0x1ea/0x280 [ 2406.230092] ? __import_iovec+0x458/0x590 [ 2406.230686] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.231438] inet6_sendmsg+0x105/0x140 [ 2406.232002] ? inet6_compat_ioctl+0x320/0x320 [ 2406.232628] __sock_sendmsg+0xf2/0x190 [ 2406.233196] ____sys_sendmsg+0x334/0x870 [ 2406.233788] ? sock_write_iter+0x3d0/0x3d0 [ 2406.234406] ? do_recvmmsg+0x6d0/0x6d0 [ 2406.234971] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2406.235722] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2406.236495] ? trace_hardirqs_on+0x5b/0x180 [ 2406.237127] ___sys_sendmsg+0xf3/0x170 [ 2406.237683] ? sendmsg_copy_msghdr+0x160/0x160 [ 2406.238333] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2406.238974] ? _raw_spin_unlock_irq+0x27/0x30 [ 2406.239611] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2406.240261] ? finish_task_switch+0x126/0x5d0 [ 2406.240907] ? finish_task_switch+0xef/0x5d0 [ 2406.241543] ? __switch_to+0x572/0xf70 [ 2406.242098] ? __switch_to_asm+0x3a/0x60 [ 2406.242667] ? __switch_to_asm+0x34/0x60 [ 2406.243351] ? __schedule+0x82c/0x1ea0 [ 2406.243987] ? io_schedule_timeout+0x140/0x140 [ 2406.244726] __sys_sendmmsg+0x195/0x470 [ 2406.245376] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2406.246061] ? lock_downgrade+0x6d0/0x6d0 [ 2406.246722] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2406.247468] ? wait_for_completion_io+0x270/0x270 [ 2406.248221] ? rcu_read_lock_any_held+0x75/0xa0 [ 2406.248969] ? vfs_write+0x354/0xb10 [ 2406.249518] ? fput_many+0x2f/0x1a0 [ 2406.250027] ? ksys_write+0x1a9/0x260 [ 2406.250558] ? __ia32_sys_read+0xb0/0xb0 [ 2406.251123] __x64_sys_sendmmsg+0x99/0x100 [ 2406.251728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2406.252449] do_syscall_64+0x33/0x40 [ 2406.252989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2406.253718] RIP: 0033:0x7f9d078eeb19 [ 2406.254240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.256817] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2406.257884] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2406.258882] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2406.259879] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.260879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.261888] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2406.263226] FAT-fs (loop4): Directory bread(block 11) failed [ 2406.274941] FAULT_INJECTION: forcing a failure. [ 2406.274941] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.276633] CPU: 0 PID: 11760 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2406.277555] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.278651] Call Trace: [ 2406.279004] dump_stack+0x107/0x167 [ 2406.279491] should_fail.cold+0x5/0xa [ 2406.279998] ? __alloc_skb+0x6d/0x5b0 [ 2406.280504] should_failslab+0x5/0x20 [ 2406.281039] kmem_cache_alloc_node+0x55/0x330 [ 2406.281634] __alloc_skb+0x6d/0x5b0 [ 2406.282118] alloc_skb_with_frags+0x92/0x570 [ 2406.282696] ? quarantine_put+0x8b/0x1a0 [ 2406.283236] ? kmem_cache_free+0xa7/0x2d0 [ 2406.283780] sock_alloc_send_pskb+0x7af/0x930 [ 2406.284380] ? sk_alloc+0x350/0x350 [ 2406.284868] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2406.285565] ? __local_bh_enable_ip+0x9d/0x100 [ 2406.286165] ? trace_hardirqs_on+0x5b/0x180 [ 2406.286735] ? __dev_queue_xmit+0xdf8/0x2690 [ 2406.287320] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2406.287984] ? ip6_mtu+0x1bb/0x3d0 [ 2406.288453] ? lock_downgrade+0x6d0/0x6d0 [ 2406.289008] ? ip_frag_init+0x350/0x350 [ 2406.289540] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2406.290177] ? ip6_mtu+0x1e9/0x3d0 [ 2406.290653] ? ip6_setup_cork+0xfb7/0x1740 [ 2406.291216] ip6_make_skb+0x2de/0x4e0 [ 2406.291723] ? ip_frag_init+0x350/0x350 [ 2406.292258] ? ip_frag_init+0x350/0x350 [ 2406.292792] ? ip6_push_pending_frames+0xf0/0xf0 [ 2406.293438] ? ip6_dst_check+0x389/0x8d0 [ 2406.293973] ? sk_dst_check+0x235/0x4c0 [ 2406.294508] udpv6_sendmsg+0x20d3/0x2ad0 [ 2406.295042] ? ip_frag_init+0x350/0x350 [ 2406.295578] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.296258] ? perf_event_task_disable+0x390/0x390 [ 2406.296921] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2406.297563] ? lock_acquire+0x197/0x470 [ 2406.298100] ? find_held_lock+0x2c/0x110 [ 2406.298645] ? sock_has_perm+0x1ea/0x280 [ 2406.299196] ? __import_iovec+0x458/0x590 [ 2406.299746] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.300430] inet6_sendmsg+0x105/0x140 [ 2406.300951] ? inet6_compat_ioctl+0x320/0x320 [ 2406.301553] __sock_sendmsg+0xf2/0x190 [ 2406.302063] ____sys_sendmsg+0x334/0x870 [ 2406.302602] ? sock_write_iter+0x3d0/0x3d0 [ 2406.303161] ? do_recvmmsg+0x6d0/0x6d0 [ 2406.303681] ? __lock_acquire+0x1657/0x5b00 [ 2406.304260] ___sys_sendmsg+0xf3/0x170 [ 2406.304776] ? sendmsg_copy_msghdr+0x160/0x160 [ 2406.305397] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2406.305984] ? _raw_spin_unlock_irq+0x27/0x30 [ 2406.306585] ? lock_acquire+0x197/0x470 [ 2406.307104] ? find_held_lock+0x2c/0x110 [ 2406.307643] ? __might_fault+0xd3/0x180 [ 2406.308167] ? lock_downgrade+0x6d0/0x6d0 [ 2406.308724] ? io_schedule_timeout+0x140/0x140 [ 2406.309344] __sys_sendmmsg+0x195/0x470 [ 2406.309870] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2406.310437] ? lock_downgrade+0x6d0/0x6d0 [ 2406.310991] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2406.311628] ? wait_for_completion_io+0x270/0x270 [ 2406.312265] ? rcu_read_lock_any_held+0x75/0xa0 [ 2406.312878] ? vfs_write+0x354/0xb10 [ 2406.313374] ? fput_many+0x2f/0x1a0 [ 2406.313850] ? ksys_write+0x1a9/0x260 [ 2406.314348] ? __ia32_sys_read+0xb0/0xb0 [ 2406.314884] __x64_sys_sendmmsg+0x99/0x100 [ 2406.315441] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2406.316116] do_syscall_64+0x33/0x40 [ 2406.316603] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2406.317280] RIP: 0033:0x7f6413bdcb19 [ 2406.317768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.320183] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2406.321188] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2406.322123] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2406.323058] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.324000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.324941] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:34:41 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x4000010, r0, 0x0) 01:34:41 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r4 = memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) r5 = eventfd2(0x5, 0x80801) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r8 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0x0, r8}) io_submit(r0, 0x9, &(0x7f00000018c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000040)="de10720eb7993f565726673ee473ebcb625e29d1014751ea6ad6a3f423253446cac5a0be54a917193f6d1314e8985d0c8cb593170a060f4d6b2b7bbbf5258bd0cdbe5b6950dffea669b0bf1fff7e677eb3ed5796a17ad3ee5093dcae438e56c1fa36bb3f2b9d85e234aba521f30a1ae991d91549bc342d7edf1003e78c375842be67caa113ac2bdbeca284d355becd3797deb262ce28af8d0a330df2caae8797a6e4ed03d4c79f0b9c5fdcffccb4e7b63790ec1184ee9464bce79db069ee4c6c539f815be535b5e01382eaf17a79522ed5c2c2c81dac2795", 0xd8, 0x3bd}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="4c195fa52609254fc975aaa74a56489efbb5a5d3ab259fed133a82e9551f3395cf23a213340ca634ba231b4f74c2222c18", 0x31, 0x4, 0x0, 0x2}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0xd59, r2, &(0x7f0000000240)="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", 0x1000, 0x7ff, 0x0, 0x2, r3}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f00000012c0)="50805169bad8f6237d5066b6a20e043888a98df5764b58ee69d0098f2c6f47d9f877d6c38d3d924596467c28524e58f1deb067cc97bdcc78acdc29e73ce587818d21fd76c88ae198bc4a5e73f5a4c3457e254d4407b10231ef728846ff782457d0caf257cb1d1b33cbdab80dc3ba3272f69b68451b12af6eee13331ef93ce3f0b311db7d46d6cb5db3f616514b", 0x8d, 0xfffffffffffffff2, 0x0, 0x1, r5}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000013c0)="88df08ceca8202fb915615dece14e8e0c122b14d72da102cdc99cfbf8e717f4de529f3008f", 0x25, 0x5, 0x0, 0x1}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0xffff, 0xffffffffffffffff, &(0x7f0000001440)="d167c56a3e9ebc49ae746f657101ab936ee6c586e00a648363759f6fa59c1c6df334b8a41895482d612c1784792c526b9962ad164f852e8ca808a030982eb47d9ed359d0e62ce05963006ae1a4122c2a131faf48ea044615cc9f98bc438fc8dd35ef97d56b7403067cc5565a51895eb007aec3e0abec5b4dc1ebc206605743cb5c90aa8d0daef69fefc8982a34c91c6380eeff7acef801ca17389be3e3b4754c8737672d278a427314d1da8ef9e9e74500fab910b1618f453035e0625885328171d29a", 0xc3, 0x8001, 0x0, 0x2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000001580)="1ad1c2d9c8adab2407a8dacfaf7ad60b9a44156b6e29d0088de6bfbf7fdc9e9d128d7a5a281b92a1c91fbd6708c99bad5488e622c17182157294da6ad5de97357a93f8d1305d5b7ba7800804ca08546194696bf0055df98ee7fe1387e249ac5bc9ad5a18bde8af06e659ac50f4647c470f050f6f1a2dbcb9208a6b083653d450a4f90fe0963b079ea1c32d291a01ba802ece14af4c3039c57d9e6c8f5858c88435fed14a88ee784042241b8c25c9f85513e56d5c6fb2ee6aa788a002abbd6a8a1116b0c03bb47f68a352548360f264fa81d78b0d00f085508b1b0c", 0xdb, 0x3, 0x0, 0x1}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x2, 0xb8, r7, &(0x7f00000016c0)="0a1211fa697d6363b3404a49d4e987b0fb9bf90468dfef9a6135ecae263d2a2f893c675ac45eeaa0f71836872016bdfb845c8c2bf208fd7ec3bc21e6f3a608bbcf61dba57db3fa69eebf29f698671f4b78907d8067bcf6d893c3dc79c05a2f2dbac166edfc75ee46f91c98f3997552c7eeec8c228d2feb70312bd9e802a63763a63c0d3849d0bc96812adf996121ffe0c6", 0x91, 0x16d5, 0x0, 0x3}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x3f, 0xffffffffffffffff, &(0x7f00000017c0)="eec59df5f32cde6ed94ce7676caa337974b5689c2ec964f923bba3ecc252b6deae64135637a9884853a26b78dff910b3e75cd7f6bc3668bd418de1bf8c31213e4ac054dd63be1836b1979f75f23f9cf5bd4d4352d599d2924332c6344b649de21dfbca91ccf5af068906d6031b6446b851286ef14b564236aa4823efc4ef6a7b372915c66b5c6b", 0x87, 0xfffffffffffffff8, 0x0, 0x2}]) 01:34:41 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 62) 01:34:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfbffffff, 0x8000) [ 2406.388009] FAULT_INJECTION: forcing a failure. [ 2406.388009] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.389815] CPU: 0 PID: 11773 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2406.390714] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.391779] Call Trace: [ 2406.392122] dump_stack+0x107/0x167 [ 2406.392720] should_fail.cold+0x5/0xa [ 2406.392735] ? skb_clone+0x14f/0x3d0 [ 2406.392750] should_failslab+0x5/0x20 [ 2406.392762] kmem_cache_alloc+0x5b/0x310 [ 2406.392777] skb_clone+0x14f/0x3d0 [ 2406.392791] ip6_finish_output2+0x10bf/0x1cf0 [ 2406.392809] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2406.392822] ip6_output+0x3b8/0x7e0 [ 2406.392839] ip6_local_out+0xb4/0x1a0 [ 2406.392851] ip6_send_skb+0x112/0x460 [ 2406.392865] udp_v6_send_skb+0x7aa/0x15b0 [ 2406.392883] udpv6_sendmsg+0x2116/0x2ad0 [ 2406.392906] ? ip_frag_init+0x350/0x350 01:34:41 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r5, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r9}) syz_io_uring_submit(0x0, r5, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4000, @fd=r8, 0x8, 0x100000000, 0x3, 0x1, 0x1}, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) fsetxattr$security_evm(r1, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="022b5e58b45a14a4e70abcba89766b15"], 0x10, 0x1) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2406.392924] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.392941] ? perf_event_task_disable+0x390/0x390 [ 2406.392955] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2406.392971] ? lock_acquire+0x197/0x470 [ 2406.392981] ? find_held_lock+0x2c/0x110 [ 2406.393001] ? sock_has_perm+0x1ea/0x280 [ 2406.393026] ? __import_iovec+0x458/0x590 [ 2406.393038] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.393052] inet6_sendmsg+0x105/0x140 [ 2406.393064] ? inet6_compat_ioctl+0x320/0x320 [ 2406.393075] __sock_sendmsg+0xf2/0x190 [ 2406.393087] ____sys_sendmsg+0x334/0x870 [ 2406.393100] ? sock_write_iter+0x3d0/0x3d0 [ 2406.393121] ? do_recvmmsg+0x6d0/0x6d0 [ 2406.407410] ? __lock_acquire+0x1657/0x5b00 [ 2406.407430] ___sys_sendmsg+0xf3/0x170 [ 2406.408554] ? sendmsg_copy_msghdr+0x160/0x160 [ 2406.409148] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2406.409821] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2406.410393] ? trace_hardirqs_on+0x5b/0x180 [ 2406.410946] ? lock_acquire+0x197/0x470 [ 2406.411457] ? find_held_lock+0x2c/0x110 [ 2406.411979] ? __might_fault+0xd3/0x180 [ 2406.412486] ? lock_downgrade+0x6d0/0x6d0 [ 2406.413025] ? io_schedule_timeout+0x140/0x140 [ 2406.413618] __sys_sendmmsg+0x195/0x470 [ 2406.414130] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2406.414680] ? lock_downgrade+0x6d0/0x6d0 [ 2406.415221] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2406.415841] ? wait_for_completion_io+0x270/0x270 [ 2406.416460] ? rcu_read_lock_any_held+0x75/0xa0 [ 2406.417062] ? vfs_write+0x354/0xb10 [ 2406.417539] ? fput_many+0x2f/0x1a0 [ 2406.418005] ? ksys_write+0x1a9/0x260 [ 2406.418496] ? __ia32_sys_read+0xb0/0xb0 [ 2406.419020] __x64_sys_sendmmsg+0x99/0x100 [ 2406.419562] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2406.420219] do_syscall_64+0x33/0x40 [ 2406.420695] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2406.421357] RIP: 0033:0x7f9d078eeb19 [ 2406.421838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.424191] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2406.425169] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2406.426075] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2406.426985] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.427887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.428796] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:34:41 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cgroup\x00') 01:34:41 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x1000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2406.478133] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.479203] FAT-fs (loop4): Directory bread(block 11) failed [ 2406.483722] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.484543] FAT-fs (loop4): Directory bread(block 11) failed [ 2406.488084] FAT-fs (loop4): Directory bread(block 10) failed [ 2406.488872] FAT-fs (loop4): Directory bread(block 11) failed 01:34:41 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 46) [ 2406.554846] FAULT_INJECTION: forcing a failure. [ 2406.554846] name failslab, interval 1, probability 0, space 0, times 0 [ 2406.556401] CPU: 1 PID: 11789 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2406.557210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2406.558165] Call Trace: [ 2406.558479] dump_stack+0x107/0x167 [ 2406.558897] should_fail.cold+0x5/0xa [ 2406.559332] ? create_object.isra.0+0x3a/0xa20 [ 2406.559858] should_failslab+0x5/0x20 [ 2406.560325] kmem_cache_alloc+0x5b/0x310 [ 2406.560836] ? ____sys_sendmsg+0x334/0x870 [ 2406.561397] ? ___sys_sendmsg+0xf3/0x170 [ 2406.562157] create_object.isra.0+0x3a/0xa20 [ 2406.562745] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2406.563424] kmem_cache_alloc_node+0x169/0x330 [ 2406.564041] __alloc_skb+0x6d/0x5b0 [ 2406.564530] alloc_skb_with_frags+0x92/0x570 [ 2406.565118] ? quarantine_put+0x8b/0x1a0 [ 2406.565678] ? kmem_cache_free+0xa7/0x2d0 [ 2406.566236] sock_alloc_send_pskb+0x7af/0x930 [ 2406.566846] ? sk_alloc+0x350/0x350 [ 2406.567300] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2406.567940] ? __local_bh_enable_ip+0x9d/0x100 [ 2406.568471] ? trace_hardirqs_on+0x5b/0x180 [ 2406.569009] ? __dev_queue_xmit+0xdf8/0x2690 [ 2406.569539] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2406.570160] ? ip6_mtu+0x1bb/0x3d0 [ 2406.570648] ? lock_downgrade+0x6d0/0x6d0 [ 2406.571250] ? ip_frag_init+0x350/0x350 [ 2406.571800] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2406.572473] ? ip6_mtu+0x1e9/0x3d0 [ 2406.572923] ? ip6_setup_cork+0xfb7/0x1740 [ 2406.573513] ip6_make_skb+0x2de/0x4e0 [ 2406.574041] ? ip_frag_init+0x350/0x350 [ 2406.574589] ? ip_frag_init+0x350/0x350 [ 2406.575145] ? ip6_push_pending_frames+0xf0/0xf0 [ 2406.575755] ? ip6_dst_check+0x389/0x8d0 [ 2406.576318] ? sk_dst_check+0x235/0x4c0 [ 2406.576881] udpv6_sendmsg+0x20d3/0x2ad0 [ 2406.577480] ? ip_frag_init+0x350/0x350 [ 2406.577994] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.578616] ? perf_event_task_disable+0x390/0x390 [ 2406.579244] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2406.579916] ? lock_acquire+0x197/0x470 [ 2406.580474] ? find_held_lock+0x2c/0x110 [ 2406.581062] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2406.581792] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2406.582543] ? sock_has_perm+0x1ea/0x280 [ 2406.583124] ? __import_iovec+0x458/0x590 [ 2406.583707] ? udp_v6_push_pending_frames+0x360/0x360 [ 2406.584415] inet6_sendmsg+0x105/0x140 [ 2406.584971] ? inet6_compat_ioctl+0x320/0x320 [ 2406.585588] __sock_sendmsg+0xf2/0x190 [ 2406.586127] ____sys_sendmsg+0x334/0x870 [ 2406.586709] ? sock_write_iter+0x3d0/0x3d0 [ 2406.587294] ? do_recvmmsg+0x6d0/0x6d0 [ 2406.587844] ? __lock_acquire+0x1657/0x5b00 [ 2406.588452] ___sys_sendmsg+0xf3/0x170 [ 2406.589014] ? sendmsg_copy_msghdr+0x160/0x160 [ 2406.589647] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2406.590377] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2406.590983] ? trace_hardirqs_on+0x5b/0x180 [ 2406.591672] ? lock_acquire+0x197/0x470 [ 2406.592212] ? find_held_lock+0x2c/0x110 [ 2406.592782] ? __might_fault+0xd3/0x180 [ 2406.593347] ? lock_downgrade+0x6d0/0x6d0 [ 2406.593924] ? io_schedule_timeout+0x140/0x140 [ 2406.594561] __sys_sendmmsg+0x195/0x470 [ 2406.595126] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2406.595710] ? lock_downgrade+0x6d0/0x6d0 [ 2406.596292] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2406.596973] ? wait_for_completion_io+0x270/0x270 [ 2406.597647] ? rcu_read_lock_any_held+0x75/0xa0 [ 2406.598268] ? vfs_write+0x354/0xb10 [ 2406.598770] ? fput_many+0x2f/0x1a0 [ 2406.599257] ? ksys_write+0x1a9/0x260 [ 2406.599775] ? __ia32_sys_read+0xb0/0xb0 [ 2406.600344] __x64_sys_sendmmsg+0x99/0x100 [ 2406.600941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2406.601662] do_syscall_64+0x33/0x40 [ 2406.602173] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2406.602883] RIP: 0033:0x7f6413bdcb19 [ 2406.603386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2406.605911] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2406.607068] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2406.608051] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2406.609067] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2406.610039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2406.610966] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2421.909522] FAT-fs (loop4): Directory bread(block 10) failed [ 2421.914098] FAT-fs (loop4): Directory bread(block 11) failed 01:34:57 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x2000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:34:57 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) 01:34:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfeffffff, 0x8000) 01:34:57 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 47) 01:34:57 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x32000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:34:57 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'veth0_to_bond\x00', {0x2}, 0x372}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x642043, 0x0) ioctl$FITHAW(r1, 0xc0045878) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) pipe2$9p(&(0x7f0000000080), 0x80000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000100)={0x1, [0x0]}) pipe2$9p(&(0x7f00000000c0), 0x84000) write$P9_RCLUNK(r1, 0x0, 0x0) 01:34:57 executing program 7: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x180000) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:34:57 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 63) [ 2421.934979] FAT-fs (loop4): Directory bread(block 10) failed [ 2421.936606] FAT-fs (loop4): Directory bread(block 11) failed [ 2421.936801] FAULT_INJECTION: forcing a failure. [ 2421.936801] name failslab, interval 1, probability 0, space 0, times 0 [ 2421.938136] FAT-fs (loop4): Directory bread(block 10) failed [ 2421.938174] FAT-fs (loop4): Directory bread(block 11) failed [ 2421.940594] CPU: 1 PID: 11810 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2421.944569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.946360] Call Trace: [ 2421.946930] dump_stack+0x107/0x167 [ 2421.947712] should_fail.cold+0x5/0xa [ 2421.948537] should_failslab+0x5/0x20 [ 2421.949355] __kmalloc_node_track_caller+0x74/0x3b0 [ 2421.950440] ? alloc_skb_with_frags+0x92/0x570 [ 2421.951423] __alloc_skb+0xb1/0x5b0 [ 2421.952207] alloc_skb_with_frags+0x92/0x570 [ 2421.953147] ? quarantine_put+0x8b/0x1a0 [ 2421.954029] ? kmem_cache_free+0xa7/0x2d0 [ 2421.954919] sock_alloc_send_pskb+0x7af/0x930 [ 2421.955892] ? sk_alloc+0x350/0x350 [ 2421.956683] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2421.957817] ? __local_bh_enable_ip+0x9d/0x100 [ 2421.958794] ? trace_hardirqs_on+0x5b/0x180 [ 2421.959718] ? __dev_queue_xmit+0xdf8/0x2690 [ 2421.960668] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2421.961753] ? ip6_mtu+0x1bb/0x3d0 [ 2421.962519] ? lock_downgrade+0x6d0/0x6d0 [ 2421.963556] ? ip_frag_init+0x350/0x350 [ 2421.964630] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2421.965868] ? ip6_mtu+0x1e9/0x3d0 [ 2421.966733] ? ip6_setup_cork+0xfb7/0x1740 [ 2421.967754] ip6_make_skb+0x2de/0x4e0 [ 2421.968697] ? ip_frag_init+0x350/0x350 [ 2421.969605] ? ip_frag_init+0x350/0x350 [ 2421.970462] ? ip6_push_pending_frames+0xf0/0xf0 [ 2421.971487] ? ip6_dst_check+0x389/0x8d0 [ 2421.972360] ? sk_dst_check+0x235/0x4c0 [ 2421.973222] udpv6_sendmsg+0x20d3/0x2ad0 [ 2421.974116] ? ip_frag_init+0x350/0x350 [ 2421.974980] ? udp_v6_push_pending_frames+0x360/0x360 [ 2421.976112] ? lock_acquire+0x197/0x470 [ 2421.976964] ? find_held_lock+0x2c/0x110 [ 2421.977858] ? sock_has_perm+0x1ea/0x280 [ 2421.978753] ? __import_iovec+0x458/0x590 [ 2421.979645] ? udp_v6_push_pending_frames+0x360/0x360 [ 2421.980759] inet6_sendmsg+0x105/0x140 [ 2421.981612] ? inet6_compat_ioctl+0x320/0x320 [ 2421.982575] __sock_sendmsg+0xf2/0x190 [ 2421.983411] ____sys_sendmsg+0x334/0x870 [ 2421.984283] ? sock_write_iter+0x3d0/0x3d0 [ 2421.985190] ? do_recvmmsg+0x6d0/0x6d0 [ 2421.986038] ? __lock_acquire+0x1657/0x5b00 [ 2421.986976] ___sys_sendmsg+0xf3/0x170 [ 2421.987815] ? sendmsg_copy_msghdr+0x160/0x160 [ 2421.988801] ? __fget_files+0x2cf/0x520 [ 2421.989671] ? lock_acquire+0x197/0x470 [ 2421.990522] ? find_held_lock+0x2c/0x110 [ 2421.991400] ? __might_fault+0xd3/0x180 [ 2421.992251] ? lock_downgrade+0x6d0/0x6d0 [ 2421.993157] __sys_sendmmsg+0x195/0x470 [ 2421.994026] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2421.994952] ? lock_downgrade+0x6d0/0x6d0 [ 2421.995861] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2421.996898] ? wait_for_completion_io+0x270/0x270 [ 2422.001992] ? rcu_read_lock_any_held+0x75/0xa0 [ 2422.002993] ? vfs_write+0x354/0xb10 [ 2422.003762] ? fput_many+0x2f/0x1a0 [ 2422.004524] ? ksys_write+0x1a9/0x260 [ 2422.005318] ? __ia32_sys_read+0xb0/0xb0 [ 2422.006185] __x64_sys_sendmmsg+0x99/0x100 [ 2422.007066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.008132] do_syscall_64+0x33/0x40 [ 2422.008910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.009986] RIP: 0033:0x7f6413bdcb19 [ 2422.010772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.014613] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2422.016188] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2422.017676] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2422.019165] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.020651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.022151] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2422.065172] FAULT_INJECTION: forcing a failure. [ 2422.065172] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.067879] CPU: 1 PID: 11819 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2422.069331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.071077] Call Trace: [ 2422.071633] dump_stack+0x107/0x167 [ 2422.072397] should_fail.cold+0x5/0xa [ 2422.073209] ? create_object.isra.0+0x3a/0xa20 [ 2422.074177] should_failslab+0x5/0x20 [ 2422.074977] kmem_cache_alloc+0x5b/0x310 [ 2422.075839] create_object.isra.0+0x3a/0xa20 [ 2422.076765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.077843] kmem_cache_alloc+0x159/0x310 [ 2422.078725] skb_clone+0x14f/0x3d0 [ 2422.079483] ip6_finish_output2+0x10bf/0x1cf0 [ 2422.080438] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2422.081496] ip6_output+0x3b8/0x7e0 [ 2422.082267] ip6_local_out+0xb4/0x1a0 [ 2422.083080] ip6_send_skb+0x112/0x460 [ 2422.083889] udp_v6_send_skb+0x7aa/0x15b0 [ 2422.084810] udpv6_sendmsg+0x2116/0x2ad0 [ 2422.085674] ? ip_frag_init+0x350/0x350 [ 2422.086525] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.087617] ? perf_event_task_disable+0x390/0x390 [ 2422.088645] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2422.089679] ? lock_acquire+0x197/0x470 [ 2422.090522] ? find_held_lock+0x2c/0x110 [ 2422.091393] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2422.092529] ? sock_has_perm+0x1ea/0x280 [ 2422.093406] ? __import_iovec+0x458/0x590 [ 2422.094289] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.095379] inet6_sendmsg+0x105/0x140 [ 2422.096199] ? inet6_compat_ioctl+0x320/0x320 [ 2422.097146] __sock_sendmsg+0xf2/0x190 [ 2422.097971] ____sys_sendmsg+0x334/0x870 [ 2422.098835] ? sock_write_iter+0x3d0/0x3d0 [ 2422.099724] ? do_recvmmsg+0x6d0/0x6d0 [ 2422.100553] ? __lock_acquire+0x1657/0x5b00 [ 2422.101487] ___sys_sendmsg+0xf3/0x170 [ 2422.102318] ? sendmsg_copy_msghdr+0x160/0x160 [ 2422.103281] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2422.104223] ? _raw_spin_unlock_irq+0x27/0x30 [ 2422.105177] ? lock_acquire+0x197/0x470 [ 2422.106021] ? find_held_lock+0x2c/0x110 [ 2422.106879] ? __might_fault+0xd3/0x180 [ 2422.107720] ? lock_downgrade+0x6d0/0x6d0 [ 2422.108596] ? io_schedule_timeout+0x140/0x140 [ 2422.109584] __sys_sendmmsg+0x195/0x470 [ 2422.110431] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2422.111341] ? lock_downgrade+0x6d0/0x6d0 [ 2422.112241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.113265] ? wait_for_completion_io+0x270/0x270 [ 2422.114297] ? rcu_read_lock_any_held+0x75/0xa0 [ 2422.115281] ? vfs_write+0x354/0xb10 [ 2422.116056] ? fput_many+0x2f/0x1a0 [ 2422.116830] ? ksys_write+0x1a9/0x260 [ 2422.117649] ? __ia32_sys_read+0xb0/0xb0 [ 2422.118512] __x64_sys_sendmmsg+0x99/0x100 [ 2422.119407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.120503] do_syscall_64+0x33/0x40 [ 2422.121292] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.122378] RIP: 0033:0x7f9d078eeb19 [ 2422.123159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.127044] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2422.128651] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2422.130168] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2422.131664] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.133161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.134681] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:34:57 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) 01:34:57 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000100), &(0x7f0000000140)={'L+', 0x8}, 0x16, 0x2) write$P9_RCLUNK(r0, 0x0, 0x0) 01:34:57 executing program 7: pipe2$9p(&(0x7f0000000040), 0x80000) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_vif\x00') pipe2$9p(&(0x7f0000000000), 0x80000) 01:34:57 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 48) 01:34:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xff010000, 0x8000) 01:34:57 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x2010000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2422.280135] FAULT_INJECTION: forcing a failure. [ 2422.280135] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.282677] CPU: 0 PID: 11834 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2422.284043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.285699] Call Trace: [ 2422.286224] dump_stack+0x107/0x167 [ 2422.286945] should_fail.cold+0x5/0xa [ 2422.287700] ? create_object.isra.0+0x3a/0xa20 [ 2422.288607] should_failslab+0x5/0x20 [ 2422.289360] kmem_cache_alloc+0x5b/0x310 [ 2422.290171] create_object.isra.0+0x3a/0xa20 [ 2422.291041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2422.292051] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2422.293050] ? alloc_skb_with_frags+0x92/0x570 [ 2422.293968] __alloc_skb+0xb1/0x5b0 [ 2422.294690] alloc_skb_with_frags+0x92/0x570 [ 2422.295558] ? quarantine_put+0x8b/0x1a0 [ 2422.296365] ? kmem_cache_free+0xa7/0x2d0 [ 2422.297183] sock_alloc_send_pskb+0x7af/0x930 [ 2422.298084] ? sk_alloc+0x350/0x350 [ 2422.298812] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2422.299846] ? __local_bh_enable_ip+0x9d/0x100 [ 2422.300757] ? trace_hardirqs_on+0x5b/0x180 [ 2422.301627] ? __dev_queue_xmit+0xdf8/0x2690 [ 2422.302500] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2422.303496] ? ip6_mtu+0x1bb/0x3d0 01:34:57 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x141, 0x29, 0x1, {0x2, [{{0x0, 0x2, 0x4}, 0x6, 0x4, 0x7, './file0'}, {{0x4, 0x0, 0x7}, 0x7fffffff, 0x7, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x1f, 0x0, 0x7, './file0'}, {{0xc, 0x4, 0x4}, 0x710, 0x6, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0xffffffff, 0xfd, 0x7, './file0'}, {{0x80, 0x1, 0x2}, 0x100000000, 0x1, 0x7, './file0'}, {{0x88, 0x4, 0x5}, 0x1f4, 0x14, 0x7, './file0'}, {{0x40, 0x3, 0x3}, 0x8001, 0x40, 0x7, './file0'}, {{0x1, 0x2, 0x5}, 0x2, 0x7, 0x7, './file0'}, {{0x4, 0x4, 0x1}, 0x4, 0x2, 0x7, './file0'}]}}, 0x141) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') pkey_alloc(0x0, 0x2) [ 2422.304202] ? lock_downgrade+0x6d0/0x6d0 [ 2422.305102] ? ip_frag_init+0x350/0x350 [ 2422.305901] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2422.306843] ? ip6_mtu+0x1e9/0x3d0 [ 2422.307553] ? ip6_setup_cork+0xfb7/0x1740 [ 2422.308393] ip6_make_skb+0x2de/0x4e0 [ 2422.309141] ? ip_frag_init+0x350/0x350 [ 2422.309935] ? ip_frag_init+0x350/0x350 [ 2422.310717] ? ip6_push_pending_frames+0xf0/0xf0 [ 2422.311672] ? ip6_dst_check+0x389/0x8d0 [ 2422.312471] ? sk_dst_check+0x235/0x4c0 [ 2422.313267] udpv6_sendmsg+0x20d3/0x2ad0 [ 2422.314081] ? ip_frag_init+0x350/0x350 [ 2422.314883] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.315914] ? perf_event_task_disable+0x390/0x390 [ 2422.316896] ? lock_acquire+0x197/0x470 [ 2422.317688] ? find_held_lock+0x2c/0x110 [ 2422.318509] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2422.319584] ? sock_has_perm+0x1ea/0x280 [ 2422.320405] ? __import_iovec+0x458/0x590 [ 2422.321230] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.322263] inet6_sendmsg+0x105/0x140 [ 2422.323040] ? inet6_compat_ioctl+0x320/0x320 [ 2422.323916] __sock_sendmsg+0xf2/0x190 [ 2422.324691] ____sys_sendmsg+0x334/0x870 [ 2422.325512] ? sock_write_iter+0x3d0/0x3d0 [ 2422.326349] ? do_recvmmsg+0x6d0/0x6d0 [ 2422.327125] ? __lock_acquire+0x1657/0x5b00 [ 2422.327990] ___sys_sendmsg+0xf3/0x170 [ 2422.328763] ? sendmsg_copy_msghdr+0x160/0x160 [ 2422.329676] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2422.330555] ? _raw_spin_unlock_irq+0x27/0x30 [ 2422.331451] ? lock_acquire+0x197/0x470 [ 2422.332237] ? find_held_lock+0x2c/0x110 [ 2422.333041] ? __might_fault+0xd3/0x180 [ 2422.333834] ? lock_downgrade+0x6d0/0x6d0 [ 2422.334653] ? io_schedule_timeout+0x140/0x140 [ 2422.335573] __sys_sendmmsg+0x195/0x470 [ 2422.336372] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2422.337222] ? lock_downgrade+0x6d0/0x6d0 [ 2422.338059] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.339022] ? wait_for_completion_io+0x270/0x270 [ 2422.339975] ? rcu_read_lock_any_held+0x75/0xa0 [ 2422.340893] ? vfs_write+0x354/0xb10 [ 2422.341637] ? fput_many+0x2f/0x1a0 [ 2422.342362] ? ksys_write+0x1a9/0x260 [ 2422.343120] ? __ia32_sys_read+0xb0/0xb0 [ 2422.343934] __x64_sys_sendmmsg+0x99/0x100 [ 2422.344769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.345797] do_syscall_64+0x33/0x40 [ 2422.346536] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.347557] RIP: 0033:0x7f6413bdcb19 [ 2422.348289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.351943] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2422.353477] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2422.354892] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2422.356313] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.357726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.359140] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:34:57 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 64) [ 2422.410516] FAT-fs (loop4): Directory bread(block 10) failed [ 2422.411901] FAT-fs (loop4): Directory bread(block 11) failed [ 2422.427758] FAT-fs (loop4): Directory bread(block 10) failed [ 2422.428897] FAT-fs (loop4): Directory bread(block 11) failed [ 2422.439894] FAULT_INJECTION: forcing a failure. [ 2422.439894] name failslab, interval 1, probability 0, space 0, times 0 [ 2422.441871] CPU: 0 PID: 11847 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2422.443048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2422.444456] Call Trace: [ 2422.444915] dump_stack+0x107/0x167 [ 2422.445555] should_fail.cold+0x5/0xa [ 2422.446209] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x695/0x13d0 [ 2422.447243] ? __alloc_skb+0x6d/0x5b0 [ 2422.447895] should_failslab+0x5/0x20 [ 2422.448549] kmem_cache_alloc_node+0x55/0x330 [ 2422.449318] __alloc_skb+0x6d/0x5b0 [ 2422.449948] skb_copy+0x183/0x350 [ 2422.450541] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2422.451559] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2422.452437] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2422.453418] ? lock_acquire+0x160/0x470 [ 2422.454104] ? find_held_lock+0x2c/0x110 [ 2422.454810] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2422.455686] mac80211_hwsim_tx+0x574/0x12a0 [ 2422.456429] ? trace_hardirqs_on+0x5b/0x180 [ 2422.457180] ieee80211_tx_frags+0x59c/0x9f0 [ 2422.457937] ? fq_skb_free_func+0x20/0x20 [ 2422.458660] __ieee80211_tx+0x1ad/0x640 [ 2422.459346] ieee80211_tx+0x329/0x410 [ 2422.459991] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2422.460862] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2422.461878] ? ieee80211_skb_resize+0x116/0x630 [ 2422.462673] ieee80211_xmit+0x220/0x2a0 [ 2422.463361] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2422.464253] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2422.465139] ieee80211_subif_start_xmit+0xef/0xf70 [ 2422.466003] ? lock_chain_count+0x20/0x20 [ 2422.466705] ? skb_crc32c_csum_help+0x80/0x80 [ 2422.467471] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2422.468379] ? lock_acquire+0x197/0x470 [ 2422.469063] ? sch_direct_xmit+0x31a/0x790 [ 2422.469799] ? lock_release+0x680/0x680 [ 2422.470488] dev_hard_start_xmit+0x1cb/0x6f0 [ 2422.471251] sch_direct_xmit+0x25f/0x790 [ 2422.471948] ? lock_acquire+0x197/0x470 [ 2422.472628] ? find_held_lock+0x2c/0x110 [ 2422.473324] ? dev_watchdog+0xbc0/0xbc0 [ 2422.474011] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2422.474789] __qdisc_run+0x4aa/0x1570 [ 2422.475456] __dev_queue_xmit+0xd43/0x2690 [ 2422.476172] ? ip6_finish_output2+0x158f/0x1cf0 [ 2422.476968] ? find_held_lock+0x2c/0x110 [ 2422.477670] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2422.478457] ? lock_downgrade+0x6d0/0x6d0 [ 2422.479167] ? do_softirq+0x53/0xc0 [ 2422.479786] ? trace_hardirqs_on+0x5b/0x180 [ 2422.480536] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2422.481433] ip6_finish_output2+0x158f/0x1cf0 [ 2422.482219] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2422.483073] ip6_output+0x3b8/0x7e0 [ 2422.483709] ip6_local_out+0xb4/0x1a0 [ 2422.484360] ip6_send_skb+0x112/0x460 [ 2422.485016] udp_v6_send_skb+0x7aa/0x15b0 [ 2422.485751] udpv6_sendmsg+0x2116/0x2ad0 [ 2422.486449] ? ip_frag_init+0x350/0x350 [ 2422.487137] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.488034] ? perf_event_task_disable+0x390/0x390 [ 2422.488878] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2422.489710] ? lock_acquire+0x197/0x470 [ 2422.490388] ? find_held_lock+0x2c/0x110 [ 2422.491100] ? sock_has_perm+0x1ea/0x280 [ 2422.491823] ? __import_iovec+0x458/0x590 [ 2422.492532] ? udp_v6_push_pending_frames+0x360/0x360 [ 2422.493419] inet6_sendmsg+0x105/0x140 [ 2422.494092] ? inet6_compat_ioctl+0x320/0x320 [ 2422.494861] __sock_sendmsg+0xf2/0x190 [ 2422.495528] ____sys_sendmsg+0x334/0x870 [ 2422.496221] ? sock_write_iter+0x3d0/0x3d0 [ 2422.496947] ? do_recvmmsg+0x6d0/0x6d0 [ 2422.497627] ? __lock_acquire+0x1657/0x5b00 [ 2422.498379] ___sys_sendmsg+0xf3/0x170 [ 2422.499043] ? sendmsg_copy_msghdr+0x160/0x160 [ 2422.499839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2422.500726] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2422.501506] ? trace_hardirqs_on+0x5b/0x180 [ 2422.502245] ? lock_acquire+0x197/0x470 [ 2422.502926] ? find_held_lock+0x2c/0x110 [ 2422.503628] ? __might_fault+0xd3/0x180 [ 2422.504309] ? lock_downgrade+0x6d0/0x6d0 [ 2422.505018] ? io_schedule_timeout+0x140/0x140 [ 2422.505817] __sys_sendmmsg+0x195/0x470 [ 2422.506501] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2422.507248] ? lock_downgrade+0x6d0/0x6d0 [ 2422.507966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2422.508792] ? wait_for_completion_io+0x270/0x270 [ 2422.509627] ? rcu_read_lock_any_held+0x75/0xa0 [ 2422.510418] ? vfs_write+0x354/0xb10 [ 2422.511052] ? fput_many+0x2f/0x1a0 [ 2422.511675] ? ksys_write+0x1a9/0x260 [ 2422.512315] ? __ia32_sys_read+0xb0/0xb0 [ 2422.513021] __x64_sys_sendmmsg+0x99/0x100 [ 2422.513751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2422.514620] do_syscall_64+0x33/0x40 [ 2422.515254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2422.516128] RIP: 0033:0x7f9d078eeb19 [ 2422.516766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2422.519899] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2422.521196] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2422.522424] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2422.523639] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2422.524861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2422.526081] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2422.532160] FAT-fs (loop4): Directory bread(block 10) failed [ 2422.533406] FAT-fs (loop4): Directory bread(block 11) failed 01:35:09 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 65) 01:35:09 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 49) 01:35:09 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x18401, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file2\x00', 0x6210c1, 0xa8) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) write$binfmt_elf32(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/771], 0x303) ftruncate(r1, 0xf18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5}) r6 = perf_event_open$cgroup(&(0x7f00000004c0)={0x2, 0x80, 0x7f, 0x0, 0xc1, 0x40, 0x0, 0x7, 0x20000, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8419, 0x4, @perf_bp={&(0x7f0000000480), 0x4}, 0x41180, 0xa3e, 0x2, 0x4, 0x1, 0xfffffff7, 0xf849, 0x0, 0x0, 0x0, 0x6}, r0, 0x7, r0, 0xa) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000540)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r2], 0x6) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000010a01020000000000000000070000000c9c903820dd000440000000000000000208000240000000000c000440000000000000000108000240000000010900010073797a3100000000080002400000000108000240000000004028f8019fdcad0a61c28694e5fe42538ed811c21cecd5042e7c1db4968d24daae8274a440f1b15c986caae2"], 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0xc1) write$P9_RCLUNK(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/prev\x00') r7 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$dupfd(r7, 0x0, r1) 01:35:09 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) 01:35:09 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) 01:35:09 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x33000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:35:09 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x3000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xffffff7f, 0x8000) [ 2433.962000] FAULT_INJECTION: forcing a failure. [ 2433.962000] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.964494] CPU: 0 PID: 11856 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2433.965998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2433.967884] Call Trace: [ 2433.968515] dump_stack+0x107/0x167 [ 2433.969312] should_fail.cold+0x5/0xa [ 2433.970154] ? create_object.isra.0+0x3a/0xa20 [ 2433.971151] should_failslab+0x5/0x20 [ 2433.971981] kmem_cache_alloc+0x5b/0x310 [ 2433.972873] create_object.isra.0+0x3a/0xa20 [ 2433.973827] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2433.974949] kmem_cache_alloc_node+0x169/0x330 [ 2433.975953] __alloc_skb+0x6d/0x5b0 [ 2433.976752] skb_copy+0x183/0x350 [ 2433.977515] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2433.978822] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2433.979949] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2433.981201] ? lock_acquire+0x160/0x470 [ 2433.982074] ? find_held_lock+0x2c/0x110 [ 2433.982968] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2433.984078] mac80211_hwsim_tx+0x574/0x12a0 [ 2433.985020] ? trace_hardirqs_on+0x5b/0x180 [ 2433.985980] ieee80211_tx_frags+0x59c/0x9f0 [ 2433.986931] ? fq_skb_free_func+0x20/0x20 [ 2433.987850] __ieee80211_tx+0x1ad/0x640 [ 2433.988724] ieee80211_tx+0x329/0x410 [ 2433.989559] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2433.990683] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2433.991972] ? ieee80211_skb_resize+0x116/0x630 [ 2433.992994] ieee80211_xmit+0x220/0x2a0 [ 2433.993870] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2433.995013] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2433.996133] ieee80211_subif_start_xmit+0xef/0xf70 [ 2433.997206] ? lock_chain_count+0x20/0x20 [ 2433.998117] ? skb_crc32c_csum_help+0x80/0x80 [ 2433.999095] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2434.000256] ? lock_acquire+0x197/0x470 [ 2434.001120] ? sch_direct_xmit+0x31a/0x790 [ 2434.002054] ? lock_release+0x680/0x680 [ 2434.002933] dev_hard_start_xmit+0x1cb/0x6f0 [ 2434.003898] sch_direct_xmit+0x25f/0x790 [ 2434.004781] ? lock_acquire+0x197/0x470 [ 2434.005644] ? find_held_lock+0x2c/0x110 [ 2434.006537] ? dev_watchdog+0xbc0/0xbc0 [ 2434.007401] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2434.008391] __qdisc_run+0x4aa/0x1570 [ 2434.009237] __dev_queue_xmit+0xd43/0x2690 [ 2434.010165] ? ip6_finish_output2+0x158f/0x1cf0 [ 2434.011183] ? find_held_lock+0x2c/0x110 [ 2434.012068] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2434.013065] ? lock_downgrade+0x6d0/0x6d0 [ 2434.013972] ? do_softirq+0x53/0xc0 [ 2434.014760] ? trace_hardirqs_on+0x5b/0x180 [ 2434.015709] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2434.016852] ip6_finish_output2+0x158f/0x1cf0 [ 2434.017841] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2434.018939] ip6_output+0x3b8/0x7e0 [ 2434.019744] ip6_local_out+0xb4/0x1a0 [ 2434.020574] ip6_send_skb+0x112/0x460 [ 2434.021408] udp_v6_send_skb+0x7aa/0x15b0 [ 2434.022335] udpv6_sendmsg+0x2116/0x2ad0 [ 2434.023223] ? ip_frag_init+0x350/0x350 [ 2434.024102] ? udp_v6_push_pending_frames+0x360/0x360 [ 2434.025221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2434.026375] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2434.027576] ? lock_acquire+0x197/0x470 [ 2434.028437] ? find_held_lock+0x2c/0x110 [ 2434.029333] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2434.030517] ? sock_has_perm+0x1ea/0x280 [ 2434.031431] ? __import_iovec+0x458/0x590 [ 2434.032333] ? udp_v6_push_pending_frames+0x360/0x360 [ 2434.033464] inet6_sendmsg+0x105/0x140 [ 2434.034323] ? inet6_compat_ioctl+0x320/0x320 [ 2434.035297] __sock_sendmsg+0xf2/0x190 [ 2434.036149] ____sys_sendmsg+0x334/0x870 [ 2434.037035] ? sock_write_iter+0x3d0/0x3d0 [ 2434.037963] ? do_recvmmsg+0x6d0/0x6d0 [ 2434.038813] ? __lock_acquire+0x1657/0x5b00 [ 2434.039765] ___sys_sendmsg+0xf3/0x170 [ 2434.040613] ? sendmsg_copy_msghdr+0x160/0x160 [ 2434.041607] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2434.042586] ? _raw_spin_unlock_irq+0x27/0x30 [ 2434.043570] ? lock_acquire+0x197/0x470 [ 2434.044434] ? find_held_lock+0x2c/0x110 [ 2434.045327] ? __might_fault+0xd3/0x180 [ 2434.046204] ? lock_downgrade+0x6d0/0x6d0 [ 2434.047112] ? io_schedule_timeout+0x140/0x140 [ 2434.048131] __sys_sendmmsg+0x195/0x470 [ 2434.049006] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2434.049953] ? lock_downgrade+0x6d0/0x6d0 [ 2434.050879] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2434.051934] ? wait_for_completion_io+0x270/0x270 [ 2434.052986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2434.054005] ? vfs_write+0x354/0xb10 [ 2434.054818] ? fput_many+0x2f/0x1a0 [ 2434.055612] ? ksys_write+0x1a9/0x260 [ 2434.056444] ? __ia32_sys_read+0xb0/0xb0 [ 2434.057339] __x64_sys_sendmmsg+0x99/0x100 [ 2434.058268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2434.059389] do_syscall_64+0x33/0x40 [ 2434.060210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2434.061517] RIP: 0033:0x7f9d078eeb19 [ 2434.062488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2434.067090] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2434.068773] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2434.070471] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2434.072157] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2434.073835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2434.075428] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2434.095905] FAULT_INJECTION: forcing a failure. [ 2434.095905] name failslab, interval 1, probability 0, space 0, times 0 [ 2434.098428] CPU: 0 PID: 11865 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2434.099996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2434.101744] Call Trace: [ 2434.102317] dump_stack+0x107/0x167 [ 2434.103086] should_fail.cold+0x5/0xa [ 2434.103895] ? skb_clone+0x14f/0x3d0 [ 2434.104681] should_failslab+0x5/0x20 [ 2434.105481] kmem_cache_alloc+0x5b/0x310 [ 2434.106366] skb_clone+0x14f/0x3d0 [ 2434.107118] ip6_finish_output2+0x10bf/0x1cf0 [ 2434.108073] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2434.109127] ip6_output+0x3b8/0x7e0 [ 2434.109911] ip6_local_out+0xb4/0x1a0 [ 2434.110716] ip6_send_skb+0x112/0x460 [ 2434.111527] udp_v6_send_skb+0x7aa/0x15b0 [ 2434.112410] udpv6_sendmsg+0x2116/0x2ad0 [ 2434.113271] ? ip_frag_init+0x350/0x350 [ 2434.114139] ? udp_v6_push_pending_frames+0x360/0x360 [ 2434.115233] ? perf_event_task_disable+0x390/0x390 [ 2434.116281] ? lock_acquire+0x197/0x470 [ 2434.117118] ? find_held_lock+0x2c/0x110 [ 2434.117993] ? lock_is_held_type+0xd2/0x110 [ 2434.118920] ? sock_has_perm+0x1ea/0x280 [ 2434.119798] ? __import_iovec+0x458/0x590 [ 2434.120673] ? udp_v6_push_pending_frames+0x360/0x360 [ 2434.121769] inet6_sendmsg+0x105/0x140 [ 2434.122602] ? inet6_compat_ioctl+0x320/0x320 [ 2434.123546] __sock_sendmsg+0xf2/0x190 [ 2434.124367] ____sys_sendmsg+0x334/0x870 [ 2434.125226] ? sock_write_iter+0x3d0/0x3d0 [ 2434.126122] ? do_recvmmsg+0x6d0/0x6d0 [ 2434.126952] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2434.128057] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2434.129193] ? trace_hardirqs_on+0x5b/0x180 [ 2434.130116] ___sys_sendmsg+0xf3/0x170 [ 2434.130940] ? sendmsg_copy_msghdr+0x160/0x160 [ 2434.131904] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2434.132848] ? _raw_spin_unlock_irq+0x27/0x30 [ 2434.133794] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2434.134744] ? finish_task_switch+0x126/0x5d0 [ 2434.135685] ? finish_task_switch+0xef/0x5d0 [ 2434.136608] ? __switch_to+0x572/0xf70 [ 2434.137423] ? __switch_to_asm+0x3a/0x60 [ 2434.138286] ? __switch_to_asm+0x34/0x60 [ 2434.139146] ? __schedule+0x82c/0x1ea0 [ 2434.139975] ? io_schedule_timeout+0x140/0x140 [ 2434.140957] __sys_sendmmsg+0x195/0x470 [ 2434.141804] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2434.142727] ? lock_downgrade+0x6d0/0x6d0 [ 2434.143622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2434.144643] ? wait_for_completion_io+0x270/0x270 [ 2434.145661] ? rcu_read_lock_any_held+0x75/0xa0 [ 2434.146650] ? vfs_write+0x354/0xb10 [ 2434.147434] ? fput_many+0x2f/0x1a0 [ 2434.148201] ? ksys_write+0x1a9/0x260 [ 2434.149003] ? __ia32_sys_read+0xb0/0xb0 [ 2434.149864] __x64_sys_sendmmsg+0x99/0x100 [ 2434.150764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2434.151847] do_syscall_64+0x33/0x40 [ 2434.152635] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2434.153712] RIP: 0033:0x7f6413bdcb19 [ 2434.154510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2434.158386] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2434.159993] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2434.161493] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2434.163007] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2434.164507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2434.166161] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:35:09 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:35:09 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1000) write$P9_RSTATFS(r2, &(0x7f0000000040)={0xfffffffffffffdd0, 0x9, 0x1, {0x3, 0x9, 0x3, 0x1, 0x1, 0x1ff, 0x1f, 0x0, 0x200}}, 0x43) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:35:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfffffff4, 0x8000) 01:35:09 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) 01:35:09 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x4000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:09 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(r1, &(0x7f0000000140)='./file0\x00', 0x141000, 0x82) syz_open_dev$rtc(&(0x7f0000000080), 0xcdcc, 0x42000) write$P9_RCLUNK(r0, 0x0, 0x0) fcntl$dupfd(r2, 0x406, r2) r3 = openat2(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2482, 0x10, 0x13}, 0x18) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) [ 2434.297192] FAT-fs (loop4): Directory bread(block 10) failed [ 2434.300829] FAT-fs (loop4): Directory bread(block 11) failed [ 2434.309790] FAT-fs (loop4): Directory bread(block 10) failed [ 2434.313594] FAT-fs (loop4): Directory bread(block 11) failed [ 2434.317958] FAT-fs (loop4): Directory bread(block 10) failed [ 2434.321885] FAT-fs (loop4): Directory bread(block 11) failed 01:35:23 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 66) 01:35:23 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3e000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:35:23 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x81, 0x6, 0x40, 0x2, @mcast1, @empty, 0x8, 0x8, 0xc53, 0xf6ff}}) 01:35:23 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) 01:35:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfffffffb, 0x8000) [ 2448.301958] FAULT_INJECTION: forcing a failure. [ 2448.301958] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.304538] CPU: 1 PID: 11910 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2448.306041] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.307927] Call Trace: [ 2448.308571] dump_stack+0x107/0x167 [ 2448.309453] should_fail.cold+0x5/0xa [ 2448.310386] should_failslab+0x5/0x20 [ 2448.311322] __kmalloc_node_track_caller+0x74/0x3b0 [ 2448.312514] ? skb_copy+0x183/0x350 [ 2448.313393] __alloc_skb+0xb1/0x5b0 [ 2448.314270] skb_copy+0x183/0x350 [ 2448.315122] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2448.316546] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2448.317778] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2448.319166] ? lock_acquire+0x160/0x470 [ 2448.320116] ? find_held_lock+0x2c/0x110 [ 2448.321104] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2448.322331] mac80211_hwsim_tx+0x574/0x12a0 [ 2448.323387] ? trace_hardirqs_on+0x5b/0x180 [ 2448.324439] ieee80211_tx_frags+0x59c/0x9f0 [ 2448.325492] ? fq_skb_free_func+0x20/0x20 [ 2448.326516] __ieee80211_tx+0x1ad/0x640 [ 2448.327487] ieee80211_tx+0x329/0x410 [ 2448.328410] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2448.329641] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2448.331075] ? ieee80211_skb_resize+0x116/0x630 [ 2448.332208] ieee80211_xmit+0x220/0x2a0 [ 2448.333177] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2448.334441] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2448.335687] ieee80211_subif_start_xmit+0xef/0xf70 [ 2448.336871] ? lock_chain_count+0x20/0x20 [ 2448.337871] ? skb_crc32c_csum_help+0x80/0x80 [ 2448.338964] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2448.340245] ? lock_acquire+0x197/0x470 [ 2448.341203] ? sch_direct_xmit+0x31a/0x790 [ 2448.342223] ? lock_release+0x680/0x680 [ 2448.343203] dev_hard_start_xmit+0x1cb/0x6f0 [ 2448.344273] sch_direct_xmit+0x25f/0x790 [ 2448.345249] ? lock_acquire+0x197/0x470 [ 2448.346204] ? find_held_lock+0x2c/0x110 [ 2448.347187] ? dev_watchdog+0xbc0/0xbc0 [ 2448.348140] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2448.349241] __qdisc_run+0x4aa/0x1570 [ 2448.350175] __dev_queue_xmit+0xd43/0x2690 [ 2448.351194] ? ip6_finish_output2+0x158f/0x1cf0 [ 2448.352322] ? find_held_lock+0x2c/0x110 [ 2448.353301] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2448.354417] ? lock_downgrade+0x6d0/0x6d0 [ 2448.355413] ? do_softirq+0x53/0xc0 [ 2448.356281] ? trace_hardirqs_on+0x5b/0x180 [ 2448.357330] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2448.358737] ip6_finish_output2+0x158f/0x1cf0 [ 2448.360034] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2448.361451] ip6_output+0x3b8/0x7e0 [ 2448.362563] ip6_local_out+0xb4/0x1a0 [ 2448.363510] ip6_send_skb+0x112/0x460 [ 2448.364441] udp_v6_send_skb+0x7aa/0x15b0 [ 2448.365470] udpv6_sendmsg+0x2116/0x2ad0 [ 2448.366474] ? ip_frag_init+0x350/0x350 [ 2448.367461] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.368733] ? perf_event_task_disable+0x390/0x390 [ 2448.369941] ? lock_acquire+0x197/0x470 [ 2448.370916] ? find_held_lock+0x2c/0x110 [ 2448.371922] ? lock_is_held_type+0xd2/0x110 [ 2448.372971] ? sock_has_perm+0x1ea/0x280 [ 2448.373991] ? __import_iovec+0x458/0x590 [ 2448.375009] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.376269] inet6_sendmsg+0x105/0x140 [ 2448.377217] ? inet6_compat_ioctl+0x320/0x320 [ 2448.378303] __sock_sendmsg+0xf2/0x190 [ 2448.379264] ____sys_sendmsg+0x334/0x870 [ 2448.380254] ? sock_write_iter+0x3d0/0x3d0 [ 2448.381283] ? do_recvmmsg+0x6d0/0x6d0 [ 2448.382231] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.383483] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.384779] ? trace_hardirqs_on+0x5b/0x180 [ 2448.385815] ___sys_sendmsg+0xf3/0x170 [ 2448.386761] ? sendmsg_copy_msghdr+0x160/0x160 [ 2448.387858] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2448.388933] ? _raw_spin_unlock_irq+0x27/0x30 [ 2448.389996] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2448.391076] ? finish_task_switch+0x126/0x5d0 [ 2448.392137] ? finish_task_switch+0xef/0x5d0 [ 2448.393182] ? __switch_to+0x572/0xf70 [ 2448.394131] ? __switch_to_asm+0x3a/0x60 [ 2448.395105] ? __switch_to_asm+0x34/0x60 [ 2448.396076] ? __schedule+0x82c/0x1ea0 [ 2448.397018] ? io_schedule_timeout+0x140/0x140 [ 2448.398135] __sys_sendmmsg+0x195/0x470 [ 2448.399078] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2448.400075] ? lock_downgrade+0x6d0/0x6d0 [ 2448.401065] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.402212] ? wait_for_completion_io+0x270/0x270 [ 2448.403341] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.404413] ? vfs_write+0x354/0xb10 [ 2448.405274] ? fput_many+0x2f/0x1a0 [ 2448.406118] ? ksys_write+0x1a9/0x260 [ 2448.407013] ? __ia32_sys_read+0xb0/0xb0 [ 2448.407961] __x64_sys_sendmmsg+0x99/0x100 [ 2448.408941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.410134] do_syscall_64+0x33/0x40 [ 2448.411010] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.412202] RIP: 0033:0x7f9d078eeb19 [ 2448.413064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.417347] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2448.419137] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2448.420795] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2448.422470] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.424129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.425792] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2448.460209] FAT-fs (loop4): Directory bread(block 10) failed [ 2448.469829] FAT-fs (loop4): Directory bread(block 11) failed [ 2448.485640] FAULT_INJECTION: forcing a failure. [ 2448.485640] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.488112] CPU: 0 PID: 11918 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2448.489518] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.491230] Call Trace: [ 2448.491784] dump_stack+0x107/0x167 [ 2448.492534] should_fail.cold+0x5/0xa [ 2448.493323] ? create_object.isra.0+0x3a/0xa20 [ 2448.494275] should_failslab+0x5/0x20 [ 2448.495084] kmem_cache_alloc+0x5b/0x310 [ 2448.495925] create_object.isra.0+0x3a/0xa20 [ 2448.496816] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2448.497872] kmem_cache_alloc+0x159/0x310 [ 2448.498750] skb_clone+0x14f/0x3d0 [ 2448.499484] ip6_finish_output2+0x10bf/0x1cf0 [ 2448.500407] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2448.501437] ip6_output+0x3b8/0x7e0 [ 2448.502200] ip6_local_out+0xb4/0x1a0 [ 2448.502991] ip6_send_skb+0x112/0x460 [ 2448.503782] udp_v6_send_skb+0x7aa/0x15b0 [ 2448.504662] udpv6_sendmsg+0x2116/0x2ad0 [ 2448.505512] ? ip_frag_init+0x350/0x350 [ 2448.506338] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.507671] ? perf_event_task_disable+0x390/0x390 [ 2448.508708] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2448.509944] ? lock_acquire+0x197/0x470 [ 2448.510773] ? find_held_lock+0x2c/0x110 [ 2448.511625] ? sock_has_perm+0x1ea/0x280 [ 2448.512479] ? __import_iovec+0x458/0x590 [ 2448.513325] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.514644] inet6_sendmsg+0x105/0x140 [ 2448.515718] ? inet6_compat_ioctl+0x320/0x320 [ 2448.516643] __sock_sendmsg+0xf2/0x190 [ 2448.517448] ____sys_sendmsg+0x334/0x870 [ 2448.518289] ? sock_write_iter+0x3d0/0x3d0 [ 2448.519162] ? do_recvmmsg+0x6d0/0x6d0 [ 2448.519968] ? __lock_acquire+0x1657/0x5b00 [ 2448.520874] ___sys_sendmsg+0xf3/0x170 [ 2448.521676] ? sendmsg_copy_msghdr+0x160/0x160 [ 2448.522625] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2448.523548] ? _raw_spin_unlock_irq+0x27/0x30 [ 2448.524704] ? lock_acquire+0x197/0x470 [ 2448.525525] ? find_held_lock+0x2c/0x110 [ 2448.526578] ? __might_fault+0xd3/0x180 [ 2448.527397] ? lock_downgrade+0x6d0/0x6d0 [ 2448.528456] ? io_schedule_timeout+0x140/0x140 [ 2448.529416] __sys_sendmmsg+0x195/0x470 [ 2448.530448] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2448.531345] ? lock_downgrade+0x6d0/0x6d0 [ 2448.532423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.533421] ? wait_for_completion_io+0x270/0x270 [ 2448.534662] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.535624] ? vfs_write+0x354/0xb10 [ 2448.536573] ? fput_many+0x2f/0x1a0 [ 2448.537334] ? ksys_write+0x1a9/0x260 [ 2448.538315] ? __ia32_sys_read+0xb0/0xb0 [ 2448.539165] __x64_sys_sendmmsg+0x99/0x100 [ 2448.540246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.541294] do_syscall_64+0x33/0x40 [ 2448.542054] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.543111] RIP: 0033:0x7f6413bdcb19 [ 2448.543869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.547631] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2448.549185] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2448.550650] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2448.552099] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.553556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.555020] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:35:23 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x5000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:23 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x82201, 0x0) dup2(r0, r0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x43) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf253100000008005200", @ANYRES32=r2, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB="080001006f000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400600, 0xc) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5231a635542d9d0ea3976de29f4036f59f0b2e7e1f42225fdda1a2554c8ac327102ee4ea8bc73ab1bdc310540f00b7b7614d6a5604fdb32402adb2bb816ff6f4c0ee93d0cca7503a90a6d855d94dbd24605a64a6e254476f0b95540abb6a2e75969185162e274190a89c86861d4cc1fc0e72ae96bdcd6e560a6fa5e0be9cbacd0af2000818c7b4ff586e608b1b70d601f51e9581717cd87ff858452a4fc8fe77f9a68e46c14245cd", 0xa8}], 0x1) 01:35:23 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 50) 01:35:23 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) socket$inet6_udplite(0xa, 0x2, 0x88) 01:35:23 executing program 7: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ffffffff000018002e2f66696c653000"]) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'bond_slave_0\x00', {'netdevsim0\x00'}, 0xacc9}) pipe2$9p(&(0x7f00000000c0), 0x800) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) copy_file_range(r1, &(0x7f0000000100)=0xfffffffffffff40e, r2, &(0x7f0000000140)=0x1, 0x1f, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd/4\x00') 01:35:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfffffffe, 0x8000) 01:35:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r1, 0x0, 0x0) 01:35:23 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 67) 01:35:23 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) eventfd2(0x5, 0x80801) [ 2448.724451] FAT-fs (loop4): Directory bread(block 10) failed 01:35:23 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x4000) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') [ 2448.741360] FAT-fs (loop4): Directory bread(block 11) failed [ 2448.753658] FAT-fs (loop4): Directory bread(block 10) failed [ 2448.755354] FAT-fs (loop4): Directory bread(block 11) failed [ 2448.763945] FAT-fs (loop4): Directory bread(block 10) failed [ 2448.765499] FAT-fs (loop4): Directory bread(block 11) failed [ 2448.821035] FAULT_INJECTION: forcing a failure. [ 2448.821035] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.824440] CPU: 0 PID: 11940 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2448.826116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2448.828141] Call Trace: [ 2448.828804] dump_stack+0x107/0x167 [ 2448.829690] should_fail.cold+0x5/0xa [ 2448.830629] ? create_object.isra.0+0x3a/0xa20 [ 2448.831734] should_failslab+0x5/0x20 [ 2448.832649] kmem_cache_alloc+0x5b/0x310 [ 2448.833653] create_object.isra.0+0x3a/0xa20 [ 2448.834722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2448.836219] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2448.837481] ? skb_copy+0x183/0x350 [ 2448.838580] __alloc_skb+0xb1/0x5b0 [ 2448.839468] skb_copy+0x183/0x350 [ 2448.840480] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2448.842004] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2448.843530] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2448.844902] ? lock_acquire+0x160/0x470 [ 2448.845942] ? find_held_lock+0x2c/0x110 [ 2448.846954] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2448.848196] mac80211_hwsim_tx+0x574/0x12a0 [ 2448.849230] ? trace_hardirqs_on+0x5b/0x180 [ 2448.850506] ieee80211_tx_frags+0x59c/0x9f0 [ 2448.851558] ? fq_skb_free_func+0x20/0x20 [ 2448.852774] __ieee80211_tx+0x1ad/0x640 [ 2448.853782] ieee80211_tx+0x329/0x410 [ 2448.854709] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2448.855943] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2448.857372] ? ieee80211_skb_resize+0x116/0x630 [ 2448.858767] ieee80211_xmit+0x220/0x2a0 [ 2448.859825] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2448.861336] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2448.862677] ieee80211_subif_start_xmit+0xef/0xf70 [ 2448.864092] ? lock_chain_count+0x20/0x20 [ 2448.865102] ? skb_crc32c_csum_help+0x80/0x80 [ 2448.866174] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2448.867467] ? lock_acquire+0x197/0x470 [ 2448.868407] ? sch_direct_xmit+0x31a/0x790 [ 2448.869425] ? lock_release+0x680/0x680 [ 2448.870586] dev_hard_start_xmit+0x1cb/0x6f0 [ 2448.871691] sch_direct_xmit+0x25f/0x790 [ 2448.872853] ? lock_acquire+0x197/0x470 [ 2448.873807] ? find_held_lock+0x2c/0x110 [ 2448.874781] ? dev_watchdog+0xbc0/0xbc0 [ 2448.875735] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2448.876819] __qdisc_run+0x4aa/0x1570 [ 2448.877752] __dev_queue_xmit+0xd43/0x2690 [ 2448.878883] ? ip6_finish_output2+0x158f/0x1cf0 [ 2448.879978] ? find_held_lock+0x2c/0x110 [ 2448.880969] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2448.882090] ? lock_downgrade+0x6d0/0x6d0 [ 2448.883110] ? do_softirq+0x53/0xc0 [ 2448.883997] ? trace_hardirqs_on+0x5b/0x180 [ 2448.885062] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2448.886346] ip6_finish_output2+0x158f/0x1cf0 [ 2448.887469] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2448.888690] ip6_output+0x3b8/0x7e0 [ 2448.889586] ip6_local_out+0xb4/0x1a0 [ 2448.890518] ip6_send_skb+0x112/0x460 [ 2448.891446] udp_v6_send_skb+0x7aa/0x15b0 [ 2448.892467] udpv6_sendmsg+0x2116/0x2ad0 [ 2448.893454] ? ip_frag_init+0x350/0x350 [ 2448.894441] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.895691] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.896967] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.898271] ? trace_hardirqs_on+0x5b/0x180 [ 2448.899345] ? lock_acquire+0x1b9/0x470 [ 2448.900307] ? find_held_lock+0x2c/0x110 [ 2448.901311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.902587] ? sock_has_perm+0x1ea/0x280 [ 2448.903603] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.904870] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.906177] ? trace_hardirqs_on+0x5b/0x180 [ 2448.907235] ? udp_v6_push_pending_frames+0x360/0x360 [ 2448.908490] inet6_sendmsg+0x105/0x140 [ 2448.909434] ? inet6_compat_ioctl+0x320/0x320 [ 2448.910525] __sock_sendmsg+0xf2/0x190 [ 2448.911470] ____sys_sendmsg+0x334/0x870 [ 2448.912457] ? sock_write_iter+0x3d0/0x3d0 [ 2448.913470] ? do_recvmmsg+0x6d0/0x6d0 [ 2448.914416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.915684] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.917025] ? trace_hardirqs_on+0x5b/0x180 [ 2448.918259] ___sys_sendmsg+0xf3/0x170 [ 2448.919378] ? sendmsg_copy_msghdr+0x160/0x160 [ 2448.920636] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2448.921861] ? _raw_spin_unlock_irq+0x27/0x30 [ 2448.923114] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2448.924332] ? finish_task_switch+0x126/0x5d0 [ 2448.925542] ? finish_task_switch+0xef/0x5d0 [ 2448.926745] ? __switch_to+0x572/0xf70 [ 2448.927798] ? __switch_to_asm+0x3a/0x60 [ 2448.928892] ? __switch_to_asm+0x34/0x60 [ 2448.929998] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2448.931431] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.932878] ? trace_hardirqs_on+0x5b/0x180 [ 2448.933959] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2448.935560] ? __sys_sendmmsg+0x26a/0x470 [ 2448.936774] __sys_sendmmsg+0x195/0x470 [ 2448.937933] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2448.939189] ? lock_downgrade+0x6d0/0x6d0 [ 2448.940424] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2448.941833] ? wait_for_completion_io+0x270/0x270 [ 2448.943261] ? rcu_read_lock_any_held+0x75/0xa0 [ 2448.944595] ? vfs_write+0x354/0xb10 [ 2448.945675] ? fput_many+0x2f/0x1a0 [ 2448.946699] ? ksys_write+0x1a9/0x260 [ 2448.947608] ? __ia32_sys_read+0xb0/0xb0 [ 2448.948585] __x64_sys_sendmmsg+0x99/0x100 [ 2448.949591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2448.950831] do_syscall_64+0x33/0x40 [ 2448.951715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2448.952930] RIP: 0033:0x7f9d078eeb19 [ 2448.953817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2448.958184] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2448.959986] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2448.961665] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2448.963352] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2448.965027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2448.966725] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:35:37 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 68) 01:35:37 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x6000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1\x00'}) r0 = inotify_init() ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000180)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0x2000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80, 0x80800) dup2(r2, r3) 01:35:37 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3f000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:35:37 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) memfd_create(&(0x7f0000001280)='/dev/null\x00', 0x2) 01:35:37 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 51) 01:35:37 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x2) 01:35:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x8000000000000, 0x8000) [ 2462.325759] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.326873] FAT-fs (loop4): Directory bread(block 11) failed [ 2462.329355] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.333734] FAT-fs (loop4): Directory bread(block 11) failed [ 2462.334868] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.340051] FAULT_INJECTION: forcing a failure. [ 2462.340051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.341898] CPU: 0 PID: 11970 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2462.342920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.344122] Call Trace: [ 2462.344509] dump_stack+0x107/0x167 [ 2462.345037] should_fail.cold+0x5/0xa [ 2462.345593] _copy_from_user+0x2e/0x1b0 [ 2462.346174] __copy_msghdr_from_user+0x91/0x4b0 [ 2462.346849] ? __ia32_sys_shutdown+0x80/0x80 [ 2462.347503] ? udp_v6_push_pending_frames+0x360/0x360 [ 2462.348263] ? inet6_sendmsg+0xbd/0x140 [ 2462.348899] ? inet6_compat_ioctl+0x320/0x320 [ 2462.349570] ? __sock_sendmsg+0x55/0x190 [ 2462.350306] sendmsg_copy_msghdr+0xa1/0x160 [ 2462.350977] ? do_recvmmsg+0x6d0/0x6d0 [ 2462.351565] ? __lock_acquire+0x1657/0x5b00 [ 2462.352230] ___sys_sendmsg+0xc6/0x170 [ 2462.352843] ? sendmsg_copy_msghdr+0x160/0x160 [ 2462.353558] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2462.354273] ? _raw_spin_unlock_irq+0x27/0x30 [ 2462.354960] ? lock_acquire+0x197/0x470 [ 2462.355509] ? find_held_lock+0x2c/0x110 [ 2462.355845] FAULT_INJECTION: forcing a failure. [ 2462.355845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.356082] ? __might_fault+0xd3/0x180 [ 2462.359677] ? lock_downgrade+0x6d0/0x6d0 [ 2462.360257] ? io_schedule_timeout+0x140/0x140 [ 2462.360985] __sys_sendmmsg+0x195/0x470 [ 2462.361574] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2462.362190] ? lock_downgrade+0x6d0/0x6d0 [ 2462.362799] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.363510] ? wait_for_completion_io+0x270/0x270 [ 2462.364210] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.364876] ? vfs_write+0x354/0xb10 [ 2462.365411] ? fput_many+0x2f/0x1a0 [ 2462.365930] ? ksys_write+0x1a9/0x260 [ 2462.366482] ? __ia32_sys_read+0xb0/0xb0 [ 2462.367081] __x64_sys_sendmmsg+0x99/0x100 [ 2462.367669] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.368382] do_syscall_64+0x33/0x40 [ 2462.368897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.369633] RIP: 0033:0x7f6413bdcb19 [ 2462.370172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.372797] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2462.373850] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2462.374835] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2462.375834] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.376825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.377816] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2462.379073] CPU: 1 PID: 11971 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2462.381011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.383336] Call Trace: [ 2462.384090] dump_stack+0x107/0x167 [ 2462.385109] should_fail.cold+0x5/0xa [ 2462.386189] _copy_from_user+0x2e/0x1b0 [ 2462.387333] __copy_msghdr_from_user+0x91/0x4b0 [ 2462.388626] ? __ia32_sys_shutdown+0x80/0x80 [ 2462.388709] FAT-fs (loop4): Directory bread(block 11) failed [ 2462.389841] ? udp_v6_push_pending_frames+0x360/0x360 [ 2462.389879] ? inet6_sendmsg+0xbd/0x140 [ 2462.393173] ? inet6_compat_ioctl+0x320/0x320 [ 2462.394416] ? __sock_sendmsg+0x55/0x190 [ 2462.395564] sendmsg_copy_msghdr+0xa1/0x160 [ 2462.396761] ? do_recvmmsg+0x6d0/0x6d0 [ 2462.397844] ? __lock_acquire+0x1657/0x5b00 [ 2462.399029] ___sys_sendmsg+0xc6/0x170 01:35:37 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) [ 2462.399918] ? sendmsg_copy_msghdr+0x160/0x160 [ 2462.401152] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2462.402372] ? lock_acquire+0x197/0x470 [ 2462.403276] ? find_held_lock+0x2c/0x110 [ 2462.404195] ? __might_fault+0xd3/0x180 [ 2462.405083] ? lock_downgrade+0x6d0/0x6d0 [ 2462.406009] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2462.407251] __sys_sendmmsg+0x195/0x470 [ 2462.408210] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2462.409369] ? lock_downgrade+0x6d0/0x6d0 [ 2462.410573] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.411923] ? wait_for_completion_io+0x270/0x270 01:35:37 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') [ 2462.413278] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.414425] ? vfs_write+0x354/0xb10 [ 2462.415114] ? fput_many+0x2f/0x1a0 [ 2462.415779] ? ksys_write+0x1a9/0x260 [ 2462.416460] ? __ia32_sys_read+0xb0/0xb0 [ 2462.417205] __x64_sys_sendmmsg+0x99/0x100 [ 2462.417968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.418838] do_syscall_64+0x33/0x40 [ 2462.419488] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.420394] RIP: 0033:0x7f9d078eeb19 [ 2462.421057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.424308] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2462.425656] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2462.426902] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2462.428182] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.429439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.430716] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:35:37 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x7000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:37 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x1, 0x1, 0xa5d3, 0x80000000, r1}) 01:35:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x10000000000000, 0x8000) 01:35:37 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 69) 01:35:37 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) [ 2462.606417] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.607318] FAT-fs (loop4): Directory bread(block 11) failed 01:35:37 executing program 7: pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RCLUNK(r0, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r1}) write$P9_RAUTH(r1, &(0x7f0000001480)={0x14, 0x67, 0x2, {0x0, 0x3, 0x2}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r2 = fcntl$dupfd(r0, 0x406, r0) socketpair(0x3d, 0x2, 0xfffffbff, &(0x7f0000000180)={0xffffffffffffffff}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5}) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f00000016c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r7 = getuid() sendmsg$nl_generic(r3, &(0x7f0000001680)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001640)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="e1003180b04f9ef17107ce9b96c52c9e0ce8406966a414f697e3583b9e35d7d70e3c0fba0e1ab70fc0c03f224158e015eaa2ac0dd295c9ba36cfed74fdda7385707755926e423ba3ca10b01d3fa10e0ff778084581444bf8210c002b006400000000000000dce3f7e5563aa456ad0d38934e5f705c93825ce0c276b1cb862ee536c9802d668200e84055c2e9e1c9397c64dcc4db47d2061ffe60a9334a4077536523a4403a2ee4eb057d89db065d8d0a547d6074e94a369f6bf01555882fa4735265b09dd01c39c25ad9d1ae78c3d2d82ae317787af7c2c7d5204188bda66e828100000004008900"], 0x1ac}}, 0x20000000) preadv(r2, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/61, 0x3d}], 0x7, 0x80000000, 0x7ac9) [ 2462.616554] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.617410] FAT-fs (loop4): Directory bread(block 11) failed [ 2462.621341] FAT-fs (loop4): Directory bread(block 10) failed [ 2462.622186] FAT-fs (loop4): Directory bread(block 11) failed [ 2462.626547] FAULT_INJECTION: forcing a failure. [ 2462.626547] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.628438] CPU: 0 PID: 11990 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2462.629413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.630593] Call Trace: [ 2462.630990] dump_stack+0x107/0x167 [ 2462.631508] should_fail.cold+0x5/0xa [ 2462.632055] ? __alloc_skb+0x6d/0x5b0 [ 2462.632598] should_failslab+0x5/0x20 [ 2462.633138] kmem_cache_alloc_node+0x55/0x330 [ 2462.633778] __alloc_skb+0x6d/0x5b0 [ 2462.634302] alloc_skb_with_frags+0x92/0x570 [ 2462.634933] ? sch_direct_xmit+0x1fb/0x790 [ 2462.635522] ? lock_acquire+0x197/0x470 [ 2462.636088] ? find_held_lock+0x2c/0x110 [ 2462.636668] sock_alloc_send_pskb+0x7af/0x930 [ 2462.637315] ? sk_alloc+0x350/0x350 [ 2462.637831] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2462.638589] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2462.639336] ? mark_lock+0xf5/0x2df0 [ 2462.639865] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2462.640570] ? ip6_mtu+0x1bb/0x3d0 [ 2462.641070] ? lock_downgrade+0x6d0/0x6d0 [ 2462.641647] ? ip_frag_init+0x350/0x350 [ 2462.642217] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2462.642889] ? ip6_mtu+0x1e9/0x3d0 [ 2462.643409] ? ip6_setup_cork+0xfb7/0x1740 [ 2462.644003] ip6_make_skb+0x2de/0x4e0 [ 2462.644529] ? ip_frag_init+0x350/0x350 [ 2462.645102] ? ip_frag_init+0x350/0x350 [ 2462.645656] ? ip6_push_pending_frames+0xf0/0xf0 [ 2462.646323] ? ip6_dst_check+0x389/0x8d0 [ 2462.646886] ? sk_dst_check+0x235/0x4c0 [ 2462.647462] udpv6_sendmsg+0x20d3/0x2ad0 [ 2462.648044] ? ip_frag_init+0x350/0x350 [ 2462.648606] ? udp_v6_push_pending_frames+0x360/0x360 [ 2462.649341] ? perf_event_task_disable+0x390/0x390 [ 2462.650031] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2462.650699] ? lock_acquire+0x197/0x470 [ 2462.651265] ? find_held_lock+0x2c/0x110 [ 2462.651858] ? sock_has_perm+0x1ea/0x280 [ 2462.652441] ? __import_iovec+0x458/0x590 [ 2462.653020] ? udp_v6_push_pending_frames+0x360/0x360 [ 2462.653749] inet6_sendmsg+0x105/0x140 [ 2462.654291] ? inet6_compat_ioctl+0x320/0x320 [ 2462.654942] __sock_sendmsg+0xf2/0x190 [ 2462.655481] ____sys_sendmsg+0x334/0x870 [ 2462.656062] ? sock_write_iter+0x3d0/0x3d0 [ 2462.656655] ? do_recvmmsg+0x6d0/0x6d0 [ 2462.657201] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.657939] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2462.658688] ? trace_hardirqs_on+0x5b/0x180 [ 2462.659305] ___sys_sendmsg+0xf3/0x170 [ 2462.659843] ? sendmsg_copy_msghdr+0x160/0x160 [ 2462.660480] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2462.661103] ? _raw_spin_unlock_irq+0x27/0x30 [ 2462.661737] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2462.662358] ? finish_task_switch+0x126/0x5d0 [ 2462.662991] ? finish_task_switch+0xef/0x5d0 [ 2462.663599] ? __switch_to+0x572/0xf70 [ 2462.664141] ? __switch_to_asm+0x3a/0x60 [ 2462.664700] ? __switch_to_asm+0x34/0x60 [ 2462.665269] ? __schedule+0x82c/0x1ea0 [ 2462.665810] ? io_schedule_timeout+0x140/0x140 [ 2462.666453] __sys_sendmmsg+0x195/0x470 [ 2462.667038] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2462.667631] ? lock_downgrade+0x6d0/0x6d0 [ 2462.668223] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2462.668912] ? wait_for_completion_io+0x270/0x270 [ 2462.669499] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.670139] ? vfs_write+0x354/0xb10 [ 2462.670635] ? fput_many+0x2f/0x1a0 [ 2462.671156] ? ksys_write+0x1a9/0x260 [ 2462.671662] ? __ia32_sys_read+0xb0/0xb0 [ 2462.672237] __x64_sys_sendmmsg+0x99/0x100 [ 2462.672849] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.673613] do_syscall_64+0x33/0x40 [ 2462.674147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.674866] RIP: 0033:0x7f9d078eeb19 [ 2462.675431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.678111] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2462.679221] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2462.680227] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2462.681120] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.682015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.682911] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:35:37 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0xfffffffffffffefd, 0xff}) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/5, 0x5}], 0x4, 0x5, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r0, 0x0, 0x0, 0x2, 0xb, 0x0, {0x0, 0x0, r0}}, 0x400) write$P9_RCLUNK(r0, 0x0, 0x0) 01:35:37 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x60000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:35:37 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x8000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:51 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 52) 01:35:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x80000000000000, 0x8000) 01:35:51 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xc000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:35:51 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 70) 01:35:51 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/igmp6\x00') 01:35:51 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x7ffffff7, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:35:51 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) 01:35:51 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') pread64(r1, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000480), 0x0) io_uring_setup(0x6a32, &(0x7f0000000300)) r3 = epoll_create1(0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x90000019}) pread64(0xffffffffffffffff, &(0x7f0000001300)=""/200, 0xc8, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) [ 2476.779992] FAULT_INJECTION: forcing a failure. [ 2476.779992] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.781868] CPU: 1 PID: 12023 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2476.782949] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.784163] Call Trace: [ 2476.784551] dump_stack+0x107/0x167 [ 2476.785081] should_fail.cold+0x5/0xa [ 2476.785638] ? __alloc_skb+0x6d/0x5b0 [ 2476.786196] should_failslab+0x5/0x20 [ 2476.786750] kmem_cache_alloc_node+0x55/0x330 [ 2476.787407] __alloc_skb+0x6d/0x5b0 [ 2476.787932] alloc_skb_with_frags+0x92/0x570 [ 2476.788567] ? quarantine_put+0x8b/0x1a0 [ 2476.789160] ? kmem_cache_free+0xa7/0x2d0 [ 2476.789770] sock_alloc_send_pskb+0x7af/0x930 [ 2476.790427] ? sk_alloc+0x350/0x350 [ 2476.790961] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2476.791731] ? __local_bh_enable_ip+0x9d/0x100 [ 2476.792396] ? trace_hardirqs_on+0x5b/0x180 [ 2476.793006] ? __dev_queue_xmit+0xdf8/0x2690 [ 2476.793653] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2476.794388] ? ip6_mtu+0x1bb/0x3d0 [ 2476.794904] ? lock_downgrade+0x6d0/0x6d0 [ 2476.795512] ? ip_frag_init+0x350/0x350 [ 2476.796096] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2476.796795] ? ip6_mtu+0x1e9/0x3d0 [ 2476.797314] ? ip6_setup_cork+0xfb7/0x1740 [ 2476.797931] ip6_make_skb+0x2de/0x4e0 [ 2476.798485] ? ip_frag_init+0x350/0x350 [ 2476.799066] ? ip_frag_init+0x350/0x350 [ 2476.799654] ? ip6_push_pending_frames+0xf0/0xf0 [ 2476.800346] ? ip6_dst_check+0x389/0x8d0 [ 2476.800933] ? sk_dst_check+0x235/0x4c0 [ 2476.801517] udpv6_sendmsg+0x20d3/0x2ad0 [ 2476.802112] ? ip_frag_init+0x350/0x350 [ 2476.802696] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.803448] ? lock_acquire+0x197/0x470 [ 2476.804027] ? find_held_lock+0x2c/0x110 [ 2476.804623] ? sock_has_perm+0x1ea/0x280 [ 2476.805231] ? __import_iovec+0x458/0x590 [ 2476.805836] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.806573] inet6_sendmsg+0x105/0x140 [ 2476.807138] ? inet6_compat_ioctl+0x320/0x320 [ 2476.807796] __sock_sendmsg+0xf2/0x190 [ 2476.808360] ____sys_sendmsg+0x334/0x870 [ 2476.808950] ? sock_write_iter+0x3d0/0x3d0 [ 2476.809563] ? do_recvmmsg+0x6d0/0x6d0 [ 2476.810135] ? __lock_acquire+0x1657/0x5b00 [ 2476.810765] ___sys_sendmsg+0xf3/0x170 [ 2476.811310] ? sendmsg_copy_msghdr+0x160/0x160 [ 2476.812000] ? __fget_files+0x2cf/0x520 [ 2476.812585] ? lock_acquire+0x197/0x470 [ 2476.813163] ? find_held_lock+0x2c/0x110 [ 2476.813757] ? __might_fault+0xd3/0x180 [ 2476.814334] ? lock_downgrade+0x6d0/0x6d0 [ 2476.814947] __sys_sendmmsg+0x195/0x470 [ 2476.815539] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2476.816164] ? lock_downgrade+0x6d0/0x6d0 [ 2476.816778] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2476.817481] ? wait_for_completion_io+0x270/0x270 [ 2476.818179] ? rcu_read_lock_any_held+0x75/0xa0 [ 2476.818853] ? vfs_write+0x354/0xb10 [ 2476.819368] ? fput_many+0x2f/0x1a0 [ 2476.819911] ? ksys_write+0x1a9/0x260 [ 2476.820444] ? __ia32_sys_read+0xb0/0xb0 [ 2476.821019] __x64_sys_sendmmsg+0x99/0x100 [ 2476.821632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.822350] do_syscall_64+0x33/0x40 [ 2476.822866] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.823601] RIP: 0033:0x7f6413bdcb19 [ 2476.824137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.826712] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2476.827823] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2476.828860] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2476.829900] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2476.830930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2476.831972] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:35:52 executing program 7: ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) [ 2476.876306] FAT-fs (loop4): Directory bread(block 10) failed [ 2476.887310] FAT-fs (loop4): Directory bread(block 11) failed [ 2476.906121] FAULT_INJECTION: forcing a failure. [ 2476.906121] name failslab, interval 1, probability 0, space 0, times 0 [ 2476.909085] CPU: 0 PID: 12022 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2476.910678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2476.912588] Call Trace: [ 2476.913180] dump_stack+0x107/0x167 [ 2476.914002] should_fail.cold+0x5/0xa [ 2476.914879] ? create_object.isra.0+0x3a/0xa20 [ 2476.915940] should_failslab+0x5/0x20 [ 2476.916815] kmem_cache_alloc+0x5b/0x310 [ 2476.917738] create_object.isra.0+0x3a/0xa20 [ 2476.918746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2476.919897] kmem_cache_alloc_node+0x169/0x330 [ 2476.920940] __alloc_skb+0x6d/0x5b0 [ 2476.921756] alloc_skb_with_frags+0x92/0x570 [ 2476.922741] ? sch_direct_xmit+0x1fb/0x790 [ 2476.923698] ? lock_acquire+0x197/0x470 [ 2476.924612] ? find_held_lock+0x2c/0x110 [ 2476.925528] sock_alloc_send_pskb+0x7af/0x930 [ 2476.926561] ? sk_alloc+0x350/0x350 [ 2476.927398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2476.928606] ? __local_bh_enable_ip+0x9d/0x100 [ 2476.929646] ? trace_hardirqs_on+0x5b/0x180 [ 2476.930639] ? __dev_queue_xmit+0xdf8/0x2690 [ 2476.931664] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2476.932812] ? ip6_mtu+0x1bb/0x3d0 [ 2476.933625] ? lock_downgrade+0x6d0/0x6d0 [ 2476.934572] ? ip_frag_init+0x350/0x350 [ 2476.935479] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2476.936588] ? ip6_mtu+0x1e9/0x3d0 [ 2476.937403] ? ip6_setup_cork+0xfb7/0x1740 [ 2476.938375] ip6_make_skb+0x2de/0x4e0 [ 2476.939247] ? ip_frag_init+0x350/0x350 [ 2476.940175] ? ip_frag_init+0x350/0x350 [ 2476.941094] ? ip6_push_pending_frames+0xf0/0xf0 [ 2476.942193] ? ip6_dst_check+0x389/0x8d0 [ 2476.943130] ? sk_dst_check+0x235/0x4c0 [ 2476.944064] udpv6_sendmsg+0x20d3/0x2ad0 [ 2476.944994] ? ip_frag_init+0x350/0x350 [ 2476.945922] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.947120] ? perf_event_task_disable+0x390/0x390 [ 2476.948260] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2476.949374] ? lock_acquire+0x197/0x470 [ 2476.950287] ? find_held_lock+0x2c/0x110 [ 2476.951233] ? sock_has_perm+0x1ea/0x280 [ 2476.952196] ? __import_iovec+0x458/0x590 [ 2476.953148] ? udp_v6_push_pending_frames+0x360/0x360 [ 2476.954330] inet6_sendmsg+0x105/0x140 [ 2476.955224] ? inet6_compat_ioctl+0x320/0x320 [ 2476.956265] __sock_sendmsg+0xf2/0x190 [ 2476.957169] ____sys_sendmsg+0x334/0x870 [ 2476.958111] ? sock_write_iter+0x3d0/0x3d0 [ 2476.959091] ? do_recvmmsg+0x6d0/0x6d0 [ 2476.959984] ? __lock_acquire+0x1657/0x5b00 [ 2476.960991] ___sys_sendmsg+0xf3/0x170 [ 2476.961889] ? sendmsg_copy_msghdr+0x160/0x160 [ 2476.962949] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2476.963989] ? _raw_spin_unlock_irq+0x27/0x30 [ 2476.965036] ? lock_acquire+0x197/0x470 [ 2476.965946] ? find_held_lock+0x2c/0x110 [ 2476.966870] ? __might_fault+0xd3/0x180 [ 2476.967798] ? lock_downgrade+0x6d0/0x6d0 [ 2476.968765] ? io_schedule_timeout+0x140/0x140 [ 2476.969833] __sys_sendmmsg+0x195/0x470 [ 2476.970759] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2476.971762] ? lock_downgrade+0x6d0/0x6d0 [ 2476.972736] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2476.973847] ? wait_for_completion_io+0x270/0x270 [ 2476.974953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2476.976036] ? vfs_write+0x354/0xb10 [ 2476.976890] ? fput_many+0x2f/0x1a0 [ 2476.977726] ? ksys_write+0x1a9/0x260 [ 2476.978597] ? __ia32_sys_read+0xb0/0xb0 [ 2476.979548] __x64_sys_sendmmsg+0x99/0x100 [ 2476.980526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2476.981715] do_syscall_64+0x33/0x40 [ 2476.982561] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2476.983757] RIP: 0033:0x7f9d078eeb19 [ 2476.984619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2476.988886] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2476.990649] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2476.992264] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2476.993893] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 01:35:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x100000000000000, 0x8000) [ 2476.995546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2476.997361] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:35:52 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 53) 01:35:52 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) syz_open_dev$rtc(&(0x7f0000000200), 0x2, 0xc2482) 01:35:52 executing program 7: pipe2$9p(&(0x7f00000002c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x20) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') 01:35:52 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xdc050000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2477.113120] FAULT_INJECTION: forcing a failure. [ 2477.113120] name failslab, interval 1, probability 0, space 0, times 0 [ 2477.114582] CPU: 1 PID: 12051 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2477.115402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2477.116391] Call Trace: [ 2477.116703] dump_stack+0x107/0x167 [ 2477.117135] should_fail.cold+0x5/0xa [ 2477.117581] ? __alloc_skb+0x6d/0x5b0 [ 2477.118033] should_failslab+0x5/0x20 [ 2477.118486] kmem_cache_alloc_node+0x55/0x330 [ 2477.119011] __alloc_skb+0x6d/0x5b0 [ 2477.119452] alloc_skb_with_frags+0x92/0x570 [ 2477.119976] ? quarantine_put+0x8b/0x1a0 [ 2477.120460] ? kmem_cache_free+0xa7/0x2d0 [ 2477.120946] sock_alloc_send_pskb+0x7af/0x930 [ 2477.121482] ? sk_alloc+0x350/0x350 [ 2477.121913] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2477.122529] ? __local_bh_enable_ip+0x9d/0x100 [ 2477.123067] ? trace_hardirqs_on+0x5b/0x180 [ 2477.123582] ? __dev_queue_xmit+0xdf8/0x2690 [ 2477.124101] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2477.124693] ? ip6_mtu+0x1bb/0x3d0 [ 2477.125104] ? lock_downgrade+0x6d0/0x6d0 [ 2477.125600] ? ip_frag_init+0x350/0x350 [ 2477.126076] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2477.126641] ? ip6_mtu+0x1e9/0x3d0 [ 2477.127046] ? ip6_setup_cork+0xfb7/0x1740 [ 2477.127553] ip6_make_skb+0x2de/0x4e0 [ 2477.127987] ? ip_frag_init+0x350/0x350 [ 2477.128467] ? ip_frag_init+0x350/0x350 [ 2477.128935] ? ip6_push_pending_frames+0xf0/0xf0 [ 2477.129500] ? ip6_dst_check+0x389/0x8d0 [ 2477.129983] ? sk_dst_check+0x235/0x4c0 [ 2477.130454] udpv6_sendmsg+0x20d3/0x2ad0 [ 2477.130932] ? ip_frag_init+0x350/0x350 [ 2477.131404] ? udp_v6_push_pending_frames+0x360/0x360 [ 2477.132028] ? lock_acquire+0x197/0x470 [ 2477.132493] ? find_held_lock+0x2c/0x110 [ 2477.132990] ? sock_has_perm+0x1ea/0x280 [ 2477.133477] ? __import_iovec+0x458/0x590 [ 2477.133968] ? udp_v6_push_pending_frames+0x360/0x360 [ 2477.134566] inet6_sendmsg+0x105/0x140 [ 2477.135024] ? inet6_compat_ioctl+0x320/0x320 [ 2477.135564] __sock_sendmsg+0xf2/0x190 [ 2477.136030] ____sys_sendmsg+0x334/0x870 [ 2477.136511] ? sock_write_iter+0x3d0/0x3d0 [ 2477.137009] ? do_recvmmsg+0x6d0/0x6d0 [ 2477.137461] ? __lock_acquire+0x1657/0x5b00 [ 2477.137975] ___sys_sendmsg+0xf3/0x170 [ 2477.138446] ? sendmsg_copy_msghdr+0x160/0x160 [ 2477.138988] ? __fget_files+0x2cf/0x520 [ 2477.139466] ? lock_acquire+0x197/0x470 [ 2477.139933] ? find_held_lock+0x2c/0x110 [ 2477.140419] ? __might_fault+0xd3/0x180 [ 2477.140880] ? lock_downgrade+0x6d0/0x6d0 [ 2477.141388] __sys_sendmmsg+0x195/0x470 [ 2477.141866] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2477.142379] ? lock_downgrade+0x6d0/0x6d0 [ 2477.142880] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2477.143458] ? wait_for_completion_io+0x270/0x270 [ 2477.144032] ? rcu_read_lock_any_held+0x75/0xa0 [ 2477.144589] ? vfs_write+0x354/0xb10 [ 2477.145024] ? fput_many+0x2f/0x1a0 [ 2477.145461] ? ksys_write+0x1a9/0x260 [ 2477.145906] ? __ia32_sys_read+0xb0/0xb0 [ 2477.146390] __x64_sys_sendmmsg+0x99/0x100 [ 2477.146882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2477.147498] do_syscall_64+0x33/0x40 [ 2477.147937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2477.148542] RIP: 0033:0x7f6413bdcb19 [ 2477.148984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2477.151156] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2477.152076] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2477.152919] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2477.153772] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2477.154622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2477.155464] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:35:52 executing program 5: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'gre0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 01:36:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x200000000000000, 0x8000) 01:36:05 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xe8030000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:05 executing program 5: pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x67) write$P9_RCLUNK(r0, 0x0, 0x0) 01:36:05 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:05 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 54) 01:36:05 executing program 7: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') pread64(r1, &(0x7f00000001c0)=""/4107, 0x100b, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) dup2(0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000480), 0x0) io_uring_setup(0x6a32, &(0x7f0000000300)) r3 = epoll_create1(0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x90000019}) pread64(0xffffffffffffffff, &(0x7f0000001300)=""/200, 0xc8, 0x1) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file1\x00'}) 01:36:05 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 71) 01:36:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x10000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2490.580875] FAT-fs (loop4): Directory bread(block 10) failed [ 2490.585424] FAT-fs (loop4): Directory bread(block 11) failed [ 2490.590941] FAT-fs (loop4): Directory bread(block 10) failed [ 2490.592065] FAT-fs (loop4): Directory bread(block 11) failed [ 2490.594420] FAT-fs (loop4): Directory bread(block 10) failed [ 2490.595890] FAT-fs (loop4): Directory bread(block 11) failed [ 2490.630884] FAULT_INJECTION: forcing a failure. [ 2490.630884] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.634088] CPU: 1 PID: 12074 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2490.635964] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.638144] Call Trace: [ 2490.638869] dump_stack+0x107/0x167 [ 2490.639871] should_fail.cold+0x5/0xa [ 2490.640923] should_failslab+0x5/0x20 [ 2490.641950] __kmalloc_node_track_caller+0x74/0x3b0 [ 2490.643286] ? alloc_skb_with_frags+0x92/0x570 [ 2490.644535] __alloc_skb+0xb1/0x5b0 [ 2490.645527] alloc_skb_with_frags+0x92/0x570 [ 2490.646709] ? quarantine_put+0x8b/0x1a0 [ 2490.647803] ? kmem_cache_free+0xa7/0x2d0 [ 2490.648932] sock_alloc_send_pskb+0x7af/0x930 [ 2490.650141] ? sk_alloc+0x350/0x350 [ 2490.651135] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2490.652548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2490.653950] ? mark_lock+0xf5/0x2df0 [ 2490.654961] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2490.656326] ? ip6_mtu+0x1bb/0x3d0 [ 2490.657283] ? lock_downgrade+0x6d0/0x6d0 [ 2490.658396] ? ip_frag_init+0x350/0x350 [ 2490.659488] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2490.660756] ? ip6_mtu+0x1e9/0x3d0 01:36:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) r5 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r6, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r7, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x300020, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq={'uid', 0x3d, r3}}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fowner_eq={'fowner', 0x3d, r7}}, {@audit}]}}) r8 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) move_mount(r11, &(0x7f0000000380)='./file0\x00', r8, &(0x7f00000003c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r9}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r10}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="7b209e4c41e2bf1c8726ac29d8a2c4a180344c1e25705f98b65865941d", 0x1d}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r4}}}], 0x120, 0x5801}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000800)="b43aae59ae9523e89e9c30185a437d4bd820dc6a9862b02ef6f82097f9b23b619608f8e6d52b67bc97cfc9bab50f0433620a08cb48c9080159e480e55a5d21e4b03ce1dcb9e6e7b2f71216bff815af7c79ab8d8c2243a7dd254af01e3708ac8a4e8a265b1ffe24a90b4559bd183001b654e96cf2a35fb4647718b491f9bcac0ce228b5dc16d22a1f1706374c108a1e81d8d2753f97f0e43a6442fd63bd24fce8dd4b8ca30af577e2cb3c8629a20f5d5d554013ec389577ac1b34f96dcf28b87926789181e2ac4d1a10cb4f057298cc1657247b0d6652de8c637a7282b2f1577d1503f327fc7970f4d6839f3337a1c10fba5f74ed12", 0xf5}, {&(0x7f0000000900)="2354da3f7a62d0e513edd07b23f81c19af3066de73bde48e72015aee20de1c87e6345dd81dd3a8adfeb010b7cca4ece35f5caa01548322d5b4b659af0581f63166bf5e0fc2dae8a980e7779dd5d10e647f71fa6d7cf5d1bb5cdb6599a06f62ae4c81e9820c61f8f77f60560cc78d0ed4cc2cd8c33c0eed3303b5363022502a8feefe48fdbea589d7be723c36f10d468cdd9cd9355fcc1351276ae5837e0092246dd2b6516b88051d1f4b7ccbd0", 0xad}, {&(0x7f00000009c0)="ca95ecaab064a8ba5fb3c069ccaa0bf449480a282ae6a6660a79c5e72618a5df5dcb7ab8e9a16d835c8021986b74bb50839d1c793dd2ace50573b02de5fe34a999a0b79512a833f13a282773eaeadbe04dbebe284617e6f838afac5ba39a061cb71f20dab63e4062943b17723aa6e2e514646a2b240f9137bac484bbf405fa371ebb1178c8619804fdbf612cdc42", 0x8e}, {&(0x7f0000000a80)="284083e8ee5f84d8dae56cb2e845fd25a89331ecd53645327473027732f980aa73c67948acea85f50a35132fc457014b7d9943c58aacd1175ccbef6e78bc04ccecc4d176786f843cfb9b0b5c890dc15eb8b8fe0dc3d8ebe2", 0x58}, {&(0x7f0000000b00)="00f90fa0715d81339381b1c38d08479f6966b389378491ae661a057ec8acd79e0f774d7dd8bbb324b35ceff745850fe067f1531739a30522592c9cfb50776c6947db7d1cf7125c747596ad50ab115d386a9593d356baea2d035b5485b77ab3481ec93999eb970474b90e91103dc7cc326861cca61dd3e76038a4743b394b9be4f01a462151", 0x85}, {&(0x7f0000000bc0)="036fb867db26bdf91f88c0f2b06369dcc3f026e95c35d2ea0ed2915db2913dc36920deae08f1e75da54d37091ff85c7825a9fe1ae34cc7f7cdd0956852ffe80d94bdbb4a3202ef97fa944ca8b011523a362c3b5d8650f955f24b4b3e36a955b6166e38aa82281498945b5b1c6076ed1955994d243a96aba08d52bb7380bdc77bd9f56c59d25a6412560e5d8e126bcbfe29643c0d9ff2a2e80ecc15000a21079e105f1184df1fb89f2c1e4c19a9b17ff032a190f2ac7bb631319180411582a0c4c8e2045b6d8cae5e778e685ab9d147bc4088e7d5bb9194dc39fdba01a50c0c56b6087873d0334683b87557032fd841b4", 0xf0}], 0x6, &(0x7f00000012c0)=[@rights={{0x2c, 0x1, 0x1, [r1, r5, r5, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r10}}}], 0x50, 0x8000}}], 0x2, 0x1) [ 2490.661687] ? ip6_setup_cork+0xfb7/0x1740 [ 2490.663166] ip6_make_skb+0x2de/0x4e0 [ 2490.664155] ? ip_frag_init+0x350/0x350 [ 2490.665166] ? ip_frag_init+0x350/0x350 [ 2490.666191] ? ip6_push_pending_frames+0xf0/0xf0 [ 2490.667425] ? ip6_dst_check+0x389/0x8d0 [ 2490.668460] ? sk_dst_check+0x235/0x4c0 [ 2490.669511] udpv6_sendmsg+0x20d3/0x2ad0 [ 2490.670565] ? ip_frag_init+0x350/0x350 [ 2490.671610] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.672963] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.674332] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.675746] ? lock_acquire+0x197/0x470 [ 2490.676719] ? find_held_lock+0x2c/0x110 [ 2490.677707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.678953] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.680164] ? sock_has_perm+0x1ea/0x280 [ 2490.681084] ? security_socket_sendmsg+0x22/0xb0 [ 2490.682125] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.683413] inet6_sendmsg+0x105/0x140 [ 2490.684414] ? inet6_compat_ioctl+0x320/0x320 [ 2490.685550] __sock_sendmsg+0xf2/0x190 [ 2490.686524] ____sys_sendmsg+0x334/0x870 [ 2490.687537] ? sock_write_iter+0x3d0/0x3d0 [ 2490.688472] ? do_recvmmsg+0x6d0/0x6d0 [ 2490.689346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.690497] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.691693] ? trace_hardirqs_on+0x5b/0x180 [ 2490.692669] ___sys_sendmsg+0xf3/0x170 [ 2490.693531] ? sendmsg_copy_msghdr+0x160/0x160 [ 2490.694553] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2490.695545] ? _raw_spin_unlock_irq+0x27/0x30 [ 2490.696541] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2490.697542] ? finish_task_switch+0x126/0x5d0 [ 2490.698532] ? finish_task_switch+0xef/0x5d0 [ 2490.699506] ? __switch_to+0x572/0xf70 [ 2490.700382] ? __switch_to_asm+0x3a/0x60 [ 2490.701278] ? __switch_to_asm+0x34/0x60 [ 2490.702185] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.703355] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.704559] ? trace_hardirqs_on+0x5b/0x180 [ 2490.705510] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.706723] ? __sys_sendmmsg+0x261/0x470 [ 2490.707650] __sys_sendmmsg+0x195/0x470 [ 2490.708551] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2490.709499] ? lock_downgrade+0x6d0/0x6d0 [ 2490.710459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.711538] ? wait_for_completion_io+0x270/0x270 [ 2490.712761] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.713812] ? vfs_write+0x354/0xb10 [ 2490.714648] ? fput_many+0x2f/0x1a0 [ 2490.715465] ? ksys_write+0x1a9/0x260 [ 2490.716329] ? __ia32_sys_read+0xb0/0xb0 [ 2490.717243] __x64_sys_sendmmsg+0x99/0x100 [ 2490.718208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.719372] do_syscall_64+0x33/0x40 [ 2490.720227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.721390] RIP: 0033:0x7f6413bdcb19 [ 2490.722232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.726382] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2490.728112] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2490.729736] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2490.731348] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.732974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.734594] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:36:05 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 55) 01:36:06 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x201000000000000, 0x8000) [ 2490.827629] SELinux: duplicate or incompatible mount options [ 2490.832697] FAULT_INJECTION: forcing a failure. [ 2490.832697] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.835804] CPU: 1 PID: 12082 Comm: syz-executor.1 Not tainted 5.10.233 #1 01:36:06 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xeffdffff, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2490.837693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.840129] Call Trace: [ 2490.840848] dump_stack+0x107/0x167 [ 2490.841838] should_fail.cold+0x5/0xa [ 2490.842854] should_failslab+0x5/0x20 [ 2490.843873] __kmalloc_node_track_caller+0x74/0x3b0 [ 2490.845227] ? alloc_skb_with_frags+0x92/0x570 [ 2490.846470] __alloc_skb+0xb1/0x5b0 [ 2490.847459] alloc_skb_with_frags+0x92/0x570 [ 2490.848629] ? sch_direct_xmit+0x1fb/0x790 [ 2490.849745] ? lock_acquire+0x197/0x470 [ 2490.850820] ? find_held_lock+0x2c/0x110 [ 2490.851943] sock_alloc_send_pskb+0x7af/0x930 [ 2490.853100] ? sk_alloc+0x350/0x350 [ 2490.854032] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2490.855344] ? __local_bh_enable_ip+0x9d/0x100 [ 2490.856512] ? trace_hardirqs_on+0x5b/0x180 [ 2490.857687] ? __dev_queue_xmit+0xdf8/0x2690 [ 2490.858800] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2490.860088] ? ip6_mtu+0x1bb/0x3d0 [ 2490.860986] ? lock_downgrade+0x6d0/0x6d0 [ 2490.862032] ? ip_frag_init+0x350/0x350 [ 2490.863048] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2490.864287] ? ip6_mtu+0x1e9/0x3d0 [ 2490.865182] ? ip6_setup_cork+0xfb7/0x1740 [ 2490.866255] ip6_make_skb+0x2de/0x4e0 [ 2490.867250] ? ip_frag_init+0x350/0x350 [ 2490.868264] ? ip_frag_init+0x350/0x350 [ 2490.869274] ? ip6_push_pending_frames+0xf0/0xf0 [ 2490.870478] ? ip6_dst_check+0x389/0x8d0 [ 2490.871780] ? sk_dst_check+0x235/0x4c0 [ 2490.872813] udpv6_sendmsg+0x20d3/0x2ad0 [ 2490.873826] ? ip_frag_init+0x350/0x350 [ 2490.874674] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.875763] ? perf_event_task_disable+0x390/0x390 [ 2490.876912] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2490.878009] ? lock_acquire+0x197/0x470 [ 2490.879009] ? find_held_lock+0x2c/0x110 [ 2490.880125] ? sock_has_perm+0x1ea/0x280 [ 2490.881083] ? __import_iovec+0x458/0x590 [ 2490.882010] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.883174] inet6_sendmsg+0x105/0x140 [ 2490.884058] ? inet6_compat_ioctl+0x320/0x320 [ 2490.885056] __sock_sendmsg+0xf2/0x190 [ 2490.885908] ____sys_sendmsg+0x334/0x870 [ 2490.886804] ? sock_write_iter+0x3d0/0x3d0 [ 2490.886817] FAULT_INJECTION: forcing a failure. [ 2490.886817] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.890136] ? do_recvmmsg+0x6d0/0x6d0 [ 2490.891010] ? __lock_acquire+0x1657/0x5b00 [ 2490.892022] ___sys_sendmsg+0xf3/0x170 [ 2490.892897] ? sendmsg_copy_msghdr+0x160/0x160 [ 2490.893900] ? finish_task_switch+0xef/0x5d0 [ 2490.894873] ? lock_acquire+0x197/0x470 [ 2490.895744] ? find_held_lock+0x2c/0x110 [ 2490.896766] ? __might_fault+0xd3/0x180 [ 2490.897764] ? lock_downgrade+0x6d0/0x6d0 [ 2490.898807] ? io_schedule_timeout+0x140/0x140 [ 2490.899991] __sys_sendmmsg+0x195/0x470 [ 2490.901018] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2490.902121] ? lock_downgrade+0x6d0/0x6d0 [ 2490.903204] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.904457] ? wait_for_completion_io+0x270/0x270 [ 2490.905690] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.906882] ? vfs_write+0x354/0xb10 [ 2490.907816] ? fput_many+0x2f/0x1a0 [ 2490.908758] ? ksys_write+0x1a9/0x260 [ 2490.909732] ? __ia32_sys_read+0xb0/0xb0 [ 2490.910763] __x64_sys_sendmmsg+0x99/0x100 [ 2490.911835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.913146] do_syscall_64+0x33/0x40 [ 2490.914096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.915478] RIP: 0033:0x7f9d078eeb19 [ 2490.916489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.921326] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2490.923333] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2490.925234] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2490.927158] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.929091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.930967] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2490.933014] CPU: 0 PID: 12098 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2490.933853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2490.934787] Call Trace: [ 2490.935111] dump_stack+0x107/0x167 [ 2490.935542] should_fail.cold+0x5/0xa [ 2490.935996] ? create_object.isra.0+0x3a/0xa20 [ 2490.936552] should_failslab+0x5/0x20 [ 2490.937019] kmem_cache_alloc+0x5b/0x310 [ 2490.937516] create_object.isra.0+0x3a/0xa20 [ 2490.938038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2490.938626] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2490.939228] ? alloc_skb_with_frags+0x92/0x570 [ 2490.939766] __alloc_skb+0xb1/0x5b0 [ 2490.940219] alloc_skb_with_frags+0x92/0x570 [ 2490.940737] ? quarantine_put+0x8b/0x1a0 [ 2490.941217] ? kmem_cache_free+0xa7/0x2d0 [ 2490.941704] sock_alloc_send_pskb+0x7af/0x930 [ 2490.942235] ? sk_alloc+0x350/0x350 [ 2490.942679] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2490.943279] ? ip6_mtu+0x1bb/0x3d0 [ 2490.943699] ? lock_downgrade+0x6d0/0x6d0 [ 2490.944195] ? ip_frag_init+0x350/0x350 [ 2490.944668] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2490.945233] ? ip6_mtu+0x1e9/0x3d0 [ 2490.945648] ? ip6_setup_cork+0xfb7/0x1740 [ 2490.946142] ip6_make_skb+0x2de/0x4e0 [ 2490.946588] ? ip_frag_init+0x350/0x350 [ 2490.947058] ? ip_frag_init+0x350/0x350 [ 2490.947526] ? ip6_push_pending_frames+0xf0/0xf0 [ 2490.948092] ? ip6_dst_check+0x389/0x8d0 [ 2490.948566] ? sk_dst_check+0x235/0x4c0 [ 2490.949039] udpv6_sendmsg+0x20d3/0x2ad0 [ 2490.949523] ? ip_frag_init+0x350/0x350 [ 2490.949995] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.950600] ? perf_event_task_disable+0x390/0x390 [ 2490.951137] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2490.951710] ? lock_acquire+0x197/0x470 [ 2490.952164] ? find_held_lock+0x2c/0x110 [ 2490.952619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.953208] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2490.953808] ? sock_has_perm+0x1ea/0x280 [ 2490.954286] ? __import_iovec+0x458/0x590 [ 2490.954777] ? udp_v6_push_pending_frames+0x360/0x360 [ 2490.955388] inet6_sendmsg+0x105/0x140 [ 2490.955848] ? inet6_compat_ioctl+0x320/0x320 [ 2490.956379] __sock_sendmsg+0xf2/0x190 [ 2490.956845] ____sys_sendmsg+0x334/0x870 [ 2490.957326] ? sock_write_iter+0x3d0/0x3d0 [ 2490.957824] ? do_recvmmsg+0x6d0/0x6d0 [ 2490.958284] ? find_held_lock+0x2c/0x110 [ 2490.958763] ___sys_sendmsg+0xf3/0x170 [ 2490.959207] ? sendmsg_copy_msghdr+0x160/0x160 [ 2490.959727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2490.960328] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2490.960831] ? trace_hardirqs_on+0x5b/0x180 [ 2490.961330] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2490.961827] ? finish_task_switch+0x126/0x5d0 [ 2490.962333] ? finish_task_switch+0xef/0x5d0 [ 2490.962830] ? __switch_to+0x572/0xf70 [ 2490.963272] ? __switch_to_asm+0x3a/0x60 [ 2490.963717] ? __switch_to_asm+0x34/0x60 [ 2490.964188] ? __schedule+0x82c/0x1ea0 [ 2490.964640] ? io_schedule_timeout+0x140/0x140 [ 2490.965153] __sys_sendmmsg+0x195/0x470 [ 2490.965631] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2490.966144] ? lock_downgrade+0x6d0/0x6d0 [ 2490.966651] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2490.967373] ? wait_for_completion_io+0x270/0x270 [ 2490.967967] ? rcu_read_lock_any_held+0x75/0xa0 [ 2490.968540] ? vfs_write+0x354/0xb10 [ 2490.968994] ? fput_many+0x2f/0x1a0 [ 2490.969448] ? ksys_write+0x1a9/0x260 [ 2490.969919] ? __ia32_sys_read+0xb0/0xb0 [ 2490.970420] __x64_sys_sendmmsg+0x99/0x100 [ 2490.970927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2490.971558] do_syscall_64+0x33/0x40 [ 2490.971983] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2490.972579] RIP: 0033:0x7f6413bdcb19 [ 2490.973036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2490.975084] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2490.975965] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2490.976824] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2490.977708] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2490.978577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2490.979445] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2490.989009] SELinux: duplicate or incompatible mount options [ 2491.035504] FAT-fs (loop4): Directory bread(block 10) failed [ 2491.036441] FAT-fs (loop4): Directory bread(block 11) failed [ 2491.038804] FAT-fs (loop4): Directory bread(block 10) failed [ 2491.039562] FAT-fs (loop4): Directory bread(block 11) failed [ 2491.041370] FAT-fs (loop4): Directory bread(block 10) failed [ 2491.043390] FAT-fs (loop4): Directory bread(block 11) failed 01:36:18 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x109202, 0x133) write$P9_RCLUNK(r0, 0x0, 0x0) 01:36:18 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:18 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf4010000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:18 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 56) 01:36:18 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x12000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:36:18 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 72) 01:36:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x300000000000000, 0x8000) 01:36:18 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3e000000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2502.932932] FAULT_INJECTION: forcing a failure. [ 2502.932932] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.935723] CPU: 0 PID: 12118 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2502.937283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2502.939096] Call Trace: [ 2502.939680] dump_stack+0x107/0x167 [ 2502.940488] should_fail.cold+0x5/0xa [ 2502.941339] ? skb_clone+0x14f/0x3d0 [ 2502.942176] should_failslab+0x5/0x20 [ 2502.943029] kmem_cache_alloc+0x5b/0x310 [ 2502.943945] skb_clone+0x14f/0x3d0 [ 2502.944752] ip6_finish_output2+0x10bf/0x1cf0 [ 2502.945769] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2502.946887] ip6_output+0x3b8/0x7e0 [ 2502.947709] ip6_local_out+0xb4/0x1a0 [ 2502.948548] ip6_send_skb+0x112/0x460 [ 2502.949406] udp_v6_send_skb+0x7aa/0x15b0 [ 2502.950342] udpv6_sendmsg+0x2116/0x2ad0 [ 2502.951256] ? ip_frag_init+0x350/0x350 [ 2502.952157] ? udp_v6_push_pending_frames+0x360/0x360 [ 2502.953340] ? perf_event_task_disable+0x390/0x390 [ 2502.954438] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2502.955514] ? lock_acquire+0x197/0x470 [ 2502.956422] ? find_held_lock+0x2c/0x110 [ 2502.957340] ? sock_has_perm+0x1ea/0x280 [ 2502.958254] ? __import_iovec+0x458/0x590 [ 2502.959183] ? udp_v6_push_pending_frames+0x360/0x360 [ 2502.960331] inet6_sendmsg+0x105/0x140 [ 2502.961211] ? inet6_compat_ioctl+0x320/0x320 [ 2502.962204] __sock_sendmsg+0xf2/0x190 [ 2502.963076] ____sys_sendmsg+0x334/0x870 [ 2502.963990] ? sock_write_iter+0x3d0/0x3d0 [ 2502.964946] ? do_recvmmsg+0x6d0/0x6d0 [ 2502.965821] ? __lock_acquire+0x1657/0x5b00 [ 2502.966798] ___sys_sendmsg+0xf3/0x170 [ 2502.967672] ? sendmsg_copy_msghdr+0x160/0x160 [ 2502.968685] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2502.969625] ? _raw_spin_unlock_irq+0x27/0x30 [ 2502.970578] ? lock_acquire+0x197/0x470 [ 2502.971414] ? find_held_lock+0x2c/0x110 [ 2502.972273] ? __might_fault+0xd3/0x180 [ 2502.973185] ? lock_downgrade+0x6d0/0x6d0 [ 2502.974119] ? io_schedule_timeout+0x140/0x140 [ 2502.975156] FAULT_INJECTION: forcing a failure. [ 2502.975156] name failslab, interval 1, probability 0, space 0, times 0 [ 2502.975175] __sys_sendmmsg+0x195/0x470 [ 2502.975213] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2502.979599] ? lock_downgrade+0x6d0/0x6d0 [ 2502.980552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2502.981624] ? wait_for_completion_io+0x270/0x270 [ 2502.982693] ? rcu_read_lock_any_held+0x75/0xa0 [ 2502.983726] ? vfs_write+0x354/0xb10 [ 2502.984547] ? fput_many+0x2f/0x1a0 [ 2502.985353] ? ksys_write+0x1a9/0x260 [ 2502.986184] ? __ia32_sys_read+0xb0/0xb0 [ 2502.987075] __x64_sys_sendmmsg+0x99/0x100 [ 2502.988024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2502.989179] do_syscall_64+0x33/0x40 [ 2502.990004] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2502.991147] RIP: 0033:0x7f6413bdcb19 [ 2502.991974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2502.996035] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2502.997736] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2502.999316] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2503.000915] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.002552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.004171] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2503.005837] CPU: 1 PID: 12117 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2503.007496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2503.009450] Call Trace: [ 2503.010075] dump_stack+0x107/0x167 [ 2503.010953] should_fail.cold+0x5/0xa [ 2503.011877] ? create_object.isra.0+0x3a/0xa20 [ 2503.012987] should_failslab+0x5/0x20 [ 2503.013910] kmem_cache_alloc+0x5b/0x310 [ 2503.014893] create_object.isra.0+0x3a/0xa20 [ 2503.015954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2503.017183] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2503.018390] ? alloc_skb_with_frags+0x92/0x570 [ 2503.019493] __alloc_skb+0xb1/0x5b0 [ 2503.020358] alloc_skb_with_frags+0x92/0x570 [ 2503.021394] ? sch_direct_xmit+0x1fb/0x790 [ 2503.022389] ? lock_acquire+0x197/0x470 [ 2503.023315] ? find_held_lock+0x2c/0x110 [ 2503.024270] sock_alloc_send_pskb+0x7af/0x930 [ 2503.025329] ? sk_alloc+0x350/0x350 [ 2503.026189] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2503.027429] ? __local_bh_enable_ip+0x9d/0x100 [ 2503.028502] ? trace_hardirqs_on+0x5b/0x180 [ 2503.029519] ? __dev_queue_xmit+0xdf8/0x2690 [ 2503.030539] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2503.031718] ? ip6_mtu+0x1bb/0x3d0 [ 2503.032564] ? lock_downgrade+0x6d0/0x6d0 [ 2503.033547] ? ip_frag_init+0x350/0x350 [ 2503.034478] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2503.035658] ? ip6_mtu+0x1e9/0x3d0 [ 2503.036619] ? ip6_setup_cork+0xfb7/0x1740 [ 2503.037667] ip6_make_skb+0x2de/0x4e0 [ 2503.038594] ? ip_frag_init+0x350/0x350 [ 2503.039562] ? ip_frag_init+0x350/0x350 [ 2503.040590] ? ip6_push_pending_frames+0xf0/0xf0 [ 2503.042083] ? ip6_dst_check+0x389/0x8d0 [ 2503.043220] ? sk_dst_check+0x235/0x4c0 [ 2503.044287] udpv6_sendmsg+0x20d3/0x2ad0 [ 2503.045426] ? ip_frag_init+0x350/0x350 [ 2503.046606] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.047883] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.049094] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.050441] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.051860] ? lock_acquire+0x197/0x470 [ 2503.052957] ? find_held_lock+0x2c/0x110 [ 2503.053930] ? sock_has_perm+0x1ea/0x280 [ 2503.054905] ? __import_iovec+0x458/0x590 [ 2503.055878] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.057089] inet6_sendmsg+0x105/0x140 [ 2503.058008] ? inet6_compat_ioctl+0x320/0x320 [ 2503.059064] __sock_sendmsg+0xf2/0x190 [ 2503.059977] ____sys_sendmsg+0x334/0x870 [ 2503.060931] ? sock_write_iter+0x3d0/0x3d0 [ 2503.061958] ? do_recvmmsg+0x6d0/0x6d0 [ 2503.062862] ? __lock_acquire+0x1657/0x5b00 [ 2503.063901] ___sys_sendmsg+0xf3/0x170 [ 2503.064844] ? sendmsg_copy_msghdr+0x160/0x160 [ 2503.065931] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2503.066995] ? _raw_spin_unlock_irq+0x27/0x30 [ 2503.068105] ? lock_acquire+0x197/0x470 [ 2503.069042] ? find_held_lock+0x2c/0x110 [ 2503.070009] ? __might_fault+0xd3/0x180 [ 2503.070981] ? lock_downgrade+0x6d0/0x6d0 [ 2503.071970] ? io_schedule_timeout+0x140/0x140 [ 2503.073088] __sys_sendmmsg+0x195/0x470 [ 2503.074028] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2503.075062] ? lock_downgrade+0x6d0/0x6d0 [ 2503.076075] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2503.077245] ? wait_for_completion_io+0x270/0x270 [ 2503.078410] ? rcu_read_lock_any_held+0x75/0xa0 [ 2503.079489] ? vfs_write+0x354/0xb10 [ 2503.080402] ? fput_many+0x2f/0x1a0 [ 2503.081283] ? ksys_write+0x1a9/0x260 [ 2503.082200] ? __ia32_sys_read+0xb0/0xb0 [ 2503.083185] __x64_sys_sendmmsg+0x99/0x100 [ 2503.084185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.085440] do_syscall_64+0x33/0x40 [ 2503.086358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2503.087612] RIP: 0033:0x7f9d078eeb19 [ 2503.088514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.093002] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2503.094913] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2503.096663] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2503.098448] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.100226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.102061] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:36:18 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2503.119746] FAT-fs (loop4): Directory bread(block 10) failed [ 2503.121271] FAT-fs (loop4): Directory bread(block 11) failed 01:36:18 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000017c0)) preadv2(r1, &(0x7f0000001740)=[{&(0x7f0000000140)=""/178, 0xb2}, {&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/255, 0xff}, {&(0x7f0000000080)=""/74, 0x4a}], 0x6, 0x3, 0xffffffc0, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write$P9_RSETATTR(r2, &(0x7f00000002c0)={0x7, 0x1b, 0x1}, 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000001840)={0x1, 0x6, 0x87f}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4}) write$P9_RWSTAT(r4, &(0x7f0000001800)={0x7, 0x7f, 0x2}, 0x7) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 01:36:18 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 57) 01:36:18 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x18810000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:36:18 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2503.289790] FAULT_INJECTION: forcing a failure. [ 2503.289790] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.292767] CPU: 1 PID: 12135 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2503.294292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2503.296335] Call Trace: [ 2503.296953] dump_stack+0x107/0x167 [ 2503.297848] should_fail.cold+0x5/0xa [ 2503.298709] ? create_object.isra.0+0x3a/0xa20 [ 2503.299856] should_failslab+0x5/0x20 [ 2503.300760] kmem_cache_alloc+0x5b/0x310 [ 2503.301631] create_object.isra.0+0x3a/0xa20 [ 2503.302578] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2503.303691] kmem_cache_alloc+0x159/0x310 [ 2503.304615] skb_clone+0x14f/0x3d0 [ 2503.305387] ip6_finish_output2+0x10bf/0x1cf0 [ 2503.306365] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2503.307422] ip6_output+0x3b8/0x7e0 [ 2503.308198] ip6_local_out+0xb4/0x1a0 [ 2503.309110] ip6_send_skb+0x112/0x460 [ 2503.309984] udp_v6_send_skb+0x7aa/0x15b0 [ 2503.310850] udpv6_sendmsg+0x2116/0x2ad0 [ 2503.311695] ? ip_frag_init+0x350/0x350 [ 2503.312547] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.313650] ? perf_event_task_disable+0x390/0x390 [ 2503.314682] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2503.315697] ? lock_acquire+0x197/0x470 [ 2503.316559] ? find_held_lock+0x2c/0x110 [ 2503.317419] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.318580] ? sock_has_perm+0x1ea/0x280 [ 2503.319454] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.320568] inet6_sendmsg+0x105/0x140 [ 2503.321392] ? inet6_compat_ioctl+0x320/0x320 [ 2503.322334] __sock_sendmsg+0xf2/0x190 [ 2503.323166] ____sys_sendmsg+0x334/0x870 [ 2503.324004] ? sock_write_iter+0x3d0/0x3d0 [ 2503.324896] ? do_recvmmsg+0x6d0/0x6d0 [ 2503.325764] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.326905] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.328100] ? trace_hardirqs_on+0x5b/0x180 [ 2503.329082] ___sys_sendmsg+0xf3/0x170 [ 2503.329945] ? sendmsg_copy_msghdr+0x160/0x160 [ 2503.330936] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2503.331884] ? _raw_spin_unlock_irq+0x27/0x30 [ 2503.332879] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2503.333864] ? finish_task_switch+0x126/0x5d0 [ 2503.334844] ? finish_task_switch+0xef/0x5d0 [ 2503.335858] ? __switch_to+0x572/0xf70 [ 2503.336771] ? __switch_to_asm+0x3a/0x60 [ 2503.337801] ? __switch_to_asm+0x34/0x60 [ 2503.338876] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2503.340240] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.341668] ? trace_hardirqs_on+0x5b/0x180 [ 2503.342788] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.344210] ? _cond_resched+0x5d/0x80 [ 2503.345185] __sys_sendmmsg+0x195/0x470 [ 2503.346163] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2503.347186] ? lock_downgrade+0x6d0/0x6d0 [ 2503.348205] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2503.349335] ? wait_for_completion_io+0x270/0x270 [ 2503.350501] ? rcu_read_lock_any_held+0x75/0xa0 [ 2503.351528] ? vfs_write+0x354/0xb10 [ 2503.352328] ? fput_many+0x2f/0x1a0 [ 2503.353128] ? ksys_write+0x1a9/0x260 [ 2503.354110] ? __ia32_sys_read+0xb0/0xb0 [ 2503.355169] __x64_sys_sendmmsg+0x99/0x100 [ 2503.356417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.357969] do_syscall_64+0x33/0x40 [ 2503.359104] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2503.360640] RIP: 0033:0x7f6413bdcb19 [ 2503.361734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.367251] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2503.369574] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2503.371829] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2503.373994] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.376135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.378316] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:36:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x400000000000000, 0x8000) 01:36:18 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 73) 01:36:18 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2503.519126] FAULT_INJECTION: forcing a failure. [ 2503.519126] name failslab, interval 1, probability 0, space 0, times 0 [ 2503.522558] CPU: 0 PID: 12148 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2503.524201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2503.526228] Call Trace: [ 2503.526885] dump_stack+0x107/0x167 [ 2503.527774] should_fail.cold+0x5/0xa [ 2503.528719] ? skb_clone+0x14f/0x3d0 [ 2503.529645] should_failslab+0x5/0x20 [ 2503.530626] kmem_cache_alloc+0x5b/0x310 [ 2503.531604] skb_clone+0x14f/0x3d0 [ 2503.532504] ip6_finish_output2+0x10bf/0x1cf0 [ 2503.533636] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2503.534874] ip6_output+0x3b8/0x7e0 [ 2503.535784] ip6_local_out+0xb4/0x1a0 [ 2503.536731] ip6_send_skb+0x112/0x460 [ 2503.537664] udp_v6_send_skb+0x7aa/0x15b0 [ 2503.538704] udpv6_sendmsg+0x2116/0x2ad0 [ 2503.539718] ? ip_frag_init+0x350/0x350 [ 2503.540720] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.541955] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.543151] ? lock_acquire+0x197/0x470 [ 2503.544018] ? find_held_lock+0x2c/0x110 [ 2503.544944] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.546134] ? sock_has_perm+0x1ea/0x280 [ 2503.547061] ? __import_iovec+0x458/0x590 [ 2503.547981] ? udp_v6_push_pending_frames+0x360/0x360 [ 2503.549151] inet6_sendmsg+0x105/0x140 [ 2503.550020] ? inet6_compat_ioctl+0x320/0x320 [ 2503.551048] __sock_sendmsg+0xf2/0x190 [ 2503.551968] ____sys_sendmsg+0x334/0x870 [ 2503.552937] ? sock_write_iter+0x3d0/0x3d0 [ 2503.553934] ? do_recvmmsg+0x6d0/0x6d0 [ 2503.554862] ? __lock_acquire+0x1657/0x5b00 [ 2503.555902] ___sys_sendmsg+0xf3/0x170 [ 2503.556842] ? sendmsg_copy_msghdr+0x160/0x160 [ 2503.557921] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2503.558974] ? _raw_spin_unlock_irq+0x27/0x30 [ 2503.560039] ? lock_acquire+0x197/0x470 [ 2503.560997] ? find_held_lock+0x2c/0x110 [ 2503.561963] ? __might_fault+0xd3/0x180 [ 2503.562899] ? lock_downgrade+0x6d0/0x6d0 [ 2503.563773] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2503.565031] __sys_sendmmsg+0x195/0x470 [ 2503.565983] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2503.566999] ? lock_downgrade+0x6d0/0x6d0 [ 2503.568001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2503.569158] ? wait_for_completion_io+0x270/0x270 [ 2503.570302] ? rcu_read_lock_any_held+0x75/0xa0 [ 2503.571405] ? vfs_write+0x354/0xb10 [ 2503.572286] ? fput_many+0x2f/0x1a0 [ 2503.573159] ? ksys_write+0x1a9/0x260 [ 2503.574058] ? __ia32_sys_read+0xb0/0xb0 [ 2503.575027] __x64_sys_sendmmsg+0x99/0x100 [ 2503.576029] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2503.577251] do_syscall_64+0x33/0x40 [ 2503.578129] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2503.579337] RIP: 0033:0x7f9d078eeb19 [ 2503.580220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2503.584606] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2503.586427] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2503.588126] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2503.589802] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2503.591483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2503.593192] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:36:34 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 74) 01:36:34 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 01:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x500000000000000, 0x8000) 01:36:34 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf7ffff7f, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:34 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x3a1240, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) pipe(&(0x7f0000000040)) 01:36:34 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x20000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:36:34 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 58) 01:36:34 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2518.941579] FAT-fs (loop4): Directory bread(block 10) failed [ 2518.944409] FAT-fs (loop4): Directory bread(block 11) failed [ 2518.944572] FAULT_INJECTION: forcing a failure. [ 2518.944572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2518.948373] CPU: 0 PID: 12165 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2518.949699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2518.951284] Call Trace: [ 2518.951791] dump_stack+0x107/0x167 [ 2518.952482] should_fail.cold+0x5/0xa [ 2518.953229] _copy_from_user+0x2e/0x1b0 [ 2518.953992] __copy_msghdr_from_user+0x91/0x4b0 [ 2518.954874] ? __ia32_sys_shutdown+0x80/0x80 [ 2518.955709] ? udp_v6_push_pending_frames+0x360/0x360 [ 2518.956690] ? inet6_sendmsg+0xbd/0x140 [ 2518.957452] ? inet6_compat_ioctl+0x320/0x320 [ 2518.958298] ? __sock_sendmsg+0x55/0x190 [ 2518.959076] sendmsg_copy_msghdr+0xa1/0x160 [ 2518.959892] ? do_recvmmsg+0x6d0/0x6d0 [ 2518.960635] ? __lock_acquire+0x1657/0x5b00 [ 2518.961471] ___sys_sendmsg+0xc6/0x170 [ 2518.962208] ? sendmsg_copy_msghdr+0x160/0x160 [ 2518.963075] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2518.964071] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2518.964914] ? trace_hardirqs_on+0x5b/0x180 [ 2518.965741] ? lock_acquire+0x197/0x470 [ 2518.966500] ? find_held_lock+0x2c/0x110 [ 2518.967273] ? __might_fault+0xd3/0x180 [ 2518.968024] ? lock_downgrade+0x6d0/0x6d0 [ 2518.968816] ? io_schedule_timeout+0x140/0x140 [ 2518.969699] __sys_sendmmsg+0x195/0x470 [ 2518.970456] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2518.971271] ? lock_downgrade+0x6d0/0x6d0 [ 2518.972068] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2518.972990] ? wait_for_completion_io+0x270/0x270 [ 2518.973906] ? rcu_read_lock_any_held+0x75/0xa0 [ 2518.974785] ? vfs_write+0x354/0xb10 [ 2518.975488] ? fput_many+0x2f/0x1a0 [ 2518.976176] ? ksys_write+0x1a9/0x260 [ 2518.976896] ? __ia32_sys_read+0xb0/0xb0 [ 2518.977675] __x64_sys_sendmmsg+0x99/0x100 [ 2518.978479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2518.979451] do_syscall_64+0x33/0x40 [ 2518.980151] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2518.981132] RIP: 0033:0x7f6413bdcb19 [ 2518.981835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2518.985323] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2518.986768] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2518.988129] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2518.989491] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2518.990841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2518.992182] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2519.004287] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.010288] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.017596] FAULT_INJECTION: forcing a failure. [ 2519.017596] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.020048] CPU: 0 PID: 12160 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2519.021356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.022900] Call Trace: [ 2519.023397] dump_stack+0x107/0x167 [ 2519.024076] should_fail.cold+0x5/0xa [ 2519.024789] ? create_object.isra.0+0x3a/0xa20 [ 2519.025648] should_failslab+0x5/0x20 [ 2519.026362] kmem_cache_alloc+0x5b/0x310 [ 2519.027122] create_object.isra.0+0x3a/0xa20 [ 2519.027426] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.027940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.027965] kmem_cache_alloc+0x159/0x310 [ 2519.029414] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.030224] skb_clone+0x14f/0x3d0 [ 2519.030242] ip6_finish_output2+0x10bf/0x1cf0 [ 2519.030268] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2519.034553] ip6_output+0x3b8/0x7e0 [ 2519.035233] ip6_local_out+0xb4/0x1a0 [ 2519.035935] ip6_send_skb+0x112/0x460 [ 2519.036639] udp_v6_send_skb+0x7aa/0x15b0 [ 2519.037423] udpv6_sendmsg+0x2116/0x2ad0 [ 2519.038175] ? ip_frag_init+0x350/0x350 [ 2519.038923] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.039877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.040843] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.041844] ? trace_hardirqs_on+0x5b/0x180 [ 2519.042653] ? lock_acquire+0x1b9/0x470 [ 2519.043385] ? find_held_lock+0x2c/0x110 [ 2519.044145] ? sock_has_perm+0x1ea/0x280 [ 2519.044922] ? __import_iovec+0x458/0x590 01:36:34 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 59) [ 2519.045706] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.046840] inet6_sendmsg+0x105/0x140 [ 2519.047567] ? inet6_compat_ioctl+0x320/0x320 [ 2519.048393] __sock_sendmsg+0xf2/0x190 [ 2519.049117] ____sys_sendmsg+0x334/0x870 [ 2519.049865] ? sock_write_iter+0x3d0/0x3d0 [ 2519.050648] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.051369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.052340] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.053342] ? trace_hardirqs_on+0x5b/0x180 [ 2519.054136] ___sys_sendmsg+0xf3/0x170 [ 2519.054857] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.055695] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.056518] ? _raw_spin_unlock_irq+0x27/0x30 [ 2519.057377] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.058198] ? finish_task_switch+0x126/0x5d0 [ 2519.059017] ? finish_task_switch+0xef/0x5d0 [ 2519.059821] ? __switch_to+0x572/0xf70 [ 2519.060534] ? __switch_to_asm+0x3a/0x60 [ 2519.061284] ? __switch_to_asm+0x34/0x60 [ 2519.062035] ? __schedule+0x82c/0x1ea0 [ 2519.062756] ? io_schedule_timeout+0x140/0x140 [ 2519.063609] __sys_sendmmsg+0x195/0x470 [ 2519.064347] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2519.065145] ? lock_downgrade+0x6d0/0x6d0 [ 2519.065918] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.066803] ? wait_for_completion_io+0x270/0x270 [ 2519.067680] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.068518] ? vfs_write+0x354/0xb10 [ 2519.069199] ? fput_many+0x2f/0x1a0 [ 2519.069866] ? ksys_write+0x1a9/0x260 [ 2519.070551] ? __ia32_sys_read+0xb0/0xb0 [ 2519.071295] __x64_sys_sendmmsg+0x99/0x100 [ 2519.072058] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.072995] do_syscall_64+0x33/0x40 [ 2519.073668] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.074592] RIP: 0033:0x7f9d078eeb19 [ 2519.075266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.078604] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2519.079984] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2519.081295] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2519.082590] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.083863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.085151] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:36:34 executing program 6: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:34 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x466302, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) pipe(&(0x7f0000000040)) 01:36:34 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 75) [ 2519.159197] FAULT_INJECTION: forcing a failure. [ 2519.159197] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.161304] CPU: 0 PID: 12183 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2519.162505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.163941] Call Trace: [ 2519.164401] dump_stack+0x107/0x167 [ 2519.165037] should_fail.cold+0x5/0xa [ 2519.165693] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x695/0x13d0 [ 2519.166744] ? __alloc_skb+0x6d/0x5b0 [ 2519.167407] should_failslab+0x5/0x20 [ 2519.168066] kmem_cache_alloc_node+0x55/0x330 [ 2519.168848] __alloc_skb+0x6d/0x5b0 [ 2519.169487] skb_copy+0x183/0x350 [ 2519.170087] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2519.171120] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2519.172010] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2519.173006] ? lock_acquire+0x160/0x470 [ 2519.173693] ? find_held_lock+0x2c/0x110 [ 2519.174406] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2519.175285] mac80211_hwsim_tx+0x574/0x12a0 [ 2519.176026] ? trace_hardirqs_on+0x5b/0x180 [ 2519.176789] ieee80211_tx_frags+0x59c/0x9f0 [ 2519.177546] ? fq_skb_free_func+0x20/0x20 [ 2519.178271] __ieee80211_tx+0x1ad/0x640 [ 2519.178963] ieee80211_tx+0x329/0x410 [ 2519.179634] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2519.180508] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2519.181525] ? ieee80211_skb_resize+0x116/0x630 [ 2519.182330] ieee80211_xmit+0x220/0x2a0 [ 2519.183014] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2519.183901] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2519.184778] ieee80211_subif_start_xmit+0xef/0xf70 [ 2519.185622] ? lock_chain_count+0x20/0x20 [ 2519.186330] ? skb_crc32c_csum_help+0x80/0x80 [ 2519.187101] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2519.188014] ? lock_acquire+0x197/0x470 [ 2519.188689] ? sch_direct_xmit+0x31a/0x790 [ 2519.189420] ? lock_release+0x680/0x680 [ 2519.190108] dev_hard_start_xmit+0x1cb/0x6f0 [ 2519.190864] sch_direct_xmit+0x25f/0x790 [ 2519.191555] ? lock_acquire+0x197/0x470 [ 2519.192232] ? find_held_lock+0x2c/0x110 [ 2519.192916] ? dev_watchdog+0xbc0/0xbc0 [ 2519.193605] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2519.194384] __qdisc_run+0x4aa/0x1570 [ 2519.195036] __dev_queue_xmit+0xd43/0x2690 [ 2519.195743] ? ip6_finish_output2+0x158f/0x1cf0 [ 2519.196539] ? find_held_lock+0x2c/0x110 [ 2519.197223] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2519.197994] ? lock_downgrade+0x6d0/0x6d0 [ 2519.198697] ? do_softirq+0x53/0xc0 [ 2519.199305] ? trace_hardirqs_on+0x5b/0x180 [ 2519.200042] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2519.200925] ip6_finish_output2+0x158f/0x1cf0 [ 2519.201696] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2519.202540] ip6_output+0x3b8/0x7e0 [ 2519.203156] ip6_local_out+0xb4/0x1a0 [ 2519.203804] ip6_send_skb+0x112/0x460 [ 2519.204453] udp_v6_send_skb+0x7aa/0x15b0 [ 2519.205164] udpv6_sendmsg+0x2116/0x2ad0 [ 2519.205863] ? ip_frag_init+0x350/0x350 [ 2519.206544] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.207422] ? perf_event_task_disable+0x390/0x390 [ 2519.208255] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2519.209076] ? lock_acquire+0x197/0x470 [ 2519.209732] ? find_held_lock+0x2c/0x110 [ 2519.210427] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.211323] ? sock_has_perm+0x1ea/0x280 [ 2519.212016] ? __import_iovec+0x458/0x590 [ 2519.212706] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.213583] inet6_sendmsg+0x105/0x140 [ 2519.214230] ? inet6_compat_ioctl+0x320/0x320 [ 2519.214973] __sock_sendmsg+0xf2/0x190 [ 2519.215633] ____sys_sendmsg+0x334/0x870 [ 2519.216315] ? sock_write_iter+0x3d0/0x3d0 [ 2519.217026] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.217688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.218568] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.219458] ? trace_hardirqs_on+0x5b/0x180 [ 2519.220174] ___sys_sendmsg+0xf3/0x170 [ 2519.220823] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.221588] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.222304] ? _raw_spin_unlock_irq+0x27/0x30 [ 2519.223040] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.223785] ? finish_task_switch+0x126/0x5d0 [ 2519.224517] ? finish_task_switch+0xef/0x5d0 [ 2519.225244] ? __switch_to+0x572/0xf70 [ 2519.225882] ? __switch_to_asm+0x3a/0x60 [ 2519.226552] ? __switch_to_asm+0x34/0x60 [ 2519.227219] ? __schedule+0x82c/0x1ea0 [ 2519.227870] ? io_schedule_timeout+0x140/0x140 [ 2519.228634] __sys_sendmmsg+0x195/0x470 [ 2519.229275] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2519.229961] ? lock_downgrade+0x6d0/0x6d0 [ 2519.230647] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.231419] ? wait_for_completion_io+0x270/0x270 [ 2519.232174] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.232912] ? vfs_write+0x354/0xb10 [ 2519.233510] ? fput_many+0x2f/0x1a0 [ 2519.234088] ? ksys_write+0x1a9/0x260 [ 2519.234692] ? __ia32_sys_read+0xb0/0xb0 [ 2519.235357] __x64_sys_sendmmsg+0x99/0x100 [ 2519.236024] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.236841] do_syscall_64+0x33/0x40 [ 2519.237428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.238250] RIP: 0033:0x7f9d078eeb19 [ 2519.238841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.241750] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2519.242933] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2519.244059] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2519.245189] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.246332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.247467] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2519.265038] FAULT_INJECTION: forcing a failure. [ 2519.265038] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.267933] CPU: 1 PID: 12180 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2519.269531] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.271490] Call Trace: [ 2519.272120] dump_stack+0x107/0x167 [ 2519.272993] should_fail.cold+0x5/0xa [ 2519.273855] ? __alloc_skb+0x6d/0x5b0 [ 2519.274753] should_failslab+0x5/0x20 [ 2519.275630] kmem_cache_alloc_node+0x55/0x330 [ 2519.276692] __alloc_skb+0x6d/0x5b0 [ 2519.277557] alloc_skb_with_frags+0x92/0x570 [ 2519.278590] ? quarantine_put+0x8b/0x1a0 [ 2519.279534] ? kmem_cache_free+0xa7/0x2d0 [ 2519.280508] sock_alloc_send_pskb+0x7af/0x930 [ 2519.281574] ? sk_alloc+0x350/0x350 [ 2519.282412] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2519.283588] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2519.284874] ? mark_lock+0xf5/0x2df0 [ 2519.285893] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2519.287067] ? ip6_mtu+0x1bb/0x3d0 [ 2519.287936] ? lock_downgrade+0x6d0/0x6d0 [ 2519.289074] ? ip_frag_init+0x350/0x350 [ 2519.290128] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2519.291362] ? ip6_mtu+0x1e9/0x3d0 [ 2519.292278] ? ip6_setup_cork+0xfb7/0x1740 [ 2519.293394] ip6_make_skb+0x2de/0x4e0 [ 2519.294375] ? ip_frag_init+0x350/0x350 [ 2519.295434] ? ip_frag_init+0x350/0x350 [ 2519.296462] ? ip6_push_pending_frames+0xf0/0xf0 [ 2519.297702] ? ip6_dst_check+0x389/0x8d0 [ 2519.298759] ? sk_dst_check+0x235/0x4c0 [ 2519.299812] udpv6_sendmsg+0x20d3/0x2ad0 [ 2519.300866] ? ip_frag_init+0x350/0x350 [ 2519.301931] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.303277] ? perf_event_task_disable+0x390/0x390 [ 2519.304546] ? lock_acquire+0x197/0x470 [ 2519.305581] ? find_held_lock+0x2c/0x110 [ 2519.306649] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.308048] ? sock_has_perm+0x1ea/0x280 [ 2519.309133] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.310390] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.311616] inet6_sendmsg+0x105/0x140 [ 2519.312527] ? inet6_compat_ioctl+0x320/0x320 [ 2519.313580] __sock_sendmsg+0xf2/0x190 [ 2519.314489] ____sys_sendmsg+0x334/0x870 [ 2519.315461] ? sock_write_iter+0x3d0/0x3d0 [ 2519.316446] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.317402] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.318672] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.319934] ? trace_hardirqs_on+0x5b/0x180 [ 2519.320927] ___sys_sendmsg+0xf3/0x170 [ 2519.321854] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.322940] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.323978] ? _raw_spin_unlock_irq+0x27/0x30 [ 2519.325047] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.326091] ? finish_task_switch+0x126/0x5d0 [ 2519.327115] ? finish_task_switch+0xef/0x5d0 [ 2519.328087] ? __switch_to+0x572/0xf70 [ 2519.329011] ? __switch_to_asm+0x3a/0x60 [ 2519.329933] ? __switch_to_asm+0x34/0x60 [ 2519.330889] ? __schedule+0x82c/0x1ea0 [ 2519.331794] ? io_schedule_timeout+0x140/0x140 [ 2519.332879] __sys_sendmmsg+0x195/0x470 [ 2519.333840] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2519.334832] ? lock_downgrade+0x6d0/0x6d0 [ 2519.335828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.336925] ? wait_for_completion_io+0x270/0x270 [ 2519.338038] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.339125] ? vfs_write+0x354/0xb10 [ 2519.339991] ? fput_many+0x2f/0x1a0 [ 2519.340819] ? ksys_write+0x1a9/0x260 [ 2519.341715] ? __ia32_sys_read+0xb0/0xb0 [ 2519.342687] __x64_sys_sendmmsg+0x99/0x100 [ 2519.343690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.344873] do_syscall_64+0x33/0x40 [ 2519.345763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.346945] RIP: 0033:0x7f6413bdcb19 [ 2519.347807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.352076] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2519.353820] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2519.355500] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2519.357158] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.358821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.360478] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x600000000000000, 0x8000) 01:36:34 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2519.412685] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.413645] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.421065] FAT-fs (loop4): Directory bread(block 10) failed 01:36:34 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r1 = socket$inet6(0xa, 0x4, 0x79) dup2(r0, r1) write$P9_RCLUNK(r0, 0x0, 0x0) 01:36:34 executing program 6: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2519.446271] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.447186] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.455303] FAT-fs (loop4): Directory bread(block 11) failed 01:36:34 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 60) [ 2519.525057] FAULT_INJECTION: forcing a failure. [ 2519.525057] name failslab, interval 1, probability 0, space 0, times 0 01:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x700000000000000, 0x8000) [ 2519.526718] CPU: 0 PID: 12202 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2519.527755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.528785] Call Trace: [ 2519.529127] dump_stack+0x107/0x167 [ 2519.529574] should_fail.cold+0x5/0xa [ 2519.530044] ? create_object.isra.0+0x3a/0xa20 [ 2519.530605] should_failslab+0x5/0x20 [ 2519.531071] kmem_cache_alloc+0x5b/0x310 [ 2519.531576] ? ____sys_sendmsg+0x334/0x870 [ 2519.532092] ? ___sys_sendmsg+0xf3/0x170 [ 2519.532593] create_object.isra.0+0x3a/0xa20 [ 2519.533145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.533802] kmem_cache_alloc_node+0x169/0x330 [ 2519.534397] __alloc_skb+0x6d/0x5b0 [ 2519.534864] alloc_skb_with_frags+0x92/0x570 [ 2519.535425] ? quarantine_put+0x8b/0x1a0 [ 2519.535922] ? kmem_cache_free+0xa7/0x2d0 [ 2519.536448] sock_alloc_send_pskb+0x7af/0x930 [ 2519.537033] ? sk_alloc+0x350/0x350 [ 2519.537502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2519.538170] ? __local_bh_enable_ip+0x9d/0x100 [ 2519.538753] ? trace_hardirqs_on+0x5b/0x180 [ 2519.539285] ? __dev_queue_xmit+0xdf8/0x2690 [ 2519.539851] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2519.540494] ? ip6_mtu+0x1bb/0x3d0 [ 2519.540949] ? lock_downgrade+0x6d0/0x6d0 [ 2519.541490] ? ip_frag_init+0x350/0x350 [ 2519.541989] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2519.542605] ? ip6_mtu+0x1e9/0x3d0 [ 2519.543038] ? ip6_setup_cork+0xfb7/0x1740 [ 2519.543582] ip6_make_skb+0x2de/0x4e0 [ 2519.544046] ? ip_frag_init+0x350/0x350 [ 2519.544563] ? ip_frag_init+0x350/0x350 [ 2519.545079] ? ip6_push_pending_frames+0xf0/0xf0 [ 2519.545688] ? ip6_dst_check+0x389/0x8d0 [ 2519.546203] ? sk_dst_check+0x235/0x4c0 [ 2519.546716] udpv6_sendmsg+0x20d3/0x2ad0 [ 2519.547238] ? ip_frag_init+0x350/0x350 [ 2519.547749] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.548406] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.549055] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.549751] ? lock_acquire+0x197/0x470 [ 2519.550261] ? find_held_lock+0x2c/0x110 [ 2519.550780] ? sock_has_perm+0x1ea/0x280 [ 2519.551306] ? __import_iovec+0x458/0x590 [ 2519.551831] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.552492] inet6_sendmsg+0x105/0x140 [ 2519.552994] ? inet6_compat_ioctl+0x320/0x320 [ 2519.553561] __sock_sendmsg+0xf2/0x190 [ 2519.554055] ____sys_sendmsg+0x334/0x870 [ 2519.554571] ? sock_write_iter+0x3d0/0x3d0 [ 2519.555105] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.555602] ? __lock_acquire+0x1657/0x5b00 [ 2519.556153] ___sys_sendmsg+0xf3/0x170 [ 2519.556654] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.557232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.557899] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.558462] ? trace_hardirqs_on+0x5b/0x180 [ 2519.559006] ? lock_acquire+0x197/0x470 [ 2519.559503] ? find_held_lock+0x2c/0x110 [ 2519.559998] ? __might_fault+0xd3/0x180 [ 2519.560500] ? lock_downgrade+0x6d0/0x6d0 [ 2519.561029] ? io_schedule_timeout+0x140/0x140 [ 2519.561608] __sys_sendmmsg+0x195/0x470 [ 2519.562107] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2519.562645] ? lock_downgrade+0x6d0/0x6d0 [ 2519.563169] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.563777] ? wait_for_completion_io+0x270/0x270 [ 2519.564385] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.564978] ? vfs_write+0x354/0xb10 [ 2519.565446] ? fput_many+0x2f/0x1a0 [ 2519.565902] ? ksys_write+0x1a9/0x260 [ 2519.566379] ? __ia32_sys_read+0xb0/0xb0 [ 2519.566888] __x64_sys_sendmmsg+0x99/0x100 [ 2519.567415] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.568054] do_syscall_64+0x33/0x40 [ 2519.568518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.569163] RIP: 0033:0x7f6413bdcb19 [ 2519.569630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.571920] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2519.572864] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2519.573758] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2519.574650] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.575541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.576425] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:36:34 executing program 6: io_setup(0x0, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:34 executing program 6: io_setup(0x3, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x800000000000000, 0x8000) 01:36:34 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xff030000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:34 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x21030000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:36:34 executing program 6: io_setup(0x3, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:34 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 76) 01:36:34 executing program 6: io_setup(0x3, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) getpeername$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000140)=""/53) write$P9_RCLUNK(r1, 0x0, 0x0) [ 2519.778756] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.779487] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.787760] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.788578] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.805817] FAT-fs (loop4): Directory bread(block 10) failed [ 2519.806532] FAT-fs (loop4): Directory bread(block 11) failed [ 2519.832665] FAULT_INJECTION: forcing a failure. [ 2519.832665] name failslab, interval 1, probability 0, space 0, times 0 [ 2519.834175] CPU: 0 PID: 12228 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2519.834992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2519.835970] Call Trace: [ 2519.836292] dump_stack+0x107/0x167 [ 2519.836723] should_fail.cold+0x5/0xa [ 2519.837183] ? create_object.isra.0+0x3a/0xa20 [ 2519.837726] should_failslab+0x5/0x20 [ 2519.838177] kmem_cache_alloc+0x5b/0x310 [ 2519.838642] create_object.isra.0+0x3a/0xa20 [ 2519.839137] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2519.839731] kmem_cache_alloc+0x159/0x310 [ 2519.840225] skb_clone+0x14f/0x3d0 [ 2519.840645] ip6_finish_output2+0x10bf/0x1cf0 [ 2519.841184] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2519.841773] ip6_output+0x3b8/0x7e0 [ 2519.842200] ip6_local_out+0xb4/0x1a0 [ 2519.842648] ip6_send_skb+0x112/0x460 [ 2519.843097] udp_v6_send_skb+0x7aa/0x15b0 [ 2519.843602] udpv6_sendmsg+0x2116/0x2ad0 [ 2519.844084] ? ip_frag_init+0x350/0x350 [ 2519.844551] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.845167] ? perf_event_task_disable+0x390/0x390 [ 2519.845744] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2519.846320] ? lock_acquire+0x197/0x470 [ 2519.846786] ? find_held_lock+0x2c/0x110 [ 2519.847270] ? sock_has_perm+0x1ea/0x280 [ 2519.847759] ? __import_iovec+0x458/0x590 [ 2519.848247] ? udp_v6_push_pending_frames+0x360/0x360 [ 2519.848850] inet6_sendmsg+0x105/0x140 [ 2519.849312] ? inet6_compat_ioctl+0x320/0x320 [ 2519.849849] __sock_sendmsg+0xf2/0x190 [ 2519.850305] ____sys_sendmsg+0x334/0x870 [ 2519.850781] ? sock_write_iter+0x3d0/0x3d0 [ 2519.851288] ? do_recvmmsg+0x6d0/0x6d0 [ 2519.851752] ? __lock_acquire+0x1657/0x5b00 [ 2519.852267] ___sys_sendmsg+0xf3/0x170 [ 2519.852725] ? sendmsg_copy_msghdr+0x160/0x160 [ 2519.853266] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2519.853891] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2519.854414] ? trace_hardirqs_on+0x5b/0x180 [ 2519.854924] ? lock_acquire+0x197/0x470 [ 2519.855388] ? find_held_lock+0x2c/0x110 [ 2519.855868] ? __might_fault+0xd3/0x180 [ 2519.856339] ? lock_downgrade+0x6d0/0x6d0 [ 2519.856824] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2519.857488] __sys_sendmmsg+0x195/0x470 [ 2519.857955] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2519.858463] ? lock_downgrade+0x6d0/0x6d0 [ 2519.858960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2519.859526] ? wait_for_completion_io+0x270/0x270 [ 2519.860092] ? rcu_read_lock_any_held+0x75/0xa0 [ 2519.860633] ? vfs_write+0x354/0xb10 [ 2519.861069] ? fput_many+0x2f/0x1a0 [ 2519.861487] ? ksys_write+0x1a9/0x260 [ 2519.861922] ? __ia32_sys_read+0xb0/0xb0 [ 2519.862387] __x64_sys_sendmmsg+0x99/0x100 [ 2519.862871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2519.863457] do_syscall_64+0x33/0x40 [ 2519.863886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2519.864472] RIP: 0033:0x7f9d078eeb19 [ 2519.864898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2519.866987] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2519.867859] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2519.868668] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2519.869485] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2519.870296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2519.871110] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:36:49 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 77) 01:36:49 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xf7ffff7f, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:49 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffff000, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:36:49 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 61) 01:36:49 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x3f000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:36:49 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa0901, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:36:49 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x905000000000000, 0x8000) [ 2534.577134] FAULT_INJECTION: forcing a failure. [ 2534.577134] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.578842] CPU: 1 PID: 12240 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2534.579786] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2534.580940] Call Trace: [ 2534.581349] dump_stack+0x107/0x167 [ 2534.581922] should_fail.cold+0x5/0xa [ 2534.582506] should_failslab+0x5/0x20 [ 2534.583082] __kmalloc_node_track_caller+0x74/0x3b0 [ 2534.583833] ? skb_copy+0x183/0x350 [ 2534.584386] __alloc_skb+0xb1/0x5b0 [ 2534.584923] skb_copy+0x183/0x350 [ 2534.585432] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2534.586315] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2534.587105] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2534.587979] ? lock_acquire+0x160/0x470 [ 2534.588574] ? find_held_lock+0x2c/0x110 [ 2534.589187] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2534.589958] mac80211_hwsim_tx+0x574/0x12a0 [ 2534.590623] ? trace_hardirqs_on+0x5b/0x180 [ 2534.591267] ieee80211_tx_frags+0x59c/0x9f0 [ 2534.591904] ? fq_skb_free_func+0x20/0x20 [ 2534.592515] __ieee80211_tx+0x1ad/0x640 [ 2534.593083] ieee80211_tx+0x329/0x410 [ 2534.593644] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2534.594387] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2534.595236] ? ieee80211_skb_resize+0x116/0x630 [ 2534.595919] ieee80211_xmit+0x220/0x2a0 [ 2534.596511] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2534.597261] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2534.598023] ieee80211_subif_start_xmit+0xef/0xf70 [ 2534.598732] ? lock_chain_count+0x20/0x20 [ 2534.599330] ? skb_crc32c_csum_help+0x80/0x80 [ 2534.599981] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2534.600752] ? lock_acquire+0x197/0x470 [ 2534.601329] ? sch_direct_xmit+0x31a/0x790 [ 2534.601957] ? lock_release+0x680/0x680 [ 2534.602543] dev_hard_start_xmit+0x1cb/0x6f0 [ 2534.603185] sch_direct_xmit+0x25f/0x790 [ 2534.603772] ? lock_acquire+0x197/0x470 [ 2534.604348] ? find_held_lock+0x2c/0x110 [ 2534.604938] ? dev_watchdog+0xbc0/0xbc0 [ 2534.605527] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2534.606190] __qdisc_run+0x4aa/0x1570 [ 2534.606762] __dev_queue_xmit+0xd43/0x2690 [ 2534.607381] ? ip6_finish_output2+0x158f/0x1cf0 [ 2534.608026] ? find_held_lock+0x2c/0x110 [ 2534.608621] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2534.609282] ? lock_downgrade+0x6d0/0x6d0 [ 2534.610345] ? do_softirq+0x53/0xc0 [ 2534.611343] ? trace_hardirqs_on+0x5b/0x180 [ 2534.612538] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2534.613984] ip6_finish_output2+0x158f/0x1cf0 [ 2534.615258] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2534.616598] ip6_output+0x3b8/0x7e0 [ 2534.617521] ip6_local_out+0xb4/0x1a0 [ 2534.618540] ip6_send_skb+0x112/0x460 [ 2534.619511] udp_v6_send_skb+0x7aa/0x15b0 [ 2534.620665] udpv6_sendmsg+0x2116/0x2ad0 [ 2534.621681] ? ip_frag_init+0x350/0x350 [ 2534.622679] ? udp_v6_push_pending_frames+0x360/0x360 [ 2534.623966] ? perf_event_task_disable+0x390/0x390 [ 2534.625237] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2534.626520] ? lock_acquire+0x197/0x470 [ 2534.627554] ? find_held_lock+0x2c/0x110 [ 2534.628632] ? sock_has_perm+0x1ea/0x280 [ 2534.629747] ? __import_iovec+0x458/0x590 [ 2534.630833] ? udp_v6_push_pending_frames+0x360/0x360 [ 2534.632215] inet6_sendmsg+0x105/0x140 [ 2534.633260] ? inet6_compat_ioctl+0x320/0x320 [ 2534.634443] __sock_sendmsg+0xf2/0x190 [ 2534.635460] ____sys_sendmsg+0x334/0x870 [ 2534.636532] ? sock_write_iter+0x3d0/0x3d0 [ 2534.637665] ? do_recvmmsg+0x6d0/0x6d0 [ 2534.638710] ? __lock_acquire+0x1657/0x5b00 [ 2534.639884] ___sys_sendmsg+0xf3/0x170 [ 2534.640927] ? sendmsg_copy_msghdr+0x160/0x160 [ 2534.642158] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2534.643346] ? _raw_spin_unlock_irq+0x27/0x30 [ 2534.644554] ? lock_acquire+0x197/0x470 [ 2534.645625] ? find_held_lock+0x2c/0x110 [ 2534.646718] ? __might_fault+0xd3/0x180 [ 2534.647778] ? lock_downgrade+0x6d0/0x6d0 [ 2534.648887] ? io_schedule_timeout+0x140/0x140 [ 2534.650146] __sys_sendmmsg+0x195/0x470 [ 2534.651214] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.652358] ? lock_downgrade+0x6d0/0x6d0 [ 2534.653498] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2534.654650] ? wait_for_completion_io+0x270/0x270 [ 2534.655689] ? rcu_read_lock_any_held+0x75/0xa0 [ 2534.656685] ? vfs_write+0x354/0xb10 [ 2534.657484] ? fput_many+0x2f/0x1a0 [ 2534.658303] ? ksys_write+0x1a9/0x260 [ 2534.659124] ? __ia32_sys_read+0xb0/0xb0 [ 2534.660013] __x64_sys_sendmmsg+0x99/0x100 [ 2534.660924] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.662054] do_syscall_64+0x33/0x40 [ 2534.662859] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2534.663975] RIP: 0033:0x7f9d078eeb19 [ 2534.664779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.668502] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.670047] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2534.671532] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2534.673205] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.674917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2534.676648] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2534.690909] FAULT_INJECTION: forcing a failure. [ 2534.690909] name failslab, interval 1, probability 0, space 0, times 0 [ 2534.694077] CPU: 1 PID: 12244 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2534.695850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2534.697984] Call Trace: [ 2534.698673] dump_stack+0x107/0x167 [ 2534.699618] should_fail.cold+0x5/0xa [ 2534.700618] should_failslab+0x5/0x20 [ 2534.701619] __kmalloc_node_track_caller+0x74/0x3b0 [ 2534.702907] ? alloc_skb_with_frags+0x92/0x570 [ 2534.704091] __alloc_skb+0xb1/0x5b0 [ 2534.705043] alloc_skb_with_frags+0x92/0x570 [ 2534.706188] ? quarantine_put+0x8b/0x1a0 [ 2534.707246] ? kmem_cache_free+0xa7/0x2d0 [ 2534.708325] sock_alloc_send_pskb+0x7af/0x930 [ 2534.709502] ? sk_alloc+0x350/0x350 [ 2534.710476] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2534.711824] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2534.713177] ? mark_lock+0xf5/0x2df0 [ 2534.714168] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2534.715464] ? ip6_mtu+0x1bb/0x3d0 [ 2534.716388] ? lock_downgrade+0x6d0/0x6d0 [ 2534.717455] ? ip_frag_init+0x350/0x350 [ 2534.718510] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2534.719748] ? ip6_mtu+0x1e9/0x3d0 [ 2534.720806] ? ip6_setup_cork+0xfb7/0x1740 [ 2534.721941] ip6_make_skb+0x2de/0x4e0 [ 2534.722950] ? ip_frag_init+0x350/0x350 [ 2534.724012] ? ip_frag_init+0x350/0x350 [ 2534.725068] ? ip6_push_pending_frames+0xf0/0xf0 [ 2534.726353] ? ip6_dst_check+0x389/0x8d0 [ 2534.727434] ? sk_dst_check+0x235/0x4c0 [ 2534.728504] udpv6_sendmsg+0x20d3/0x2ad0 [ 2534.729629] ? ip_frag_init+0x350/0x350 [ 2534.730711] ? udp_v6_push_pending_frames+0x360/0x360 [ 2534.732085] ? perf_event_task_disable+0x390/0x390 [ 2534.733413] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2534.734769] ? lock_acquire+0x197/0x470 [ 2534.735822] ? find_held_lock+0x2c/0x110 [ 2534.736944] ? sock_has_perm+0x1ea/0x280 [ 2534.738071] ? __import_iovec+0x458/0x590 [ 2534.739179] ? udp_v6_push_pending_frames+0x360/0x360 [ 2534.740584] inet6_sendmsg+0x105/0x140 [ 2534.741638] ? inet6_compat_ioctl+0x320/0x320 [ 2534.742830] __sock_sendmsg+0xf2/0x190 [ 2534.743867] ____sys_sendmsg+0x334/0x870 [ 2534.744955] ? sock_write_iter+0x3d0/0x3d0 [ 2534.746105] ? do_recvmmsg+0x6d0/0x6d0 [ 2534.747162] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2534.748566] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2534.749908] ? trace_hardirqs_on+0x5b/0x180 [ 2534.750933] ___sys_sendmsg+0xf3/0x170 [ 2534.751857] ? sendmsg_copy_msghdr+0x160/0x160 [ 2534.752938] ? check_memory_region+0x198/0x1f0 [ 2534.754148] ? finish_task_switch+0x1a4/0x5d0 [ 2534.755202] ? __switch_to+0x572/0xf70 [ 2534.756127] ? __switch_to_asm+0x3a/0x60 [ 2534.756676] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 2534.757082] ? __switch_to_asm+0x34/0x60 [ 2534.757120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2534.760979] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2534.762261] ? trace_hardirqs_on+0x5b/0x180 [ 2534.763289] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2534.764626] ? __sys_sendmmsg+0x254/0x470 [ 2534.765644] __sys_sendmmsg+0x195/0x470 [ 2534.766598] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2534.767618] ? lock_downgrade+0x6d0/0x6d0 [ 2534.768653] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2534.769815] ? wait_for_completion_io+0x270/0x270 [ 2534.770953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2534.772113] ? vfs_write+0x354/0xb10 [ 2534.773078] ? fput_many+0x2f/0x1a0 [ 2534.774047] ? ksys_write+0x1a9/0x260 [ 2534.775029] ? __ia32_sys_read+0xb0/0xb0 [ 2534.776091] __x64_sys_sendmmsg+0x99/0x100 [ 2534.777179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2534.778508] do_syscall_64+0x33/0x40 [ 2534.779467] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2534.780779] RIP: 0033:0x7f6413bdcb19 [ 2534.781760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2534.786461] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2534.788398] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2534.790219] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2534.792029] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2534.793868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2534.795690] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:36:50 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:50 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000040)) [ 2534.846937] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value 01:36:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xc00000000000000, 0x8000) 01:36:50 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x901, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) write$P9_RCLUNK(r2, 0x0, 0xffffffffffffff26) 01:36:50 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, 0x0, 0xe8b02, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:36:50 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 1) 01:36:50 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x64000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2535.142525] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.143618] FAT-fs (loop4): Directory bread(block 11) failed [ 2535.153608] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.154379] FAT-fs (loop4): Directory bread(block 11) failed 01:36:50 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x8) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2535.163924] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.164799] FAT-fs (loop4): Directory bread(block 11) failed [ 2535.168916] FAULT_INJECTION: forcing a failure. [ 2535.168916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2535.171711] CPU: 0 PID: 12278 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2535.173182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.174987] Call Trace: [ 2535.175575] dump_stack+0x107/0x167 [ 2535.176373] should_fail.cold+0x5/0xa [ 2535.177223] _copy_from_user+0x2e/0x1b0 [ 2535.178116] __copy_msghdr_from_user+0x91/0x4b0 [ 2535.179130] ? __ia32_sys_shutdown+0x80/0x80 [ 2535.180097] ? __lock_acquire+0xbb1/0x5b00 [ 2535.181015] sendmsg_copy_msghdr+0xa1/0x160 [ 2535.181985] ? do_recvmmsg+0x6d0/0x6d0 [ 2535.182853] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2535.183990] ? mark_lock+0xf5/0x2df0 [ 2535.184810] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2535.185982] ? __lock_acquire+0x1657/0x5b00 [ 2535.186927] ___sys_sendmsg+0xc6/0x170 [ 2535.187783] ? sendmsg_copy_msghdr+0x160/0x160 [ 2535.188784] ? __fget_files+0x2cf/0x520 [ 2535.189683] ? lock_downgrade+0x6d0/0x6d0 [ 2535.190595] ? lock_downgrade+0x6d0/0x6d0 [ 2535.191520] ? __fget_files+0x2f8/0x520 [ 2535.192404] ? __fget_light+0xea/0x290 [ 2535.193274] __sys_sendmmsg+0x195/0x470 [ 2535.194171] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2535.195108] ? lock_downgrade+0x6d0/0x6d0 [ 2535.196000] ? ksys_write+0x12d/0x260 [ 2535.196850] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2535.198048] ? wait_for_completion_io+0x270/0x270 [ 2535.199156] ? rcu_read_lock_any_held+0x75/0xa0 [ 2535.200169] ? vfs_write+0x354/0xb10 [ 2535.200961] ? fput_many+0x2f/0x1a0 [ 2535.201788] ? ksys_write+0x1a9/0x260 [ 2535.202624] ? __ia32_sys_read+0xb0/0xb0 [ 2535.203517] __x64_sys_sendmmsg+0x99/0x100 [ 2535.204446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2535.205587] do_syscall_64+0x33/0x40 [ 2535.206405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2535.207512] RIP: 0033:0x7fa0b0e97b19 [ 2535.208325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.212258] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2535.213865] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2535.215377] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2535.216909] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.218484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2535.219945] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 01:36:50 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 78) 01:36:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x1000000000000000, 0x8000) [ 2535.338462] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.339749] FAT-fs (loop4): Directory bread(block 11) failed [ 2535.344122] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.345299] FAT-fs (loop4): Directory bread(block 11) failed [ 2535.346579] FAT-fs (loop4): Directory bread(block 10) failed [ 2535.350371] FAT-fs (loop4): Directory bread(block 11) failed [ 2535.360561] FAULT_INJECTION: forcing a failure. [ 2535.360561] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.362115] CPU: 1 PID: 12289 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2535.363038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.364142] Call Trace: [ 2535.364503] dump_stack+0x107/0x167 [ 2535.365006] should_fail.cold+0x5/0xa [ 2535.365523] ? create_object.isra.0+0x3a/0xa20 [ 2535.366110] should_failslab+0x5/0x20 [ 2535.366574] kmem_cache_alloc+0x5b/0x310 [ 2535.367070] create_object.isra.0+0x3a/0xa20 [ 2535.367602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2535.368220] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2535.368835] ? skb_copy+0x183/0x350 [ 2535.369280] __alloc_skb+0xb1/0x5b0 [ 2535.369795] skb_copy+0x183/0x350 [ 2535.370301] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2535.371149] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2535.371901] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2535.372736] ? lock_acquire+0x160/0x470 [ 2535.373313] ? find_held_lock+0x2c/0x110 [ 2535.373958] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2535.374698] mac80211_hwsim_tx+0x574/0x12a0 [ 2535.375318] ? trace_hardirqs_on+0x5b/0x180 [ 2535.375949] ieee80211_tx_frags+0x59c/0x9f0 [ 2535.376624] ? fq_skb_free_func+0x20/0x20 [ 2535.377192] __ieee80211_tx+0x1ad/0x640 [ 2535.377966] ieee80211_tx+0x329/0x410 [ 2535.378479] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2535.379297] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2535.380241] ? ieee80211_skb_resize+0x116/0x630 [ 2535.380993] ieee80211_xmit+0x220/0x2a0 [ 2535.381652] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2535.382490] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2535.383326] ieee80211_subif_start_xmit+0xef/0xf70 [ 2535.384117] ? lock_chain_count+0x20/0x20 [ 2535.384784] ? skb_crc32c_csum_help+0x80/0x80 [ 2535.385506] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2535.386191] ? lock_acquire+0x197/0x470 [ 2535.386828] ? sch_direct_xmit+0x31a/0x790 [ 2535.387352] ? lock_release+0x680/0x680 [ 2535.388001] dev_hard_start_xmit+0x1cb/0x6f0 [ 2535.388716] sch_direct_xmit+0x25f/0x790 [ 2535.389374] ? lock_acquire+0x197/0x470 [ 2535.390019] ? find_held_lock+0x2c/0x110 [ 2535.390673] ? dev_watchdog+0xbc0/0xbc0 [ 2535.391301] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2535.392036] __qdisc_run+0x4aa/0x1570 [ 2535.392527] __dev_queue_xmit+0xd43/0x2690 [ 2535.393205] ? ip6_finish_output2+0x158f/0x1cf0 [ 2535.393973] ? find_held_lock+0x2c/0x110 [ 2535.394628] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2535.395369] ? lock_downgrade+0x6d0/0x6d0 [ 2535.396032] ? do_softirq+0x53/0xc0 [ 2535.396626] ? trace_hardirqs_on+0x5b/0x180 [ 2535.397325] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2535.398181] ip6_finish_output2+0x158f/0x1cf0 [ 2535.398911] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2535.399720] ip6_output+0x3b8/0x7e0 [ 2535.400309] ip6_local_out+0xb4/0x1a0 [ 2535.400917] ip6_send_skb+0x112/0x460 [ 2535.401546] udp_v6_send_skb+0x7aa/0x15b0 [ 2535.402227] udpv6_sendmsg+0x2116/0x2ad0 [ 2535.402880] ? ip_frag_init+0x350/0x350 [ 2535.403524] ? udp_v6_push_pending_frames+0x360/0x360 [ 2535.404374] ? lock_acquire+0x197/0x470 [ 2535.405015] ? find_held_lock+0x2c/0x110 [ 2535.405692] ? sock_has_perm+0x1ea/0x280 [ 2535.406362] ? __import_iovec+0x458/0x590 [ 2535.406881] ? udp_v6_push_pending_frames+0x360/0x360 [ 2535.407708] inet6_sendmsg+0x105/0x140 [ 2535.408235] ? inet6_compat_ioctl+0x320/0x320 [ 2535.408951] __sock_sendmsg+0xf2/0x190 [ 2535.409462] ____sys_sendmsg+0x334/0x870 [ 2535.410125] ? sock_write_iter+0x3d0/0x3d0 [ 2535.410804] ? do_recvmmsg+0x6d0/0x6d0 [ 2535.411431] ? __lock_acquire+0x1657/0x5b00 [ 2535.412147] ___sys_sendmsg+0xf3/0x170 [ 2535.412775] ? sendmsg_copy_msghdr+0x160/0x160 [ 2535.413519] ? __fget_files+0x2cf/0x520 [ 2535.414178] ? lock_acquire+0x197/0x470 [ 2535.414818] ? find_held_lock+0x2c/0x110 [ 2535.415479] ? __might_fault+0xd3/0x180 [ 2535.416116] ? lock_downgrade+0x6d0/0x6d0 [ 2535.416796] __sys_sendmmsg+0x195/0x470 [ 2535.417443] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2535.418131] ? lock_downgrade+0x6d0/0x6d0 [ 2535.418840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2535.419534] ? wait_for_completion_io+0x270/0x270 [ 2535.420251] ? rcu_read_lock_any_held+0x75/0xa0 [ 2535.420917] ? vfs_write+0x354/0xb10 [ 2535.421455] ? fput_many+0x2f/0x1a0 [ 2535.421984] ? ksys_write+0x1a9/0x260 [ 2535.422532] ? __ia32_sys_read+0xb0/0xb0 [ 2535.423130] __x64_sys_sendmmsg+0x99/0x100 [ 2535.423738] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2535.424490] do_syscall_64+0x33/0x40 [ 2535.425030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2535.425764] RIP: 0033:0x7f9d078eeb19 [ 2535.426278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.428824] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2535.429935] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2535.430954] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2535.431978] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.433020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2535.433985] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:37:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x1200000000000000, 0x8000) 01:37:05 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xfffffdef, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:37:05 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:37:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x81020000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:37:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x83, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={r1, 0xffffffff, 0x5}) pipe(&(0x7f0000000840)) 01:37:05 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 2) 01:37:05 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 62) 01:37:05 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 79) [ 2549.944542] FAULT_INJECTION: forcing a failure. [ 2549.944542] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.946284] CPU: 0 PID: 12308 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2549.947297] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.948477] Call Trace: [ 2549.948869] dump_stack+0x107/0x167 [ 2549.949404] should_fail.cold+0x5/0xa [ 2549.949968] ? create_object.isra.0+0x3a/0xa20 [ 2549.950646] should_failslab+0x5/0x20 [ 2549.951206] kmem_cache_alloc+0x5b/0x310 [ 2549.951802] create_object.isra.0+0x3a/0xa20 [ 2549.952452] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.953203] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2549.953948] ? skb_copy+0x183/0x350 [ 2549.954494] __alloc_skb+0xb1/0x5b0 [ 2549.955034] skb_copy+0x183/0x350 [ 2549.955552] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2549.956431] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2549.957187] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2549.958039] ? lock_acquire+0x160/0x470 [ 2549.958640] ? find_held_lock+0x2c/0x110 [ 2549.959237] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2549.959985] mac80211_hwsim_tx+0x574/0x12a0 [ 2549.960627] ? trace_hardirqs_on+0x5b/0x180 [ 2549.961264] ieee80211_tx_frags+0x59c/0x9f0 [ 2549.961906] ? fq_skb_free_func+0x20/0x20 [ 2549.962537] __ieee80211_tx+0x1ad/0x640 [ 2549.963121] ieee80211_tx+0x329/0x410 [ 2549.963682] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2549.964448] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2549.965337] ? ieee80211_skb_resize+0x116/0x630 [ 2549.966032] ieee80211_xmit+0x220/0x2a0 [ 2549.966645] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2549.967407] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2549.968152] ieee80211_subif_start_xmit+0xef/0xf70 [ 2549.968875] ? lock_chain_count+0x20/0x20 [ 2549.969487] ? skb_crc32c_csum_help+0x80/0x80 [ 2549.970156] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2549.970933] ? lock_acquire+0x197/0x470 [ 2549.971524] ? sch_direct_xmit+0x31a/0x790 [ 2549.972146] ? lock_release+0x680/0x680 [ 2549.972737] dev_hard_start_xmit+0x1cb/0x6f0 [ 2549.973390] sch_direct_xmit+0x25f/0x790 [ 2549.973979] ? lock_acquire+0x197/0x470 [ 2549.974569] ? find_held_lock+0x2c/0x110 [ 2549.975163] ? dev_watchdog+0xbc0/0xbc0 [ 2549.975740] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2549.976411] __qdisc_run+0x4aa/0x1570 [ 2549.976972] __dev_queue_xmit+0xd43/0x2690 [ 2549.977586] ? ip6_finish_output2+0x158f/0x1cf0 [ 2549.978280] ? find_held_lock+0x2c/0x110 [ 2549.978867] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2549.979532] ? lock_downgrade+0x6d0/0x6d0 [ 2549.980130] ? do_softirq+0x53/0xc0 [ 2549.980657] ? trace_hardirqs_on+0x5b/0x180 [ 2549.981297] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2549.982067] ip6_finish_output2+0x158f/0x1cf0 [ 2549.982735] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2549.983465] ip6_output+0x3b8/0x7e0 [ 2549.984000] ip6_local_out+0xb4/0x1a0 [ 2549.984562] ip6_send_skb+0x112/0x460 [ 2549.985121] udp_v6_send_skb+0x7aa/0x15b0 [ 2549.985741] udpv6_sendmsg+0x2116/0x2ad0 [ 2549.986340] ? ip_frag_init+0x350/0x350 [ 2549.986927] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.987691] ? perf_event_task_disable+0x390/0x390 [ 2549.988415] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2549.989122] ? lock_acquire+0x197/0x470 [ 2549.989704] ? find_held_lock+0x2c/0x110 [ 2549.990315] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2549.991094] ? trace_hardirqs_on+0x5b/0x180 [ 2549.991724] ? sock_has_perm+0x1ea/0x280 [ 2549.992342] ? inet6_sendmsg+0x4a/0x140 [ 2549.992920] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.993674] inet6_sendmsg+0x105/0x140 [ 2549.994249] ? inet6_compat_ioctl+0x320/0x320 [ 2549.994904] __sock_sendmsg+0xf2/0x190 [ 2549.995479] ____sys_sendmsg+0x334/0x870 [ 2549.996070] ? sock_write_iter+0x3d0/0x3d0 [ 2549.996686] ? do_recvmmsg+0x6d0/0x6d0 [ 2549.997260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.998024] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2549.998823] ? trace_hardirqs_on+0x5b/0x180 [ 2549.999456] ___sys_sendmsg+0xf3/0x170 [ 2550.000022] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.000692] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.001341] ? _raw_spin_unlock_irq+0x27/0x30 [ 2550.001989] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.002647] ? finish_task_switch+0x126/0x5d0 [ 2550.003297] ? finish_task_switch+0xef/0x5d0 [ 2550.003933] ? __switch_to+0x572/0xf70 [ 2550.004501] ? __switch_to_asm+0x3a/0x60 [ 2550.005085] ? __switch_to_asm+0x34/0x60 [ 2550.005682] ? __schedule+0x82c/0x1ea0 [ 2550.006262] ? io_schedule_timeout+0x140/0x140 [ 2550.006942] __sys_sendmmsg+0x195/0x470 [ 2550.007528] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.008173] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2550.008805] ? clockevents_program_event+0x131/0x360 [ 2550.009551] ? tick_program_event+0xa8/0x140 [ 2550.010197] ? hrtimer_interrupt+0x771/0x9b0 [ 2550.010855] __x64_sys_sendmmsg+0x99/0x100 [ 2550.011475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.012222] do_syscall_64+0x33/0x40 [ 2550.012762] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.013511] RIP: 0033:0x7f9d078eeb19 [ 2550.014050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.016740] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.017850] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2550.018897] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.019934] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.020937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.021972] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2550.058449] FAULT_INJECTION: forcing a failure. [ 2550.058449] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.061526] CPU: 1 PID: 12300 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2550.063124] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.065021] Call Trace: [ 2550.065628] dump_stack+0x107/0x167 [ 2550.066475] should_fail.cold+0x5/0xa [ 2550.067355] ? create_object.isra.0+0x3a/0xa20 [ 2550.068405] should_failslab+0x5/0x20 [ 2550.069276] kmem_cache_alloc+0x5b/0x310 [ 2550.070219] create_object.isra.0+0x3a/0xa20 [ 2550.071226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2550.072400] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2550.073567] ? alloc_skb_with_frags+0x92/0x570 [ 2550.074629] __alloc_skb+0xb1/0x5b0 [ 2550.075467] alloc_skb_with_frags+0x92/0x570 [ 2550.076469] ? quarantine_put+0x8b/0x1a0 [ 2550.077405] ? kmem_cache_free+0xa7/0x2d0 [ 2550.078366] sock_alloc_send_pskb+0x7af/0x930 [ 2550.079404] ? sk_alloc+0x350/0x350 [ 2550.080243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.081441] ? __local_bh_enable_ip+0x9d/0x100 [ 2550.082496] ? trace_hardirqs_on+0x5b/0x180 [ 2550.083484] ? __dev_queue_xmit+0xdf8/0x2690 [ 2550.084502] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2550.085656] ? ip6_mtu+0x1bb/0x3d0 [ 2550.086484] ? lock_downgrade+0x6d0/0x6d0 [ 2550.087438] ? ip_frag_init+0x350/0x350 [ 2550.088354] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2550.089460] ? ip6_mtu+0x1e9/0x3d0 [ 2550.090280] ? ip6_setup_cork+0xfb7/0x1740 [ 2550.091251] ip6_make_skb+0x2de/0x4e0 [ 2550.092120] ? ip_frag_init+0x350/0x350 [ 2550.093034] ? ip_frag_init+0x350/0x350 [ 2550.093946] ? ip6_push_pending_frames+0xf0/0xf0 [ 2550.095051] ? ip6_dst_check+0x389/0x8d0 [ 2550.095983] ? sk_dst_check+0x235/0x4c0 [ 2550.096903] udpv6_sendmsg+0x20d3/0x2ad0 [ 2550.097837] ? ip_frag_init+0x350/0x350 [ 2550.098765] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.099950] ? perf_event_task_disable+0x390/0x390 [ 2550.101072] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2550.102189] ? lock_acquire+0x197/0x470 [ 2550.103097] ? find_held_lock+0x2c/0x110 [ 2550.104036] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2550.105270] ? sock_has_perm+0x1ea/0x280 [ 2550.106228] ? __import_iovec+0x458/0x590 [ 2550.107176] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.108357] inet6_sendmsg+0x105/0x140 [ 2550.109248] ? inet6_compat_ioctl+0x320/0x320 [ 2550.110280] __sock_sendmsg+0xf2/0x190 [ 2550.111172] ____sys_sendmsg+0x334/0x870 [ 2550.112102] ? sock_write_iter+0x3d0/0x3d0 [ 2550.113067] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.113958] ? __lock_acquire+0x1657/0x5b00 [ 2550.114963] ___sys_sendmsg+0xf3/0x170 [ 2550.115855] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.116896] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.117920] ? _raw_spin_unlock_irq+0x27/0x30 [ 2550.118961] ? lock_acquire+0x197/0x470 [ 2550.119867] ? find_held_lock+0x2c/0x110 [ 2550.120801] ? __might_fault+0xd3/0x180 [ 2550.121708] ? lock_downgrade+0x6d0/0x6d0 [ 2550.122667] ? io_schedule_timeout+0x140/0x140 [ 2550.123722] __sys_sendmmsg+0x195/0x470 [ 2550.124636] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.125621] ? lock_downgrade+0x6d0/0x6d0 [ 2550.126593] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2550.127699] ? wait_for_completion_io+0x270/0x270 [ 2550.128803] ? rcu_read_lock_any_held+0x75/0xa0 [ 2550.129913] ? vfs_write+0x354/0xb10 [ 2550.130779] ? fput_many+0x2f/0x1a0 [ 2550.131613] ? ksys_write+0x1a9/0x260 [ 2550.132484] ? __ia32_sys_read+0xb0/0xb0 [ 2550.133422] __x64_sys_sendmmsg+0x99/0x100 [ 2550.134402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.135578] do_syscall_64+0x33/0x40 [ 2550.136428] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.137599] RIP: 0033:0x7f6413bdcb19 [ 2550.138458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.142676] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.144410] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2550.146040] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.147671] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.149334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.150970] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2550.154638] FAULT_INJECTION: forcing a failure. [ 2550.154638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2550.156494] CPU: 0 PID: 12311 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2550.157499] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.158668] Call Trace: [ 2550.159066] dump_stack+0x107/0x167 [ 2550.159596] should_fail.cold+0x5/0xa [ 2550.160161] _copy_from_user+0x2e/0x1b0 [ 2550.160734] iovec_from_user+0x141/0x400 [ 2550.161325] __import_iovec+0x67/0x590 [ 2550.161897] ? __ia32_sys_shutdown+0x80/0x80 [ 2550.162547] import_iovec+0x83/0xb0 [ 2550.163079] sendmsg_copy_msghdr+0x131/0x160 [ 2550.163718] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.164289] ? mark_lock+0xf5/0x2df0 [ 2550.164835] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.165597] ? __lock_acquire+0x1657/0x5b00 [ 2550.166233] ___sys_sendmsg+0xc6/0x170 [ 2550.166796] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.167464] ? __fget_files+0x2cf/0x520 [ 2550.168044] ? lock_downgrade+0x6d0/0x6d0 [ 2550.168648] ? lock_downgrade+0x6d0/0x6d0 [ 2550.169253] ? __fget_files+0x2f8/0x520 [ 2550.169831] ? __fget_light+0xea/0x290 [ 2550.170404] __sys_sendmmsg+0x195/0x470 [ 2550.170987] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.171612] ? lock_downgrade+0x6d0/0x6d0 [ 2550.172218] ? ksys_write+0x12d/0x260 [ 2550.172784] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2550.173484] ? wait_for_completion_io+0x270/0x270 [ 2550.174191] ? rcu_read_lock_any_held+0x75/0xa0 [ 2550.174860] ? vfs_write+0x354/0xb10 [ 2550.175398] ? fput_many+0x2f/0x1a0 [ 2550.175925] ? ksys_write+0x1a9/0x260 [ 2550.176475] ? __ia32_sys_read+0xb0/0xb0 [ 2550.177066] __x64_sys_sendmmsg+0x99/0x100 [ 2550.177679] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.178428] do_syscall_64+0x33/0x40 [ 2550.178968] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.179710] RIP: 0033:0x7fa0b0e97b19 [ 2550.180249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.182926] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.184035] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2550.185031] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.186073] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.187107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2550.188142] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2550.193838] FAT-fs (loop4): Directory bread(block 10) failed [ 2550.199952] FAT-fs (loop4): Directory bread(block 11) failed 01:37:05 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x321a00, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:37:05 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 80) 01:37:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xf4ffffff, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2550.270025] FAULT_INJECTION: forcing a failure. [ 2550.270025] name failslab, interval 1, probability 0, space 0, times 0 01:37:05 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xfbffffff, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2550.272910] CPU: 1 PID: 12324 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2550.274674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.276570] Call Trace: [ 2550.277179] dump_stack+0x107/0x167 [ 2550.278017] should_fail.cold+0x5/0xa [ 2550.278902] ? __alloc_skb+0x6d/0x5b0 [ 2550.279775] should_failslab+0x5/0x20 [ 2550.280644] kmem_cache_alloc_node+0x55/0x330 [ 2550.281677] __alloc_skb+0x6d/0x5b0 [ 2550.282523] alloc_skb_with_frags+0x92/0x570 [ 2550.283524] ? sch_direct_xmit+0x1fb/0x790 [ 2550.284494] ? lock_acquire+0x197/0x470 [ 2550.285400] ? find_held_lock+0x2c/0x110 [ 2550.286341] sock_alloc_send_pskb+0x7af/0x930 [ 2550.287377] ? sk_alloc+0x350/0x350 [ 2550.288215] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.289409] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.290614] ? mark_lock+0xf5/0x2df0 [ 2550.291468] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2550.292612] ? ip6_mtu+0x1bb/0x3d0 [ 2550.293421] ? lock_downgrade+0x6d0/0x6d0 [ 2550.294372] ? ip_frag_init+0x350/0x350 [ 2550.295286] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2550.296381] ? ip6_mtu+0x1e9/0x3d0 [ 2550.297189] ? ip6_setup_cork+0xfb7/0x1740 [ 2550.298162] ip6_make_skb+0x2de/0x4e0 [ 2550.299030] ? ip_frag_init+0x350/0x350 [ 2550.299941] ? ip_frag_init+0x350/0x350 [ 2550.300848] ? ip6_push_pending_frames+0xf0/0xf0 01:37:05 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 3) [ 2550.301941] ? ip6_dst_check+0x389/0x8d0 [ 2550.303045] ? sk_dst_check+0x235/0x4c0 [ 2550.303960] udpv6_sendmsg+0x20d3/0x2ad0 [ 2550.304890] ? ip_frag_init+0x350/0x350 [ 2550.305806] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.306992] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.308190] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2550.309423] ? trace_hardirqs_on+0x5b/0x180 [ 2550.310429] ? lock_acquire+0x1b9/0x470 [ 2550.311348] ? sock_has_perm+0x1ea/0x280 [ 2550.312292] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.313489] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2550.314732] ? trace_hardirqs_on+0x5b/0x180 [ 2550.315718] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.316899] inet6_sendmsg+0x105/0x140 [ 2550.317789] ? inet6_compat_ioctl+0x320/0x320 [ 2550.318818] __sock_sendmsg+0xf2/0x190 [ 2550.319706] ____sys_sendmsg+0x334/0x870 [ 2550.320634] ? sock_write_iter+0x3d0/0x3d0 [ 2550.321593] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.322521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2550.323722] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2550.324951] ? trace_hardirqs_on+0x5b/0x180 [ 2550.325940] ___sys_sendmsg+0xf3/0x170 [ 2550.326839] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.327881] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.328898] ? _raw_spin_unlock_irq+0x27/0x30 [ 2550.329944] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.330996] ? finish_task_switch+0x126/0x5d0 [ 2550.332012] ? finish_task_switch+0xef/0x5d0 [ 2550.333009] ? __switch_to+0x572/0xf70 [ 2550.333891] ? __switch_to_asm+0x3a/0x60 [ 2550.334818] ? __switch_to_asm+0x34/0x60 [ 2550.335746] ? __schedule+0x82c/0x1ea0 [ 2550.336640] ? io_schedule_timeout+0x140/0x140 [ 2550.337694] __sys_sendmmsg+0x195/0x470 [ 2550.338614] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.339597] ? lock_downgrade+0x6d0/0x6d0 [ 2550.340578] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2550.341679] ? wait_for_completion_io+0x270/0x270 [ 2550.342815] ? rcu_read_lock_any_held+0x75/0xa0 [ 2550.343900] ? vfs_write+0x354/0xb10 [ 2550.344749] ? fput_many+0x2f/0x1a0 [ 2550.345579] ? ksys_write+0x1a9/0x260 [ 2550.346456] ? __ia32_sys_read+0xb0/0xb0 [ 2550.347388] __x64_sys_sendmmsg+0x99/0x100 [ 2550.348350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.349520] do_syscall_64+0x33/0x40 [ 2550.350376] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.351542] RIP: 0033:0x7f9d078eeb19 [ 2550.352409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.356606] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.358349] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2550.359975] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.361599] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.363232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.364857] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:37:05 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 63) 01:37:05 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2550.388586] FAULT_INJECTION: forcing a failure. [ 2550.388586] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.390114] CPU: 0 PID: 12332 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2550.390918] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.391883] Call Trace: [ 2550.392195] dump_stack+0x107/0x167 [ 2550.392623] should_fail.cold+0x5/0xa [ 2550.393078] ? __alloc_skb+0x6d/0x5b0 [ 2550.393530] should_failslab+0x5/0x20 [ 2550.393974] kmem_cache_alloc_node+0x55/0x330 [ 2550.394504] __alloc_skb+0x6d/0x5b0 [ 2550.394924] alloc_skb_with_frags+0x92/0x570 [ 2550.395443] ? mark_lock+0xf5/0x2df0 [ 2550.395876] ? lock_acquire+0x197/0x470 [ 2550.396337] ? find_held_lock+0x2c/0x110 [ 2550.396806] sock_alloc_send_pskb+0x7af/0x930 [ 2550.397333] ? sk_alloc+0x350/0x350 [ 2550.397759] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.398383] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2550.398968] ? ip6_mtu+0x1bb/0x3d0 [ 2550.399380] ? lock_downgrade+0x6d0/0x6d0 [ 2550.399855] ? ip_frag_init+0x350/0x350 [ 2550.400330] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2550.400889] ? ip6_mtu+0x1e9/0x3d0 [ 2550.401293] ? ip6_setup_cork+0xfb7/0x1740 [ 2550.401787] ip6_make_skb+0x2de/0x4e0 [ 2550.402238] ? ip_frag_init+0x350/0x350 [ 2550.402694] ? ip_frag_init+0x350/0x350 [ 2550.403159] ? ip6_push_pending_frames+0xf0/0xf0 [ 2550.403718] ? ip6_dst_check+0x389/0x8d0 [ 2550.404185] ? sk_dst_check+0x235/0x4c0 [ 2550.404658] udpv6_sendmsg+0x20d3/0x2ad0 [ 2550.405132] ? ip_frag_init+0x350/0x350 [ 2550.405605] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.406224] ? lock_acquire+0x197/0x470 [ 2550.406682] ? find_held_lock+0x2c/0x110 [ 2550.407151] ? __might_fault+0xd3/0x180 [ 2550.407620] ? sock_has_perm+0x1ea/0x280 [ 2550.408108] ? __import_iovec+0x458/0x590 [ 2550.408591] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.409362] inet6_sendmsg+0x105/0x140 [ 2550.409928] ? inet6_compat_ioctl+0x320/0x320 [ 2550.410480] __sock_sendmsg+0xf2/0x190 [ 2550.410932] ____sys_sendmsg+0x334/0x870 [ 2550.411403] ? sock_write_iter+0x3d0/0x3d0 [ 2550.411892] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.412347] ? mark_lock+0xf5/0x2df0 [ 2550.412783] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2550.413389] ? __lock_acquire+0x1657/0x5b00 [ 2550.413893] ___sys_sendmsg+0xf3/0x170 [ 2550.414354] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.414891] ? __fget_files+0x2cf/0x520 [ 2550.415353] ? lock_downgrade+0x6d0/0x6d0 [ 2550.415835] ? lock_downgrade+0x6d0/0x6d0 [ 2550.416321] ? __fget_files+0x2f8/0x520 [ 2550.416786] ? __fget_light+0xea/0x290 [ 2550.417245] __sys_sendmmsg+0x195/0x470 [ 2550.417707] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.418214] ? lock_downgrade+0x6d0/0x6d0 [ 2550.418708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2550.419276] ? wait_for_completion_io+0x270/0x270 [ 2550.419840] ? rcu_read_lock_any_held+0x75/0xa0 [ 2550.420388] ? vfs_write+0x354/0xb10 [ 2550.420818] ? fput_many+0x2f/0x1a0 [ 2550.421247] ? ksys_write+0x1a9/0x260 [ 2550.421690] ? __ia32_sys_read+0xb0/0xb0 [ 2550.422165] __x64_sys_sendmmsg+0x99/0x100 [ 2550.422645] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.423234] do_syscall_64+0x33/0x40 [ 2550.423663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.424254] RIP: 0033:0x7fa0b0e97b19 [ 2550.424683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.426794] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.427669] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2550.428486] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.429298] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.430119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2550.430929] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2550.517073] FAULT_INJECTION: forcing a failure. [ 2550.517073] name failslab, interval 1, probability 0, space 0, times 0 [ 2550.519993] CPU: 1 PID: 12339 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2550.521570] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2550.523433] Call Trace: [ 2550.524037] dump_stack+0x107/0x167 [ 2550.524852] should_fail.cold+0x5/0xa [ 2550.525706] ? skb_clone+0x14f/0x3d0 [ 2550.526551] should_failslab+0x5/0x20 [ 2550.527406] kmem_cache_alloc+0x5b/0x310 [ 2550.528325] skb_clone+0x14f/0x3d0 [ 2550.529129] ip6_finish_output2+0x10bf/0x1cf0 [ 2550.530148] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2550.531290] ip6_output+0x3b8/0x7e0 [ 2550.532112] ip6_local_out+0xb4/0x1a0 [ 2550.532963] ip6_send_skb+0x112/0x460 [ 2550.533818] udp_v6_send_skb+0x7aa/0x15b0 [ 2550.534762] udpv6_sendmsg+0x2116/0x2ad0 [ 2550.535670] ? ip_frag_init+0x350/0x350 [ 2550.536568] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.537728] ? perf_event_task_disable+0x390/0x390 [ 2550.538841] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2550.539924] ? lock_acquire+0x197/0x470 [ 2550.540813] ? find_held_lock+0x2c/0x110 [ 2550.541738] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2550.542949] ? sock_has_perm+0x1ea/0x280 [ 2550.543882] ? __import_iovec+0x458/0x590 [ 2550.544808] ? udp_v6_push_pending_frames+0x360/0x360 [ 2550.545967] inet6_sendmsg+0x105/0x140 [ 2550.546845] ? inet6_compat_ioctl+0x320/0x320 [ 2550.547847] __sock_sendmsg+0xf2/0x190 [ 2550.548718] ____sys_sendmsg+0x334/0x870 [ 2550.549626] ? sock_write_iter+0x3d0/0x3d0 [ 2550.550578] ? do_recvmmsg+0x6d0/0x6d0 [ 2550.551448] ? __lock_acquire+0x1657/0x5b00 [ 2550.552424] ___sys_sendmsg+0xf3/0x170 [ 2550.553298] ? sendmsg_copy_msghdr+0x160/0x160 [ 2550.554345] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2550.555394] ? _raw_spin_unlock_irq+0x27/0x30 [ 2550.556435] ? lock_acquire+0x197/0x470 [ 2550.557320] ? find_held_lock+0x2c/0x110 [ 2550.558240] ? __might_fault+0xd3/0x180 [ 2550.559126] ? lock_downgrade+0x6d0/0x6d0 [ 2550.560052] ? io_schedule_timeout+0x140/0x140 [ 2550.561086] __sys_sendmmsg+0x195/0x470 [ 2550.561978] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2550.562946] ? lock_downgrade+0x6d0/0x6d0 [ 2550.563887] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2550.564965] ? wait_for_completion_io+0x270/0x270 [ 2550.566064] ? rcu_read_lock_any_held+0x75/0xa0 [ 2550.567117] ? vfs_write+0x354/0xb10 [ 2550.567958] ? fput_many+0x2f/0x1a0 [ 2550.568798] ? ksys_write+0x1a9/0x260 [ 2550.569652] ? __ia32_sys_read+0xb0/0xb0 [ 2550.570575] __x64_sys_sendmmsg+0x99/0x100 [ 2550.571527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2550.572680] do_syscall_64+0x33/0x40 [ 2550.573514] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2550.574670] RIP: 0033:0x7f6413bdcb19 [ 2550.575504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2550.579622] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2550.581328] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2550.582930] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2550.584519] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2550.586119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2550.587711] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:37:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x1881000000000000, 0x8000) 01:37:30 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 64) 01:37:30 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xfeffffff, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:37:30 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 4) 01:37:30 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x1808, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x17cc, 0x8, 0x0, 0x1, [{0x8d8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x58c, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x320, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}]}, {0x574, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3da86564b14fe264f311f26d68a510131b3c6b09337132cdf5e7d6cd064101a3"}, @WGPEER_A_ALLOWEDIPS={0x518, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x154, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b3fefce2f171098972536d95345b1d658f705c4e6a2a8af3eab936ca260b799a"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x61c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x38c, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x1e8, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x81, @local, 0x5}}]}, {0x314, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @private1, 0x9}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x280, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x17}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x1808}, 0x1, 0x0, 0x0, 0x48040}, 0x10000094) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(r0, &(0x7f0000001a80)='./file1\x00', 0x401, 0x120) write$P9_RCLUNK(r5, 0x0, 0x0) [ 2575.670100] FAULT_INJECTION: forcing a failure. [ 2575.670100] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.672985] CPU: 1 PID: 12346 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2575.674542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2575.676425] FAULT_INJECTION: forcing a failure. [ 2575.676425] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.678883] Call Trace: [ 2575.679492] dump_stack+0x107/0x167 [ 2575.680305] should_fail.cold+0x5/0xa [ 2575.681163] ? create_object.isra.0+0x3a/0xa20 [ 2575.682186] should_failslab+0x5/0x20 [ 2575.683051] kmem_cache_alloc+0x5b/0x310 [ 2575.683963] create_object.isra.0+0x3a/0xa20 [ 2575.684940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2575.686080] kmem_cache_alloc_node+0x169/0x330 [ 2575.687118] __alloc_skb+0x6d/0x5b0 [ 2575.687940] alloc_skb_with_frags+0x92/0x570 [ 2575.688939] ? mark_lock+0xf5/0x2df0 [ 2575.689772] ? lock_acquire+0x197/0x470 [ 2575.690661] ? find_held_lock+0x2c/0x110 [ 2575.691574] sock_alloc_send_pskb+0x7af/0x930 [ 2575.692575] ? sk_alloc+0x350/0x350 [ 2575.693396] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2575.694564] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2575.695685] ? ip6_mtu+0x1bb/0x3d0 [ 2575.696472] ? lock_downgrade+0x6d0/0x6d0 [ 2575.697391] ? ip_frag_init+0x350/0x350 [ 2575.698287] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2575.699358] ? ip6_mtu+0x1e9/0x3d0 [ 2575.700144] ? ip6_setup_cork+0xfb7/0x1740 [ 2575.701086] ip6_make_skb+0x2de/0x4e0 [ 2575.701929] ? ip_frag_init+0x350/0x350 [ 2575.702813] ? ip_frag_init+0x350/0x350 [ 2575.703696] ? ip6_push_pending_frames+0xf0/0xf0 [ 2575.704743] ? ip6_dst_check+0x389/0x8d0 [ 2575.705636] ? sk_dst_check+0x235/0x4c0 [ 2575.706521] udpv6_sendmsg+0x20d3/0x2ad0 [ 2575.707429] ? ip_frag_init+0x350/0x350 [ 2575.708318] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.709462] ? lock_acquire+0x197/0x470 [ 2575.710337] ? find_held_lock+0x2c/0x110 [ 2575.711238] ? __might_fault+0xd3/0x180 [ 2575.712117] ? sock_has_perm+0x1ea/0x280 [ 2575.713027] ? __import_iovec+0x458/0x590 [ 2575.713933] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.715069] inet6_sendmsg+0x105/0x140 [ 2575.715919] ? inet6_compat_ioctl+0x320/0x320 [ 2575.716898] __sock_sendmsg+0xf2/0x190 [ 2575.717748] ____sys_sendmsg+0x334/0x870 [ 2575.718636] ? sock_write_iter+0x3d0/0x3d0 [ 2575.719562] ? do_recvmmsg+0x6d0/0x6d0 [ 2575.720416] ? mark_lock+0xf5/0x2df0 [ 2575.721239] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2575.722391] ? __lock_acquire+0x1657/0x5b00 [ 2575.723347] ___sys_sendmsg+0xf3/0x170 [ 2575.724206] ? sendmsg_copy_msghdr+0x160/0x160 [ 2575.725199] ? __fget_files+0x2cf/0x520 [ 2575.726059] ? lock_downgrade+0x6d0/0x6d0 [ 2575.726958] ? lock_downgrade+0x6d0/0x6d0 [ 2575.727900] ? __fget_files+0x2f8/0x520 [ 2575.728797] ? __fget_light+0xea/0x290 [ 2575.729674] __sys_sendmmsg+0x195/0x470 [ 2575.730569] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2575.731539] ? lock_downgrade+0x6d0/0x6d0 [ 2575.732484] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2575.733566] ? wait_for_completion_io+0x270/0x270 [ 2575.734648] ? rcu_read_lock_any_held+0x75/0xa0 [ 2575.735694] ? vfs_write+0x354/0xb10 [ 2575.736524] ? fput_many+0x2f/0x1a0 [ 2575.737330] ? ksys_write+0x1a9/0x260 [ 2575.738172] ? __ia32_sys_read+0xb0/0xb0 [ 2575.739086] __x64_sys_sendmmsg+0x99/0x100 [ 2575.740027] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.741142] do_syscall_64+0x33/0x40 [ 2575.741940] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2575.743080] RIP: 0033:0x7fa0b0e97b19 [ 2575.743901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.747964] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2575.749632] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2575.751170] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2575.752737] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.754302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2575.755875] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2575.757456] CPU: 0 PID: 12352 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2575.758946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2575.760736] Call Trace: [ 2575.761307] dump_stack+0x107/0x167 [ 2575.762106] should_fail.cold+0x5/0xa [ 2575.762949] ? create_object.isra.0+0x3a/0xa20 [ 2575.763940] should_failslab+0x5/0x20 [ 2575.764757] kmem_cache_alloc+0x5b/0x310 [ 2575.765629] create_object.isra.0+0x3a/0xa20 [ 2575.766566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2575.767633] kmem_cache_alloc+0x159/0x310 [ 2575.768527] skb_clone+0x14f/0x3d0 [ 2575.769277] ip6_finish_output2+0x10bf/0x1cf0 [ 2575.770244] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2575.771295] ip6_output+0x3b8/0x7e0 [ 2575.772051] ip6_local_out+0xb4/0x1a0 [ 2575.772848] ip6_send_skb+0x112/0x460 [ 2575.773652] udp_v6_send_skb+0x7aa/0x15b0 [ 2575.774521] udpv6_sendmsg+0x2116/0x2ad0 [ 2575.775401] ? ip_frag_init+0x350/0x350 [ 2575.776261] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.777375] ? perf_event_task_disable+0x390/0x390 [ 2575.778441] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2575.779488] ? lock_acquire+0x197/0x470 [ 2575.780436] ? find_held_lock+0x2c/0x110 [ 2575.781337] ? sock_has_perm+0x1ea/0x280 [ 2575.782226] ? __import_iovec+0x458/0x590 [ 2575.783120] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.784265] inet6_sendmsg+0x105/0x140 [ 2575.785101] ? inet6_compat_ioctl+0x320/0x320 [ 2575.786045] __sock_sendmsg+0xf2/0x190 [ 2575.786862] ____sys_sendmsg+0x334/0x870 [ 2575.787738] ? sock_write_iter+0x3d0/0x3d0 [ 2575.788651] ? do_recvmmsg+0x6d0/0x6d0 [ 2575.789490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2575.790614] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.791774] ? trace_hardirqs_on+0x5b/0x180 [ 2575.792707] ___sys_sendmsg+0xf3/0x170 [ 2575.793518] ? sendmsg_copy_msghdr+0x160/0x160 [ 2575.794491] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2575.795440] ? _raw_spin_unlock_irq+0x27/0x30 [ 2575.796379] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2575.797322] ? finish_task_switch+0x126/0x5d0 [ 2575.798152] FAULT_INJECTION: forcing a failure. [ 2575.798152] name failslab, interval 1, probability 0, space 0, times 0 [ 2575.798245] ? finish_task_switch+0xef/0x5d0 [ 2575.798261] ? __switch_to+0x572/0xf70 [ 2575.798277] ? __switch_to_asm+0x3a/0x60 [ 2575.798293] ? __switch_to_asm+0x34/0x60 [ 2575.798316] ? __schedule+0x82c/0x1ea0 [ 2575.798344] ? io_schedule_timeout+0x140/0x140 [ 2575.798378] __sys_sendmmsg+0x195/0x470 [ 2575.798403] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2575.798422] ? lock_downgrade+0x6d0/0x6d0 [ 2575.798458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2575.798482] ? wait_for_completion_io+0x270/0x270 [ 2575.798512] ? rcu_read_lock_any_held+0x75/0xa0 [ 2575.811947] ? vfs_write+0x354/0xb10 [ 2575.812745] ? fput_many+0x2f/0x1a0 [ 2575.813528] ? ksys_write+0x1a9/0x260 [ 2575.814345] ? __ia32_sys_read+0xb0/0xb0 [ 2575.815227] __x64_sys_sendmmsg+0x99/0x100 [ 2575.816135] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.817237] do_syscall_64+0x33/0x40 [ 2575.818034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2575.819137] RIP: 0033:0x7f6413bdcb19 [ 2575.819935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.823963] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2575.825595] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2575.827125] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2575.828622] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.830115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2575.831612] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2575.833134] CPU: 1 PID: 12353 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2575.834733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2575.836650] Call Trace: [ 2575.837262] dump_stack+0x107/0x167 [ 2575.838096] should_fail.cold+0x5/0xa [ 2575.838977] ? __alloc_skb+0x6d/0x5b0 [ 2575.839860] should_failslab+0x5/0x20 [ 2575.840730] kmem_cache_alloc_node+0x55/0x330 [ 2575.841758] __alloc_skb+0x6d/0x5b0 [ 2575.842591] alloc_skb_with_frags+0x92/0x570 [ 2575.843590] ? sch_direct_xmit+0x1fb/0x790 [ 2575.844549] ? lock_acquire+0x197/0x470 [ 2575.845446] ? find_held_lock+0x2c/0x110 [ 2575.846368] sock_alloc_send_pskb+0x7af/0x930 [ 2575.847415] ? sk_alloc+0x350/0x350 [ 2575.848240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2575.849443] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2575.850634] ? mark_lock+0xf5/0x2df0 [ 2575.851500] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2575.852649] ? ip6_mtu+0x1bb/0x3d0 [ 2575.853450] ? lock_downgrade+0x6d0/0x6d0 [ 2575.854378] ? ip_frag_init+0x350/0x350 [ 2575.855289] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2575.856369] ? ip6_mtu+0x1e9/0x3d0 [ 2575.857162] ? ip6_setup_cork+0xfb7/0x1740 [ 2575.858107] ip6_make_skb+0x2de/0x4e0 [ 2575.858960] ? ip_frag_init+0x350/0x350 [ 2575.859871] ? ip_frag_init+0x350/0x350 [ 2575.860762] ? ip6_push_pending_frames+0xf0/0xf0 [ 2575.861836] ? ip6_dst_check+0x389/0x8d0 [ 2575.862750] ? sk_dst_check+0x235/0x4c0 [ 2575.863664] udpv6_sendmsg+0x20d3/0x2ad0 [ 2575.864580] ? ip_frag_init+0x350/0x350 [ 2575.865481] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.866636] ? trace_hardirqs_on+0x5b/0x180 [ 2575.867606] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.868838] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.870058] ? sock_has_perm+0x1ea/0x280 [ 2575.870990] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.872206] ? udp_v6_push_pending_frames+0x360/0x360 [ 2575.873374] inet6_sendmsg+0x105/0x140 [ 2575.874242] ? inet6_compat_ioctl+0x320/0x320 [ 2575.875254] __sock_sendmsg+0xf2/0x190 [ 2575.876130] ____sys_sendmsg+0x334/0x870 [ 2575.877042] ? sock_write_iter+0x3d0/0x3d0 [ 2575.877984] ? do_recvmmsg+0x6d0/0x6d0 [ 2575.878872] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2575.880065] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.881277] ? trace_hardirqs_on+0x5b/0x180 [ 2575.882247] ___sys_sendmsg+0xf3/0x170 [ 2575.883123] ? sendmsg_copy_msghdr+0x160/0x160 [ 2575.884147] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2575.885148] ? _raw_spin_unlock_irq+0x27/0x30 [ 2575.886147] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2575.887158] ? finish_task_switch+0x126/0x5d0 [ 2575.888153] ? finish_task_switch+0xef/0x5d0 [ 2575.889138] ? __switch_to+0x572/0xf70 [ 2575.890011] ? __switch_to_asm+0x3a/0x60 [ 2575.890917] ? __switch_to_asm+0x34/0x60 [ 2575.891836] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2575.893009] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.894205] ? trace_hardirqs_on+0x5b/0x180 [ 2575.895174] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2575.896386] ? __sys_sendmmsg+0x26a/0x470 [ 2575.897317] __sys_sendmmsg+0x195/0x470 [ 2575.898214] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2575.899191] ? lock_downgrade+0x6d0/0x6d0 [ 2575.900138] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2575.901219] ? wait_for_completion_io+0x270/0x270 [ 2575.902297] ? rcu_read_lock_any_held+0x75/0xa0 [ 2575.903345] ? vfs_write+0x354/0xb10 [ 2575.904171] ? fput_many+0x2f/0x1a0 [ 2575.904982] ? ksys_write+0x1a9/0x260 [ 2575.905839] ? __ia32_sys_read+0xb0/0xb0 [ 2575.906752] __x64_sys_sendmmsg+0x99/0x100 [ 2575.907710] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2575.908859] do_syscall_64+0x33/0x40 [ 2575.909705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2575.910850] RIP: 0033:0x7f9d078eeb19 01:37:30 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 81) 01:37:30 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x0, 0x0) io_submit(r0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:37:30 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xffffff7f, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2575.911691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2575.916179] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2575.917893] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2575.919493] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2575.921088] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2575.922677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2575.924280] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:37:31 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 5) [ 2575.952975] FAT-fs (loop4): Directory bread(block 10) failed [ 2575.955450] FAT-fs (loop4): Directory bread(block 11) failed 01:37:31 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xff010000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2576.040061] FAULT_INJECTION: forcing a failure. [ 2576.040061] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.042706] CPU: 0 PID: 12369 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2576.044175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.045948] Call Trace: [ 2576.046503] dump_stack+0x107/0x167 [ 2576.047282] should_fail.cold+0x5/0xa [ 2576.048088] should_failslab+0x5/0x20 [ 2576.048906] __kmalloc_node_track_caller+0x74/0x3b0 [ 2576.049973] ? alloc_skb_with_frags+0x92/0x570 [ 2576.050956] __alloc_skb+0xb1/0x5b0 [ 2576.051753] alloc_skb_with_frags+0x92/0x570 [ 2576.052702] ? mark_lock+0xf5/0x2df0 [ 2576.053489] ? lock_acquire+0x197/0x470 [ 2576.054339] ? find_held_lock+0x2c/0x110 [ 2576.055197] sock_alloc_send_pskb+0x7af/0x930 [ 2576.056149] ? sk_alloc+0x350/0x350 [ 2576.056914] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2576.058014] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2576.059076] ? ip6_mtu+0x1bb/0x3d0 [ 2576.059824] ? lock_downgrade+0x6d0/0x6d0 [ 2576.060714] ? ip_frag_init+0x350/0x350 [ 2576.061564] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2576.062584] ? ip6_mtu+0x1e9/0x3d0 [ 2576.063334] ? ip6_setup_cork+0xfb7/0x1740 [ 2576.064230] ip6_make_skb+0x2de/0x4e0 [ 2576.065043] ? ip_frag_init+0x350/0x350 [ 2576.065898] ? ip_frag_init+0x350/0x350 [ 2576.066749] ? ip6_push_pending_frames+0xf0/0xf0 [ 2576.067845] ? ip6_dst_check+0x389/0x8d0 [ 2576.068760] ? sk_dst_check+0x235/0x4c0 [ 2576.069622] udpv6_sendmsg+0x20d3/0x2ad0 [ 2576.070496] ? ip_frag_init+0x350/0x350 [ 2576.071370] ? udp_v6_push_pending_frames+0x360/0x360 [ 2576.072493] ? lock_acquire+0x197/0x470 [ 2576.073347] ? find_held_lock+0x2c/0x110 [ 2576.074222] ? __might_fault+0xd3/0x180 [ 2576.075094] ? sock_has_perm+0x1ea/0x280 [ 2576.075985] ? __import_iovec+0x458/0x590 [ 2576.076875] ? udp_v6_push_pending_frames+0x360/0x360 [ 2576.077984] inet6_sendmsg+0x105/0x140 [ 2576.078800] ? inet6_compat_ioctl+0x320/0x320 [ 2576.079751] __sock_sendmsg+0xf2/0x190 [ 2576.080575] ____sys_sendmsg+0x334/0x870 [ 2576.081490] ? sock_write_iter+0x3d0/0x3d0 [ 2576.082377] ? do_recvmmsg+0x6d0/0x6d0 [ 2576.083305] ? mark_lock+0xf5/0x2df0 [ 2576.084108] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2576.085226] ? __lock_acquire+0x1657/0x5b00 [ 2576.086159] ___sys_sendmsg+0xf3/0x170 [ 2576.087008] ? sendmsg_copy_msghdr+0x160/0x160 [ 2576.087996] ? __fget_files+0x2cf/0x520 [ 2576.088852] ? lock_downgrade+0x6d0/0x6d0 [ 2576.089751] ? lock_downgrade+0x6d0/0x6d0 [ 2576.090648] ? __fget_files+0x2f8/0x520 [ 2576.091509] ? __fget_light+0xea/0x290 [ 2576.092355] __sys_sendmmsg+0x195/0x470 [ 2576.093218] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2576.094146] ? lock_downgrade+0x6d0/0x6d0 [ 2576.095055] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2576.096075] ? wait_for_completion_io+0x270/0x270 [ 2576.097103] ? rcu_read_lock_any_held+0x75/0xa0 [ 2576.098116] ? vfs_write+0x354/0xb10 [ 2576.098948] ? fput_many+0x2f/0x1a0 [ 2576.099747] ? ksys_write+0x1a9/0x260 [ 2576.100575] ? __ia32_sys_read+0xb0/0xb0 [ 2576.101458] __x64_sys_sendmmsg+0x99/0x100 [ 2576.102372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2576.103506] do_syscall_64+0x33/0x40 [ 2576.104300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2576.105383] RIP: 0033:0x7fa0b0e97b19 [ 2576.106181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.110153] RSP: 002b:00007fa0ae3ec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2576.111788] RAX: ffffffffffffffda RBX: 00007fa0b0fab020 RCX: 00007fa0b0e97b19 [ 2576.113313] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2576.114818] RBP: 00007fa0ae3ec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.116352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.117879] R13: 00007ffda4f51b9f R14: 00007fa0ae3ec300 R15: 0000000000022000 01:37:45 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 82) 01:37:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x2000000000000000, 0x8000) 01:37:45 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 6) 01:37:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x8]}, 0x8) fgetxattr(r1, &(0x7f0000000080)=@random={'system.', '/dev/null\x00'}, &(0x7f00000000c0)=""/146, 0x92) write$P9_RCLUNK(r0, 0x0, 0x0) 01:37:45 executing program 6: io_setup(0x3, &(0x7f0000000200)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:37:45 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0xffffffff, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:37:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xffffff7f, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:37:45 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 65) [ 2590.034007] FAULT_INJECTION: forcing a failure. [ 2590.034007] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.036259] CPU: 0 PID: 12382 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2590.037492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.038943] Call Trace: [ 2590.039412] dump_stack+0x107/0x167 [ 2590.040078] should_fail.cold+0x5/0xa [ 2590.040752] ? create_object.isra.0+0x3a/0xa20 [ 2590.041582] should_failslab+0x5/0x20 [ 2590.042250] kmem_cache_alloc+0x5b/0x310 [ 2590.042971] create_object.isra.0+0x3a/0xa20 [ 2590.043765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2590.044799] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2590.045725] ? alloc_skb_with_frags+0x92/0x570 [ 2590.046523] __alloc_skb+0xb1/0x5b0 [ 2590.047169] alloc_skb_with_frags+0x92/0x570 [ 2590.047979] ? mark_lock+0xf5/0x2df0 [ 2590.048640] ? lock_acquire+0x197/0x470 [ 2590.049356] ? find_held_lock+0x2c/0x110 [ 2590.050081] sock_alloc_send_pskb+0x7af/0x930 [ 2590.050901] ? sk_alloc+0x350/0x350 [ 2590.051559] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.052491] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2590.053370] ? ip6_mtu+0x1bb/0x3d0 [ 2590.054001] ? lock_downgrade+0x6d0/0x6d0 [ 2590.054759] ? ip_frag_init+0x350/0x350 [ 2590.055475] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2590.056366] ? ip6_mtu+0x1e9/0x3d0 [ 2590.057019] ? ip6_setup_cork+0xfb7/0x1740 [ 2590.057769] ip6_make_skb+0x2de/0x4e0 [ 2590.058449] ? ip_frag_init+0x350/0x350 [ 2590.059154] ? ip_frag_init+0x350/0x350 [ 2590.059872] ? ip6_push_pending_frames+0xf0/0xf0 [ 2590.060724] ? ip6_dst_check+0x389/0x8d0 [ 2590.061439] ? sk_dst_check+0x235/0x4c0 [ 2590.062150] udpv6_sendmsg+0x20d3/0x2ad0 [ 2590.062870] ? ip_frag_init+0x350/0x350 [ 2590.063594] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.064520] ? lock_acquire+0x197/0x470 [ 2590.065215] ? find_held_lock+0x2c/0x110 [ 2590.065938] ? __might_fault+0xd3/0x180 [ 2590.066647] ? sock_has_perm+0x1ea/0x280 [ 2590.067397] ? __import_iovec+0x458/0x590 [ 2590.068143] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.069057] inet6_sendmsg+0x105/0x140 [ 2590.069743] ? inet6_compat_ioctl+0x320/0x320 [ 2590.070526] __sock_sendmsg+0xf2/0x190 [ 2590.071212] ____sys_sendmsg+0x334/0x870 [ 2590.071950] ? sock_write_iter+0x3d0/0x3d0 [ 2590.072710] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.073424] ? mark_lock+0xf5/0x2df0 [ 2590.074100] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.075046] ? __lock_acquire+0x1657/0x5b00 [ 2590.075838] ___sys_sendmsg+0xf3/0x170 [ 2590.076538] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.077365] ? __fget_files+0x2cf/0x520 [ 2590.078082] ? lock_downgrade+0x6d0/0x6d0 [ 2590.078825] ? lock_downgrade+0x6d0/0x6d0 [ 2590.079580] ? __fget_files+0x2f8/0x520 [ 2590.080310] ? __fget_light+0xea/0x290 [ 2590.081016] __sys_sendmmsg+0x195/0x470 [ 2590.081743] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.082535] ? lock_downgrade+0x6d0/0x6d0 [ 2590.083297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.084177] ? wait_for_completion_io+0x270/0x270 [ 2590.084914] FAULT_INJECTION: forcing a failure. [ 2590.084914] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.085061] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.085077] ? vfs_write+0x354/0xb10 [ 2590.085094] ? fput_many+0x2f/0x1a0 [ 2590.085112] ? ksys_write+0x1a9/0x260 [ 2590.085138] ? __ia32_sys_read+0xb0/0xb0 [ 2590.091116] __x64_sys_sendmmsg+0x99/0x100 [ 2590.091887] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.092824] do_syscall_64+0x33/0x40 [ 2590.093502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.094429] RIP: 0033:0x7fa0b0e97b19 [ 2590.095093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.098447] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.099851] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2590.101147] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.102449] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.103748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2590.105030] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2590.106372] CPU: 1 PID: 12387 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2590.107960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.109848] Call Trace: [ 2590.110447] dump_stack+0x107/0x167 [ 2590.111274] should_fail.cold+0x5/0xa [ 2590.112171] should_failslab+0x5/0x20 [ 2590.113044] __kmalloc_node_track_caller+0x74/0x3b0 [ 2590.114188] ? alloc_skb_with_frags+0x92/0x570 [ 2590.115289] __alloc_skb+0xb1/0x5b0 [ 2590.116135] alloc_skb_with_frags+0x92/0x570 [ 2590.117138] ? sock_alloc_send_pskb+0x102/0x930 [ 2590.118193] sock_alloc_send_pskb+0x7af/0x930 [ 2590.119216] ? sk_alloc+0x350/0x350 [ 2590.120071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.121265] ? __local_bh_enable_ip+0x9d/0x100 [ 2590.122296] ? trace_hardirqs_on+0x5b/0x180 [ 2590.123274] ? __dev_queue_xmit+0xdf8/0x2690 [ 2590.124275] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2590.125407] ? ip6_mtu+0x1bb/0x3d0 [ 2590.126262] ? lock_downgrade+0x6d0/0x6d0 [ 2590.127210] ? ip_frag_init+0x350/0x350 [ 2590.128161] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2590.129258] ? ip6_mtu+0x1e9/0x3d0 [ 2590.130066] ? ip6_setup_cork+0xfb7/0x1740 [ 2590.131041] ip6_make_skb+0x2de/0x4e0 [ 2590.131919] ? ip_frag_init+0x350/0x350 [ 2590.132843] ? ip_frag_init+0x350/0x350 [ 2590.133767] ? ip6_push_pending_frames+0xf0/0xf0 [ 2590.134859] ? ip6_dst_check+0x389/0x8d0 [ 2590.135824] ? sk_dst_check+0x235/0x4c0 [ 2590.136734] udpv6_sendmsg+0x20d3/0x2ad0 [ 2590.137680] ? ip_frag_init+0x350/0x350 [ 2590.138586] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.139792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.141009] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2590.142285] ? lock_acquire+0x197/0x470 [ 2590.143174] ? find_held_lock+0x2c/0x110 [ 2590.144131] ? sock_has_perm+0x1ea/0x280 [ 2590.145082] ? __import_iovec+0x458/0x590 [ 2590.146025] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.147215] inet6_sendmsg+0x105/0x140 [ 2590.148123] ? inet6_compat_ioctl+0x320/0x320 [ 2590.149162] __sock_sendmsg+0xf2/0x190 [ 2590.150061] ____sys_sendmsg+0x334/0x870 [ 2590.151002] ? sock_write_iter+0x3d0/0x3d0 [ 2590.151989] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.152888] ? __lock_acquire+0x1657/0x5b00 [ 2590.153894] ___sys_sendmsg+0xf3/0x170 [ 2590.154828] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.156051] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.157186] ? _raw_spin_unlock_irq+0x27/0x30 [ 2590.158265] ? lock_acquire+0x197/0x470 [ 2590.159207] ? find_held_lock+0x2c/0x110 [ 2590.160255] ? __might_fault+0xd3/0x180 [ 2590.161162] ? lock_downgrade+0x6d0/0x6d0 [ 2590.162090] ? io_schedule_timeout+0x140/0x140 [ 2590.163148] __sys_sendmmsg+0x195/0x470 [ 2590.164061] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.165050] ? lock_downgrade+0x6d0/0x6d0 [ 2590.165993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.167095] ? wait_for_completion_io+0x270/0x270 [ 2590.168188] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.169231] ? vfs_write+0x354/0xb10 [ 2590.170099] ? fput_many+0x2f/0x1a0 [ 2590.170916] ? ksys_write+0x1a9/0x260 [ 2590.171791] ? __ia32_sys_read+0xb0/0xb0 [ 2590.172703] __x64_sys_sendmmsg+0x99/0x100 [ 2590.173695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.174866] do_syscall_64+0x33/0x40 [ 2590.175708] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.176881] RIP: 0033:0x7f9d078eeb19 [ 2590.177722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.177773] FAULT_INJECTION: forcing a failure. [ 2590.177773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2590.181874] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.181898] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2590.181911] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.181923] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.181935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.181948] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2590.193038] CPU: 0 PID: 12390 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2590.194349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.195924] Call Trace: [ 2590.196431] dump_stack+0x107/0x167 [ 2590.197126] should_fail.cold+0x5/0xa [ 2590.197857] _copy_from_user+0x2e/0x1b0 [ 2590.198618] __copy_msghdr_from_user+0x91/0x4b0 [ 2590.199501] ? __ia32_sys_shutdown+0x80/0x80 [ 2590.200338] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.201321] ? inet6_sendmsg+0xbd/0x140 [ 2590.202069] ? inet6_compat_ioctl+0x320/0x320 [ 2590.202913] ? __sock_sendmsg+0x55/0x190 [ 2590.203700] sendmsg_copy_msghdr+0xa1/0x160 [ 2590.204532] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.205272] ? __lock_acquire+0x1657/0x5b00 [ 2590.206106] ___sys_sendmsg+0xc6/0x170 [ 2590.206853] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.207732] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.208590] ? _raw_spin_unlock_irq+0x27/0x30 [ 2590.209449] ? lock_acquire+0x197/0x470 [ 2590.210208] ? find_held_lock+0x2c/0x110 [ 2590.210982] ? __might_fault+0xd3/0x180 [ 2590.211743] ? lock_downgrade+0x6d0/0x6d0 [ 2590.212547] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2590.213600] __sys_sendmmsg+0x195/0x470 [ 2590.214397] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.214617] FAT-fs (loop4): Directory bread(block 10) failed [ 2590.215213] ? lock_downgrade+0x6d0/0x6d0 [ 2590.215248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.215275] ? wait_for_completion_io+0x270/0x270 [ 2590.219188] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.219673] FAT-fs (loop4): Directory bread(block 11) failed [ 2590.220083] ? vfs_write+0x354/0xb10 [ 2590.220106] ? fput_many+0x2f/0x1a0 [ 2590.222774] ? ksys_write+0x1a9/0x260 [ 2590.223518] ? __ia32_sys_read+0xb0/0xb0 [ 2590.224301] __x64_sys_sendmmsg+0x99/0x100 [ 2590.225111] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.226099] do_syscall_64+0x33/0x40 [ 2590.226814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.227805] RIP: 0033:0x7f6413bdcb19 [ 2590.228516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.232056] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.233526] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2590.234894] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.236266] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.237645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.239023] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:37:45 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 7) 01:37:45 executing program 6: io_setup(0x3, &(0x7f0000000200)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:37:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x2103000000000000, 0x8000) 01:37:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xfffffff4, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:37:45 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x74) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3399623326180000003706000000411fd3bb44cc8038bc", @ANYRES16=r2, @ANYBLOB="757f0000000016000002070062000400c3ef64850180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x5a200, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20403, 0x0) write$P9_RCLUNK(r3, 0x0, 0x0) [ 2590.335169] FAULT_INJECTION: forcing a failure. [ 2590.335169] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.338167] CPU: 1 PID: 12398 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2590.339742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.341620] Call Trace: [ 2590.342212] dump_stack+0x107/0x167 [ 2590.343035] should_fail.cold+0x5/0xa [ 2590.343919] ? skb_clone+0x14f/0x3d0 [ 2590.344760] should_failslab+0x5/0x20 [ 2590.345611] kmem_cache_alloc+0x5b/0x310 [ 2590.346527] skb_clone+0x14f/0x3d0 [ 2590.347339] ip6_finish_output2+0x10bf/0x1cf0 [ 2590.348367] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2590.349493] ip6_output+0x3b8/0x7e0 [ 2590.350316] ip6_local_out+0xb4/0x1a0 [ 2590.351170] ip6_send_skb+0x112/0x460 [ 2590.352036] udp_v6_send_skb+0x7aa/0x15b0 [ 2590.352973] udpv6_sendmsg+0x2116/0x2ad0 [ 2590.353886] ? ip_frag_init+0x350/0x350 [ 2590.354789] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.355982] ? lock_acquire+0x197/0x470 [ 2590.356866] ? find_held_lock+0x2c/0x110 [ 2590.357781] ? __might_fault+0xd3/0x180 [ 2590.358684] ? sock_has_perm+0x1ea/0x280 [ 2590.359635] ? __import_iovec+0x458/0x590 [ 2590.360557] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.361714] inet6_sendmsg+0x105/0x140 [ 2590.362580] ? inet6_compat_ioctl+0x320/0x320 [ 2590.363588] __sock_sendmsg+0xf2/0x190 [ 2590.364474] ____sys_sendmsg+0x334/0x870 [ 2590.365386] ? sock_write_iter+0x3d0/0x3d0 [ 2590.366330] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.367205] ? mark_lock+0xf5/0x2df0 [ 2590.368051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.369218] ? __lock_acquire+0x1657/0x5b00 [ 2590.370192] ___sys_sendmsg+0xf3/0x170 [ 2590.371068] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.372114] ? __fget_files+0x2cf/0x520 [ 2590.373011] ? lock_downgrade+0x6d0/0x6d0 [ 2590.373944] ? lock_downgrade+0x6d0/0x6d0 [ 2590.374884] ? __fget_files+0x2f8/0x520 [ 2590.375816] ? __fget_light+0xea/0x290 [ 2590.376705] __sys_sendmmsg+0x195/0x470 [ 2590.377602] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.378584] ? lock_downgrade+0x6d0/0x6d0 [ 2590.379546] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.380641] ? wait_for_completion_io+0x270/0x270 [ 2590.381742] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.382781] ? vfs_write+0x354/0xb10 [ 2590.383626] ? fput_many+0x2f/0x1a0 [ 2590.384450] ? ksys_write+0x1a9/0x260 [ 2590.385297] ? __ia32_sys_read+0xb0/0xb0 [ 2590.386220] __x64_sys_sendmmsg+0x99/0x100 [ 2590.387178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.388342] do_syscall_64+0x33/0x40 [ 2590.389180] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.390336] RIP: 0033:0x7fa0b0e97b19 [ 2590.391173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.395298] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.397015] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2590.398613] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.400224] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.401839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2590.403436] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 01:37:45 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 83) [ 2590.443478] FAT-fs (loop4): Directory bread(block 10) failed [ 2590.447073] FAT-fs (loop4): Directory bread(block 11) failed [ 2590.453721] FAT-fs (loop4): Directory bread(block 10) failed [ 2590.458331] FAT-fs (loop4): Directory bread(block 11) failed [ 2590.462373] FAT-fs (loop4): Directory bread(block 10) failed [ 2590.466074] FAT-fs (loop4): Directory bread(block 11) failed 01:37:45 executing program 6: io_setup(0x3, &(0x7f0000000200)) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(0x0, 0x2000000000000290, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:37:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) [ 2590.522639] FAULT_INJECTION: forcing a failure. [ 2590.522639] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.525144] CPU: 0 PID: 12412 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2590.526488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.528049] Call Trace: [ 2590.528560] dump_stack+0x107/0x167 [ 2590.529255] should_fail.cold+0x5/0xa [ 2590.529985] ? create_object.isra.0+0x3a/0xa20 [ 2590.530872] should_failslab+0x5/0x20 [ 2590.531610] kmem_cache_alloc+0x5b/0x310 [ 2590.532412] create_object.isra.0+0x3a/0xa20 [ 2590.533234] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2590.534231] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2590.535227] ? alloc_skb_with_frags+0x92/0x570 [ 2590.536111] __alloc_skb+0xb1/0x5b0 [ 2590.536806] alloc_skb_with_frags+0x92/0x570 [ 2590.537643] ? sch_direct_xmit+0x1fb/0x790 [ 2590.538450] ? lock_acquire+0x197/0x470 [ 2590.539200] ? find_held_lock+0x2c/0x110 [ 2590.539982] sock_alloc_send_pskb+0x7af/0x930 [ 2590.540888] ? sk_alloc+0x350/0x350 [ 2590.541604] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.542597] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2590.543586] ? mark_lock+0xf5/0x2df0 [ 2590.544302] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2590.545243] ? ip6_mtu+0x1bb/0x3d0 [ 2590.545914] ? lock_downgrade+0x6d0/0x6d0 [ 2590.546691] ? ip_frag_init+0x350/0x350 [ 2590.547460] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2590.548372] ? ip6_mtu+0x1e9/0x3d0 [ 2590.549043] ? ip6_setup_cork+0xfb7/0x1740 [ 2590.549849] ip6_make_skb+0x2de/0x4e0 [ 2590.550565] ? ip_frag_init+0x350/0x350 [ 2590.551314] ? ip_frag_init+0x350/0x350 [ 2590.552092] ? ip6_push_pending_frames+0xf0/0xf0 [ 2590.553011] ? ip6_dst_check+0x389/0x8d0 [ 2590.553782] ? sk_dst_check+0x235/0x4c0 [ 2590.554548] udpv6_sendmsg+0x20d3/0x2ad0 [ 2590.555311] ? ip_frag_init+0x350/0x350 [ 2590.556079] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.557050] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.558034] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2590.559054] ? trace_hardirqs_on+0x5b/0x180 [ 2590.559905] ? lock_acquire+0x1b9/0x470 [ 2590.560652] ? find_held_lock+0x2c/0x110 [ 2590.561448] ? sock_has_perm+0x1ea/0x280 [ 2590.562250] ? __import_iovec+0x458/0x590 [ 2590.563034] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.564026] inet6_sendmsg+0x105/0x140 [ 2590.564768] ? inet6_compat_ioctl+0x320/0x320 [ 2590.565610] __sock_sendmsg+0xf2/0x190 [ 2590.566345] ____sys_sendmsg+0x334/0x870 [ 2590.567103] ? sock_write_iter+0x3d0/0x3d0 [ 2590.567910] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.568647] ? find_held_lock+0x2c/0x110 [ 2590.569430] ___sys_sendmsg+0xf3/0x170 [ 2590.570167] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.571020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.572034] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.572877] ? trace_hardirqs_on+0x5b/0x180 [ 2590.573681] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.574518] ? finish_task_switch+0x126/0x5d0 [ 2590.575343] ? finish_task_switch+0xef/0x5d0 [ 2590.576170] ? __switch_to+0x572/0xf70 [ 2590.576908] ? __switch_to_asm+0x3a/0x60 [ 2590.577661] ? __switch_to_asm+0x34/0x60 [ 2590.578437] ? __schedule+0x82c/0x1ea0 [ 2590.579161] ? io_schedule_timeout+0x140/0x140 [ 2590.580139] ? __sanitizer_cov_trace_pc+0xd/0x60 [ 2590.581099] __sys_sendmmsg+0x195/0x470 [ 2590.581842] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.582665] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2590.583468] ? clockevents_program_event+0x131/0x360 [ 2590.584427] ? tick_program_event+0xa8/0x140 [ 2590.585262] ? hrtimer_interrupt+0x771/0x9b0 [ 2590.586111] __x64_sys_sendmmsg+0x99/0x100 [ 2590.586902] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2590.587872] do_syscall_64+0x33/0x40 [ 2590.588567] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2590.589523] RIP: 0033:0x7f9d078eeb19 [ 2590.590221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.594129] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.595785] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2590.597325] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.598819] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.600308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.601908] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:38:00 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 84) 01:38:00 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 66) 01:38:00 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 8) 01:38:00 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x2}], 0x1}}], 0x7ffff000, 0x0) 01:38:00 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xfffffffb, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x3f00000000000000, 0x8000) 01:38:00 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4401, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:38:00 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x0, 0x0) [ 2605.151021] FAULT_INJECTION: forcing a failure. [ 2605.151021] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.153702] CPU: 0 PID: 12432 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2605.155206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2605.157067] Call Trace: [ 2605.157665] dump_stack+0x107/0x167 [ 2605.158480] should_fail.cold+0x5/0xa [ 2605.159327] ? create_object.isra.0+0x3a/0xa20 [ 2605.160376] should_failslab+0x5/0x20 [ 2605.161233] kmem_cache_alloc+0x5b/0x310 [ 2605.162065] FAULT_INJECTION: forcing a failure. [ 2605.162065] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.162152] create_object.isra.0+0x3a/0xa20 [ 2605.165585] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2605.166713] kmem_cache_alloc+0x159/0x310 [ 2605.167600] skb_clone+0x14f/0x3d0 [ 2605.168436] ip6_finish_output2+0x10bf/0x1cf0 [ 2605.169397] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2605.170516] ip6_output+0x3b8/0x7e0 [ 2605.171311] ip6_local_out+0xb4/0x1a0 [ 2605.172190] ip6_send_skb+0x112/0x460 [ 2605.173008] udp_v6_send_skb+0x7aa/0x15b0 [ 2605.173944] udpv6_sendmsg+0x2116/0x2ad0 [ 2605.174815] ? ip_frag_init+0x350/0x350 [ 2605.175713] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.176862] ? lock_acquire+0x197/0x470 [ 2605.177710] ? find_held_lock+0x2c/0x110 [ 2605.178583] ? __might_fault+0xd3/0x180 [ 2605.179444] ? sock_has_perm+0x1ea/0x280 [ 2605.180368] ? __import_iovec+0x458/0x590 [ 2605.181253] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.182356] inet6_sendmsg+0x105/0x140 [ 2605.183156] ? inet6_compat_ioctl+0x320/0x320 [ 2605.184088] __sock_sendmsg+0xf2/0x190 [ 2605.184937] ____sys_sendmsg+0x334/0x870 [ 2605.185768] ? sock_write_iter+0x3d0/0x3d0 [ 2605.186673] ? do_recvmmsg+0x6d0/0x6d0 [ 2605.187471] ? mark_lock+0xf5/0x2df0 [ 2605.188307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2605.189417] ? __lock_acquire+0x1657/0x5b00 [ 2605.190347] ___sys_sendmsg+0xf3/0x170 [ 2605.191186] ? sendmsg_copy_msghdr+0x160/0x160 [ 2605.192207] ? __fget_files+0x2cf/0x520 [ 2605.193065] ? lock_downgrade+0x6d0/0x6d0 [ 2605.193966] ? lock_downgrade+0x6d0/0x6d0 [ 2605.194869] ? __fget_files+0x2f8/0x520 [ 2605.195735] ? __fget_light+0xea/0x290 [ 2605.196615] __sys_sendmmsg+0x195/0x470 [ 2605.197458] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2605.198388] ? lock_downgrade+0x6d0/0x6d0 [ 2605.199302] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2605.200377] ? wait_for_completion_io+0x270/0x270 [ 2605.201422] ? rcu_read_lock_any_held+0x75/0xa0 [ 2605.202429] ? vfs_write+0x354/0xb10 [ 2605.203234] ? fput_many+0x2f/0x1a0 [ 2605.204036] ? ksys_write+0x1a9/0x260 [ 2605.204882] ? __ia32_sys_read+0xb0/0xb0 [ 2605.205771] __x64_sys_sendmmsg+0x99/0x100 [ 2605.206686] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2605.207800] do_syscall_64+0x33/0x40 [ 2605.208638] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2605.209746] RIP: 0033:0x7fa0b0e97b19 [ 2605.210555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2605.214551] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2605.216222] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2605.217763] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2605.219310] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2605.220871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2605.222418] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2605.223992] CPU: 1 PID: 12429 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2605.225639] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2605.227450] Call Trace: [ 2605.228049] dump_stack+0x107/0x167 [ 2605.228851] should_fail.cold+0x5/0xa [ 2605.229694] ? skb_clone+0x14f/0x3d0 [ 2605.230478] should_failslab+0x5/0x20 [ 2605.231310] kmem_cache_alloc+0x5b/0x310 [ 2605.232221] skb_clone+0x14f/0x3d0 [ 2605.232998] ip6_finish_output2+0x10bf/0x1cf0 [ 2605.233976] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2605.235083] ip6_output+0x3b8/0x7e0 [ 2605.235906] ip6_local_out+0xb4/0x1a0 [ 2605.236724] ip6_send_skb+0x112/0x460 [ 2605.237593] udp_v6_send_skb+0x7aa/0x15b0 [ 2605.238537] udpv6_sendmsg+0x2116/0x2ad0 [ 2605.239425] ? ip_frag_init+0x350/0x350 [ 2605.240330] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.241499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2605.241556] FAULT_INJECTION: forcing a failure. [ 2605.241556] name failslab, interval 1, probability 0, space 0, times 0 [ 2605.242618] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2605.242635] ? trace_hardirqs_on+0x5b/0x180 [ 2605.242671] ? lock_acquire+0x1b9/0x470 [ 2605.242710] ? sock_has_perm+0x1ea/0x280 [ 2605.242752] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2605.242773] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2605.242798] ? trace_hardirqs_on+0x5b/0x180 [ 2605.252113] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.253206] inet6_sendmsg+0x105/0x140 [ 2605.254030] ? inet6_compat_ioctl+0x320/0x320 [ 2605.254976] __sock_sendmsg+0xf2/0x190 [ 2605.255802] ____sys_sendmsg+0x334/0x870 [ 2605.256680] ? sock_write_iter+0x3d0/0x3d0 [ 2605.257567] ? do_recvmmsg+0x6d0/0x6d0 [ 2605.258398] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2605.259570] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2605.260758] ? trace_hardirqs_on+0x5b/0x180 [ 2605.261670] ___sys_sendmsg+0xf3/0x170 [ 2605.262490] ? sendmsg_copy_msghdr+0x160/0x160 [ 2605.263448] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2605.264395] ? _raw_spin_unlock_irq+0x27/0x30 [ 2605.265339] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2605.266278] ? finish_task_switch+0x126/0x5d0 [ 2605.267211] ? finish_task_switch+0xef/0x5d0 [ 2605.268141] ? __switch_to+0x572/0xf70 [ 2605.268953] ? __switch_to_asm+0x3a/0x60 [ 2605.269800] ? __switch_to_asm+0x34/0x60 [ 2605.270657] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2605.271757] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2605.272902] ? trace_hardirqs_on+0x5b/0x180 [ 2605.273810] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2605.274953] ? __sys_sendmmsg+0x26a/0x470 [ 2605.275832] __sys_sendmmsg+0x195/0x470 [ 2605.276688] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2605.277590] ? lock_downgrade+0x6d0/0x6d0 [ 2605.278479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2605.279493] ? wait_for_completion_io+0x270/0x270 [ 2605.280516] ? rcu_read_lock_any_held+0x75/0xa0 [ 2605.281492] ? vfs_write+0x354/0xb10 [ 2605.282279] ? fput_many+0x2f/0x1a0 [ 2605.283045] ? ksys_write+0x1a9/0x260 [ 2605.283842] ? __ia32_sys_read+0xb0/0xb0 [ 2605.284710] __x64_sys_sendmmsg+0x99/0x100 [ 2605.285597] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2605.286671] do_syscall_64+0x33/0x40 [ 2605.287448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2605.288537] RIP: 0033:0x7f9d078eeb19 [ 2605.289317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2605.293172] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2605.294765] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2605.296297] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2605.297791] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2605.299294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2605.300799] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2605.302359] CPU: 0 PID: 12435 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2605.303811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2605.305531] Call Trace: [ 2605.306074] dump_stack+0x107/0x167 [ 2605.306843] should_fail.cold+0x5/0xa [ 2605.307631] ? __alloc_skb+0x6d/0x5b0 [ 2605.308449] should_failslab+0x5/0x20 [ 2605.309232] kmem_cache_alloc_node+0x55/0x330 [ 2605.310146] __alloc_skb+0x6d/0x5b0 [ 2605.310889] alloc_skb_with_frags+0x92/0x570 [ 2605.311775] ? quarantine_put+0x8b/0x1a0 [ 2605.312668] ? kmem_cache_free+0xa7/0x2d0 [ 2605.313546] sock_alloc_send_pskb+0x7af/0x930 [ 2605.314501] ? sk_alloc+0x350/0x350 [ 2605.315253] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2605.316363] ? __local_bh_enable_ip+0x9d/0x100 [ 2605.317299] ? trace_hardirqs_on+0x5b/0x180 [ 2605.318180] ? __dev_queue_xmit+0xdf8/0x2690 [ 2605.319078] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2605.320138] ? ip6_mtu+0x1bb/0x3d0 [ 2605.320894] ? lock_downgrade+0x6d0/0x6d0 [ 2605.321732] ? ip_frag_init+0x350/0x350 [ 2605.322564] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2605.323570] ? ip6_mtu+0x1e9/0x3d0 [ 2605.324337] ? ip6_setup_cork+0xfb7/0x1740 [ 2605.325196] ip6_make_skb+0x2de/0x4e0 [ 2605.325976] ? ip_frag_init+0x350/0x350 [ 2605.326806] ? ip_frag_init+0x350/0x350 [ 2605.327627] ? ip6_push_pending_frames+0xf0/0xf0 [ 2605.328623] ? ip6_dst_check+0x389/0x8d0 [ 2605.329454] ? sk_dst_check+0x235/0x4c0 [ 2605.330269] udpv6_sendmsg+0x20d3/0x2ad0 [ 2605.331093] ? ip_frag_init+0x350/0x350 [ 2605.331948] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.333045] ? perf_event_task_disable+0x390/0x390 [ 2605.334052] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2605.335038] ? lock_acquire+0x197/0x470 [ 2605.335857] ? find_held_lock+0x2c/0x110 [ 2605.336719] ? sock_has_perm+0x1ea/0x280 [ 2605.337568] ? __import_iovec+0x458/0x590 [ 2605.338412] ? udp_v6_push_pending_frames+0x360/0x360 [ 2605.339462] inet6_sendmsg+0x105/0x140 [ 2605.340286] ? inet6_compat_ioctl+0x320/0x320 [ 2605.341195] __sock_sendmsg+0xf2/0x190 [ 2605.341991] ____sys_sendmsg+0x334/0x870 [ 2605.342834] ? sock_write_iter+0x3d0/0x3d0 [ 2605.343693] ? do_recvmmsg+0x6d0/0x6d0 [ 2605.344546] ? __lock_acquire+0x1657/0x5b00 [ 2605.345461] ___sys_sendmsg+0xf3/0x170 [ 2605.346271] ? sendmsg_copy_msghdr+0x160/0x160 [ 2605.347203] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2605.348138] ? _raw_spin_unlock_irq+0x27/0x30 [ 2605.349068] ? lock_acquire+0x197/0x470 [ 2605.349883] ? find_held_lock+0x2c/0x110 [ 2605.350722] ? __might_fault+0xd3/0x180 [ 2605.351566] ? lock_downgrade+0x6d0/0x6d0 [ 2605.352447] ? io_schedule_timeout+0x140/0x140 [ 2605.353420] __sys_sendmmsg+0x195/0x470 [ 2605.354230] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2605.355122] ? lock_downgrade+0x6d0/0x6d0 [ 2605.355988] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2605.356992] ? wait_for_completion_io+0x270/0x270 [ 2605.357995] ? rcu_read_lock_any_held+0x75/0xa0 [ 2605.358945] ? vfs_write+0x354/0xb10 [ 2605.359719] ? fput_many+0x2f/0x1a0 [ 2605.360493] ? ksys_write+0x1a9/0x260 [ 2605.361284] ? __ia32_sys_read+0xb0/0xb0 [ 2605.362126] __x64_sys_sendmmsg+0x99/0x100 [ 2605.363022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2605.364098] do_syscall_64+0x33/0x40 [ 2605.364877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2605.365947] RIP: 0033:0x7f6413bdcb19 [ 2605.366732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2605.370582] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2605.372181] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2605.373639] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2605.375114] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2605.376634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2605.378108] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2605.388845] FAT-fs (loop4): Directory bread(block 10) failed [ 2605.396585] FAT-fs (loop4): Directory bread(block 11) failed 01:38:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x6400000000000000, 0x8000) 01:38:14 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x0, 0x0) 01:38:14 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x3}], 0x1}}], 0x7ffff000, 0x0) 01:38:14 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 85) 01:38:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0xfffffffe, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:14 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 9) 01:38:14 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 67) 01:38:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001ac0)={0x2, 0x80, 0x0, 0x7, 0x8, 0x40, 0x0, 0x8, 0xc0420, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x64f, 0x1, @perf_bp={&(0x7f0000001a80), 0x2}, 0x10000, 0x100000000, 0x6891, 0x3, 0xffff, 0x3, 0x2, 0x0, 0x10001, 0x0, 0x4}, 0x0, 0x8, r0, 0xa) r1 = signalfd(r0, &(0x7f0000000040)={[0x5]}, 0x8) clock_gettime(0x0, &(0x7f0000001a00)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000001940)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/162, 0xa2}, {&(0x7f00000011c0)=""/103, 0x67}, {&(0x7f0000001240)=""/201, 0xc9}, {&(0x7f0000001340)=""/145, 0x91}], 0x5, &(0x7f0000001480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000001540), 0x6e, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/47, 0x2f}, {&(0x7f0000001600)=""/239, 0xef}, {&(0x7f0000001700)=""/116, 0x74}], 0x3, &(0x7f00000017c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)=""/231, 0xe7}], 0x1}}], 0x3, 0x12161, &(0x7f0000001a40)={r2, r3+60000000}) [ 2619.064739] FAULT_INJECTION: forcing a failure. [ 2619.064739] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.066413] CPU: 1 PID: 12456 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2619.067255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.068242] Call Trace: [ 2619.068572] dump_stack+0x107/0x167 [ 2619.069017] should_fail.cold+0x5/0xa [ 2619.069472] ? create_object.isra.0+0x3a/0xa20 [ 2619.070025] ? create_object.isra.0+0x3a/0xa20 [ 2619.070590] should_failslab+0x5/0x20 [ 2619.071054] kmem_cache_alloc+0x5b/0x310 [ 2619.071547] ? ____sys_sendmsg+0x334/0x870 [ 2619.072060] ? ___sys_sendmsg+0xf3/0x170 [ 2619.072559] create_object.isra.0+0x3a/0xa20 [ 2619.073089] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.073708] kmem_cache_alloc_node+0x169/0x330 [ 2619.074273] __alloc_skb+0x6d/0x5b0 [ 2619.074721] alloc_skb_with_frags+0x92/0x570 [ 2619.075257] ? quarantine_put+0x8b/0x1a0 [ 2619.075755] ? kmem_cache_free+0xa7/0x2d0 [ 2619.076265] sock_alloc_send_pskb+0x7af/0x930 [ 2619.076809] ? sk_alloc+0x350/0x350 [ 2619.077259] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.077892] ? __local_bh_enable_ip+0x9d/0x100 [ 2619.078441] ? trace_hardirqs_on+0x5b/0x180 [ 2619.078959] ? __dev_queue_xmit+0xdf8/0x2690 [ 2619.079495] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2619.080091] ? ip6_mtu+0x1bb/0x3d0 [ 2619.080523] ? lock_downgrade+0x6d0/0x6d0 [ 2619.081033] ? ip_frag_init+0x350/0x350 [ 2619.081525] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2619.082107] ? ip6_mtu+0x1e9/0x3d0 [ 2619.082531] ? ip6_setup_cork+0xfb7/0x1740 [ 2619.083041] ip6_make_skb+0x2de/0x4e0 [ 2619.083498] ? ip_frag_init+0x350/0x350 [ 2619.083979] ? ip_frag_init+0x350/0x350 [ 2619.084460] ? ip6_push_pending_frames+0xf0/0xf0 [ 2619.085040] ? ip6_dst_check+0x389/0x8d0 [ 2619.085534] ? sk_dst_check+0x235/0x4c0 [ 2619.086016] udpv6_sendmsg+0x20d3/0x2ad0 [ 2619.086507] ? ip_frag_init+0x350/0x350 [ 2619.086994] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.087617] ? perf_event_task_disable+0x390/0x390 [ 2619.088212] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2619.088801] ? lock_acquire+0x197/0x470 [ 2619.089275] ? find_held_lock+0x2c/0x110 [ 2619.089772] ? sock_has_perm+0x1ea/0x280 [ 2619.090278] ? __import_iovec+0x458/0x590 [ 2619.090779] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.091410] inet6_sendmsg+0x105/0x140 [ 2619.091884] ? inet6_compat_ioctl+0x320/0x320 [ 2619.092429] __sock_sendmsg+0xf2/0x190 [ 2619.092911] ____sys_sendmsg+0x334/0x870 [ 2619.093405] ? sock_write_iter+0x3d0/0x3d0 [ 2619.093922] ? do_recvmmsg+0x6d0/0x6d0 [ 2619.094404] ? __lock_acquire+0x1657/0x5b00 [ 2619.094928] ___sys_sendmsg+0xf3/0x170 [ 2619.095399] ? sendmsg_copy_msghdr+0x160/0x160 [ 2619.095956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2619.096602] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2619.097148] ? trace_hardirqs_on+0x5b/0x180 [ 2619.097664] ? lock_acquire+0x197/0x470 [ 2619.098148] ? find_held_lock+0x2c/0x110 [ 2619.098657] ? __might_fault+0xd3/0x180 [ 2619.099145] ? lock_downgrade+0x6d0/0x6d0 [ 2619.099646] ? io_schedule_timeout+0x140/0x140 [ 2619.100216] __sys_sendmmsg+0x195/0x470 [ 2619.100726] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2619.101233] ? lock_downgrade+0x6d0/0x6d0 [ 2619.101759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.102355] ? wait_for_completion_io+0x270/0x270 [ 2619.102955] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.103524] ? vfs_write+0x354/0xb10 [ 2619.103967] ? fput_many+0x2f/0x1a0 [ 2619.104417] ? ksys_write+0x1a9/0x260 [ 2619.104901] ? __ia32_sys_read+0xb0/0xb0 [ 2619.105384] __x64_sys_sendmmsg+0x99/0x100 [ 2619.105912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.106549] do_syscall_64+0x33/0x40 [ 2619.106997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.107626] RIP: 0033:0x7f6413bdcb19 [ 2619.108065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.110337] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2619.111274] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2619.112138] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2619.112985] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.113859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.114734] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2619.129840] FAULT_INJECTION: forcing a failure. [ 2619.129840] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.131296] CPU: 1 PID: 12467 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2619.132098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.133073] Call Trace: [ 2619.133393] dump_stack+0x107/0x167 [ 2619.133822] should_fail.cold+0x5/0xa [ 2619.134272] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x695/0x13d0 [ 2619.134987] ? __alloc_skb+0x6d/0x5b0 [ 2619.135436] should_failslab+0x5/0x20 [ 2619.135905] kmem_cache_alloc_node+0x55/0x330 [ 2619.136435] __alloc_skb+0x6d/0x5b0 [ 2619.136871] skb_copy+0x183/0x350 [ 2619.137283] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2619.137976] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2619.138582] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2619.139256] ? lock_acquire+0x160/0x470 [ 2619.139723] ? find_held_lock+0x2c/0x110 [ 2619.140203] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2619.140811] mac80211_hwsim_tx+0x574/0x12a0 [ 2619.141355] ? trace_hardirqs_on+0x5b/0x180 [ 2619.141863] ieee80211_tx_frags+0x59c/0x9f0 [ 2619.142381] ? fq_skb_free_func+0x20/0x20 [ 2619.142870] __ieee80211_tx+0x1ad/0x640 [ 2619.143355] ieee80211_tx+0x329/0x410 [ 2619.143799] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2619.144406] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2619.145136] ? ieee80211_skb_resize+0x116/0x630 [ 2619.145684] ieee80211_xmit+0x220/0x2a0 [ 2619.146148] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2619.146757] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2619.147363] ieee80211_subif_start_xmit+0xef/0xf70 [ 2619.147934] ? lock_chain_count+0x20/0x20 [ 2619.148419] ? skb_crc32c_csum_help+0x80/0x80 [ 2619.148939] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2619.149556] ? lock_acquire+0x197/0x470 [ 2619.150016] ? sch_direct_xmit+0x31a/0x790 [ 2619.150513] ? lock_release+0x680/0x680 [ 2619.150980] dev_hard_start_xmit+0x1cb/0x6f0 [ 2619.151501] sch_direct_xmit+0x25f/0x790 [ 2619.151969] ? lock_acquire+0x197/0x470 [ 2619.152430] ? find_held_lock+0x2c/0x110 [ 2619.152905] ? dev_watchdog+0xbc0/0xbc0 [ 2619.153371] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2619.153896] __qdisc_run+0x4aa/0x1570 [ 2619.154351] __dev_queue_xmit+0xd43/0x2690 [ 2619.154836] ? ip6_finish_output2+0x158f/0x1cf0 [ 2619.155384] ? find_held_lock+0x2c/0x110 [ 2619.155856] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2619.156395] ? lock_downgrade+0x6d0/0x6d0 [ 2619.156880] ? do_softirq+0x53/0xc0 [ 2619.157303] ? trace_hardirqs_on+0x5b/0x180 [ 2619.157808] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2619.158416] ip6_finish_output2+0x158f/0x1cf0 [ 2619.158939] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2619.159526] ip6_output+0x3b8/0x7e0 [ 2619.159950] ip6_local_out+0xb4/0x1a0 [ 2619.160393] ip6_send_skb+0x112/0x460 [ 2619.160839] udp_v6_send_skb+0x7aa/0x15b0 [ 2619.161325] udpv6_sendmsg+0x2116/0x2ad0 [ 2619.161801] ? ip_frag_init+0x350/0x350 [ 2619.162269] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.162878] ? lock_acquire+0x197/0x470 [ 2619.163342] ? find_held_lock+0x2c/0x110 [ 2619.163818] ? __might_fault+0xd3/0x180 [ 2619.164284] ? sock_has_perm+0x1ea/0x280 [ 2619.164789] ? __import_iovec+0x458/0x590 [ 2619.165271] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.165871] inet6_sendmsg+0x105/0x140 [ 2619.166322] ? inet6_compat_ioctl+0x320/0x320 [ 2619.166838] __sock_sendmsg+0xf2/0x190 [ 2619.167287] ____sys_sendmsg+0x334/0x870 [ 2619.167758] ? sock_write_iter+0x3d0/0x3d0 [ 2619.168245] ? do_recvmmsg+0x6d0/0x6d0 [ 2619.168704] ? mark_lock+0xf5/0x2df0 [ 2619.169138] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.169750] ? __lock_acquire+0x1657/0x5b00 [ 2619.170250] ___sys_sendmsg+0xf3/0x170 [ 2619.170698] ? sendmsg_copy_msghdr+0x160/0x160 [ 2619.171224] ? __fget_files+0x2cf/0x520 [ 2619.171682] ? lock_downgrade+0x6d0/0x6d0 [ 2619.172165] ? lock_downgrade+0x6d0/0x6d0 [ 2619.172656] ? __fget_files+0x2f8/0x520 [ 2619.173117] ? __fget_light+0xea/0x290 [ 2619.173579] __sys_sendmmsg+0x195/0x470 [ 2619.174038] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2619.174541] ? lock_downgrade+0x6d0/0x6d0 [ 2619.175030] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.175594] ? wait_for_completion_io+0x270/0x270 [ 2619.176143] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.176697] ? vfs_write+0x354/0xb10 [ 2619.177124] ? fput_many+0x2f/0x1a0 [ 2619.177553] ? ksys_write+0x1a9/0x260 [ 2619.177988] ? __ia32_sys_read+0xb0/0xb0 [ 2619.178461] __x64_sys_sendmmsg+0x99/0x100 [ 2619.178951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.179545] do_syscall_64+0x33/0x40 [ 2619.179976] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.180569] RIP: 0033:0x7fa0b0e97b19 [ 2619.181134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.183259] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2619.184139] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2619.184968] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2619.185791] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.186615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2619.187444] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 [ 2619.192949] FAULT_INJECTION: forcing a failure. [ 2619.192949] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.194320] CPU: 1 PID: 12457 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2619.195117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.196063] Call Trace: [ 2619.196371] dump_stack+0x107/0x167 [ 2619.196801] should_fail.cold+0x5/0xa [ 2619.197247] ? create_object.isra.0+0x3a/0xa20 [ 2619.197777] should_failslab+0x5/0x20 [ 2619.198224] kmem_cache_alloc+0x5b/0x310 [ 2619.198693] create_object.isra.0+0x3a/0xa20 [ 2619.199199] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.199802] kmem_cache_alloc_node+0x169/0x330 [ 2619.200343] __alloc_skb+0x6d/0x5b0 [ 2619.200773] skb_copy+0x183/0x350 [ 2619.201171] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2619.201864] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2619.202456] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2619.203114] ? lock_acquire+0x160/0x470 [ 2619.203575] ? find_held_lock+0x2c/0x110 [ 2619.204049] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2619.204655] mac80211_hwsim_tx+0x574/0x12a0 [ 2619.205147] ? trace_hardirqs_on+0x5b/0x180 [ 2619.205647] ieee80211_tx_frags+0x59c/0x9f0 [ 2619.206152] ? fq_skb_free_func+0x20/0x20 [ 2619.206642] __ieee80211_tx+0x1ad/0x640 [ 2619.207109] ieee80211_tx+0x329/0x410 [ 2619.207547] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2619.208142] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2619.208833] ? ieee80211_skb_resize+0x116/0x630 [ 2619.209376] ieee80211_xmit+0x220/0x2a0 [ 2619.209832] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2619.210435] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2619.211029] ieee80211_subif_start_xmit+0xef/0xf70 [ 2619.211616] ? lock_chain_count+0x20/0x20 [ 2619.212134] ? skb_crc32c_csum_help+0x80/0x80 [ 2619.212753] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2619.213497] ? lock_acquire+0x197/0x470 [ 2619.214098] ? sch_direct_xmit+0x31a/0x790 [ 2619.214695] ? lock_release+0x680/0x680 [ 2619.215238] dev_hard_start_xmit+0x1cb/0x6f0 [ 2619.215840] sch_direct_xmit+0x25f/0x790 [ 2619.216397] ? lock_acquire+0x197/0x470 [ 2619.216933] ? find_held_lock+0x2c/0x110 [ 2619.217421] ? dev_watchdog+0xbc0/0xbc0 [ 2619.217895] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2619.218419] __qdisc_run+0x4aa/0x1570 [ 2619.218862] __dev_queue_xmit+0xd43/0x2690 [ 2619.219345] ? ip6_finish_output2+0x158f/0x1cf0 [ 2619.219887] ? find_held_lock+0x2c/0x110 [ 2619.220351] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2619.220888] ? lock_downgrade+0x6d0/0x6d0 [ 2619.221367] ? do_softirq+0x53/0xc0 [ 2619.221783] ? trace_hardirqs_on+0x5b/0x180 [ 2619.222284] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2619.222895] ip6_finish_output2+0x158f/0x1cf0 [ 2619.223421] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2619.223992] ip6_output+0x3b8/0x7e0 [ 2619.224414] ip6_local_out+0xb4/0x1a0 [ 2619.224863] ip6_send_skb+0x112/0x460 [ 2619.225301] udp_v6_send_skb+0x7aa/0x15b0 [ 2619.225779] udpv6_sendmsg+0x2116/0x2ad0 [ 2619.226241] ? ip_frag_init+0x350/0x350 [ 2619.226706] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.227305] ? perf_event_task_disable+0x390/0x390 [ 2619.227872] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2619.228425] ? lock_acquire+0x197/0x470 [ 2619.228887] ? find_held_lock+0x2c/0x110 [ 2619.229363] ? sock_has_perm+0x1ea/0x280 [ 2619.229846] ? __import_iovec+0x458/0x590 [ 2619.230327] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.230922] inet6_sendmsg+0x105/0x140 [ 2619.231368] ? inet6_compat_ioctl+0x320/0x320 [ 2619.231880] __sock_sendmsg+0xf2/0x190 [ 2619.232332] ____sys_sendmsg+0x334/0x870 [ 2619.232817] ? sock_write_iter+0x3d0/0x3d0 [ 2619.233303] ? do_recvmmsg+0x6d0/0x6d0 [ 2619.233755] ? __lock_acquire+0x1657/0x5b00 [ 2619.234254] ___sys_sendmsg+0xf3/0x170 [ 2619.234704] ? sendmsg_copy_msghdr+0x160/0x160 [ 2619.235233] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2619.235757] ? _raw_spin_unlock_irq+0x27/0x30 [ 2619.236282] ? lock_acquire+0x197/0x470 [ 2619.236745] ? find_held_lock+0x2c/0x110 [ 2619.237221] ? __might_fault+0xd3/0x180 [ 2619.237680] ? lock_downgrade+0x6d0/0x6d0 [ 2619.238154] ? io_schedule_timeout+0x140/0x140 [ 2619.238692] __sys_sendmmsg+0x195/0x470 [ 2619.239151] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2619.239640] ? lock_downgrade+0x6d0/0x6d0 [ 2619.240123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.240682] ? wait_for_completion_io+0x270/0x270 [ 2619.241231] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.241764] ? vfs_write+0x354/0xb10 [ 2619.242189] ? fput_many+0x2f/0x1a0 [ 2619.242606] ? ksys_write+0x1a9/0x260 [ 2619.243042] ? __ia32_sys_read+0xb0/0xb0 [ 2619.243514] __x64_sys_sendmmsg+0x99/0x100 [ 2619.243994] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.244593] do_syscall_64+0x33/0x40 [ 2619.245015] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.245608] RIP: 0033:0x7f9d078eeb19 [ 2619.246037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.248155] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2619.249037] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2619.249851] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2619.250668] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.251491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.252305] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:38:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x181a00, 0x0) r2 = syz_mount_image$nfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="8c104e3d4b93d6be9822120dcf39d902da917f6ab14b41b8b2084721a1e4afc11c3255c4f97094dd5b6427039e3b586bb31a27283eaa9f99220f737bc405563ca0421416b76eb817922e7c55903f4f738cf7df", 0x53, 0xb9}], 0x2000000, &(0x7f0000000200)={[{'^#(/[\xa1'}, {'/dev/null\x00'}, {'{,'}, {}, {'/dev/null\x00'}, {'/dev/null\x00'}], [{@fsname={'fsname', 0x3d, '{o'}}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@uid_eq}]}) splice(r1, &(0x7f0000000080)=0xa33, r2, &(0x7f0000000280)=0x9, 0x7ed, 0x0) [ 2619.262059] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value [ 2619.282656] FAT-fs (loop4): Unrecognized mount option "./file0" or missing value 01:38:14 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x0, 0x0) 01:38:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x8102000000000000, 0x8000) [ 2619.315983] nfs: Unknown parameter '^#(/[¡' 01:38:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x8000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2619.403698] FAT-fs (loop4): Directory bread(block 10) failed 01:38:14 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 68) [ 2619.418768] FAT-fs (loop4): Directory bread(block 11) failed [ 2619.442938] FAT-fs (loop4): Directory bread(block 10) failed 01:38:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x10000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0x19d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x12e0, &(0x7f0000000240)={0x0, 0x1580, 0x2, 0x3, 0xc6, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@phonet={0x23, 0xfe, 0x3, 0x9}, 0x0, 0x0, 0x1, {0x0, r7}}, 0x2) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x31713, 0x0, 0x0, 0x1, {0x0, r7}}, 0x1) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2619.465991] FAT-fs (loop4): Directory bread(block 11) failed [ 2619.478325] FAT-fs (loop4): Directory bread(block 10) failed [ 2619.479744] FAT-fs (loop4): Directory bread(block 11) failed [ 2619.530830] FAULT_INJECTION: forcing a failure. [ 2619.530830] name failslab, interval 1, probability 0, space 0, times 0 01:38:14 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) [ 2619.533533] CPU: 0 PID: 12493 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2619.535136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.536916] Call Trace: [ 2619.537497] dump_stack+0x107/0x167 [ 2619.538268] should_fail.cold+0x5/0xa [ 2619.539088] should_failslab+0x5/0x20 [ 2619.539923] __kmalloc_node_track_caller+0x74/0x3b0 [ 2619.541003] ? alloc_skb_with_frags+0x92/0x570 [ 2619.541991] __alloc_skb+0xb1/0x5b0 [ 2619.542771] alloc_skb_with_frags+0x92/0x570 [ 2619.543712] ? quarantine_put+0x8b/0x1a0 [ 2619.544600] ? kmem_cache_free+0xa7/0x2d0 [ 2619.545487] sock_alloc_send_pskb+0x7af/0x930 [ 2619.546440] ? sk_alloc+0x350/0x350 [ 2619.547226] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.548330] ? __local_bh_enable_ip+0x9d/0x100 [ 2619.549315] ? trace_hardirqs_on+0x5b/0x180 [ 2619.550220] ? __dev_queue_xmit+0xdf8/0x2690 [ 2619.551158] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2619.552220] ? ip6_mtu+0x1bb/0x3d0 [ 2619.552989] ? lock_downgrade+0x6d0/0x6d0 [ 2619.553868] ? ip_frag_init+0x350/0x350 [ 2619.554713] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2619.555735] ? ip6_mtu+0x1e9/0x3d0 [ 2619.556483] ? ip6_setup_cork+0xfb7/0x1740 [ 2619.557395] ip6_make_skb+0x2de/0x4e0 [ 2619.558196] ? ip_frag_init+0x350/0x350 [ 2619.559052] ? ip_frag_init+0x350/0x350 [ 2619.559899] ? ip6_push_pending_frames+0xf0/0xf0 [ 2619.560935] ? ip6_dst_check+0x389/0x8d0 [ 2619.561791] ? sk_dst_check+0x235/0x4c0 [ 2619.562750] udpv6_sendmsg+0x20d3/0x2ad0 [ 2619.563619] ? ip_frag_init+0x350/0x350 [ 2619.564480] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.565595] ? perf_event_task_disable+0x390/0x390 [ 2619.566643] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2619.567684] ? lock_acquire+0x197/0x470 [ 2619.568537] ? find_held_lock+0x2c/0x110 [ 2619.569413] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2619.570564] ? sock_has_perm+0x1ea/0x280 [ 2619.571457] ? __import_iovec+0x458/0x590 [ 2619.572349] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.573528] inet6_sendmsg+0x105/0x140 [ 2619.574354] ? inet6_compat_ioctl+0x320/0x320 [ 2619.575305] __sock_sendmsg+0xf2/0x190 [ 2619.576128] ____sys_sendmsg+0x334/0x870 [ 2619.576992] ? sock_write_iter+0x3d0/0x3d0 [ 2619.577901] ? do_recvmmsg+0x6d0/0x6d0 [ 2619.578730] ? __lock_acquire+0x1657/0x5b00 [ 2619.579653] ___sys_sendmsg+0xf3/0x170 [ 2619.580485] ? sendmsg_copy_msghdr+0x160/0x160 [ 2619.581471] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2619.582419] ? _raw_spin_unlock_irq+0x27/0x30 [ 2619.583377] ? lock_acquire+0x197/0x470 [ 2619.584219] ? find_held_lock+0x2c/0x110 [ 2619.585102] ? __might_fault+0xd3/0x180 [ 2619.585947] ? lock_downgrade+0x6d0/0x6d0 [ 2619.586833] ? io_schedule_timeout+0x140/0x140 [ 2619.587815] __sys_sendmmsg+0x195/0x470 [ 2619.588672] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2619.589597] ? lock_downgrade+0x6d0/0x6d0 [ 2619.590499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.591529] ? wait_for_completion_io+0x270/0x270 [ 2619.592571] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.593554] ? vfs_write+0x354/0xb10 [ 2619.594350] ? fput_many+0x2f/0x1a0 [ 2619.595133] ? ksys_write+0x1a9/0x260 [ 2619.595933] ? __ia32_sys_read+0xb0/0xb0 [ 2619.596822] __x64_sys_sendmmsg+0x99/0x100 [ 2619.597726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.598818] do_syscall_64+0x33/0x40 [ 2619.599609] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.600711] RIP: 0033:0x7f6413bdcb19 [ 2619.601588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.606228] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2619.608158] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2619.609962] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2619.611759] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.613567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.615372] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:38:14 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x4}], 0x1}}], 0x7ffff000, 0x0) 01:38:14 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 10) 01:38:14 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x80000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) [ 2619.677842] FAULT_INJECTION: forcing a failure. [ 2619.677842] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.679445] CPU: 1 PID: 12511 Comm: syz-executor.7 Not tainted 5.10.233 #1 [ 2619.680225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.681181] Call Trace: [ 2619.681486] dump_stack+0x107/0x167 [ 2619.681904] should_fail.cold+0x5/0xa [ 2619.682341] ? create_object.isra.0+0x3a/0xa20 [ 2619.682868] should_failslab+0x5/0x20 [ 2619.683305] kmem_cache_alloc+0x5b/0x310 [ 2619.683773] create_object.isra.0+0x3a/0xa20 [ 2619.684279] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.684868] kmem_cache_alloc_node+0x169/0x330 [ 2619.685403] __alloc_skb+0x6d/0x5b0 [ 2619.685820] skb_copy+0x183/0x350 [ 2619.686223] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2619.686907] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2619.687526] ? trace_hardirqs_on+0x5b/0x180 [ 2619.688017] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2619.688681] ? lock_acquire+0x160/0x470 [ 2619.689136] ? find_held_lock+0x2c/0x110 [ 2619.689607] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2619.690191] mac80211_hwsim_tx+0x574/0x12a0 [ 2619.690689] ? trace_hardirqs_on+0x5b/0x180 [ 2619.691194] ieee80211_tx_frags+0x59c/0x9f0 [ 2619.691698] ? fq_skb_free_func+0x20/0x20 [ 2619.692186] __ieee80211_tx+0x1ad/0x640 [ 2619.692656] ieee80211_tx+0x329/0x410 [ 2619.693097] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2619.693688] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2619.694371] ? ieee80211_skb_resize+0x116/0x630 [ 2619.694912] ieee80211_xmit+0x220/0x2a0 [ 2619.695377] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2619.695977] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2619.696581] ieee80211_subif_start_xmit+0xef/0xf70 [ 2619.697143] ? lock_chain_count+0x20/0x20 [ 2619.697620] ? skb_crc32c_csum_help+0x80/0x80 [ 2619.698131] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2619.698739] ? lock_acquire+0x197/0x470 [ 2619.699197] ? sch_direct_xmit+0x31a/0x790 [ 2619.699679] ? lock_release+0x680/0x680 [ 2619.700139] dev_hard_start_xmit+0x1cb/0x6f0 [ 2619.700657] sch_direct_xmit+0x25f/0x790 [ 2619.701120] ? lock_acquire+0x197/0x470 [ 2619.701573] ? find_held_lock+0x2c/0x110 [ 2619.702032] ? dev_watchdog+0xbc0/0xbc0 [ 2619.702486] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2619.703006] __qdisc_run+0x4aa/0x1570 [ 2619.703452] __dev_queue_xmit+0xd43/0x2690 [ 2619.703939] ? ip6_finish_output2+0x158f/0x1cf0 [ 2619.704477] ? find_held_lock+0x2c/0x110 [ 2619.704952] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2619.705477] ? lock_downgrade+0x6d0/0x6d0 [ 2619.705949] ? do_softirq+0x53/0xc0 [ 2619.706364] ? trace_hardirqs_on+0x5b/0x180 [ 2619.706862] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2619.707462] ip6_finish_output2+0x158f/0x1cf0 [ 2619.707986] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2619.708565] ip6_output+0x3b8/0x7e0 [ 2619.708987] ip6_local_out+0xb4/0x1a0 [ 2619.709424] ip6_send_skb+0x112/0x460 [ 2619.709862] udp_v6_send_skb+0x7aa/0x15b0 [ 2619.710347] udpv6_sendmsg+0x2116/0x2ad0 [ 2619.710851] ? ip_frag_init+0x350/0x350 [ 2619.711313] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.711909] ? lock_acquire+0x197/0x470 [ 2619.712362] ? find_held_lock+0x2c/0x110 [ 2619.712837] ? __might_fault+0xd3/0x180 [ 2619.713298] ? sock_has_perm+0x1ea/0x280 [ 2619.713780] ? __import_iovec+0x458/0x590 [ 2619.714254] ? udp_v6_push_pending_frames+0x360/0x360 [ 2619.714844] inet6_sendmsg+0x105/0x140 [ 2619.715291] ? inet6_compat_ioctl+0x320/0x320 [ 2619.715801] __sock_sendmsg+0xf2/0x190 [ 2619.716247] ____sys_sendmsg+0x334/0x870 [ 2619.716725] ? sock_write_iter+0x3d0/0x3d0 [ 2619.717204] ? do_recvmmsg+0x6d0/0x6d0 [ 2619.717653] ? mark_lock+0xf5/0x2df0 [ 2619.718084] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.718680] ? __lock_acquire+0x1657/0x5b00 [ 2619.719171] ___sys_sendmsg+0xf3/0x170 [ 2619.719618] ? sendmsg_copy_msghdr+0x160/0x160 [ 2619.720141] ? __fget_files+0x2cf/0x520 [ 2619.720604] ? lock_downgrade+0x6d0/0x6d0 [ 2619.721080] ? lock_downgrade+0x6d0/0x6d0 [ 2619.721559] ? __fget_files+0x2f8/0x520 [ 2619.722020] ? __fget_light+0xea/0x290 [ 2619.722470] __sys_sendmmsg+0x195/0x470 [ 2619.722930] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2619.723423] ? lock_downgrade+0x6d0/0x6d0 [ 2619.723914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2619.724466] ? wait_for_completion_io+0x270/0x270 [ 2619.725025] ? rcu_read_lock_any_held+0x75/0xa0 [ 2619.725560] ? vfs_write+0x354/0xb10 [ 2619.725985] ? fput_many+0x2f/0x1a0 [ 2619.726403] ? ksys_write+0x1a9/0x260 [ 2619.726839] ? __ia32_sys_read+0xb0/0xb0 [ 2619.727308] __x64_sys_sendmmsg+0x99/0x100 [ 2619.727791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.728377] do_syscall_64+0x33/0x40 [ 2619.728817] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.729400] RIP: 0033:0x7fa0b0e97b19 [ 2619.729832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.731941] RSP: 002b:00007fa0ae40d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2619.732817] RAX: ffffffffffffffda RBX: 00007fa0b0faaf60 RCX: 00007fa0b0e97b19 [ 2619.733635] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2619.734448] RBP: 00007fa0ae40d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2619.735261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2619.736079] R13: 00007ffda4f51b9f R14: 00007fa0ae40d300 R15: 0000000000022000 01:38:28 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:38:28 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 11) 01:38:28 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x100000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:28 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 86) 01:38:28 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 69) 01:38:28 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x5}], 0x1}}], 0x7ffff000, 0x0) 01:38:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xf4ffffff00000000, 0x8000) 01:38:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1eb6c0, 0x0) write$P9_RCLUNK(r1, 0x0, 0x0) [ 2633.006633] FAULT_INJECTION: forcing a failure. [ 2633.006633] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.008023] CPU: 0 PID: 12536 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2633.008838] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2633.009831] Call Trace: [ 2633.010143] dump_stack+0x107/0x167 [ 2633.010568] should_fail.cold+0x5/0xa [ 2633.011016] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0x695/0x13d0 [ 2633.011716] ? __alloc_skb+0x6d/0x5b0 [ 2633.012166] should_failslab+0x5/0x20 [ 2633.012620] kmem_cache_alloc_node+0x55/0x330 [ 2633.013161] __alloc_skb+0x6d/0x5b0 [ 2633.013589] skb_copy+0x183/0x350 [ 2633.013997] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2633.014695] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2633.015310] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2633.015983] ? lock_acquire+0x160/0x470 [ 2633.016445] ? find_held_lock+0x2c/0x110 [ 2633.016925] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2633.017527] mac80211_hwsim_tx+0x574/0x12a0 [ 2633.018035] ? trace_hardirqs_on+0x5b/0x180 [ 2633.018544] ieee80211_tx_frags+0x59c/0x9f0 [ 2633.019052] ? fq_skb_free_func+0x20/0x20 [ 2633.019545] __ieee80211_tx+0x1ad/0x640 [ 2633.020023] ieee80211_tx+0x329/0x410 [ 2633.020469] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2633.021074] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2633.021768] ? ieee80211_skb_resize+0x116/0x630 [ 2633.022317] ieee80211_xmit+0x220/0x2a0 [ 2633.022785] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2633.023392] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2633.023992] ieee80211_subif_start_xmit+0xef/0xf70 [ 2633.024569] ? lock_chain_count+0x20/0x20 [ 2633.025065] ? skb_crc32c_csum_help+0x80/0x80 [ 2633.025589] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2633.026209] ? lock_acquire+0x197/0x470 [ 2633.026669] ? sch_direct_xmit+0x31a/0x790 [ 2633.027159] ? lock_release+0x680/0x680 [ 2633.027628] dev_hard_start_xmit+0x1cb/0x6f0 [ 2633.028145] sch_direct_xmit+0x25f/0x790 [ 2633.028617] ? lock_acquire+0x197/0x470 [ 2633.029085] ? find_held_lock+0x2c/0x110 [ 2633.029554] ? dev_watchdog+0xbc0/0xbc0 [ 2633.030012] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2633.030538] __qdisc_run+0x4aa/0x1570 [ 2633.030993] __dev_queue_xmit+0xd43/0x2690 [ 2633.031487] ? ip6_finish_output2+0x158f/0x1cf0 [ 2633.032037] ? find_held_lock+0x2c/0x110 [ 2633.032511] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2633.033049] ? lock_downgrade+0x6d0/0x6d0 [ 2633.033532] ? do_softirq+0x53/0xc0 [ 2633.033953] ? trace_hardirqs_on+0x5b/0x180 [ 2633.034461] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2633.035079] ip6_finish_output2+0x158f/0x1cf0 [ 2633.035610] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2633.036194] ip6_output+0x3b8/0x7e0 [ 2633.036628] ip6_local_out+0xb4/0x1a0 [ 2633.037083] ip6_send_skb+0x112/0x460 [ 2633.037532] udp_v6_send_skb+0x7aa/0x15b0 [ 2633.038026] udpv6_sendmsg+0x2116/0x2ad0 [ 2633.038501] ? ip_frag_init+0x350/0x350 [ 2633.038968] ? udp_v6_push_pending_frames+0x360/0x360 [ 2633.039576] ? perf_event_task_disable+0x390/0x390 [ 2633.040151] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2633.040716] ? lock_acquire+0x197/0x470 [ 2633.041185] ? find_held_lock+0x2c/0x110 [ 2633.041666] ? sock_has_perm+0x1ea/0x280 [ 2633.042161] ? __import_iovec+0x458/0x590 [ 2633.042645] ? udp_v6_push_pending_frames+0x360/0x360 [ 2633.043249] inet6_sendmsg+0x105/0x140 [ 2633.043700] ? inet6_compat_ioctl+0x320/0x320 [ 2633.044221] __sock_sendmsg+0xf2/0x190 [ 2633.044674] ____sys_sendmsg+0x334/0x870 [ 2633.045152] ? sock_write_iter+0x3d0/0x3d0 [ 2633.045635] ? do_recvmmsg+0x6d0/0x6d0 [ 2633.046083] ? __lock_acquire+0x1657/0x5b00 [ 2633.046578] ___sys_sendmsg+0xf3/0x170 [ 2633.047018] ? sendmsg_copy_msghdr+0x160/0x160 [ 2633.047539] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2633.048135] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2633.048656] ? trace_hardirqs_on+0x5b/0x180 [ 2633.049154] ? lock_acquire+0x197/0x470 [ 2633.049599] ? find_held_lock+0x2c/0x110 [ 2633.050070] ? __might_fault+0xd3/0x180 [ 2633.050519] ? lock_downgrade+0x6d0/0x6d0 [ 2633.051006] ? io_schedule_timeout+0x140/0x140 [ 2633.051531] __sys_sendmmsg+0x195/0x470 [ 2633.051992] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2633.052488] ? lock_downgrade+0x6d0/0x6d0 [ 2633.052979] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2633.053529] ? wait_for_completion_io+0x270/0x270 [ 2633.054089] ? rcu_read_lock_any_held+0x75/0xa0 [ 2633.054621] ? vfs_write+0x354/0xb10 [ 2633.055045] ? fput_many+0x2f/0x1a0 [ 2633.055464] ? ksys_write+0x1a9/0x260 [ 2633.055896] ? __ia32_sys_read+0xb0/0xb0 [ 2633.056366] __x64_sys_sendmmsg+0x99/0x100 [ 2633.056847] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2633.057442] do_syscall_64+0x33/0x40 [ 2633.057858] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2633.058440] RIP: 0033:0x7f9d078eeb19 [ 2633.058862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2633.060955] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2633.062017] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2633.062898] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2633.063702] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.064504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2633.065319] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2633.073968] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.074764] FAT-fs (loop4): Directory bread(block 11) failed [ 2633.077460] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.078335] FAT-fs (loop4): Directory bread(block 11) failed [ 2633.079225] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.090769] FAT-fs (loop4): Directory bread(block 11) failed [ 2633.098066] FAULT_INJECTION: forcing a failure. [ 2633.098066] name failslab, interval 1, probability 0, space 0, times 0 [ 2633.099688] CPU: 0 PID: 12525 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2633.100641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2633.101790] Call Trace: 01:38:28 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000040), 0x1, 0x101800) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000080)={0x1, 0x100, 0x3}) write$P9_RCLUNK(r0, 0x0, 0x0) [ 2633.102173] dump_stack+0x107/0x167 [ 2633.102832] should_fail.cold+0x5/0xa [ 2633.103370] ? create_object.isra.0+0x3a/0xa20 [ 2633.104011] should_failslab+0x5/0x20 [ 2633.104541] kmem_cache_alloc+0x5b/0x310 [ 2633.105113] create_object.isra.0+0x3a/0xa20 [ 2633.105715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2633.106418] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2633.107112] ? alloc_skb_with_frags+0x92/0x570 [ 2633.107757] __alloc_skb+0xb1/0x5b0 [ 2633.108268] alloc_skb_with_frags+0x92/0x570 [ 2633.108870] ? quarantine_put+0x8b/0x1a0 [ 2633.109847] ? kmem_cache_free+0xa7/0x2d0 [ 2633.110755] sock_alloc_send_pskb+0x7af/0x930 [ 2633.111739] ? sk_alloc+0x350/0x350 [ 2633.112540] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2633.113685] ? __local_bh_enable_ip+0x9d/0x100 [ 2633.114677] ? trace_hardirqs_on+0x5b/0x180 [ 2633.115609] ? __dev_queue_xmit+0xdf8/0x2690 [ 2633.116557] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2633.117597] ? ip6_mtu+0x1bb/0x3d0 [ 2633.118333] ? lock_downgrade+0x6d0/0x6d0 [ 2633.119168] ? ip_frag_init+0x350/0x350 [ 2633.119982] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 2633.120975] ? ip6_mtu+0x1e9/0x3d0 [ 2633.121705] ? ip6_setup_cork+0xfb7/0x1740 [ 2633.122574] ip6_make_skb+0x2de/0x4e0 [ 2633.123356] ? ip_frag_init+0x350/0x350 [ 2633.124182] ? ip_frag_init+0x350/0x350 [ 2633.125009] ? ip6_push_pending_frames+0xf0/0xf0 [ 2633.125983] ? ip6_dst_check+0x389/0x8d0 [ 2633.126823] ? sk_dst_check+0x235/0x4c0 [ 2633.127647] udpv6_sendmsg+0x20d3/0x2ad0 [ 2633.128477] ? ip_frag_init+0x350/0x350 [ 2633.129312] ? udp_v6_push_pending_frames+0x360/0x360 [ 2633.130381] ? perf_event_task_disable+0x390/0x390 [ 2633.131396] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2633.132386] ? lock_acquire+0x197/0x470 [ 2633.133198] ? find_held_lock+0x2c/0x110 [ 2633.134049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2633.135124] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2633.136229] ? sock_has_perm+0x1ea/0x280 [ 2633.137107] ? __import_iovec+0x458/0x590 [ 2633.137959] ? udp_v6_push_pending_frames+0x360/0x360 [ 2633.139016] inet6_sendmsg+0x105/0x140 [ 2633.139821] ? inet6_compat_ioctl+0x320/0x320 [ 2633.140742] __sock_sendmsg+0xf2/0x190 [ 2633.141541] ____sys_sendmsg+0x334/0x870 [ 2633.142370] ? sock_write_iter+0x3d0/0x3d0 [ 2633.143234] ? do_recvmmsg+0x6d0/0x6d0 [ 2633.144024] ? __lock_acquire+0x1657/0x5b00 [ 2633.144926] ___sys_sendmsg+0xf3/0x170 [ 2633.145760] ? sendmsg_copy_msghdr+0x160/0x160 [ 2633.146721] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2633.147680] ? _raw_spin_unlock_irq+0x27/0x30 [ 2633.148649] ? lock_acquire+0x197/0x470 [ 2633.149507] ? find_held_lock+0x2c/0x110 [ 2633.150387] ? __might_fault+0xd3/0x180 [ 2633.151245] ? lock_downgrade+0x6d0/0x6d0 [ 2633.152138] ? io_schedule_timeout+0x140/0x140 [ 2633.153134] __sys_sendmmsg+0x195/0x470 [ 2633.153996] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2633.154917] ? lock_downgrade+0x6d0/0x6d0 [ 2633.155827] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2633.156868] ? wait_for_completion_io+0x270/0x270 [ 2633.157908] ? rcu_read_lock_any_held+0x75/0xa0 [ 2633.158904] ? vfs_write+0x354/0xb10 [ 2633.159703] ? fput_many+0x2f/0x1a0 [ 2633.160483] ? ksys_write+0x1a9/0x260 [ 2633.161304] ? __ia32_sys_read+0xb0/0xb0 [ 2633.162184] __x64_sys_sendmmsg+0x99/0x100 [ 2633.163096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2633.164195] do_syscall_64+0x33/0x40 [ 2633.164997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2633.166096] RIP: 0033:0x7f6413bdcb19 [ 2633.166896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2633.170850] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2633.172500] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2633.174046] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2633.175578] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2633.177113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2633.178656] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:38:28 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) 01:38:28 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:38:28 executing program 5: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x8000) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x600400, 0x0) write$P9_RCLUNK(r0, 0x0, 0x0) 01:38:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfbffffff00000000, 0x8000) 01:38:28 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) [ 2633.384134] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.388933] FAT-fs (loop4): Directory bread(block 11) failed [ 2633.393751] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.397498] FAT-fs (loop4): Directory bread(block 11) failed [ 2633.399335] FAT-fs (loop4): Directory bread(block 10) failed [ 2633.403418] FAT-fs (loop4): Directory bread(block 11) failed 01:38:28 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2101, 0x0) r1 = io_uring_setup(0x2859, &(0x7f0000000040)={0x0, 0x470c, 0x4, 0x0, 0x347}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f00000000c0)={0xed4, 0x9, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$P9_RCLUNK(r0, 0x0, 0x0) 01:38:45 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x6}], 0x1}}], 0x7ffff000, 0x0) 01:38:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xfeffffff00000000, 0x8000) 01:38:45 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:38:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x210001, 0x0) r1 = socket$inet(0x2, 0x6, 0x3) getpeername(r1, &(0x7f00000001c0)=@nfc_llcp, &(0x7f0000000240)=0x80) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x3}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) write$P9_RCLUNK(r0, 0x0, 0x0) splice(r0, &(0x7f0000000140)=0x7fff, r0, &(0x7f0000000180)=0xffff, 0x3, 0x0) 01:38:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x200000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:45 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 87) 01:38:45 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) [ 2649.899421] audit: type=1400 audit(1737941925.092:13): avc: denied { create } for pid=12573 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 01:38:45 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 70) [ 2649.936123] FAT-fs (loop4): Directory bread(block 10) failed [ 2649.937264] FAT-fs (loop4): Directory bread(block 11) failed [ 2649.938068] FAULT_INJECTION: forcing a failure. [ 2649.938068] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.940906] CPU: 0 PID: 12587 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2649.942479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2649.944331] Call Trace: [ 2649.944950] dump_stack+0x107/0x167 [ 2649.945787] should_fail.cold+0x5/0xa [ 2649.946660] ? skb_clone+0x14f/0x3d0 [ 2649.947506] should_failslab+0x5/0x20 [ 2649.948374] kmem_cache_alloc+0x5b/0x310 [ 2649.949301] skb_clone+0x14f/0x3d0 [ 2649.950120] ip6_finish_output2+0x10bf/0x1cf0 [ 2649.951150] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2649.951788] FAULT_INJECTION: forcing a failure. [ 2649.951788] name failslab, interval 1, probability 0, space 0, times 0 [ 2649.952303] ip6_output+0x3b8/0x7e0 [ 2649.952336] ip6_local_out+0xb4/0x1a0 [ 2649.955408] ip6_send_skb+0x112/0x460 [ 2649.956282] udp_v6_send_skb+0x7aa/0x15b0 [ 2649.957239] udpv6_sendmsg+0x2116/0x2ad0 [ 2649.958196] ? ip_frag_init+0x350/0x350 [ 2649.959123] ? udp_v6_push_pending_frames+0x360/0x360 [ 2649.960314] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2649.961521] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.962794] ? lock_acquire+0x197/0x470 [ 2649.963705] ? find_held_lock+0x2c/0x110 [ 2649.964653] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2649.965946] ? sock_has_perm+0x1ea/0x280 [ 2649.966922] ? __import_iovec+0x458/0x590 [ 2649.967888] ? udp_v6_push_pending_frames+0x360/0x360 [ 2649.969094] inet6_sendmsg+0x105/0x140 [ 2649.970027] ? inet6_compat_ioctl+0x320/0x320 [ 2649.971074] __sock_sendmsg+0xf2/0x190 [ 2649.971988] ____sys_sendmsg+0x334/0x870 [ 2649.972942] ? sock_write_iter+0x3d0/0x3d0 [ 2649.973961] ? do_recvmmsg+0x6d0/0x6d0 [ 2649.974881] ? __lock_acquire+0x1657/0x5b00 [ 2649.975905] ___sys_sendmsg+0xf3/0x170 [ 2649.976824] ? sendmsg_copy_msghdr+0x160/0x160 [ 2649.977814] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2649.978720] ? _raw_spin_unlock_irq+0x27/0x30 [ 2649.979637] ? lock_acquire+0x197/0x470 [ 2649.980446] ? find_held_lock+0x2c/0x110 [ 2649.981270] ? __might_fault+0xd3/0x180 [ 2649.982081] ? lock_downgrade+0x6d0/0x6d0 [ 2649.982924] ? io_schedule_timeout+0x140/0x140 [ 2649.983877] __sys_sendmmsg+0x195/0x470 [ 2649.984695] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2649.985584] ? lock_downgrade+0x6d0/0x6d0 [ 2649.986446] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2649.987434] ? wait_for_completion_io+0x270/0x270 [ 2649.988420] ? rcu_read_lock_any_held+0x75/0xa0 [ 2649.989376] ? vfs_write+0x354/0xb10 [ 2649.990146] ? fput_many+0x2f/0x1a0 [ 2649.990895] ? ksys_write+0x1a9/0x260 [ 2649.991675] ? __ia32_sys_read+0xb0/0xb0 [ 2649.992513] __x64_sys_sendmmsg+0x99/0x100 [ 2649.993429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2649.994582] do_syscall_64+0x33/0x40 [ 2649.995351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2649.996415] RIP: 0033:0x7f6413bdcb19 [ 2649.997185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.001019] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.002625] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2650.004115] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.005691] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.007242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.008749] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 [ 2650.010304] CPU: 1 PID: 12589 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2650.011178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.012200] Call Trace: [ 2650.012535] dump_stack+0x107/0x167 [ 2650.012987] should_fail.cold+0x5/0xa [ 2650.013467] ? create_object.isra.0+0x3a/0xa20 [ 2650.014043] should_failslab+0x5/0x20 [ 2650.014518] kmem_cache_alloc+0x5b/0x310 [ 2650.015025] create_object.isra.0+0x3a/0xa20 [ 2650.015571] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2650.016202] kmem_cache_alloc_node+0x169/0x330 [ 2650.016780] __alloc_skb+0x6d/0x5b0 [ 2650.017233] skb_copy+0x183/0x350 [ 2650.017682] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2650.018425] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2650.019062] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2650.019794] ? lock_acquire+0x160/0x470 [ 2650.020306] ? find_held_lock+0x2c/0x110 [ 2650.020832] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2650.021487] mac80211_hwsim_tx+0x574/0x12a0 [ 2650.022052] ? trace_hardirqs_on+0x5b/0x180 [ 2650.022609] ieee80211_tx_frags+0x59c/0x9f0 [ 2650.023162] ? fq_skb_free_func+0x20/0x20 [ 2650.023697] __ieee80211_tx+0x1ad/0x640 [ 2650.024193] ieee80211_tx+0x329/0x410 [ 2650.024668] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2650.025304] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2650.026044] ? ieee80211_skb_resize+0x116/0x630 [ 2650.026628] ieee80211_xmit+0x220/0x2a0 [ 2650.027120] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2650.027761] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2650.028398] ieee80211_subif_start_xmit+0xef/0xf70 [ 2650.029005] ? lock_chain_count+0x20/0x20 [ 2650.029518] ? skb_crc32c_csum_help+0x80/0x80 [ 2650.030078] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2650.030736] ? lock_acquire+0x197/0x470 [ 2650.031224] ? sch_direct_xmit+0x31a/0x790 [ 2650.031747] ? lock_release+0x680/0x680 [ 2650.032245] dev_hard_start_xmit+0x1cb/0x6f0 [ 2650.032789] sch_direct_xmit+0x25f/0x790 [ 2650.033290] ? lock_acquire+0x197/0x470 [ 2650.033789] ? find_held_lock+0x2c/0x110 [ 2650.034295] ? dev_watchdog+0xbc0/0xbc0 [ 2650.034783] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2650.035348] __qdisc_run+0x4aa/0x1570 [ 2650.035831] __dev_queue_xmit+0xd43/0x2690 [ 2650.036351] ? ip6_finish_output2+0x158f/0x1cf0 [ 2650.036927] ? find_held_lock+0x2c/0x110 [ 2650.037430] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2650.037998] ? lock_downgrade+0x6d0/0x6d0 [ 2650.038506] ? do_softirq+0x53/0xc0 [ 2650.038945] ? trace_hardirqs_on+0x5b/0x180 [ 2650.039480] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2650.040117] ip6_finish_output2+0x158f/0x1cf0 [ 2650.040676] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2650.041291] ip6_output+0x3b8/0x7e0 [ 2650.041752] ip6_local_out+0xb4/0x1a0 [ 2650.042220] ip6_send_skb+0x112/0x460 [ 2650.042690] udp_v6_send_skb+0x7aa/0x15b0 [ 2650.043204] udpv6_sendmsg+0x2116/0x2ad0 [ 2650.043701] ? ip_frag_init+0x350/0x350 [ 2650.044196] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.044852] ? perf_event_task_disable+0x390/0x390 [ 2650.045485] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2650.046105] ? lock_acquire+0x197/0x470 [ 2650.046609] ? find_held_lock+0x2c/0x110 [ 2650.047129] ? sock_has_perm+0x1ea/0x280 [ 2650.047664] ? __import_iovec+0x458/0x590 [ 2650.048187] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.048838] inet6_sendmsg+0x105/0x140 [ 2650.049318] ? inet6_compat_ioctl+0x320/0x320 [ 2650.049883] __sock_sendmsg+0xf2/0x190 [ 2650.050361] ____sys_sendmsg+0x334/0x870 [ 2650.050857] ? sock_write_iter+0x3d0/0x3d0 [ 2650.051372] ? do_recvmmsg+0x6d0/0x6d0 [ 2650.051851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.052500] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2650.053153] ? trace_hardirqs_on+0x5b/0x180 [ 2650.053694] ___sys_sendmsg+0xf3/0x170 [ 2650.054169] ? sendmsg_copy_msghdr+0x160/0x160 [ 2650.054728] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2650.055267] ? _raw_spin_unlock_irq+0x27/0x30 [ 2650.055811] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2650.056356] ? finish_task_switch+0x126/0x5d0 [ 2650.056894] ? finish_task_switch+0xef/0x5d0 [ 2650.057427] ? __switch_to+0x572/0xf70 [ 2650.057908] ? __switch_to_asm+0x3a/0x60 [ 2650.058400] ? __switch_to_asm+0x34/0x60 [ 2650.058894] ? __schedule+0x82c/0x1ea0 [ 2650.059379] ? io_schedule_timeout+0x140/0x140 [ 2650.059944] __sys_sendmmsg+0x195/0x470 [ 2650.060434] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2650.060954] ? lock_downgrade+0x6d0/0x6d0 [ 2650.061473] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2650.062064] ? wait_for_completion_io+0x270/0x270 [ 2650.062654] ? rcu_read_lock_any_held+0x75/0xa0 [ 2650.063215] ? vfs_write+0x354/0xb10 [ 2650.063668] ? fput_many+0x2f/0x1a0 [ 2650.064109] ? ksys_write+0x1a9/0x260 [ 2650.064574] ? __ia32_sys_read+0xb0/0xb0 [ 2650.065068] __x64_sys_sendmmsg+0x99/0x100 [ 2650.065594] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.066217] do_syscall_64+0x33/0x40 [ 2650.066671] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.067296] RIP: 0033:0x7f9d078eeb19 [ 2650.067749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.070040] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.070987] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2650.071877] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.072761] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.073654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.074517] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 [ 2650.104320] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.105633] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.110255] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.111804] FAT-fs (loop4): Directory bread(block 11) failed 01:38:45 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, 0x0]) 01:38:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x201000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xff01000000000000, 0x8000) 01:38:45 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:38:45 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 01:38:45 executing program 1: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 88) 01:38:45 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x7}], 0x1}}], 0x7ffff000, 0x0) 01:38:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x300000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:45 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="39000004000000000000d5b5ae91fd57c9070000dfe418ba8e2cc990edca00525a3433ce2aed27996cb09955ffcf7d7c0accae30320eadfd47a50c260f873ee99eae35338671b6891fc41d391e4989d58671a483cd1dc131156325524f10abc7479d43baade0b2fb1d4d75093c1075020a06de39670355a2b2a3914eda67756c74555c12b78e738677bb68a3942f6d8c2a546f1c7a00dfbeffa406bb4422bb9cbce024a6a41209ed107801e2a048a26589323ce9e5976b3a34a8b113224258c8ff9d58bb872984e85838195ddd4aa19e186f7ad7168dd9220e306945181ca625f7e8d1d2553f8824fe782fe50426b8d951177582271c58d93afd5f1f4848eb9688a6ad081a7c53adda4ca20d4dee188f94ecfdacca2dcc70df2492104dc77fa4f380365ee2d1e77b5a3c650ee11e7bc1fb0222da5fc1caeb91e964a3e597b6179b05853ed055dfe3c3dca38cbfdad2d5d7b1097a32b158e5dc36e372bb1d389d68eff54d9e4b10091d977e07a953459068166d051749bb0d1ae1238434721b7578"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 71) 01:38:45 executing program 5: write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="010000000000d6da8b43ef89425c8d1b4d6c653000"]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r4 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000140)={0x0, r5, 0x9, 0x1, 0x1, 0x3}) fallocate(0xffffffffffffffff, 0x2, 0x7, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x8000004000006}) lseek(r6, 0x2, 0x4) splice(r0, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000040)=0x7fff, 0x10000, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000000240)={{}, "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"}) [ 2650.390058] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.391318] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.394007] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.395259] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.397207] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.398950] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.420397] FAULT_INJECTION: forcing a failure. [ 2650.420397] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.422854] CPU: 0 PID: 12625 Comm: syz-executor.1 Not tainted 5.10.233 #1 [ 2650.424262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.425980] Call Trace: [ 2650.426521] dump_stack+0x107/0x167 [ 2650.427266] should_fail.cold+0x5/0xa [ 2650.428048] should_failslab+0x5/0x20 [ 2650.428824] __kmalloc_node_track_caller+0x74/0x3b0 [ 2650.429866] ? skb_copy+0x183/0x350 [ 2650.430620] __alloc_skb+0xb1/0x5b0 [ 2650.431363] skb_copy+0x183/0x350 [ 2650.432068] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb1d/0x13d0 [ 2650.433272] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2650.434345] ? rht_key_get_hash.constprop.0.isra.0+0x30/0x30 [ 2650.435499] ? lock_acquire+0x160/0x470 [ 2650.436294] ? find_held_lock+0x2c/0x110 [ 2650.437118] ? mac80211_hwsim_monitor_rx+0x1b8/0x810 [ 2650.438169] mac80211_hwsim_tx+0x574/0x12a0 [ 2650.439040] ? trace_hardirqs_on+0x5b/0x180 [ 2650.439909] ieee80211_tx_frags+0x59c/0x9f0 [ 2650.440783] ? fq_skb_free_func+0x20/0x20 [ 2650.441657] __ieee80211_tx+0x1ad/0x640 [ 2650.442469] ieee80211_tx+0x329/0x410 [ 2650.443236] ? ieee80211_tx_prepare_skb+0x440/0x440 [ 2650.444268] ? ieee80211_beacon_cntdwn_is_complete+0x760/0x760 [ 2650.445453] ? ieee80211_skb_resize+0x116/0x630 [ 2650.446418] ieee80211_xmit+0x220/0x2a0 [ 2650.447220] __ieee80211_subif_start_xmit+0x752/0xca0 [ 2650.448256] ? ieee80211_clear_fast_xmit+0x130/0x130 [ 2650.449286] ieee80211_subif_start_xmit+0xef/0xf70 [ 2650.450302] ? lock_chain_count+0x20/0x20 [ 2650.451127] ? skb_crc32c_csum_help+0x80/0x80 [ 2650.452027] ? __ieee80211_subif_start_xmit+0xca0/0xca0 [ 2650.453089] ? lock_acquire+0x197/0x470 [ 2650.453908] ? sch_direct_xmit+0x31a/0x790 [ 2650.454753] ? lock_release+0x680/0x680 [ 2650.455542] ? trace_hardirqs_on+0x5b/0x180 [ 2650.456412] dev_hard_start_xmit+0x1cb/0x6f0 [ 2650.457293] sch_direct_xmit+0x25f/0x790 [ 2650.458135] ? dev_watchdog+0xbc0/0xbc0 [ 2650.458923] ? pfifo_fast_dequeue+0x599/0xbb0 [ 2650.459816] __qdisc_run+0x4aa/0x1570 [ 2650.460578] __dev_queue_xmit+0xd43/0x2690 [ 2650.461404] ? ip6_finish_output2+0x158f/0x1cf0 [ 2650.462354] ? find_held_lock+0x2c/0x110 [ 2650.463150] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2650.464049] ? lock_downgrade+0x6d0/0x6d0 [ 2650.464861] ? do_softirq+0x53/0xc0 [ 2650.465587] ? trace_hardirqs_on+0x5b/0x180 [ 2650.466440] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2650.467476] ip6_finish_output2+0x158f/0x1cf0 [ 2650.468374] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2650.469356] ip6_output+0x3b8/0x7e0 [ 2650.470110] ip6_local_out+0xb4/0x1a0 [ 2650.470863] ip6_send_skb+0x112/0x460 [ 2650.471618] udp_v6_send_skb+0x7aa/0x15b0 [ 2650.472448] udpv6_sendmsg+0x2116/0x2ad0 [ 2650.473249] ? ip_frag_init+0x350/0x350 [ 2650.474063] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.475099] ? lock_acquire+0x197/0x470 [ 2650.475872] ? find_held_lock+0x2c/0x110 [ 2650.476680] ? sock_has_perm+0x1ea/0x280 [ 2650.477502] ? __import_iovec+0x458/0x590 [ 2650.478343] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.479355] inet6_sendmsg+0x105/0x140 [ 2650.480118] ? inet6_compat_ioctl+0x320/0x320 [ 2650.480991] __sock_sendmsg+0xf2/0x190 [ 2650.481789] ____sys_sendmsg+0x334/0x870 [ 2650.482586] ? sock_write_iter+0x3d0/0x3d0 [ 2650.483409] ? do_recvmmsg+0x6d0/0x6d0 [ 2650.484174] ? __lock_acquire+0x1657/0x5b00 [ 2650.485031] ___sys_sendmsg+0xf3/0x170 [ 2650.485825] ? sendmsg_copy_msghdr+0x160/0x160 [ 2650.486722] ? __fget_files+0x2cf/0x520 [ 2650.487503] ? lock_acquire+0x197/0x470 [ 2650.488276] ? find_held_lock+0x2c/0x110 [ 2650.489069] ? __might_fault+0xd3/0x180 [ 2650.489868] ? lock_downgrade+0x6d0/0x6d0 [ 2650.490690] __sys_sendmmsg+0x195/0x470 [ 2650.491467] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2650.492300] ? lock_downgrade+0x6d0/0x6d0 [ 2650.493125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2650.494089] ? wait_for_completion_io+0x270/0x270 [ 2650.495028] ? rcu_read_lock_any_held+0x75/0xa0 [ 2650.495928] ? vfs_write+0x354/0xb10 [ 2650.496652] ? fput_many+0x2f/0x1a0 [ 2650.497359] ? ksys_write+0x1a9/0x260 [ 2650.498122] ? __ia32_sys_read+0xb0/0xb0 [ 2650.498917] __x64_sys_sendmmsg+0x99/0x100 [ 2650.499740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.500738] do_syscall_64+0x33/0x40 [ 2650.501538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.502745] RIP: 0033:0x7f9d078eeb19 [ 2650.503594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.507686] RSP: 002b:00007f9d04e64188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.509343] RAX: ffffffffffffffda RBX: 00007f9d07a01f60 RCX: 00007f9d078eeb19 [ 2650.510707] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.512056] RBP: 00007f9d04e641d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.513403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.514904] R13: 00007ffedbc8577f R14: 00007f9d04e64300 R15: 0000000000022000 01:38:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xffffff7f00000000, 0x8000) [ 2650.540894] FAULT_INJECTION: forcing a failure. [ 2650.540894] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.542333] CPU: 1 PID: 12622 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2650.543152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.544124] Call Trace: [ 2650.544442] dump_stack+0x107/0x167 [ 2650.544869] should_fail.cold+0x5/0xa [ 2650.545321] ? create_object.isra.0+0x3a/0xa20 [ 2650.545869] should_failslab+0x5/0x20 [ 2650.546316] kmem_cache_alloc+0x5b/0x310 [ 2650.546794] create_object.isra.0+0x3a/0xa20 [ 2650.547307] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2650.547903] kmem_cache_alloc+0x159/0x310 [ 2650.548397] skb_clone+0x14f/0x3d0 [ 2650.548819] ip6_finish_output2+0x10bf/0x1cf0 [ 2650.549358] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2650.549957] ip6_output+0x3b8/0x7e0 [ 2650.550395] ip6_local_out+0xb4/0x1a0 [ 2650.550848] ip6_send_skb+0x112/0x460 [ 2650.551301] udp_v6_send_skb+0x7aa/0x15b0 [ 2650.551799] udpv6_sendmsg+0x2116/0x2ad0 [ 2650.552283] ? ip_frag_init+0x350/0x350 [ 2650.552756] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.553371] ? perf_event_task_disable+0x390/0x390 [ 2650.553963] ? hrtimer_start_range_ns+0x3b2/0xb30 [ 2650.554540] ? lock_acquire+0x197/0x470 [ 2650.555002] ? find_held_lock+0x2c/0x110 [ 2650.555494] ? sock_has_perm+0x1ea/0x280 [ 2650.555988] ? __import_iovec+0x458/0x590 [ 2650.556481] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.557085] inet6_sendmsg+0x105/0x140 [ 2650.557540] ? inet6_compat_ioctl+0x320/0x320 [ 2650.558076] __sock_sendmsg+0xf2/0x190 [ 2650.558540] ____sys_sendmsg+0x334/0x870 [ 2650.559019] ? sock_write_iter+0x3d0/0x3d0 [ 2650.559514] ? do_recvmmsg+0x6d0/0x6d0 [ 2650.559972] ? __lock_acquire+0x1657/0x5b00 [ 2650.560489] ___sys_sendmsg+0xf3/0x170 [ 2650.560948] ? sendmsg_copy_msghdr+0x160/0x160 [ 2650.561488] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.562110] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2650.562634] ? trace_hardirqs_on+0x5b/0x180 [ 2650.563145] ? lock_acquire+0x197/0x470 [ 2650.563619] ? find_held_lock+0x2c/0x110 [ 2650.564098] ? __might_fault+0xd3/0x180 [ 2650.564576] ? lock_downgrade+0x6d0/0x6d0 [ 2650.565058] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2650.565723] __sys_sendmmsg+0x195/0x470 [ 2650.566190] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2650.566701] ? lock_downgrade+0x6d0/0x6d0 [ 2650.567196] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2650.567771] ? wait_for_completion_io+0x270/0x270 [ 2650.568352] ? rcu_read_lock_any_held+0x75/0xa0 [ 2650.568895] ? vfs_write+0x354/0xb10 [ 2650.569334] ? fput_many+0x2f/0x1a0 [ 2650.569766] ? ksys_write+0x1a9/0x260 [ 2650.570214] ? __ia32_sys_read+0xb0/0xb0 [ 2650.570696] __x64_sys_sendmmsg+0x99/0x100 [ 2650.571203] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.571812] do_syscall_64+0x33/0x40 [ 2650.572248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.572859] RIP: 0033:0x7f6413bdcb19 [ 2650.573301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.575430] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.576248] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2650.577059] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.577893] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.578707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.579523] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:38:45 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:38:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x800000001000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0xffffffff00000000, 0x8000) 01:38:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffff, 0x4, 0x2, 0x0, "968db7f47079df1eb98091866c6edfcc49ff8af6d4c65b37c06b8b32ca4e8eb9499a064f0e9359f7b55c8e69c51da094e38f8d2359658ddf67d98457a0e14945", "2dd26d3ac0aa6849cfdf3788a042a3f6b2d09102d73523c33d7ff4c4a64f960c", [0x5, 0x1ff]}) write$P9_RCLUNK(r0, 0x0, 0x0) 01:38:45 executing program 0: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x8}], 0x1}}], 0x7ffff000, 0x0) 01:38:45 executing program 6: io_setup(0x3, &(0x7f0000000200)=0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 01:38:45 executing program 2: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) (fail_nth: 72) [ 2650.722233] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.722973] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.724903] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.726221] FAT-fs (loop4): Directory bread(block 11) failed [ 2650.729148] FAT-fs (loop4): Directory bread(block 10) failed [ 2650.729872] FAT-fs (loop4): Directory bread(block 11) failed 01:38:45 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3}) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_mmap}, {@cache_none}, {@cache_mmap}, {@version_u}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) write$P9_RCLUNK(r0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f0000000240)="4546ff2deb7bd510b6a4c4d2df288e43934f502e4822cc0a104360e6c4261e05b237e048", 0x24}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, r5}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x1, 0x0, 0x20, {{}, {@val={0x8, 0x3, r10}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="080029bd7000ffdbdf250800000008002300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 2650.737638] FAULT_INJECTION: forcing a failure. [ 2650.737638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2650.739334] CPU: 1 PID: 12653 Comm: syz-executor.2 Not tainted 5.10.233 #1 [ 2650.740072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.741042] Call Trace: [ 2650.741331] dump_stack+0x107/0x167 [ 2650.741766] should_fail.cold+0x5/0xa [ 2650.742215] _copy_from_user+0x2e/0x1b0 [ 2650.742687] __copy_msghdr_from_user+0x91/0x4b0 [ 2650.743232] ? __ia32_sys_shutdown+0x80/0x80 [ 2650.743754] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.744357] ? inet6_sendmsg+0xbd/0x140 [ 2650.744820] ? inet6_compat_ioctl+0x320/0x320 [ 2650.745340] ? __sock_sendmsg+0x55/0x190 [ 2650.745824] sendmsg_copy_msghdr+0xa1/0x160 [ 2650.746328] ? do_recvmmsg+0x6d0/0x6d0 [ 2650.746785] ? __lock_acquire+0x1657/0x5b00 [ 2650.747293] ___sys_sendmsg+0xc6/0x170 [ 2650.747747] ? sendmsg_copy_msghdr+0x160/0x160 [ 2650.748279] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.748888] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2650.749408] ? trace_hardirqs_on+0x5b/0x180 [ 2650.749954] ? lock_acquire+0x197/0x470 [ 2650.750414] ? find_held_lock+0x2c/0x110 [ 2650.750895] ? __might_fault+0xd3/0x180 [ 2650.751356] ? lock_downgrade+0x6d0/0x6d0 [ 2650.751839] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2650.752475] __sys_sendmmsg+0x195/0x470 [ 2650.752938] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2650.753437] ? lock_downgrade+0x6d0/0x6d0 [ 2650.753942] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2650.754506] ? wait_for_completion_io+0x270/0x270 [ 2650.755065] ? rcu_read_lock_any_held+0x75/0xa0 [ 2650.755606] ? vfs_write+0x354/0xb10 [ 2650.756040] ? fput_many+0x2f/0x1a0 [ 2650.756465] ? ksys_write+0x1a9/0x260 [ 2650.756905] ? __ia32_sys_read+0xb0/0xb0 [ 2650.757383] __x64_sys_sendmmsg+0x99/0x100 [ 2650.757892] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.758492] do_syscall_64+0x33/0x40 [ 2650.758931] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.759534] RIP: 0033:0x7f6413bdcb19 [ 2650.759972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.762134] RSP: 002b:00007f6411152188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.763029] RAX: ffffffffffffffda RBX: 00007f6413ceff60 RCX: 00007f6413bdcb19 [ 2650.763862] RDX: 000000007ffff000 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.764691] RBP: 00007f64111521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.765519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.766359] R13: 00007ffd4fa72c8f R14: 00007f6411152300 R15: 0000000000022000 01:38:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x500000000000000, 0x8000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x8, 0x3, 0x42, 0x0, 0x8d, 0x10400, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x2, 0x10000, 0x309a, 0x2, 0x20, 0x20, 0x7, 0x0, 0xbad, 0x0, 0x8}, r1, 0x9, r2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in=@local, {@in=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@tmpl={0x84, 0x5, [{{@in=@dev, 0x0, 0x33}, 0x0, @in6=@local}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@empty}]}]}, 0x1ac}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) 01:38:45 executing program 7: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={&(0x7f0000004c80), 0xc, &(0x7f0000005d40)={0x0}}, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r3, 0x6801, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r4, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000003c0), 0x300028, &(0x7f0000001880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7e}}, {@access_any}], [{@uid_eq}, {@dont_hash}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@audit}]}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) VM DIAGNOSIS: 01:43:47 Registers: info registers vcpu 0 RAX=ffffffff83e7e9a0 RBX=0000000000000000 RCX=ffffffff83e6657c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7efa8 RBP=0000000000000000 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e9ae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055bbe7967678 CR3=000000000e0aa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00b702fe016c6c6f502e726567616e61 XMM02=000000000000000040eb050000000000 XMM03=00000606060606020606020901075fbc XMM04=ce7b1fe1fc891f3cf9fc0901039aff3f XMM05=fcb263b243fc998c9f64fc0be31464fc XMM06=23fc48006964fce5e3e57ffcb48e28f2 XMM07=00000606060606020606020901075fbc XMM08=650800737472617473657220726f7475 XMM09=616320636578650e006e656720636578 XMM10=696d20636578650d006574616469646e XMM11=65657320636578650a00657a696d696e XMM12=09006c61746f7420636578650a007364 XMM13=20636578650b007a7a75662063657865 XMM14=616d7320636578650a00656761697274 XMM15=000073746e696820636578650a006873 info registers vcpu 1 RAX=ffffffff83e7e9a0 RBX=0000000000000001 RCX=ffffffff83e6657c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e7efa8 RBP=0000000000000001 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85677788 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e7e9ae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d350fc010 CR3=000000000e0aa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041888c40c0000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000