68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) kcmp(r2, 0xffffffffffffffff, 0x6, r3, r4) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:08:40 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)=ANY=[@ANYBLOB="018005000000000000000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00./file0\x00']) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:08:40 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1003, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2478.329381] FAULT_INJECTION: forcing a failure. [ 2478.329381] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.332340] CPU: 1 PID: 12560 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2478.333664] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.335247] Call Trace: [ 2478.335758] dump_stack+0x107/0x167 [ 2478.336449] should_fail.cold+0x5/0xa [ 2478.337170] ? __alloc_skb+0x6d/0x5b0 [ 2478.337896] should_failslab+0x5/0x20 [ 2478.338623] kmem_cache_alloc_node+0x55/0x330 [ 2478.339493] __alloc_skb+0x6d/0x5b0 [ 2478.340193] alloc_skb_with_frags+0x92/0x570 [ 2478.341029] sock_alloc_send_pskb+0x7af/0x930 [ 2478.341882] ? sk_alloc+0x350/0x350 [ 2478.342571] ? lock_acquire+0x197/0x470 [ 2478.343320] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2478.344302] ? lock_release+0x680/0x680 [ 2478.345059] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2478.345999] ? ip6_mtu+0x1bb/0x3d0 [ 2478.346665] ? lock_downgrade+0x6d0/0x6d0 [ 2478.347448] ? ip_frag_init+0x350/0x350 [ 2478.348211] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2478.349082] ? ip6_mtu+0x1e9/0x3d0 [ 2478.349749] ? ip6_setup_cork+0xfb7/0x1740 [ 2478.350545] ip6_make_skb+0x2de/0x4e0 [ 2478.351273] ? ip_frag_init+0x350/0x350 [ 2478.352014] ? ip_frag_init+0x350/0x350 [ 2478.352758] ? ip6_push_pending_frames+0xf0/0xf0 [ 2478.353644] ? ip6_dst_hoplimit+0x199/0x440 [ 2478.354442] ? lock_downgrade+0x6d0/0x6d0 [ 2478.355235] udpv6_sendmsg+0x20d0/0x2af0 [ 2478.355994] ? ip_frag_init+0x350/0x350 [ 2478.356740] ? udp_v6_push_pending_frames+0x360/0x360 [ 2478.357711] ? perf_event_task_disable+0x390/0x390 [ 2478.358625] ? lock_downgrade+0x6d0/0x6d0 [ 2478.359414] ? hrtimer_start_range_ns+0x336/0xae0 [ 2478.360338] ? sock_has_perm+0x1ea/0x280 [ 2478.361110] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2478.362116] ? trace_hardirqs_on+0x5b/0x180 [ 2478.362918] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2478.363934] ? udp_v6_push_pending_frames+0x360/0x360 [ 2478.364890] inet6_sendmsg+0x105/0x140 [ 2478.365608] ? inet6_compat_ioctl+0x320/0x320 [ 2478.366430] sock_sendmsg+0xf2/0x190 [ 2478.367116] ____sys_sendmsg+0x334/0x870 [ 2478.367871] ? kernel_sendmsg+0x50/0x50 [ 2478.368600] ? do_recvmmsg+0x6d0/0x6d0 [ 2478.369322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.370286] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2478.371295] ? trace_hardirqs_on+0x5b/0x180 [ 2478.372097] ___sys_sendmsg+0xf3/0x170 [ 2478.372817] ? sendmsg_copy_msghdr+0x160/0x160 [ 2478.373663] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2478.374488] ? _raw_spin_unlock_irq+0x27/0x30 [ 2478.375320] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2478.376150] ? finish_task_switch+0x126/0x5d0 [ 2478.376972] ? finish_task_switch+0xef/0x5d0 [ 2478.377783] ? __switch_to+0x572/0xf70 [ 2478.378498] ? __switch_to_asm+0x3a/0x60 [ 2478.379262] ? __switch_to_asm+0x34/0x60 [ 2478.380002] ? __schedule+0x82c/0x1ea0 [ 2478.380717] ? io_schedule_timeout+0x140/0x140 [ 2478.381562] __sys_sendmmsg+0x195/0x470 [ 2478.382290] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2478.383071] ? lock_downgrade+0x6d0/0x6d0 [ 2478.383843] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2478.384724] ? wait_for_completion_io+0x270/0x270 [ 2478.385609] ? rcu_read_lock_any_held+0x75/0xa0 [ 2478.386459] ? vfs_write+0x354/0xa70 [ 2478.387158] ? fput_many+0x2f/0x1a0 [ 2478.387825] ? ksys_write+0x1a9/0x260 [ 2478.388528] ? __ia32_sys_read+0xb0/0xb0 [ 2478.389290] __x64_sys_sendmmsg+0x99/0x100 [ 2478.390086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.391028] do_syscall_64+0x33/0x40 [ 2478.391717] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2478.392662] RIP: 0033:0x7fba2f88eb19 [ 2478.393349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.396713] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2478.398101] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2478.399419] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2478.400727] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.402021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2478.403313] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:08:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000a, 0x0) 10:08:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="207400001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:08:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 35) 10:08:56 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:08:56 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000004c1e00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2494.082618] FAULT_INJECTION: forcing a failure. [ 2494.082618] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.084301] CPU: 1 PID: 12575 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2494.085039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2494.085925] Call Trace: [ 2494.086215] dump_stack+0x107/0x167 [ 2494.086603] should_fail.cold+0x5/0xa [ 2494.087020] ? __alloc_skb+0x6d/0x5b0 [ 2494.087431] should_failslab+0x5/0x20 [ 2494.087834] kmem_cache_alloc_node+0x55/0x330 [ 2494.088308] __alloc_skb+0x6d/0x5b0 [ 2494.088704] alloc_skb_with_frags+0x92/0x570 [ 2494.089188] sock_alloc_send_pskb+0x7af/0x930 [ 2494.089673] ? sk_alloc+0x350/0x350 [ 2494.090063] ? lock_acquire+0x197/0x470 [ 2494.090482] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2494.091040] ? lock_release+0x680/0x680 [ 2494.091479] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2494.092011] ? ip6_mtu+0x1bb/0x3d0 [ 2494.092390] ? lock_downgrade+0x6d0/0x6d0 [ 2494.092841] ? ip_frag_init+0x350/0x350 [ 2494.093277] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2494.093770] ? ip6_mtu+0x1e9/0x3d0 [ 2494.094150] ? ip6_setup_cork+0xfb7/0x1740 [ 2494.094608] ip6_make_skb+0x2de/0x4e0 [ 2494.095012] ? ip_frag_init+0x350/0x350 [ 2494.095444] ? ip_frag_init+0x350/0x350 [ 2494.095870] ? ip6_push_pending_frames+0xf0/0xf0 [ 2494.096380] ? ip6_dst_hoplimit+0x199/0x440 [ 2494.096843] ? lock_downgrade+0x6d0/0x6d0 [ 2494.097291] udpv6_sendmsg+0x20d0/0x2af0 [ 2494.097717] ? ip_frag_init+0x350/0x350 [ 2494.098148] ? udp_v6_push_pending_frames+0x360/0x360 [ 2494.098699] ? trace_hardirqs_on+0x5b/0x180 [ 2494.099157] ? lock_acquire+0x197/0x470 [ 2494.099594] ? find_held_lock+0x2c/0x110 [ 2494.100038] ? lock_acquire+0x197/0x470 [ 2494.100457] ? find_held_lock+0x2c/0x110 [ 2494.100902] ? sock_has_perm+0x1ea/0x280 [ 2494.101343] ? __import_iovec+0x458/0x590 [ 2494.101774] ? udp_v6_push_pending_frames+0x360/0x360 [ 2494.102328] inet6_sendmsg+0x105/0x140 [ 2494.102742] ? inet6_compat_ioctl+0x320/0x320 [ 2494.103216] sock_sendmsg+0xf2/0x190 [ 2494.103616] ____sys_sendmsg+0x334/0x870 [ 2494.104056] ? kernel_sendmsg+0x50/0x50 [ 2494.104475] ? do_recvmmsg+0x6d0/0x6d0 [ 2494.104882] ? __lock_acquire+0x1657/0x5b00 [ 2494.105345] ___sys_sendmsg+0xf3/0x170 [ 2494.105758] ? sendmsg_copy_msghdr+0x160/0x160 [ 2494.106235] ? vmacache_find+0x55/0x2a0 [ 2494.106673] ? lock_acquire+0x197/0x470 [ 2494.107102] ? find_held_lock+0x2c/0x110 [ 2494.107542] ? __might_fault+0xd3/0x180 [ 2494.107965] ? lock_downgrade+0x6d0/0x6d0 [ 2494.108408] ? asm_exc_page_fault+0x1e/0x30 [ 2494.108874] __sys_sendmmsg+0x195/0x470 [ 2494.109300] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2494.109766] ? lock_downgrade+0x6d0/0x6d0 [ 2494.110217] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2494.110729] ? wait_for_completion_io+0x270/0x270 [ 2494.111233] ? rcu_read_lock_any_held+0x75/0xa0 [ 2494.111731] ? vfs_write+0x354/0xa70 [ 2494.112126] ? fput_many+0x2f/0x1a0 [ 2494.112512] ? ksys_write+0x1a9/0x260 [ 2494.112926] ? __ia32_sys_read+0xb0/0xb0 [ 2494.113371] __x64_sys_sendmmsg+0x99/0x100 [ 2494.113819] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2494.114363] do_syscall_64+0x33/0x40 [ 2494.114757] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2494.115303] RIP: 0033:0x7fba2f88eb19 [ 2494.115711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2494.117636] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2494.118437] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2494.119192] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2494.119946] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2494.120703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2494.121451] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:08:56 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1004, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:08:56 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = gettid() process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r3, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x5) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x4, 0xffffffffffffffff, &(0x7f0000000200)="4427fce4c0563dd069c95d8955250bd3cf418e1f8f8d0c387cf8f564c755f7f8f1c2a2851133b16aff150732cae85dd18da5f05cdc3f4c3b709a5afb092d74a8905b33b56e51502451861d60437546755bc5d8989534727dddd21fb25146a52feded6c0c7ed05941bbbfd4cf7ce5541cf7415a5bc086684b3793aa8378947f0da846e6b0cfa812f1297f22f0c0231fa761fe2642752d8d337302fe92cf8f5eb3eea125f28051f39354ab628491476bbad24c693f2ce33c91e7b8a656ad8c7b6882b60005c965a8ef33f90001fe6b1f19713082f4f649864600", 0xd9, 0x0, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x36e, r3, &(0x7f0000000380)="857aa6bc35855f5f5a30a7797a02c50cd0bb4426bb0998e2397af99ef7433c416fa34f7616bb71ae55fd8076218cbae81f3710b5712575b45d1464bdaa03dbcc53f4eb0485e3ec695cff1249c4d3486bcc37d57bcd1fbc2d183871de80e4c3ea3e44719c8a4e2862d0cf174381e7da854522c7521416cb1dd35215f5e1fca072ebaa48ceb9745f79d84de3791bffda3835e9c2182bdb797f2437", 0x9a, 0x80000001, 0x0, 0x4}]) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) kcmp(0x0, r2, 0x3, r4, r5) sendto$inet(r1, &(0x7f00000000c0)="0ab275598d3d7c5d4051489034a02ad588b65af8e1a1cd464cce015d09f4f68e66e2c01e34ddbdc3205c1fb58b1b15849cebd7064bed609e1424e10b6ba226b1199815747641ae900eced1c68df2e928412e1d379b255e771c", 0x59, 0x8041, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000500)="a08f71693dbac568cb25d4775221c718ef8781b51779e5c89b2bfeb83b82ab4ff6baac3d806af9dce65b46b9850c30cf4aaadaf4e640ff88fa9d19674bc6b930f38360d1c3d3d8f6a0324d860776bb386643295ac44c0a14d9498bf423627f299bce94f20e545b43bc4b7c774b8bdc148d8c276a0e5cb739a6e011da74a985b67ddaf4f7a365e9bd55095d36a149d17a1b2fa6e9fae67368680ef44c3dd7df3000a87d0c27a74ec566010da1cde3877eca28a7e769a1c23ee4771509ef008c00f29da076638c3a2eb2667bd1c0f14b0bd5c7315f5190d180293229ed137c65da74d7ca6777", 0xe5}, {&(0x7f0000000600)="22a2584ed0c2414d7018d4c9d7b1e9200f8ed0d82d34ea308dab2d4e1207fb3fdb94a7748e6e5d166d9bf5a693eeed9d3285b81ffc78378def52faf41b92b29bc2e2ab61f8b302c11fa38bb425a07190fad5848a6417ef4546646a60777f4afc172ba0175e84444339a8c32dd343b335c921b39eac213739253b76fd0412464ef61a038a50fb8cdbdd9434c90cbfc599e8c99ba78ac1deebae1207cd2743e217990111b854efac4bc24e96381e5e6e829f8f8356d4998d0ebc8bd3f56010a2e416be0c75c25e64991920df8dc198cdc37ac315725f77e6634a1d1c92ecef85aea841772753b3d4d46cbed475f230abf75ccb", 0xf2}, {&(0x7f0000000700)="41d50ff5140ba2fcdcdef9e3f902413194633f5fb9fa91ba8b17fd10f5f56d43b1bee2bf5cc21c989025499ae7dcb3524834c569c295f0663de374bf00cb187fdbc3f527f3d2bceab1ae9b11856bf7191de641d8bcc7e847938cbc0f998de153767cae72a49e2a75c1f93cba2582831badb070462097f63bbcf828453ba0d2de0069e4d3aa1201e798ac7e5b9d9906bf743a26c1a7f08d77eadbe17af4d33f0dfb4a82958ad1b434059cacf52e8321", 0xaf}, {&(0x7f00000007c0)="29958906ed0d27ccdcb4b2695c7e0d1f9fce221f590cf7550eb4ed158acd90d1f452e5e597416a257b2da2b32fd74187ff67ae12eee21ddc890ef63a61fd3b8b74ef72882aeea4282c8fb91cecd1d86952af60b678dadbee0100b901403681bbf13e9bfe05896f444708d7453f1810c564e7ddc6213908507dff1e97c251cb2f890a66432cbe5bcf0ac1aff1cbb4de49", 0x90}, {&(0x7f0000000300)="39f87da06c96da3ad1", 0x9}, {&(0x7f00000008c0)="e699bc5853244cbb32d7ce3b727e737ef75a18a2243ee97a86af5e68e85da494c3edc7466e75db5fe108cb8afeb0b706dd3e1c746eaafd36fcd3bdedaf2f413b16d680c851a6efd535df0313bd967ff7012978bc9c0c2029869dc42555cbf310bd6925213ef755a69696827ab8e738a300d78d00ea7d6c5824e30855cac7e0c35159489250f29dbf2c1e30688bc2ac04c9f72fc9e3e9aa88b91b96312d042a641d65949c771fada7b7c453aa9dc522dc273a86f63fb06ed1bcc12da07170db7e232ca04599d4d6495d8e", 0xca}, {&(0x7f00000009c0)="d5dac48f777c12915e162b545b06144c", 0x10}, {&(0x7f0000000a00)="aade84c76b88ba07cccb411590f639382e7aa627f9301b430a774c38d7447f89b3b5e5367f2b292897c8617a2780cddfdadcadc8fa4f002bb415d1d07ca313d7be57141333dec9007897a453d62b0e627783498a62070601a87bf0a73e50f8ebcb4701b165d4e7e1aabbd388052e0a05313dca52843b579e7146646f", 0x7c}], 0x8, &(0x7f0000000b80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback}}}], 0x38}}], 0x2, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:08:56 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000000080), 0x0, 0x40, &(0x7f0000000100)={r2, r3+60000000}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:09:12 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:09:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000b, 0x0) 10:09:12 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="207a00001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000681e00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 36) [ 2509.664621] FAULT_INJECTION: forcing a failure. [ 2509.664621] name failslab, interval 1, probability 0, space 0, times 0 [ 2509.666250] CPU: 1 PID: 12609 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2509.666979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2509.667870] Call Trace: [ 2509.668167] dump_stack+0x107/0x167 [ 2509.668557] should_fail.cold+0x5/0xa [ 2509.668965] ? create_object.isra.0+0x3a/0xa20 [ 2509.669455] should_failslab+0x5/0x20 [ 2509.669871] kmem_cache_alloc+0x5b/0x310 [ 2509.670306] ? lock_chain_count+0x20/0x20 [ 2509.670745] create_object.isra.0+0x3a/0xa20 [ 2509.671220] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2509.671763] kmem_cache_alloc_node+0x169/0x330 [ 2509.672255] __alloc_skb+0x6d/0x5b0 [ 2509.672647] alloc_skb_with_frags+0x92/0x570 [ 2509.673127] sock_alloc_send_pskb+0x7af/0x930 [ 2509.673612] ? sk_alloc+0x350/0x350 [ 2509.674004] ? lock_acquire+0x197/0x470 [ 2509.674437] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2509.675002] ? lock_release+0x680/0x680 [ 2509.675437] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2509.675994] ? ip6_mtu+0x1bb/0x3d0 [ 2509.676376] ? lock_downgrade+0x6d0/0x6d0 [ 2509.676819] ? ip_frag_init+0x350/0x350 [ 2509.677252] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2509.677748] ? ip6_mtu+0x1e9/0x3d0 [ 2509.678130] ? ip6_setup_cork+0xfb7/0x1740 [ 2509.678586] ip6_make_skb+0x2de/0x4e0 [ 2509.678997] ? ip_frag_init+0x350/0x350 [ 2509.679426] ? ip_frag_init+0x350/0x350 [ 2509.679865] ? ip6_push_pending_frames+0xf0/0xf0 [ 2509.680384] ? ip6_dst_hoplimit+0x199/0x440 [ 2509.680850] ? lock_downgrade+0x6d0/0x6d0 [ 2509.681306] udpv6_sendmsg+0x20d0/0x2af0 [ 2509.681746] ? ip_frag_init+0x350/0x350 [ 2509.682187] ? udp_v6_push_pending_frames+0x360/0x360 [ 2509.682744] ? trace_hardirqs_on+0x5b/0x180 [ 2509.683206] ? lock_acquire+0x197/0x470 [ 2509.683639] ? find_held_lock+0x2c/0x110 [ 2509.684088] ? lock_acquire+0x197/0x470 [ 2509.684512] ? find_held_lock+0x2c/0x110 [ 2509.684950] ? sock_has_perm+0x1ea/0x280 [ 2509.685398] ? __import_iovec+0x458/0x590 [ 2509.685833] ? udp_v6_push_pending_frames+0x360/0x360 [ 2509.686388] inet6_sendmsg+0x105/0x140 [ 2509.686804] ? inet6_compat_ioctl+0x320/0x320 [ 2509.687286] sock_sendmsg+0xf2/0x190 [ 2509.687702] ____sys_sendmsg+0x334/0x870 [ 2509.688131] ? kernel_sendmsg+0x50/0x50 [ 2509.688556] ? do_recvmmsg+0x6d0/0x6d0 [ 2509.688973] ? __lock_acquire+0x1657/0x5b00 [ 2509.689432] ___sys_sendmsg+0xf3/0x170 [ 2509.689848] ? sendmsg_copy_msghdr+0x160/0x160 [ 2509.690342] ? vmacache_find+0x55/0x2a0 [ 2509.690774] ? lock_acquire+0x197/0x470 [ 2509.691199] ? find_held_lock+0x2c/0x110 [ 2509.691648] ? __might_fault+0xd3/0x180 [ 2509.692073] ? lock_downgrade+0x6d0/0x6d0 [ 2509.692522] ? asm_exc_page_fault+0x1e/0x30 [ 2509.692990] __sys_sendmmsg+0x195/0x470 [ 2509.693418] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2509.693879] ? lock_downgrade+0x6d0/0x6d0 [ 2509.694329] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2509.694846] ? wait_for_completion_io+0x270/0x270 [ 2509.695365] ? rcu_read_lock_any_held+0x75/0xa0 [ 2509.695882] ? vfs_write+0x354/0xa70 [ 2509.696286] ? fput_many+0x2f/0x1a0 [ 2509.696678] ? ksys_write+0x1a9/0x260 [ 2509.697088] ? __ia32_sys_read+0xb0/0xb0 [ 2509.697526] __x64_sys_sendmmsg+0x99/0x100 [ 2509.697983] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2509.698538] do_syscall_64+0x33/0x40 [ 2509.698943] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2509.699492] RIP: 0033:0x7fba2f88eb19 [ 2509.699908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2509.701872] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2509.702684] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2509.703444] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2509.704211] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2509.704974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2509.705733] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:09:12 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000c, 0x0) 10:09:12 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x20ffe000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:09:12 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001600852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000006c1e00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20f000001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:12 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001800852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:12 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7fffdf001000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:09:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800, 0xfffffffc) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r2, 0xe7d29000) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) dup2(r3, r4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r5, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r5, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r5, 0x0, 0x5) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x5, 0x1b, 0x0, 0x9, 0x0, 0x7bd1, 0x40000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8fe8, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x1120, 0xffffffff, 0x10001, 0x2, 0x4, 0x401, 0x79d0, 0x0, 0x7ff, 0x0, 0x8}, 0xffffffffffffffff, 0xa, r5, 0x0) 10:09:25 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:25 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000741e00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="43b0efd6e0c19f47cfe28fedd9b89b174b42f1321c5dc8d5b0289c270ee732c2db156f889efe32ed4b5c533d0f8a09e7c35e6cc8a778001e3e2727050377a68ecc56bb9b41eb10a33d1a44f5793ed783b332dc36a998a2ed8f0c511be40511c7636ef2c16f280736b751ecf01d3e243dd4fcac58629fad42741c67b32d22949525b777bc9a4376dc9129f2ffb3c0d773a671de55cdcad158da28a292fc786f5d4cd3914f1a300028d0ab4c9fab0654b95cb56f", 0xb3, 0x20004000, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x3) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x1000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) 10:09:25 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7fffdf002000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:09:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="204d02001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001900852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000d, 0x0) 10:09:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 37) [ 2523.417178] FAULT_INJECTION: forcing a failure. [ 2523.417178] name failslab, interval 1, probability 0, space 0, times 0 [ 2523.418504] CPU: 1 PID: 12670 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2523.419240] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2523.420127] Call Trace: [ 2523.420411] dump_stack+0x107/0x167 [ 2523.420798] should_fail.cold+0x5/0xa [ 2523.421219] should_failslab+0x5/0x20 [ 2523.421629] __kmalloc_node_track_caller+0x74/0x3b0 [ 2523.422176] ? alloc_skb_with_frags+0x92/0x570 [ 2523.422671] __alloc_skb+0xb1/0x5b0 [ 2523.423075] alloc_skb_with_frags+0x92/0x570 [ 2523.423551] sock_alloc_send_pskb+0x7af/0x930 [ 2523.424046] ? sk_alloc+0x350/0x350 [ 2523.424435] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2523.425010] ? __ip6_append_data.isra.0+0x86a/0x3a70 [ 2523.425551] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2523.426081] ? ip6_mtu+0x1bb/0x3d0 [ 2523.426459] ? lock_downgrade+0x6d0/0x6d0 [ 2523.426893] ? ip_frag_init+0x350/0x350 [ 2523.427325] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2523.427843] ? ip6_mtu+0x1e9/0x3d0 [ 2523.428222] ? ip6_setup_cork+0xfb7/0x1740 [ 2523.428670] ip6_make_skb+0x2de/0x4e0 [ 2523.429073] ? ip_frag_init+0x350/0x350 [ 2523.429514] ? ip_frag_init+0x350/0x350 [ 2523.429939] ? ip6_push_pending_frames+0xf0/0xf0 [ 2523.430463] ? ip6_dst_hoplimit+0x199/0x440 [ 2523.430940] ? lock_downgrade+0x6d0/0x6d0 [ 2523.431426] udpv6_sendmsg+0x20d0/0x2af0 [ 2523.431863] ? ip_frag_init+0x350/0x350 [ 2523.432301] ? udp_v6_push_pending_frames+0x360/0x360 [ 2523.432874] ? perf_event_task_disable+0x390/0x390 [ 2523.433400] ? lock_downgrade+0x6d0/0x6d0 [ 2523.433870] ? hrtimer_start_range_ns+0x336/0xae0 [ 2523.434396] ? lock_acquire+0x197/0x470 [ 2523.434817] ? find_held_lock+0x2c/0x110 [ 2523.435272] ? sock_has_perm+0x1ea/0x280 [ 2523.435727] ? __import_iovec+0x458/0x590 [ 2523.436185] ? udp_v6_push_pending_frames+0x360/0x360 [ 2523.436750] inet6_sendmsg+0x105/0x140 [ 2523.437185] ? inet6_compat_ioctl+0x320/0x320 [ 2523.437658] sock_sendmsg+0xf2/0x190 [ 2523.438066] ____sys_sendmsg+0x334/0x870 [ 2523.438497] ? kernel_sendmsg+0x50/0x50 [ 2523.438927] ? do_recvmmsg+0x6d0/0x6d0 [ 2523.439352] ? find_held_lock+0x2c/0x110 [ 2523.439815] ___sys_sendmsg+0xf3/0x170 [ 2523.440245] ? sendmsg_copy_msghdr+0x160/0x160 [ 2523.440761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2523.441345] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2523.441825] ? trace_hardirqs_on+0x5b/0x180 [ 2523.442307] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2523.442787] ? finish_task_switch+0x126/0x5d0 [ 2523.443286] ? finish_task_switch+0xef/0x5d0 [ 2523.443768] ? __switch_to+0x572/0xf70 [ 2523.444214] ? __switch_to_asm+0x3a/0x60 [ 2523.444649] ? __switch_to_asm+0x34/0x60 [ 2523.445097] ? __schedule+0x82c/0x1ea0 [ 2523.445538] ? io_schedule_timeout+0x140/0x140 [ 2523.446031] __sys_sendmmsg+0x195/0x470 [ 2523.446469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2523.446948] ? lock_downgrade+0x6d0/0x6d0 [ 2523.447415] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2523.447964] ? wait_for_completion_io+0x270/0x270 [ 2523.448499] ? rcu_read_lock_any_held+0x75/0xa0 [ 2523.449014] ? vfs_write+0x354/0xa70 [ 2523.449410] ? fput_many+0x2f/0x1a0 [ 2523.449805] ? ksys_write+0x1a9/0x260 [ 2523.450232] ? __ia32_sys_read+0xb0/0xb0 [ 2523.450668] __x64_sys_sendmmsg+0x99/0x100 [ 2523.451137] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2523.451686] do_syscall_64+0x33/0x40 [ 2523.452107] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2523.452651] RIP: 0033:0x7fba2f88eb19 [ 2523.453064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 10:09:25 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7fffdf003000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2523.455128] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2523.456187] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2523.456955] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2523.457708] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2523.458472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2523.459221] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:09:25 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:25 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000002c0)=0xe8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl2\x00', r3, 0x20, 0x80, 0x9, 0x5, {{0xb, 0x4, 0x0, 0x1, 0x2c, 0x68, 0x0, 0x3f, 0x2f, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2d}, {[@generic={0x44, 0x2}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x5b, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendto$inet(r2, &(0x7f0000000080)="2f032cab7eac7cbda7a13b0d2b0ef2b5b4be55eaa6eccd3b36951d053281c1caad7ebbd4e2bbfea1ac8ac9c31499bb2186b24328cebe052d1b9ae015ce4804f742b8c742e90a20c47ae02139058fa74e268d51b029818f35a81706611643cfe8b7c14116ba435aff", 0x68, 0x20004000, &(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = socket$inet(0xa, 0x3, 0xff) sendto(r5, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x5f859ba5dafedaa3}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:09:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200003001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000007a1e00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:26 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7ffffffff000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:09:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000e, 0x0) 10:09:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001c00852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000000f, 0x0) 10:09:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="8cbd68f065396b9397d09c5387af3bdee51e6c84777dd2aa94739b47b45171ec03e88c1d7b55ad5373510446a44ed81c1c74042e55990efb32b63403be37dfda5059c9323b926c33847e1f6331a7a0136030508348d22be1a138b99fe8d679ff8514d421ae4c715718e1d2d99ad155efd509549bf99636ced69f884936b2317fa5e2abc15d6ccadd46acd8320639c5137dc758477d6c690c3b9df2f81a034831424a4a91071de7ab3785dd4a25f9214c5e77ab2f010aad9a79dfa7d1c5988aebb6082d5fc904077e10ac50ee7d83b01e00807413c32e28d6870762e7975bb6b60762e8c00b86cccd6d59a5608fb7", 0xee}], 0x1, &(0x7f0000000380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_u8={{0x11}}], 0x30}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000400)="65ff2017049f4bd7001586ab6158300eba708c55ea0387790b509672e51e88b8f728b0187622f7a7c3b614d7c95c62c1dde6710c44849b9e563ace8f428125c9bed7ddc4db89cbbe69f0ca93ea5fa5778f3f970703e0924a1307f1f8945bebb52961060cdf6c60e6501a358643bcb98f81e5423ac7e5fb2f8cdbdfb0e6db5fd2791b09464427459ac3ba759fa281a1a1584189653eb67490cebc628a399e3166f3fe1e994aefa6f757f8ecea0e5dbcc91b1e91cb89be91a55837167d8a7ce9dc4488e86f55522c3d7981ecc17799346357c9363c16f2f34005825d6ff9954b2cd4c11eace8df1baaa37d65291c", 0xed}, {&(0x7f0000000500)="74cc30311448e1236f538fdb79cf51aa854de24a14d5a5ac095e0485da1ed00e2d217ec408ef4d2414a64bc8392689cfc3f304256945fc9d53f973c188a3ac6e734200528a1d44fd09de13c4ae86fc43a0e03fd2ce5c498a2a14a3bff57cedb8618e74304c8ac4a9a4875d4f0b6731500c02dbdfbb54517f4dfb930e74e9083f287a654db12e447c03c41e64dbddcab4c1371945f9ffc4d680e6a411ec78479357f8", 0xa2}], 0x2, &(0x7f0000000600)=[@ip_retopts={{0x64, 0x0, 0x7, {[@cipso={0x86, 0x23, 0x3, [{0x5, 0xe, "4d14307416e3908338860f88"}, {0x5, 0xf, "95cd604d88e3a5948a9fbba6da"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x91, 0x1, 0xd, [{@private=0xa010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x3}, {@multicast1, 0x9c3}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x5}]}]}}}], 0x68}}], 0x2, 0x4000) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'wg0\x00', 0x4}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x2, [0x7, 0x6, 0x4, 0x6, 0xae, 0xfffffffffffffffe]}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000000c0)) 10:09:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005f00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 38) 10:09:37 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffe000/0x1000)=nil) 10:09:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200005001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:37 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') gettid() socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) [ 2535.431828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2535.444399] FAULT_INJECTION: forcing a failure. [ 2535.444399] name failslab, interval 1, probability 0, space 0, times 0 [ 2535.445929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=12729 comm=syz-executor.4 [ 2535.446591] CPU: 1 PID: 12723 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2535.449536] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2535.450660] Call Trace: [ 2535.451044] dump_stack+0x107/0x167 [ 2535.451551] should_fail.cold+0x5/0xa [ 2535.452099] ? create_object.isra.0+0x3a/0xa20 [ 2535.452738] should_failslab+0x5/0x20 [ 2535.453273] kmem_cache_alloc+0x5b/0x310 [ 2535.453847] create_object.isra.0+0x3a/0xa20 [ 2535.454463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2535.455182] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2535.455896] ? alloc_skb_with_frags+0x92/0x570 [ 2535.456540] __alloc_skb+0xb1/0x5b0 [ 2535.457060] alloc_skb_with_frags+0x92/0x570 [ 2535.457688] sock_alloc_send_pskb+0x7af/0x930 [ 2535.458324] ? sk_alloc+0x350/0x350 [ 2535.458837] ? lock_acquire+0x197/0x470 [ 2535.459398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2535.460146] ? lock_release+0x680/0x680 [ 2535.460712] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2535.461416] ? ip6_mtu+0x1bb/0x3d0 [ 2535.461919] ? lock_downgrade+0x6d0/0x6d0 [ 2535.462499] ? ip_frag_init+0x350/0x350 [ 2535.463065] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2535.463721] ? ip6_mtu+0x1e9/0x3d0 [ 2535.464240] ? ip6_setup_cork+0xfb7/0x1740 [ 2535.464833] ip6_make_skb+0x2de/0x4e0 [ 2535.465367] ? ip_frag_init+0x350/0x350 [ 2535.465936] ? ip_frag_init+0x350/0x350 [ 2535.466504] ? ip6_push_pending_frames+0xf0/0xf0 [ 2535.467173] ? ip6_dst_hoplimit+0x199/0x440 [ 2535.467761] ? lock_downgrade+0x6d0/0x6d0 [ 2535.468381] udpv6_sendmsg+0x20d0/0x2af0 [ 2535.468970] ? ip_frag_init+0x350/0x350 [ 2535.469537] ? udp_v6_push_pending_frames+0x360/0x360 [ 2535.470273] ? lock_acquire+0x1b9/0x470 [ 2535.470830] ? find_held_lock+0x2c/0x110 [ 2535.471403] ? lock_acquire+0x197/0x470 [ 2535.471967] ? find_held_lock+0x2c/0x110 [ 2535.472538] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2535.473302] ? sock_has_perm+0x1ea/0x280 [ 2535.473867] ? __import_iovec+0x458/0x590 [ 2535.474453] ? udp_v6_push_pending_frames+0x360/0x360 [ 2535.475186] inet6_sendmsg+0x105/0x140 [ 2535.475738] ? inet6_compat_ioctl+0x320/0x320 [ 2535.476376] sock_sendmsg+0xf2/0x190 [ 2535.476917] ____sys_sendmsg+0x334/0x870 [ 2535.477484] ? kernel_sendmsg+0x50/0x50 [ 2535.478043] ? do_recvmmsg+0x6d0/0x6d0 [ 2535.478581] ? __lock_acquire+0x1657/0x5b00 [ 2535.479200] ___sys_sendmsg+0xf3/0x170 [ 2535.479724] ? sendmsg_copy_msghdr+0x160/0x160 [ 2535.480379] ? __sanitizer_cov_trace_pc+0x3c/0x60 [ 2535.481073] ? lock_acquire+0x197/0x470 [ 2535.481636] ? find_held_lock+0x2c/0x110 [ 2535.482218] ? __might_fault+0xd3/0x180 [ 2535.482789] ? lock_downgrade+0x6d0/0x6d0 [ 2535.483378] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2535.484162] __sys_sendmmsg+0x195/0x470 [ 2535.484723] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2535.485324] ? lock_downgrade+0x6d0/0x6d0 [ 2535.485916] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2535.486607] ? wait_for_completion_io+0x270/0x270 [ 2535.487284] ? rcu_read_lock_any_held+0x75/0xa0 [ 2535.487952] ? vfs_write+0x354/0xa70 [ 2535.488482] ? fput_many+0x2f/0x1a0 [ 2535.489004] ? ksys_write+0x1a9/0x260 [ 2535.489543] ? __ia32_sys_read+0xb0/0xb0 [ 2535.490126] __x64_sys_sendmmsg+0x99/0x100 [ 2535.490740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2535.491486] do_syscall_64+0x33/0x40 [ 2535.492037] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2535.492748] RIP: 0033:0x7fba2f88eb19 [ 2535.493288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2535.495928] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2535.497017] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2535.498027] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2535.498999] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2535.500017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2535.501045] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2535.514712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=12737 comm=syz-executor.4 10:09:38 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:38 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) 10:09:38 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000010, 0x0) 10:09:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200006001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:38 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007300852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:38 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001d00852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:38 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:38 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2535.691460] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=12756 comm=syz-executor.4 [ 2535.748191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=12764 comm=syz-executor.4 10:09:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 39) 10:09:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:51 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000011, 0x0) 10:09:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x4) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) syz_io_uring_setup(0x232b, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x1, 0x330, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) accept4$inet(r4, &(0x7f0000000100), &(0x7f00000001c0)=0x10, 0x800) sendmmsg$inet(r4, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r5 = socket$inet(0xa, 0x3, 0xff) sendto(r5, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x85, 0x0, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80) fcntl$getflags(r5, 0x408) r6 = gettid() process_vm_readv(r6, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x200000000000, 0xfffffffd, 0x0, 0x0, 0x1}, r6, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2549.340623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=12777 comm=syz-executor.4 [ 2549.343354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=12781 comm=syz-executor.4 10:09:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200007001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:51 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005f00852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:51 executing program 7: chmod(&(0x7f0000000100)='./file0\x00', 0x16c) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x2, 0xc7, "b28b6e8c2d9dfe5c132ae6dfb93a1859eb59397d6a2f1e8b1dd57acbf5a0a936df86a3bca66c3a7953b82838f10f8214b28ef86655c968d2013d0018d844a77c7784a223129b46d3b02ab9263adcae91eedc7e0f5e209d038b91a57b56c786fcd7b0aa8efb1d62122fe224f04cc85e903b2661feb7db3c94382b12ecfaf6f16bac8952f03c521dea7afc1891ad7b638456971e30ce2bc94e9e1008bb24b6c905174d715591bc2b9586b1df82d950cf5bf4c2f96d929994a0c66a556f010fe885f0cefb5691045f"}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000140)=""/189) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) [ 2549.362347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=12780 comm=syz-executor.2 10:09:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001000852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2549.377643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=12790 comm=syz-executor.2 [ 2549.395317] FAULT_INJECTION: forcing a failure. [ 2549.395317] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.398366] CPU: 0 PID: 12773 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2549.399830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.401591] Call Trace: [ 2549.402154] dump_stack+0x107/0x167 [ 2549.402925] should_fail.cold+0x5/0xa [ 2549.403735] should_failslab+0x5/0x20 [ 2549.404549] __kmalloc_node_track_caller+0x74/0x3b0 [ 2549.405603] ? alloc_skb_with_frags+0x92/0x570 [ 2549.406562] __alloc_skb+0xb1/0x5b0 [ 2549.407332] alloc_skb_with_frags+0x92/0x570 [ 2549.408283] sock_alloc_send_pskb+0x7af/0x930 [ 2549.409237] ? sk_alloc+0x350/0x350 [ 2549.410001] ? lock_acquire+0x197/0x470 [ 2549.410836] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2549.411966] ? lock_release+0x680/0x680 [ 2549.412825] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2549.413910] ? ip6_mtu+0x1bb/0x3d0 [ 2549.414659] ? lock_downgrade+0x6d0/0x6d0 [ 2549.415529] ? ip_frag_init+0x350/0x350 [ 2549.416404] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2549.417384] ? ip6_mtu+0x1e9/0x3d0 [ 2549.418141] ? ip6_setup_cork+0xfb7/0x1740 [ 2549.419030] ip6_make_skb+0x2de/0x4e0 [ 2549.419846] ? ip_frag_init+0x350/0x350 [ 2549.420706] ? ip_frag_init+0x350/0x350 [ 2549.421567] ? ip6_push_pending_frames+0xf0/0xf0 [ 2549.422567] ? ip6_dst_hoplimit+0x199/0x440 [ 2549.423496] ? lock_downgrade+0x6d0/0x6d0 [ 2549.424417] udpv6_sendmsg+0x20d0/0x2af0 [ 2549.425301] ? ip_frag_init+0x350/0x350 [ 2549.426170] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.427294] ? perf_event_task_disable+0x390/0x390 [ 2549.428366] ? lock_downgrade+0x6d0/0x6d0 [ 2549.429269] ? hrtimer_start_range_ns+0x336/0xae0 [ 2549.430314] ? lock_acquire+0x197/0x470 [ 2549.431173] ? find_held_lock+0x2c/0x110 [ 2549.432090] ? sock_has_perm+0x1ea/0x280 [ 2549.432994] ? __import_iovec+0x458/0x590 [ 2549.433896] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.435022] inet6_sendmsg+0x105/0x140 [ 2549.435870] ? inet6_compat_ioctl+0x320/0x320 [ 2549.436850] sock_sendmsg+0xf2/0x190 [ 2549.437707] ____sys_sendmsg+0x334/0x870 [ 2549.438718] ? kernel_sendmsg+0x50/0x50 [ 2549.439634] ? do_recvmmsg+0x6d0/0x6d0 [ 2549.440556] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2549.441770] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2549.443011] ? trace_hardirqs_on+0x5b/0x180 [ 2549.444010] ___sys_sendmsg+0xf3/0x170 [ 2549.444919] ? sendmsg_copy_msghdr+0x160/0x160 [ 2549.445973] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2549.447001] ? _raw_spin_unlock_irq+0x27/0x30 [ 2549.448029] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2549.449069] ? finish_task_switch+0x126/0x5d0 [ 2549.450094] ? finish_task_switch+0xef/0x5d0 [ 2549.451102] ? __switch_to+0x572/0xf70 [ 2549.451991] ? __switch_to_asm+0x3a/0x60 [ 2549.452935] ? __switch_to_asm+0x34/0x60 [ 2549.453869] ? __schedule+0x82c/0x1ea0 [ 2549.454782] ? io_schedule_timeout+0x140/0x140 [ 2549.455842] __sys_sendmmsg+0x195/0x470 [ 2549.456788] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2549.457780] ? lock_downgrade+0x6d0/0x6d0 [ 2549.458717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2549.459832] ? wait_for_completion_io+0x270/0x270 [ 2549.460924] ? rcu_read_lock_any_held+0x75/0xa0 [ 2549.461992] ? vfs_write+0x354/0xa70 [ 2549.462829] ? fput_many+0x2f/0x1a0 [ 2549.463666] ? ksys_write+0x1a9/0x260 [ 2549.464522] ? __ia32_sys_read+0xb0/0xb0 [ 2549.465465] __x64_sys_sendmmsg+0x99/0x100 [ 2549.466407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.467547] do_syscall_64+0x33/0x40 [ 2549.468430] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2549.469571] RIP: 0033:0x7fba2f88eb19 [ 2549.470423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.474554] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2549.476227] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2549.477754] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2549.479282] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.480816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.482350] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:09:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007300852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:09:51 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:09:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:09:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x200800, 0x2e) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2549.545453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=12805 comm=syz-executor.2 10:09:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000012, 0x0) 10:09:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200009001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:09:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 40) [ 2549.593441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=12813 comm=syz-executor.2 [ 2549.662505] FAULT_INJECTION: forcing a failure. [ 2549.662505] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.665331] CPU: 0 PID: 12816 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2549.666809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2549.668587] Call Trace: [ 2549.669159] dump_stack+0x107/0x167 [ 2549.669939] should_fail.cold+0x5/0xa [ 2549.670757] ? create_object.isra.0+0x3a/0xa20 [ 2549.671741] should_failslab+0x5/0x20 [ 2549.672590] kmem_cache_alloc+0x5b/0x310 [ 2549.673478] create_object.isra.0+0x3a/0xa20 [ 2549.674436] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2549.675542] kmem_cache_alloc_trace+0x151/0x320 [ 2549.676568] ip6_setup_cork+0x1e4/0x1740 [ 2549.677462] ip6_make_skb+0x22d/0x4e0 [ 2549.678291] ? ip_frag_init+0x350/0x350 [ 2549.679140] ? ip6_push_pending_frames+0xf0/0xf0 [ 2549.680174] ? ip6_dst_hoplimit+0x199/0x440 [ 2549.681111] ? lock_downgrade+0x6d0/0x6d0 [ 2549.682028] udpv6_sendmsg+0x20d0/0x2af0 [ 2549.682913] ? ip_frag_init+0x350/0x350 [ 2549.683788] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.684921] ? trace_hardirqs_on+0x5b/0x180 [ 2549.685870] ? lock_acquire+0x197/0x470 [ 2549.686737] ? find_held_lock+0x2c/0x110 [ 2549.687628] ? lock_acquire+0x197/0x470 [ 2549.688497] ? find_held_lock+0x2c/0x110 [ 2549.689398] ? sock_has_perm+0x1ea/0x280 [ 2549.690304] ? __import_iovec+0x458/0x590 [ 2549.691204] ? udp_v6_push_pending_frames+0x360/0x360 [ 2549.692344] inet6_sendmsg+0x105/0x140 [ 2549.693189] ? inet6_compat_ioctl+0x320/0x320 [ 2549.694159] sock_sendmsg+0xf2/0x190 [ 2549.694969] ____sys_sendmsg+0x334/0x870 [ 2549.695852] ? kernel_sendmsg+0x50/0x50 [ 2549.696745] ? do_recvmmsg+0x6d0/0x6d0 [ 2549.697581] ? __lock_acquire+0x1657/0x5b00 [ 2549.698520] ___sys_sendmsg+0xf3/0x170 [ 2549.699347] ? sendmsg_copy_msghdr+0x160/0x160 [ 2549.700338] ? vmacache_find+0x55/0x2a0 [ 2549.701196] ? lock_acquire+0x197/0x470 [ 2549.702045] ? find_held_lock+0x2c/0x110 [ 2549.702916] ? __might_fault+0xd3/0x180 [ 2549.703765] ? lock_downgrade+0x6d0/0x6d0 [ 2549.704681] ? asm_exc_page_fault+0x1e/0x30 [ 2549.705607] __sys_sendmmsg+0x195/0x470 [ 2549.706459] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2549.707369] ? lock_downgrade+0x6d0/0x6d0 [ 2549.708266] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2549.709276] ? wait_for_completion_io+0x270/0x270 [ 2549.710289] ? rcu_read_lock_any_held+0x75/0xa0 [ 2549.711259] ? vfs_write+0x354/0xa70 [ 2549.712043] ? fput_many+0x2f/0x1a0 [ 2549.712828] ? ksys_write+0x1a9/0x260 [ 2549.713634] ? __ia32_sys_read+0xb0/0xb0 [ 2549.714486] __x64_sys_sendmmsg+0x99/0x100 [ 2549.715405] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2549.716492] do_syscall_64+0x33/0x40 [ 2549.717295] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2549.718369] RIP: 0033:0x7fba2f88eb19 [ 2549.719171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2549.723057] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2549.725013] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2549.726517] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2549.728015] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2549.729530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2549.731029] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:10:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 41) 10:10:11 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:11 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmdt(r0) shmdt(r0) 10:10:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000013, 0x0) 10:10:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) 10:10:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e02852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000a001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2568.670002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=12840 comm=syz-executor.2 [ 2568.681715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=12842 comm=syz-executor.2 10:10:11 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) [ 2568.713653] FAULT_INJECTION: forcing a failure. [ 2568.713653] name failslab, interval 1, probability 0, space 0, times 0 [ 2568.716328] CPU: 0 PID: 12837 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2568.717715] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2568.719371] Call Trace: [ 2568.719914] dump_stack+0x107/0x167 [ 2568.720664] should_fail.cold+0x5/0xa [ 2568.721609] ? create_object.isra.0+0x3a/0xa20 [ 2568.722779] should_failslab+0x5/0x20 [ 2568.723776] kmem_cache_alloc+0x5b/0x310 [ 2568.724953] create_object.isra.0+0x3a/0xa20 [ 2568.726197] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2568.727629] kmem_cache_alloc_trace+0x151/0x320 [ 2568.728784] ip6_setup_cork+0x1e4/0x1740 [ 2568.729825] ip6_make_skb+0x22d/0x4e0 [ 2568.730703] ? ip_frag_init+0x350/0x350 [ 2568.731549] ? ip6_push_pending_frames+0xf0/0xf0 [ 2568.732526] ? ip6_dst_hoplimit+0x199/0x440 [ 2568.733378] ? lock_downgrade+0x6d0/0x6d0 [ 2568.734207] udpv6_sendmsg+0x20d0/0x2af0 [ 2568.735035] ? ip_frag_init+0x350/0x350 [ 2568.735830] ? udp_v6_push_pending_frames+0x360/0x360 [ 2568.736892] ? lock_acquire+0x197/0x470 [ 2568.737672] ? find_held_lock+0x2c/0x110 [ 2568.738493] ? lock_acquire+0x197/0x470 [ 2568.739271] ? find_held_lock+0x2c/0x110 [ 2568.740111] ? sock_has_perm+0x1ea/0x280 [ 2568.740963] ? __import_iovec+0x458/0x590 [ 2568.741801] ? udp_v6_push_pending_frames+0x360/0x360 [ 2568.742813] inet6_sendmsg+0x105/0x140 [ 2568.743589] ? inet6_compat_ioctl+0x320/0x320 [ 2568.744491] sock_sendmsg+0xf2/0x190 [ 2568.745245] ____sys_sendmsg+0x334/0x870 [ 2568.746041] ? kernel_sendmsg+0x50/0x50 [ 2568.746846] ? do_recvmmsg+0x6d0/0x6d0 [ 2568.747619] ? __lock_acquire+0x1657/0x5b00 [ 2568.748520] ___sys_sendmsg+0xf3/0x170 [ 2568.749296] ? sendmsg_copy_msghdr+0x160/0x160 [ 2568.750202] ? vmacache_find+0x55/0x2a0 [ 2568.750997] ? lock_acquire+0x197/0x470 [ 2568.751797] ? find_held_lock+0x2c/0x110 [ 2568.752612] ? __might_fault+0xd3/0x180 [ 2568.753394] ? lock_downgrade+0x6d0/0x6d0 [ 2568.754220] ? asm_exc_page_fault+0x1e/0x30 [ 2568.755099] __sys_sendmmsg+0x195/0x470 [ 2568.755883] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2568.756751] ? lock_downgrade+0x6d0/0x6d0 [ 2568.757007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=798 sclass=netlink_route_socket pid=12849 comm=syz-executor.2 [ 2568.757584] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2568.757608] ? wait_for_completion_io+0x270/0x270 [ 2568.760845] ? rcu_read_lock_any_held+0x75/0xa0 [ 2568.761755] ? vfs_write+0x354/0xa70 [ 2568.762497] ? fput_many+0x2f/0x1a0 [ 2568.763213] ? ksys_write+0x1a9/0x260 [ 2568.763973] ? __ia32_sys_read+0xb0/0xb0 [ 2568.764791] __x64_sys_sendmmsg+0x99/0x100 [ 2568.765633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2568.766655] do_syscall_64+0x33/0x40 [ 2568.767396] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2568.768428] RIP: 0033:0x7fba2f88eb19 [ 2568.769169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2568.770938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=798 sclass=netlink_route_socket pid=12851 comm=syz-executor.2 [ 2568.772750] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2568.772772] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2568.772789] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2568.778345] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2568.779746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2568.781160] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:10:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e03852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000014, 0x0) 10:10:11 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:11 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x100000000, 0x3) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, 0xffffffffffffffff, 0x2) 10:10:11 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e04852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2568.858265] mmap: syz-executor.7 (12862) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 10:10:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000b001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:10:11 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001300852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2568.894414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=12865 comm=syz-executor.2 [ 2568.941881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=12876 comm=syz-executor.2 [ 2581.249272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=12886 comm=syz-executor.2 10:10:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 42) 10:10:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e05852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000015, 0x0) 10:10:23 executing program 7: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x5) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x10001}) r1 = shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:10:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r2, &(0x7f0000002f00)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000100)=""/171, 0xab}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/162, 0xa2}], 0x5, &(0x7f00000013c0)=""/226, 0xe2}, 0x1}, {{&(0x7f00000014c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001540)=""/243, 0xf3}, {&(0x7f0000001640)=""/169, 0xa9}, {&(0x7f0000001700)=""/86, 0x56}], 0x3, &(0x7f00000017c0)=""/109, 0x6d}, 0x1}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001840)=""/232, 0xe8}, {&(0x7f0000001940)=""/101, 0x65}], 0x2}, 0x2}, {{&(0x7f0000001a00)=@ll, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/11, 0xb}, {&(0x7f0000001ac0)=""/108, 0x6c}], 0x2}, 0x5}, {{&(0x7f0000001b80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/17, 0x11}, {&(0x7f0000001c40)=""/41, 0x29}], 0x3, &(0x7f0000002e00)=""/233, 0xe9}}], 0x5, 0x1, &(0x7f0000001cc0)={0x77359400}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:10:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2581.286648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=12903 comm=syz-executor.2 10:10:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001500852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2581.323678] FAULT_INJECTION: forcing a failure. [ 2581.323678] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.326449] CPU: 0 PID: 12901 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2581.327877] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2581.329583] Call Trace: [ 2581.330133] dump_stack+0x107/0x167 [ 2581.330880] should_fail.cold+0x5/0xa [ 2581.331667] should_failslab+0x5/0x20 [ 2581.332443] __kmalloc_track_caller+0x79/0x370 [ 2581.333372] ? ip6_setup_cork+0x670/0x1740 [ 2581.334231] kmemdup+0x23/0x50 [ 2581.334880] ip6_setup_cork+0x670/0x1740 [ 2581.335706] ip6_make_skb+0x22d/0x4e0 [ 2581.336496] ? ip_frag_init+0x350/0x350 [ 2581.337306] ? ip6_push_pending_frames+0xf0/0xf0 [ 2581.338270] ? ip6_dst_hoplimit+0x199/0x440 [ 2581.339143] ? lock_downgrade+0x6d0/0x6d0 [ 2581.339998] udpv6_sendmsg+0x20d0/0x2af0 [ 2581.340842] ? ip_frag_init+0x350/0x350 [ 2581.341657] ? udp_v6_push_pending_frames+0x360/0x360 [ 2581.342720] ? lock_acquire+0x197/0x470 [ 2581.343524] ? find_held_lock+0x2c/0x110 [ 2581.344362] ? lock_acquire+0x197/0x470 [ 2581.345186] ? find_held_lock+0x2c/0x110 [ 2581.346023] ? sock_has_perm+0x1ea/0x280 [ 2581.346861] ? __import_iovec+0x458/0x590 [ 2581.347701] ? udp_v6_push_pending_frames+0x360/0x360 [ 2581.348761] inet6_sendmsg+0x105/0x140 [ 2581.349562] ? inet6_compat_ioctl+0x320/0x320 [ 2581.350468] sock_sendmsg+0xf2/0x190 [ 2581.351228] ____sys_sendmsg+0x334/0x870 [ 2581.352052] ? kernel_sendmsg+0x50/0x50 [ 2581.352899] ? do_recvmmsg+0x6d0/0x6d0 [ 2581.353689] ? __lock_acquire+0x1657/0x5b00 [ 2581.354578] ___sys_sendmsg+0xf3/0x170 [ 2581.355367] ? sendmsg_copy_msghdr+0x160/0x160 [ 2581.356281] ? vmacache_find+0x55/0x2a0 [ 2581.357109] ? lock_acquire+0x197/0x470 [ 2581.357916] ? find_held_lock+0x2c/0x110 [ 2581.358738] ? __might_fault+0xd3/0x180 [ 2581.359544] ? lock_downgrade+0x6d0/0x6d0 [ 2581.360385] ? asm_exc_page_fault+0x1e/0x30 [ 2581.361277] __sys_sendmmsg+0x195/0x470 [ 2581.362085] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2581.362960] ? lock_downgrade+0x6d0/0x6d0 [ 2581.363806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2581.364790] ? wait_for_completion_io+0x270/0x270 [ 2581.365775] ? rcu_read_lock_any_held+0x75/0xa0 [ 2581.366718] ? vfs_write+0x354/0xa70 [ 2581.367484] ? fput_many+0x2f/0x1a0 [ 2581.368224] ? ksys_write+0x1a9/0x260 [ 2581.369024] ? __ia32_sys_read+0xb0/0xb0 [ 2581.369852] __x64_sys_sendmmsg+0x99/0x100 [ 2581.370714] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2581.371759] do_syscall_64+0x33/0x40 [ 2581.372525] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2581.373564] RIP: 0033:0x7fba2f88eb19 [ 2581.374321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2581.378056] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2581.379627] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2581.381082] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2581.382534] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2581.383977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2581.385427] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2581.398936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=12911 comm=syz-executor.2 10:10:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001600852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:23 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e06852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:23 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="685b7168f90e7ef6a9520a9a020025bdeb5d00000000"], 0x1c}}, 0x20000004) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f00000000c0)="7c29738312db98d25df275ea357608df55b49796dc06d8ef6cb9969e93222d993522d52b179efd48d0e8b0f6bf4f5755c6b32d933154e11fa93e6edd5492ff2e9d59dc2ff064e557146fe6bb2bfdc950e549a0a1af75433452f58191cf38b1443959197f5f6f1065fe42e2afaed93d633dd6", 0x72) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:10:23 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000016, 0x0) [ 2581.432590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=12920 comm=syz-executor.2 10:10:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20600c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:10:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000d001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:10:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e07852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) [ 2594.732864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1822 sclass=netlink_route_socket pid=12948 comm=syz-executor.2 [ 2594.739772] FAULT_INJECTION: forcing a failure. [ 2594.739772] name failslab, interval 1, probability 0, space 0, times 0 sendmmsg$sock(r0, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f57fe72efe2cb7edfebd1e2708c7fd5b59dbdd9ace54d96d46d7daefbc7d945e57bd49d1536a63e402b15ac522060e7d327442d9c68924c35ce22d8ce692b6521a1dda81b3c972918a42695b646def0994e1ea733be83d002c3b49eae5894959c7e3d52ca6aaf5a914e35ad5fd8ddd889fb7252092a08341faad3e22b756c755fb7e6a96bd59c3f01337302e0f6939d67d1da5a660edb8af2c9818afa47de49472e45ebd50afc0bca5e36e816dca2edc5181cdc3b6b8261dad4dfb1ffd2dc452a5a5923898c53492aeaaea866ed794d9e4f04f58cc3e7821717556011fd741c65dec7098fe3e304c6c38ebb4aa2398ec", 0xf0}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f00000001c0)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0xa8}}, {{&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x2}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001340)="b3f54a99fa63608e0d7b394dccf208a2c9f147fa07c89bdae828e05f1fac16565054a6753af7823f65c69d8d20c9a0aef2d8a1163bfed711b7480c99f2a68a34099565d681060cfdf040b1c781ad76a0f8", 0x51}, {&(0x7f00000013c0)="9c2b0fb9e5e1a9429022b2c8ce587c83fa8417f69a7ac05272cc68d39ed344bcdbdbe13d98f241c7254319715a74d86f675bfa8ff1865005cb86f1abd7cb0c3d9c2058e1d4f158dfda0a2d4f79ff02b5051bb7322df2ca28e2b57e77a711e172932fc2a421791e1cb62576fa5583471b11c6ce0caa2a53b6c09d326a4171967c0cc1b4991933585e5a598408294dbad2df650dd083acd7ab170f7c93000de1958fab931aa3f3714f6e5f47504b565afd7704fd6545f889c990ca10b21698e54858ce78480b934aeb5eb57f741b562ce245fdd66be8797e65eb1a9207a9765e798d023749f0095d3488064a", 0xeb}, {&(0x7f00000014c0)="339b3f9ca49cdb3ec19ef5d8b8cc64d6ea336d15dea5aeae45d124bff26e0d6e044dcd116755095ccb10f67af4a501f40f6d505569f1123f151fc5c2ebc68989e848dae2a79a93c14fed35145fb10e2cd8df685f1175120c9c934c39df95a4e2e5e5c1ff67cc0f1646a8601523d1149af8fb0093dd2933009b67a3a03947b01a8c6d8ad6cea044d7a3f299dd97218683fac3bfd425d71a54d0e75493df775c596ba627ce135a743d227b78a6b0de235a2ce7269bbb0501c6a7f24c2e2826505a01f1d1bd8e", 0xc5}, {&(0x7f00000015c0)="60b3d74b00057bfbe467260938d9a3ee78a9d6304bb715c14a968592f32244bc3acb4bb30f697fd8eec1df712e180d009cbb7e8e6edae9d6a97a719b002d8d63cdeb126546bd4f92290d01fc4d39c872679314ae2a6cc2ae6fe496cea4eb21e8fc11c32c61bc6054680b1668ec507eeabbeabc0dd045f9a86a4965d295cfb7afcd35e86671de9e2ba02347b1f35ee2a05b4294bf496846740259e5755d01b6c4d31d40c3d9d7f085ce8211d0b84dadb958d7ca12def22a901ef27f188a78a4f3530e330c74d71af4d668486b136692869ec936b24ff1955ff3621eba64175e6a", 0xe0}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000002e00)="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", 0x1000}, {&(0x7f00000016c0)="650cddced64af3c6afd3257d68ae4e7250bcfcb19041e77c068ac2bfd3829a7c22d0cf633f5a3bbcbe0ba64fe9719404c2de8152fb4b636799195995cea72a6aeab282c3892313b8d6dd2783b4ff122284538dcbdd5dc8fbf6b1137077a5a422c39e2aa6439694f8d10b822b565af830dc4c9dc2d92dc16ee2f39d01ccf54f289ad0b4754f23c9b56ebec1ab8061ce09e5321ac1e55d04", 0x97}], 0x7, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xfc}}], 0x30}}, {{&(0x7f0000001840)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x2, 0x2}}, 0x80, &(0x7f0000006080)=[{&(0x7f00000018c0)="c95b0757449d8fac1ad9e7882d8fd0075be1d2b937ae698e89d0ecfd561125f66a1463200504703e3fa1e8c178c28c7584c540ae52a6702c15e1b6983d2045b741e832da0e8b7256828397b6d9378caf5187bf98ac12f34121c062988ec062fb78366a867f56bdc295693f37de208efd3a66d9714cded36c6492c7c15eb244ea10e909d13c953b3b4eb08315e494", 0x8e}, {&(0x7f0000001980)="2650cd62546f68844b093052818e2612a20de727d681a6e7c00b9174fc7955b9c48841cebf428459230dd62749d4b5f8956ed537e3e9b335c9940fd089c6b81059833578fa87c43e0310c522c15710ef3120b3a1b82c0a7d84a638763c80cbd2fd8cc629fb5d05e93ce45aaf9025eb36e85a1f9211cf15853dc05a59f32dc11d6ac5aca5d3e5b33c7bda2c5ae3b151d6653dad597e5d8a", 0x97}, {&(0x7f0000003e00)="35485320f63d39ced5c0d98ce3e60770b988117bbeb2fea3e3002e1c230f35d8a64f8b1cfb8409750abff015d4ad62752507c16b1130283ced46bef0df7dba2a84c8d839d13e28052b3a98cf41f84846f813b935b0a56289696edb49cb2fe2d874e418cc4f1e64bf126f607c324ee51690f2b36ba7bd5ed623f3e0bc1eb7f79cc52d0311d00d8fa898aae7a9044063e3dc60d83cd490768393e81ea8b4195de5eb577a441f18602f882eccb291dea0b447929313eacbc930615cfbaf87d660876352ed9fb4d8eb28d1c71230d1af9f4845621d80175fcace98495551b7fd1a1831f7726953ada4ca4dbd93dec465aed8900ecf43518ad2d9836d5054478246610d461cc90e56abb68a8bcbd35b8d95ca0b378415f64ab5e4664a58d0d6e576a651daba626c5fb65ed88fdbea2a654368f547481ae6578b61b9a74f9d30ad95eaa2b4d8c9c7f303e2739bb04d79b069b78196edcea4e6a1480a2fabd60fe3e109beba9f2eb976e510dc0fde085eace57a169529cf0e37503fcd9ee2b7feb5e59cf0c87f63bd2e7cf68236e621dede198f2b868fff8a06781528ee67a93f6d809ac1fcefd6763a6ae7cf72bb8a0c46e01e449d9c64550922316c1d6a07004161b699dcef5daa101c9693b5cb6434d2e090d9e5e113b156e6d250a849b81792ba30bc42dc7239dce70c9d578bd9abda0bf0407bcc2762e81b790131a746138efabea81ad58753ab0e08517ef514924a920b83cf9d2cb93f775f5843b7d550e034ce4147b84fe7f3d77c0e61a75db912cad055e100a59854b9d6f1ea5ef07068259dc1e8750a37501c38068c8d02d9ab88c14586652aa02c30b03bf2f93a15b4ca9f00d4b6e40cddb57709e3bc8ebc16539a91d0355ee1b71ac9110a2c021793848cc9a1b1255418ac5bffbeb3b665602a0aa4b2349193e56b693d4027c69f98089e5803c0603db20ca350c0bea9a287b378ae7b31a07bd8c4d355abbb87baef1f55035c6aeb83bac834a1cc999c55e658f1a94d47961a09e6408a7472e91b2b6fa5bddcf7b22040ff7e7c37514df97a759691947fb003af5f7bf4bbff3ff308c0f648babfec40c218a3a7cee33825b44241503b2dbf531ddc70644d2e7cebf2d1f55e716e5205a46848266a738984ef287a315ec8cfafb2c26fc564b35f5bd32bfbc8c84b53523d1f079384c822551e40b5ac902bc7950a2aa0a657e1d4841f0c9508625074804be2bb3c06c554c8ab7fd6d685e9ad2fc2c21bc261b3937333bda5744c32a2bd9716f259ecf456675bfb7ad412bb987de07965034e5ce363fa4bcdbf7d7bfb8497c7df05ed8ea07608508a3446d16446dffb16d3fb97cd8c849172324da9eb1761e9a0e334b31a349f6a35ea2d2c7922d4f996d3838498513b8348ba28b004c596006977709551c835bb9a2c4ddc81b89956276de4e191bb7a153793806bf5eb6e962fedb0460c86d3270494e41f14f562f484c112d6e47a866adc1d3f98d8cf70b46f2530b2624fcb83abda408520a8eb76b8f070238a1b3f1fe4bc0dd101ab97bf5fc7503e5e3a66c36b7695efae3b6db621393acbdcb04fdce9d082177f73a4137b1f9b6c731f162b9064a58e09b4f8aa3bfef4dc1534fd7ac01e8ed5d1a0063ed07c6abf6ca63e04138775f1cbf7776d08dcb7dd65bf8cf8bd62491cf3e8991980f29050368fecbc915425a71b27b44703d1fe28a45541a8515eeb2ade42fc5704f98f8954e3e01e224268ab8ba3312bfbaa0f36cbadb92c33d79c538191cf2ff9558739e9f97c4527fbeeba44e930ff3daa9e3634ead1d4149decae1933c43ca6e82b8d83186ef2c3b2c521e6ceaf42ecdba93700fba5282b60ffcfa3cfbe9795515bae2ccad278132965d6b2e1b6b03ee3971acd8ebe714188d1f2a661a86af3ef42bd1d0591d6b1793bbed4b10b12b31bc7903167fa5d0b2536812f7053115eef1c73f090f3912d25fe416b9d4f1478c94d185766f00c8a02d3f893ae1c40d1a5727d61055d77ab1fe65e8483627603342fc91a40d139cddbd2c84408167f018ca5da32830042a54d8e11b1fe1239bfd7d364d5569c81c4f3a59928660a70830a9753f04fd4187fd6489859a004171a66ad23fd88a185936f750b6922b92484e89f669e26a93300469234d0610b353247b26b9ce4444a05a476ea3edbb10f052b383fad3d3a5b095a6f50f5f92edb0fa27ff81908a9e125115cb03848b85025208fc36ba065da13588d78f277c8546a18d5f3ff674d1b323cd9699b49e11f28af79e9e30349599d8f6452ab3fb7cfd8d7d0d478971ac96a31e531a942483bff6462d316048ffef2f0454b769164d8d270c500ed77fad0af6dbdd611db51be39a87bb06822ea9ce7cb87f3a17f25d43141c9fc99a0254233b9f0e80a1b42c23e54728e0380043cb062ca8004b2bf37b83c58818b8260e91327650e8455118e595b434784ec822de66a81af4d2010456e78e6ad87edca94360eab193960dfd49484251ac93b8cb40c08604002e090c1013bc504252a1f67964a63861d6a7b8b27c398e8fa88a1d59e2a4c9111f322b5e10453dc94efe58cbaf4854d92f15133d59e2bd3dcf927cc248ebce7536a73b4fa34575b7024cc99b1afac0e0ac1a7c2aaf151bfec7bad751621f61e53cc481fc9c6e5add3b4d75ef6893d7e86707b5eb7036454ece789de7b2f53cc0059843516a99b63cfbb2dba5ff1c0e91a3428fa292d1ff2cbc0ef0df9144370b8c88c90a2d1c3493e26932c24b9bd2e5449ea18c474fee6022a77d6bc6f78c499152ef6de05e4a3f5fdde1062e7e3faf158c31d26d5af49117e148d0e1169d1acd3698a58a6739bae74f80c2fba62155d6a61e1ebe0f547b2e46475b31d6c309d9cd7e309c34d3f5a9a755a8fdfd1a549185f914ea616f888256dc5b4255b14842fa43a63fb286e3e970a65c844c374f71c63a6bf7857432c69076563038ddeed97086b9982c2295b7d7eba3b9a99260a0d8ef79c9a9bf5811a57cde044e37c7015f7da0a5c5ceea331c6b21a8d0b35f904dc4e4a010693eb0d10e0b865d93278b44b8a0037fc7d5c96c9afefd8e08c14b9a9aa56a56c070335964013ec69b261e3899312fe211e5919dc224ad37ddfb99ae7b43f1bbaa64c887f31bb890c696d0c19c2ef9548777d1df3e108a1a02207e2512e5a40d9fba884fcd000a8325a8c5630968eecd69dc10c4fc3facce87bacfd92a332d456dbbe9811e0d7b7ad0395823e9222b4dd8ee8d726982fa405774cdf5e15377b5251c05ed725bc5a60d557084f18cea727a17ae80e80ed1a33e06a96befd95a743ac5ac0c4f1d04af311950862d21fa625de31f6fe3e730f1dc63fcc6b9cefbf9c8b64e8328bc39cdb9b069bcf8f33619ec020a181ee1743ca00e6eba11e9da2455777440665dc671e1d281cbabd529dde9b82d19acbd53eb26c23c9e820292c0bd8778362ed3dacc034f6876da4dfad00dd2bd0cf48f0bffb737408a5348463be0d9a078ff34340f1d0ab02bab17b25c98e5b24e676baf80792d9e96bd0c654e9355f07fb6f115b6da17b8c1767d7f6a3a8b6d63f5bc1c0914d8eb55059c4addea15db11a48d73e3ca043398e3475f51e950252c5369995e5024d809b0307219adfb95fade308a7689f8c7ad63c1a1c1f474f9f6e3a0da055512d1b2676ed7ef138208e761d9156ebe0b4d42017a30942f12153cdf3ab3360517bf6e94db214edd8c3966cb25bdf3fba6216af75603dfff726d942c26a954124b3662c1e35495a27e68d66361372584f308b26041ac61083ee81aacfa9a0dc16398cc37936a9e10a048a36fdce631da0032c3581a3eb566756f63e9e88d6d2cb42857f093f7aa282f7839daf8dd43c6c896be3af91e151623e60b9a9804f75ebd5875104b382b8b49b6c059fdc942b7f4725746c08c2d246cb28b6eb48f1e7825a25366d0d43fda7de4d1652482b73f23018486258e5cc38ba3ad3641c551df63b2beecd50309c6b1d828380bfa5fe520f66428b984f9917fdad41b584a8c97081dea8307df317c7cc4b706fe23ffae1a85eb2b563c31bb2456f5271e97ad198dd467853ebfae4008a3233a5ab5936f6d4ba890c0190a3d6b0ea2e9b5660568b9ac12be7f0b28ec056feffff1dca6a992c037ffbc65debd410f40e53514753c2e5ef88bbab5d726b44b3727b1a9db1711e9b5ee21f5c88130002c8a90ceb2a5c6d6fc825414077ba4f8981023a6372d9661215b26bde3ac3247972b4f357d523582a8a8152d638c8a645c596119f6c9e079045a3a2911d3b853637dbdd8e004e492f469e98139b49c92d16f3980926de09c7ca151b0e202977ad960712439fe8fbd64dcdc616f3673f4a2d17a50e25c9f9f5dc6af219bef78f04f83d78c638d83c7a3708df8184f81ef81d5211f14a45fc99467f26209cce9d0ba63230738d8996f8b77662416579635fb829af261b15d26c7bed49098fe7524f68cd3a905b847670bd902e9c705d365dcd3643beffe30670fe460410fade5fc5380c9f721c98b553796c79b7960b638611a0aa3d27079706062cc4ee4f93bf11a61dae7aee2d6808e811f60d344ca96db524894ca68d731de4296240379d94924bec977c87254093304bfcc50521508ab085274ba605ae7e2fa547635a274a51156f36edb5a62bca097b4c849c22c6bb33063efb2f047b7eb1e98aee7bf13f08cc9eca6ad4696389d10990be9118ac155d23db4fb02853de86deae187832c7f8f4ad671bf9fb514afa90ecabcd5a6395a4d4d1a3467ffdb0e63fcbb1c85021d5e46544f974a46b320753c223c87a1cb45eee5da366bea2df5b0f5b2f7a20b337c3d47ecc1c5640c039cb1ee575ad69d5cf287239e36beab8fb56e0c7b36d0a781352df0d2e81c2afa07b391bd8c629cf341a4c9a53c5f66708dc30946adb7bb5f7fb1a7cd6054e0f59f226a9eedac6f2b65176e571c3e7f115eaa19ae4e437d8080b84e0d8404e9e05d5dcf1008e9b949268b70216b428bf8ef6a8e79a15165fde01cc7b0e8cf5373adb03bacf9edabdcc300ce85ed4418aac29d8d5979c248e6540f168579d7443a3f22901a9cb7bc00a07013c443b7b793c3de7ca81b5911eca507ab0730852de60d9b4e7e11f778d8f054dd3ba008b96ed9d2109e753909a708163d2f290ae434e7f5366fb917e37c97c6f6bd77e6c36482262e34c4028b2bc7032fc8b6194efad22264f96b96ae04f68e3a496164c1d2a2ce4dcdc04b1621348efaa111fe621c1dbd865c0d26627ca25442a532b1b082ec79cd6ea76d2d001648ed923eabeaedd6b1e950ece3a33dfa7213591a871c9fda2fcb690412a2fbff1e2d269e733a582438612f71b42050f4cca84c4deb14ce409e6d6cf6053d4a132dbd39bcc08a22b08ae3ef3fe9c28ff893ef482a593fc63ffc9524d8eb081db7aaafb15c6dc2a9ba3370d214109d9b2ee8c98f5caba586d0632619f3e5ec6aca184896284ceabc43902edecd14041a4f29c21b622868283a83d0e0e2b718dfdc5f20279e5cb95123a22be2bad0ec4a0ae7d93d76d0e5f2cd86ece583a9a4ad693e743d43b073e3fd8e0f4fbf95586d597c0e225df401bcd5b3a9e815db25e8eb683dca0e76047ae16d8b136409a5537e5ec362a0ed0cc618c8da0b5e1a74a8d0f1eb8cfbe5e225cf1eb6450062b30bf5f08f497c6ca1abe399a98b5c105fd085d743d8cd268ab941b887163fa17fa57322ac53e539f2ffb630b3a7f02935657ef5af906868d51c81e25be9df92f88eeedcc2f989133107f5b9d18196eb394231905", 0x1000}, {&(0x7f0000001a40)="b5ecee89a8b82d138067d3525f1bbffdb8f2153d3e1bf1581912e537ce64d84469c02e49f832ef3bd2f02f64a49a3e8b435da26c209d0202311f43716daaaeab59c15d86620cade9e93dbd0aae51d7bb6f78beea0fba5a503c74049216d4304bb1b25156da189ad3fba451d8d02b7f4fb4437b27a361aa8c1820d7504833ea78bda0f582431cbef9eb4163db893ddd2c7d4ee5d020bf04c7db0ad79bb7dec6d8521e4cb5f28832331870c7fc7af6363bf5a644bed438a479b8e7a1f15c93562cb5773ce48830521fa25466eb020a54d8", 0xd0}, {&(0x7f0000001b40)="79f86476155c2a4247dd3ce52475610ad4c8cb0ce5295d7c9b19ad24218ebc1964f40f3470ca31ed7dc7f01a5740117b9ef0abe653a2923b444f97bd6b9ab38feb3f39f957434058b525c903f3a33a359c4f3536345e285fafbc934389914ec9141fc892420f73220b373f66462e6f6651aa149b9e2a30a88265ef5041a7bcc026d9af9a5d6ac4b86806c417b4e60b1cf6f731fb642aef62912a0c9feba41eb984b77956f89aa846d56133af4efb787c7e148f33eacebc127371fe5671fa4048329052482f86e80756de0323a9c19088078e4c6d138b7cb8", 0xd8}, {&(0x7f0000001c40)="4cd4387ff7bb834ac3cc7eee04ae404e323d7a347f25b3d032faff8d7f62d38173964883d377830a8e047d300aeac8a3f1b4209eaab02a2fa5106b93102f7d074bb5f1d6ed97747eacb430b66d9a53e86c8243eaad04c845155fa18990f5715fb6e471fe4b1637a66cec51aaf0af82db6a26172ecf175da33311529a73837b631ca2229f9d40d6cf37c98bb517b9a8", 0x8f}, {&(0x7f0000004e00)="db596ceed2bdc1c2cbfe61ee3ad0d19a57adcb036ac4824f324d4aae975fc0052e964669df06c31bc43d161884c5c1cfa6fb495a11e98a15770f2631f6035009acd267b1b7a7b529e8c90cea709fbef3ac9ee59d1c1792640a122d7f1e20a9af3357c7aa3e3e3b316d44f3b5a7b6bf9321807a98c1e89da988900fcf295fdafd878ad5d2d31d1dbe71cfc7d5d9bf9ee781f55c23865d5d4a1ad7ddc796bef930373d05179342037a46e10c9428a6cf6f03056ecb6f2ff6811b432ec70e43e09dd43e8be01fa6b2c524f7b3e7918a246129", 0xd1}, {&(0x7f0000004f00)="3d6dbece46427aed89c78b6c5cade3d34689c50e41b896f3b9d6b35abaefa7c77cd3b98f3b95e150bf608792042c73660ce3b4612707513166cce3a78df5be61fe072d8cf4b87b29df542711abd24bbcae511724e26e91994555cb5ab9bd8286a2d85e065c1cf33be187b8650adc979890481ee83dd6bfe3c53a8de15775e7877949", 0x82}, {&(0x7f0000004fc0)="0ad54429d7e6ed6212f090b1b7b6bc95b294936e6e61516bf37ea05ad89ba6f526acf979bf6aa59e3e7672cabd4dc798ea213adcc94b7e1c400e8d4c2a16b867b7a52808890e9960fe7471b3ba482b072c4a4fc5ec30f4717f6f9669dc7189634d38eb984c4f91ff8b0dfc17dd4382fdd3975d575a18181dccf90f2be37330b429a6f336c3c89e96a9ad5c526f67be5cc5a54e6efc5ed3ef302567ddd4", 0x9d}, {&(0x7f0000005080)="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", 0x1000}], 0xa, &(0x7f0000001d00)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}}], 0x3, 0x2000c841) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:10:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000017, 0x0) 10:10:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:37 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @loopback}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}, 0x0) r0 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_mreqn(r0, 0x0, 0x40, &(0x7f0000000300)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x80010, 0xffffffffffffffff, 0x8000000) 10:10:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001800852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 43) [ 2594.742564] CPU: 1 PID: 12946 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2594.744168] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2594.745857] Call Trace: [ 2594.746404] dump_stack+0x107/0x167 [ 2594.747154] should_fail.cold+0x5/0xa [ 2594.747930] ? create_object.isra.0+0x3a/0xa20 [ 2594.748863] should_failslab+0x5/0x20 [ 2594.749631] kmem_cache_alloc+0x5b/0x310 [ 2594.750455] ? lock_downgrade+0x6d0/0x6d0 [ 2594.751301] create_object.isra.0+0x3a/0xa20 [ 2594.752194] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2594.753242] __kmalloc_track_caller+0x177/0x370 [ 2594.754179] ? ip6_setup_cork+0x670/0x1740 [ 2594.755041] kmemdup+0x23/0x50 [ 2594.755696] ip6_setup_cork+0x670/0x1740 [ 2594.756539] ip6_make_skb+0x22d/0x4e0 [ 2594.757323] ? ip_frag_init+0x350/0x350 [ 2594.758157] ? ip6_push_pending_frames+0xf0/0xf0 [ 2594.759151] ? ip6_dst_hoplimit+0x199/0x440 [ 2594.760070] ? lock_downgrade+0x6d0/0x6d0 [ 2594.760959] udpv6_sendmsg+0x20d0/0x2af0 [ 2594.761819] ? ip_frag_init+0x350/0x350 [ 2594.762666] ? udp_v6_push_pending_frames+0x360/0x360 [ 2594.763534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1822 sclass=netlink_route_socket pid=12954 comm=syz-executor.2 [ 2594.763744] ? lock_acquire+0x197/0x470 [ 2594.767107] ? find_held_lock+0x2c/0x110 [ 2594.767945] ? lock_acquire+0x197/0x470 [ 2594.768774] ? find_held_lock+0x2c/0x110 [ 2594.769614] ? sock_has_perm+0x1ea/0x280 [ 2594.770460] ? __import_iovec+0x458/0x590 [ 2594.771301] ? udp_v6_push_pending_frames+0x360/0x360 [ 2594.772348] inet6_sendmsg+0x105/0x140 [ 2594.773146] ? inet6_compat_ioctl+0x320/0x320 [ 2594.774052] sock_sendmsg+0xf2/0x190 [ 2594.774805] ____sys_sendmsg+0x334/0x870 [ 2594.775628] ? kernel_sendmsg+0x50/0x50 [ 2594.776428] ? do_recvmmsg+0x6d0/0x6d0 [ 2594.777225] ? __lock_acquire+0x1657/0x5b00 [ 2594.778109] ___sys_sendmsg+0xf3/0x170 [ 2594.778896] ? sendmsg_copy_msghdr+0x160/0x160 [ 2594.779814] ? vmacache_find+0x55/0x2a0 [ 2594.780631] ? lock_acquire+0x197/0x470 [ 2594.781454] ? find_held_lock+0x2c/0x110 [ 2594.782279] ? __might_fault+0xd3/0x180 [ 2594.783082] ? lock_downgrade+0x6d0/0x6d0 [ 2594.783920] ? asm_exc_page_fault+0x1e/0x30 [ 2594.784817] __sys_sendmmsg+0x195/0x470 [ 2594.785628] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2594.786500] ? lock_downgrade+0x6d0/0x6d0 [ 2594.787363] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2594.788341] ? wait_for_completion_io+0x270/0x270 [ 2594.789331] ? rcu_read_lock_any_held+0x75/0xa0 [ 2594.790268] ? vfs_write+0x354/0xa70 [ 2594.791022] ? fput_many+0x2f/0x1a0 [ 2594.791778] ? ksys_write+0x1a9/0x260 [ 2594.792558] ? __ia32_sys_read+0xb0/0xb0 [ 2594.793405] __x64_sys_sendmmsg+0x99/0x100 [ 2594.794278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2594.795329] do_syscall_64+0x33/0x40 [ 2594.796111] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2594.797156] RIP: 0033:0x7fba2f88eb19 [ 2594.797923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2594.801660] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2594.803240] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2594.804696] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2594.806141] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2594.807585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2594.809027] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:10:37 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) 10:10:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001900852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:37 executing program 0: socket$inet(0xa, 0x0, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e08852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000018, 0x0) 10:10:37 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:10:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000e001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:10:37 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="c7", 0x1}, {&(0x7f0000000100)="3635b3ec4a2b35abfca0053f7c49ec969e9c07128e4d5515459c6a80da16fa159e416b9e19cdbaf0dc86a4252904100d057ca86662b4019299517d54a2b5952be06249f0bf3c7304e2e1e4b451", 0x4d}, {&(0x7f0000000180)="90682fec75e78a779237140c46c06004def557f5a712d9a9b966c9f707e61cd959d3028af67b4c11988e4a1ef39f3effe91208b843e5", 0x36}, {&(0x7f00000001c0)="ab46f1c5ed9c69f7d3c08aa4efba97fc96c22548d27d5a09e3fdf027596662947c6b7fd9e4791f96f742792f41367186b999f671a014fad5e0d3a4926416a50d2c6e6c2c78091d69c905f585bfc1b465a8b8afe03a062b76d81f6bd03677182f2fbaf4ed5447035882febe9558cff975ab040778f1ad6e58a6c5e050ca7c03775efc9bb8a29e758ceddff732faa572baf0009620fd861ae18087b0a93b65ec62ebff739230f79bda0905397e53583e07d934557f5e2faf7a49d483da993f2d9d45cbdfdf766c", 0xc6}, {&(0x7f0000000340)="fb52d15932fcfade5f0fb7a0064fb5044646b921f83dc29542f9dc462a383a4eb58e803fe0b6de60d1435ca46294b77cea28adde9e7ad1dfb812a34ea2cc4d3d991f16e0a313c0f0ffd30c7309a2564d3a1e7c42be557fd5bdf5d047be9c95624a1fe235", 0x64}], 0x5, &(0x7f0000000440)=[@ip_retopts={{0x44, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xbc, 0x1, 0x6, [{@multicast1, 0x8}, {@local, 0x46b}]}, @lsrr={0x83, 0x1f, 0x1d, [@local, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010100, @multicast2]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0x39}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0xb8}}, {{&(0x7f0000000500)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000540)="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", 0x1000}], 0x1, &(0x7f0000001580)=[@ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa42}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xb8}}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2594.958309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2078 sclass=netlink_route_socket pid=12967 comm=syz-executor.2 [ 2594.986124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2078 sclass=netlink_route_socket pid=12970 comm=syz-executor.2 10:10:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001a00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:51 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001c00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:51 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 44) 10:10:51 executing program 0: socket$inet(0xa, 0x0, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:51 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 10:10:51 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e09852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2609.541315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:10:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000019, 0x0) 10:10:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20c00e001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2609.559549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2609.565303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2334 sclass=netlink_route_socket pid=13001 comm=syz-executor.2 [ 2609.588408] FAULT_INJECTION: forcing a failure. [ 2609.588408] name failslab, interval 1, probability 0, space 0, times 0 [ 2609.591298] CPU: 0 PID: 13003 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2609.592686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2609.594365] Call Trace: [ 2609.594895] dump_stack+0x107/0x167 [ 2609.595628] should_fail.cold+0x5/0xa [ 2609.596392] ? __alloc_skb+0x6d/0x5b0 [ 2609.597164] should_failslab+0x5/0x20 [ 2609.597928] kmem_cache_alloc_node+0x55/0x330 [ 2609.598823] __alloc_skb+0x6d/0x5b0 [ 2609.599547] alloc_skb_with_frags+0x92/0x570 [ 2609.600431] sock_alloc_send_pskb+0x7af/0x930 [ 2609.601346] ? sk_alloc+0x350/0x350 [ 2609.602079] ? lock_acquire+0x197/0x470 [ 2609.602870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2609.603909] ? lock_release+0x680/0x680 [ 2609.604703] __ip6_append_data.isra.0+0x1c12/0x3a70 10:10:52 executing program 7: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '^:+,,\xd9-\x00'}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x70}}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xb93, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000002100)=""/4095, 0xfff, 0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) [ 2609.605714] ? ip6_mtu+0x1bb/0x3d0 [ 2609.606603] ? lock_downgrade+0x6d0/0x6d0 [ 2609.607433] ? ip_frag_init+0x350/0x350 [ 2609.608233] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2609.609170] ? ip6_mtu+0x1e9/0x3d0 [ 2609.609878] ? ip6_setup_cork+0xfb7/0x1740 [ 2609.610721] ip6_make_skb+0x2de/0x4e0 [ 2609.611472] ? ip_frag_init+0x350/0x350 [ 2609.612261] ? ip_frag_init+0x350/0x350 [ 2609.613062] ? ip6_push_pending_frames+0xf0/0xf0 [ 2609.614002] ? ip6_dst_hoplimit+0x199/0x440 [ 2609.614854] ? lock_downgrade+0x6d0/0x6d0 [ 2609.615697] udpv6_sendmsg+0x20d0/0x2af0 [ 2609.616504] ? ip_frag_init+0x350/0x350 [ 2609.617310] ? udp_v6_push_pending_frames+0x360/0x360 [ 2609.618339] ? lock_acquire+0x197/0x470 [ 2609.619124] ? find_held_lock+0x2c/0x110 [ 2609.619938] ? lock_acquire+0x197/0x470 [ 2609.620723] ? find_held_lock+0x2c/0x110 [ 2609.621557] ? sock_has_perm+0x1ea/0x280 [ 2609.622379] ? __import_iovec+0x458/0x590 [ 2609.623201] ? udp_v6_push_pending_frames+0x360/0x360 [ 2609.624226] inet6_sendmsg+0x105/0x140 [ 2609.625004] ? inet6_compat_ioctl+0x320/0x320 [ 2609.625889] sock_sendmsg+0xf2/0x190 [ 2609.626624] ____sys_sendmsg+0x334/0x870 [ 2609.627428] ? kernel_sendmsg+0x50/0x50 [ 2609.628215] ? do_recvmmsg+0x6d0/0x6d0 [ 2609.628994] ? __lock_acquire+0x1657/0x5b00 [ 2609.629855] ___sys_sendmsg+0xf3/0x170 [ 2609.630629] ? sendmsg_copy_msghdr+0x160/0x160 [ 2609.631542] ? lock_acquire+0x197/0x470 [ 2609.632324] ? find_held_lock+0x2c/0x110 [ 2609.633163] ? __might_fault+0xd3/0x180 [ 2609.633949] ? lock_downgrade+0x6d0/0x6d0 [ 2609.634771] ? asm_exc_page_fault+0x1e/0x30 [ 2609.635640] __sys_sendmmsg+0x195/0x470 [ 2609.636430] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2609.637293] ? lock_downgrade+0x6d0/0x6d0 [ 2609.638125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2609.639077] ? wait_for_completion_io+0x270/0x270 [ 2609.640030] ? rcu_read_lock_any_held+0x75/0xa0 [ 2609.640956] ? vfs_write+0x354/0xa70 [ 2609.641693] ? fput_many+0x2f/0x1a0 [ 2609.642413] ? ksys_write+0x1a9/0x260 [ 2609.643165] ? __ia32_sys_read+0xb0/0xb0 [ 2609.643974] __x64_sys_sendmmsg+0x99/0x100 [ 2609.644813] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2609.645850] do_syscall_64+0x33/0x40 [ 2609.646589] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2609.647601] RIP: 0033:0x7fba2f88eb19 [ 2609.648342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2609.651976] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2609.653484] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2609.654893] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2609.656297] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2609.657738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2609.659152] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:10:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r3, 0x0, r0) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2609.664973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2334 sclass=netlink_route_socket pid=13017 comm=syz-executor.2 10:10:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000001a, 0x0) 10:10:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0a852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:10:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001d00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:10:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000f001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2609.797445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=13030 comm=syz-executor.2 10:10:52 executing program 0: socket$inet(0xa, 0x0, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:10:52 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmdt(r0) [ 2609.826037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=13034 comm=syz-executor.2 10:10:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005f00852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2609.906268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=13046 comm=syz-executor.4 [ 2609.952970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=13050 comm=syz-executor.4 10:10:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 45) 10:10:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:10:52 executing program 7: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020000000002000005000000f0d5fd090991f4ba11dfa025c28f4800505c73ff94ef9ed66071ac832570fb3af28694cef1628e2d4b217a445aa6ded212220a427a8393d987f9907c17059cb4e610dbb4cb5befd4d0d93e00f1ba0134fd8e0e5dc9ed6c3fb4884be03e76fc6fcca7ee0af5c4b3"], 0x400) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000040)=0x9e, 0x2d7a, 0x3) 10:10:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0b852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2610.035723] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2846 sclass=netlink_route_socket pid=13054 comm=syz-executor.2 [ 2610.081669] FAULT_INJECTION: forcing a failure. [ 2610.081669] name failslab, interval 1, probability 0, space 0, times 0 [ 2610.084349] CPU: 0 PID: 13060 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2610.085735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2610.087374] Call Trace: [ 2610.087909] dump_stack+0x107/0x167 [ 2610.088635] should_fail.cold+0x5/0xa [ 2610.089418] should_failslab+0x5/0x20 [ 2610.090177] __kmalloc_node_track_caller+0x74/0x3b0 [ 2610.091176] ? alloc_skb_with_frags+0x92/0x570 [ 2610.092090] __alloc_skb+0xb1/0x5b0 [ 2610.092825] alloc_skb_with_frags+0x92/0x570 [ 2610.093726] sock_alloc_send_pskb+0x7af/0x930 [ 2610.094632] ? sk_alloc+0x350/0x350 [ 2610.095363] ? lock_acquire+0x197/0x470 [ 2610.096159] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2610.097213] ? lock_release+0x680/0x680 [ 2610.098019] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2610.099028] ? ip6_mtu+0x1bb/0x3d0 [ 2610.099741] ? lock_downgrade+0x6d0/0x6d0 [ 2610.100566] ? ip_frag_init+0x350/0x350 [ 2610.101389] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2610.102317] ? ip6_mtu+0x1e9/0x3d0 [ 2610.103027] ? ip6_setup_cork+0xfb7/0x1740 [ 2610.103874] ip6_make_skb+0x2de/0x4e0 [ 2610.104634] ? ip_frag_init+0x350/0x350 [ 2610.105442] ? ip_frag_init+0x350/0x350 [ 2610.106241] ? ip6_push_pending_frames+0xf0/0xf0 [ 2610.107190] ? ip6_dst_hoplimit+0x199/0x440 [ 2610.108050] ? lock_downgrade+0x6d0/0x6d0 [ 2610.108906] udpv6_sendmsg+0x20d0/0x2af0 [ 2610.109718] ? ip_frag_init+0x350/0x350 [ 2610.110519] ? udp_v6_push_pending_frames+0x360/0x360 [ 2610.111551] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2610.112633] ? lock_acquire+0x197/0x470 [ 2610.113431] ? find_held_lock+0x2c/0x110 [ 2610.114248] ? lock_acquire+0x197/0x470 [ 2610.115039] ? find_held_lock+0x2c/0x110 [ 2610.115870] ? sock_has_perm+0x1ea/0x280 [ 2610.116701] ? __import_iovec+0x458/0x590 [ 2610.117534] ? udp_v6_push_pending_frames+0x360/0x360 [ 2610.118563] inet6_sendmsg+0x105/0x140 [ 2610.119339] ? inet6_compat_ioctl+0x320/0x320 [ 2610.120230] sock_sendmsg+0xf2/0x190 [ 2610.120986] ____sys_sendmsg+0x334/0x870 [ 2610.121797] ? kernel_sendmsg+0x50/0x50 [ 2610.122586] ? do_recvmmsg+0x6d0/0x6d0 [ 2610.123365] ? __lock_acquire+0x1657/0x5b00 [ 2610.124234] ___sys_sendmsg+0xf3/0x170 [ 2610.125018] ? sendmsg_copy_msghdr+0x160/0x160 [ 2610.125924] ? vmacache_find+0x55/0x2a0 [ 2610.126729] ? lock_acquire+0x197/0x470 [ 2610.127519] ? find_held_lock+0x2c/0x110 [ 2610.128333] ? __might_fault+0xd3/0x180 [ 2610.129142] ? lock_downgrade+0x6d0/0x6d0 [ 2610.129968] ? asm_exc_page_fault+0x1e/0x30 [ 2610.130843] __sys_sendmmsg+0x195/0x470 [ 2610.131640] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2610.132500] ? lock_downgrade+0x6d0/0x6d0 [ 2610.133347] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2610.134310] ? wait_for_completion_io+0x270/0x270 [ 2610.135275] ? rcu_read_lock_any_held+0x75/0xa0 [ 2610.136203] ? vfs_write+0x354/0xa70 [ 2610.136956] ? fput_many+0x2f/0x1a0 [ 2610.137681] ? ksys_write+0x1a9/0x260 [ 2610.138440] ? __ia32_sys_read+0xb0/0xb0 [ 2610.139255] __x64_sys_sendmmsg+0x99/0x100 [ 2610.140099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2610.141164] do_syscall_64+0x33/0x40 [ 2610.141914] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2610.142942] RIP: 0033:0x7fba2f88eb19 [ 2610.143693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2610.147393] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2610.148930] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2610.150356] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2610.151779] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2610.153221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2610.154644] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:11:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000001b, 0x0) 10:11:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 46) 10:11:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0c852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:11:06 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007300852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200048001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:11:06 executing program 0: socket$inet(0xa, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:06 executing program 7: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6b7, 0x8, 0xfff, 0x6110f789}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmdt(r1) shmdt(r1) 10:11:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x1000, 0x6, 0x100000000}) sendto$inet(r2, &(0x7f0000000100)="39ebb75439f0f34cd9b9868a054672c1b41e5d59631a771cf966032a5608a5cd77dbf46ea7b242bbbba23659d8226b156645ad38751be860341256440a56de27676e7844204c907aed85b01bb6afa78001c1ed094c4e9aeb74ee4a6558e38c1ea1ac7fd01cee2194103be13691b0e00027218f748d849b71bea3058c377f18fe27595b7aab7cc9a20570c022e7627f5b4990c9bc44d34d97985cbc3d082f63039bc353c0197038d84aee7b8e306fd010ef7bbaeab7866f06e56fd7a339c56ab895b1fd582b7f2c7cb036053a680f0af3628c0a34812a91ec27dd7562f95705e53245", 0xe2, 0x20000000, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000001d80)={0x5, 0xffffffa2, 0x74, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xb77c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x6, 0x80000) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000340)="5d5349e1996dce2554edda89683c018ad4ed2faeaa9347ed234c1f59b90694b0c5370e8fc3d09461139324d1b15227fc041499eb1d6a155b6494526aa88610309c222f8f330881be542f5852691eadd4c5a740a12fac1d2e06b4fcae0e198b3a3134a2535ebb90eed414eb3529f578c23058076c574e20ca3ee308aa7e1fb52dc389294a9d0d795fd15d00a0ac94d14e15840a7e00c5928d28fbd019807fdc7d5641917a5306a0266d183f1bfda963763e65be9ede", 0xb5) fcntl$dupfd(r3, 0x0, r4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) [ 2624.450317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3102 sclass=netlink_route_socket pid=13082 comm=syz-executor.2 [ 2624.464291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13083 comm=syz-executor.4 [ 2624.474445] FAULT_INJECTION: forcing a failure. [ 2624.474445] name failslab, interval 1, probability 0, space 0, times 0 [ 2624.477320] CPU: 0 PID: 13075 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2624.478742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2624.480366] Call Trace: [ 2624.480911] dump_stack+0x107/0x167 [ 2624.481660] should_fail.cold+0x5/0xa [ 2624.482442] should_failslab+0x5/0x20 [ 2624.483214] __kmalloc_node_track_caller+0x74/0x3b0 [ 2624.484207] ? alloc_skb_with_frags+0x92/0x570 [ 2624.485148] __alloc_skb+0xb1/0x5b0 [ 2624.485889] alloc_skb_with_frags+0x92/0x570 [ 2624.486794] sock_alloc_send_pskb+0x7af/0x930 [ 2624.487707] ? sk_alloc+0x350/0x350 [ 2624.488449] ? lock_acquire+0x197/0x470 [ 2624.489240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2624.490263] ? lock_release+0x680/0x680 [ 2624.491086] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2624.492095] ? ip6_mtu+0x1bb/0x3d0 [ 2624.492821] ? lock_downgrade+0x6d0/0x6d0 [ 2624.493659] ? ip_frag_init+0x350/0x350 [ 2624.494445] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2624.495354] ? ip6_mtu+0x1e9/0x3d0 [ 2624.496057] ? ip6_setup_cork+0xfb7/0x1740 [ 2624.496906] ip6_make_skb+0x2de/0x4e0 [ 2624.497656] ? ip_frag_init+0x350/0x350 [ 2624.498472] ? ip_frag_init+0x350/0x350 [ 2624.499251] ? ip6_push_pending_frames+0xf0/0xf0 [ 2624.500192] ? ip6_dst_hoplimit+0x199/0x440 10:11:06 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) getsockname(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2624.501062] ? lock_downgrade+0x6d0/0x6d0 [ 2624.502048] udpv6_sendmsg+0x20d0/0x2af0 [ 2624.502871] ? ip_frag_init+0x350/0x350 [ 2624.503690] ? udp_v6_push_pending_frames+0x360/0x360 [ 2624.504706] ? find_held_lock+0x2c/0x110 [ 2624.505531] ? lock_acquire+0x197/0x470 [ 2624.506317] ? find_held_lock+0x2c/0x110 [ 2624.507166] ? sock_has_perm+0x1ea/0x280 10:11:06 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2624.508010] ? __import_iovec+0x458/0x590 [ 2624.508874] ? udp_v6_push_pending_frames+0x360/0x360 [ 2624.509926] inet6_sendmsg+0x105/0x140 [ 2624.510717] ? inet6_compat_ioctl+0x320/0x320 [ 2624.511634] sock_sendmsg+0xf2/0x190 [ 2624.512364] ____sys_sendmsg+0x334/0x870 [ 2624.513205] ? kernel_sendmsg+0x50/0x50 [ 2624.514019] ? do_recvmmsg+0x6d0/0x6d0 [ 2624.514813] ? __lock_acquire+0x1657/0x5b00 [ 2624.515702] ___sys_sendmsg+0xf3/0x170 [ 2624.516495] ? sendmsg_copy_msghdr+0x160/0x160 [ 2624.517430] ? vmacache_find+0x55/0x2a0 [ 2624.518236] ? lock_acquire+0x197/0x470 [ 2624.519026] ? find_held_lock+0x2c/0x110 [ 2624.519840] ? __might_fault+0xd3/0x180 [ 2624.520638] ? lock_downgrade+0x6d0/0x6d0 [ 2624.521485] ? asm_exc_page_fault+0x1e/0x30 [ 2624.522365] __sys_sendmmsg+0x195/0x470 [ 2624.523167] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2624.524032] ? lock_downgrade+0x6d0/0x6d0 [ 2624.524873] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2624.525847] ? wait_for_completion_io+0x270/0x270 [ 2624.526813] ? rcu_read_lock_any_held+0x75/0xa0 [ 2624.527728] ? vfs_write+0x354/0xa70 [ 2624.528477] ? fput_many+0x2f/0x1a0 [ 2624.529321] ? ksys_write+0x1a9/0x260 [ 2624.530294] ? __ia32_sys_read+0xb0/0xb0 [ 2624.531325] __x64_sys_sendmmsg+0x99/0x100 [ 2624.532396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2624.533713] do_syscall_64+0x33/0x40 [ 2624.534650] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2624.535790] RIP: 0033:0x7fba2f88eb19 [ 2624.536640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2624.540442] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2624.541971] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2624.543398] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2624.544824] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2624.546273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2624.547726] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2624.556767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3102 sclass=netlink_route_socket pid=13097 comm=syz-executor.2 [ 2624.567594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13099 comm=syz-executor.4 10:11:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000001c, 0x0) [ 2630.958361] kworker/dying (59) used greatest stack depth: 23336 bytes left 10:11:20 executing program 0: socket$inet(0xa, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:20 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/186) 10:11:20 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e02852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20004c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:11:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000001d, 0x0) 10:11:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0d852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:11:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 47) 10:11:20 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2637.805513] FAULT_INJECTION: forcing a failure. [ 2637.805513] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.807203] CPU: 1 PID: 13121 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2637.807940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.808816] Call Trace: [ 2637.809119] dump_stack+0x107/0x167 [ 2637.809536] should_fail.cold+0x5/0xa [ 2637.809970] ? create_object.isra.0+0x3a/0xa20 [ 2637.810489] should_failslab+0x5/0x20 [ 2637.810914] kmem_cache_alloc+0x5b/0x310 [ 2637.811382] create_object.isra.0+0x3a/0xa20 [ 2637.811875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2637.812447] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2637.813015] ? alloc_skb_with_frags+0x92/0x570 [ 2637.813537] __alloc_skb+0xb1/0x5b0 [ 2637.813952] alloc_skb_with_frags+0x92/0x570 [ 2637.814451] sock_alloc_send_pskb+0x7af/0x930 [ 2637.814952] ? sk_alloc+0x350/0x350 [ 2637.815361] ? lock_acquire+0x197/0x470 [ 2637.815798] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2637.816386] ? lock_release+0x680/0x680 [ 2637.816839] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2637.817413] ? ip6_mtu+0x1bb/0x3d0 [ 2637.817785] ? lock_downgrade+0x6d0/0x6d0 [ 2637.818244] ? ip_frag_init+0x350/0x350 [ 2637.818696] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2637.819212] ? ip6_mtu+0x1e9/0x3d0 [ 2637.819611] ? ip6_setup_cork+0xfb7/0x1740 [ 2637.820089] ip6_make_skb+0x2de/0x4e0 [ 2637.820514] ? ip_frag_init+0x350/0x350 [ 2637.820961] ? ip_frag_init+0x350/0x350 [ 2637.821397] ? ip6_push_pending_frames+0xf0/0xf0 [ 2637.821927] ? ip6_dst_hoplimit+0x199/0x440 [ 2637.822402] ? lock_downgrade+0x6d0/0x6d0 [ 2637.822878] udpv6_sendmsg+0x20d0/0x2af0 [ 2637.823338] ? ip_frag_init+0x350/0x350 [ 2637.823792] ? udp_v6_push_pending_frames+0x360/0x360 [ 2637.824381] ? trace_hardirqs_on+0x5b/0x180 [ 2637.824866] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2637.825481] ? lock_acquire+0x197/0x470 [ 2637.825907] ? find_held_lock+0x2c/0x110 [ 2637.826367] ? sock_has_perm+0x1ea/0x280 [ 2637.826830] ? __import_iovec+0x458/0x590 [ 2637.827287] ? udp_v6_push_pending_frames+0x360/0x360 [ 2637.827861] inet6_sendmsg+0x105/0x140 [ 2637.828296] ? inet6_compat_ioctl+0x320/0x320 [ 2637.828791] sock_sendmsg+0xf2/0x190 [ 2637.829220] ____sys_sendmsg+0x334/0x870 [ 2637.829651] ? kernel_sendmsg+0x50/0x50 [ 2637.830090] ? do_recvmmsg+0x6d0/0x6d0 [ 2637.830526] ? __lock_acquire+0x1657/0x5b00 [ 2637.831018] ___sys_sendmsg+0xf3/0x170 [ 2637.831460] ? sendmsg_copy_msghdr+0x160/0x160 [ 2637.831980] ? vmacache_find+0x55/0x2a0 [ 2637.832435] ? lock_acquire+0x197/0x470 [ 2637.832889] ? find_held_lock+0x2c/0x110 [ 2637.833321] ? __might_fault+0xd3/0x180 [ 2637.833772] ? lock_downgrade+0x6d0/0x6d0 [ 2637.834208] ? asm_exc_page_fault+0x1e/0x30 [ 2637.834703] __sys_sendmmsg+0x195/0x470 [ 2637.835123] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2637.835603] ? lock_downgrade+0x6d0/0x6d0 [ 2637.836049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2637.836593] ? wait_for_completion_io+0x270/0x270 [ 2637.837105] ? rcu_read_lock_any_held+0x75/0xa0 [ 2637.837630] ? vfs_write+0x354/0xa70 [ 2637.838047] ? fput_many+0x2f/0x1a0 [ 2637.838454] ? ksys_write+0x1a9/0x260 [ 2637.838868] ? __ia32_sys_read+0xb0/0xb0 [ 2637.839329] __x64_sys_sendmmsg+0x99/0x100 [ 2637.839781] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2637.840356] do_syscall_64+0x33/0x40 [ 2637.840749] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2637.841342] RIP: 0033:0x7fba2f88eb19 [ 2637.841766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.843833] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2637.844685] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2637.845497] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2637.846306] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.847115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.847918] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2637.864867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3358 sclass=netlink_route_socket pid=13122 comm=syz-executor.2 [ 2637.883877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=13130 comm=syz-executor.4 10:11:20 executing program 7: mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x2010, 0xffffffffffffffff, 0xd14e1000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_LOCK(r0, 0xb) 10:11:20 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000001e, 0x0) 10:11:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20024d001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2637.941466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=13143 comm=syz-executor.4 10:11:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0e852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:11:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200c60001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:11:32 executing program 0: socket$inet(0xa, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:32 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f0000ffb000/0x1000)=nil) 10:11:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000021, 0x0) 10:11:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e03852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 48) 10:11:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000080)={0x33, @rand_addr=0x64010102, 0x4e22, 0x2, 'sh\x00', 0x18, 0x3f, 0x18}, 0x2c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10004}, 0x0, 0x0, 0xffffffffffffffff, 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/144, &(0x7f00000001c0)=0x90) [ 2650.264741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3614 sclass=netlink_route_socket pid=13158 comm=syz-executor.2 [ 2650.290206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3614 sclass=netlink_route_socket pid=13176 comm=syz-executor.2 [ 2650.295007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=798 sclass=netlink_route_socket pid=13175 comm=syz-executor.4 [ 2650.305472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=798 sclass=netlink_route_socket pid=13178 comm=syz-executor.4 10:11:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0f852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2650.316513] FAULT_INJECTION: forcing a failure. [ 2650.316513] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.319338] CPU: 0 PID: 13166 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2650.320722] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.322395] Call Trace: [ 2650.322935] dump_stack+0x107/0x167 [ 2650.323680] should_fail.cold+0x5/0xa [ 2650.324444] ? create_object.isra.0+0x3a/0xa20 [ 2650.325355] should_failslab+0x5/0x20 [ 2650.326141] kmem_cache_alloc+0x5b/0x310 [ 2650.326955] create_object.isra.0+0x3a/0xa20 [ 2650.327832] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2650.328846] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2650.329874] ? alloc_skb_with_frags+0x92/0x570 [ 2650.330795] __alloc_skb+0xb1/0x5b0 [ 2650.331547] alloc_skb_with_frags+0x92/0x570 [ 2650.332438] sock_alloc_send_pskb+0x7af/0x930 [ 2650.333352] ? sk_alloc+0x350/0x350 [ 2650.334108] ? lock_acquire+0x197/0x470 [ 2650.334902] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2650.335942] ? lock_release+0x680/0x680 [ 2650.336738] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2650.337756] ? ip6_mtu+0x1bb/0x3d0 [ 2650.338453] ? lock_downgrade+0x6d0/0x6d0 [ 2650.339272] ? ip_frag_init+0x350/0x350 [ 2650.340073] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2650.341011] ? ip6_mtu+0x1e9/0x3d0 [ 2650.341347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3870 sclass=netlink_route_socket pid=13181 comm=syz-executor.2 [ 2650.341733] ? ip6_setup_cork+0xfb7/0x1740 [ 2650.341757] ip6_make_skb+0x2de/0x4e0 [ 2650.344595] ? ip_frag_init+0x350/0x350 [ 2650.345401] ? ip_frag_init+0x350/0x350 [ 2650.346208] ? ip6_push_pending_frames+0xf0/0xf0 [ 2650.347161] ? ip6_dst_hoplimit+0x199/0x440 [ 2650.348027] ? lock_downgrade+0x6d0/0x6d0 [ 2650.348151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3870 sclass=netlink_route_socket pid=13182 comm=syz-executor.2 [ 2650.348871] udpv6_sendmsg+0x20d0/0x2af0 [ 2650.348894] ? ip_frag_init+0x350/0x350 [ 2650.351753] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.352793] ? perf_event_task_disable+0x390/0x390 [ 2650.353787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.354845] ? lock_acquire+0x197/0x470 [ 2650.355644] ? find_held_lock+0x2c/0x110 [ 2650.356480] ? sock_has_perm+0x1ea/0x280 [ 2650.357325] ? __import_iovec+0x458/0x590 [ 2650.358166] ? udp_v6_push_pending_frames+0x360/0x360 [ 2650.359209] inet6_sendmsg+0x105/0x140 [ 2650.359989] ? inet6_compat_ioctl+0x320/0x320 [ 2650.360883] sock_sendmsg+0xf2/0x190 [ 2650.361646] ____sys_sendmsg+0x334/0x870 [ 2650.362461] ? kernel_sendmsg+0x50/0x50 [ 2650.363249] ? do_recvmmsg+0x6d0/0x6d0 [ 2650.364040] ? __lock_acquire+0x1657/0x5b00 [ 2650.364922] ___sys_sendmsg+0xf3/0x170 [ 2650.365715] ? sendmsg_copy_msghdr+0x160/0x160 [ 2650.366641] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2650.367539] ? _raw_spin_unlock_irq+0x27/0x30 [ 2650.368443] ? lock_acquire+0x197/0x470 [ 2650.369252] ? find_held_lock+0x2c/0x110 [ 2650.370077] ? __might_fault+0xd3/0x180 [ 2650.370886] ? lock_downgrade+0x6d0/0x6d0 [ 2650.371723] ? io_schedule_timeout+0x140/0x140 [ 2650.372658] __sys_sendmmsg+0x195/0x470 [ 2650.373485] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2650.374354] ? lock_downgrade+0x6d0/0x6d0 [ 2650.375215] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2650.376203] ? wait_for_completion_io+0x270/0x270 [ 2650.377214] ? rcu_read_lock_any_held+0x75/0xa0 [ 2650.378159] ? vfs_write+0x354/0xa70 [ 2650.378913] ? fput_many+0x2f/0x1a0 [ 2650.379642] ? ksys_write+0x1a9/0x260 [ 2650.380414] ? __ia32_sys_read+0xb0/0xb0 [ 2650.381252] __x64_sys_sendmmsg+0x99/0x100 [ 2650.382125] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.383185] do_syscall_64+0x33/0x40 [ 2650.383938] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2650.384964] RIP: 0033:0x7fba2f88eb19 [ 2650.385726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.389408] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2650.390931] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2650.392350] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2650.393788] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2650.395212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2650.396642] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:11:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e48852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:11:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200068001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:11:32 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/207) [ 2650.447520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18462 sclass=netlink_route_socket pid=13187 comm=syz-executor.2 10:11:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e04852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:32 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000022, 0x0) [ 2650.477259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18462 sclass=netlink_route_socket pid=13192 comm=syz-executor.2 10:11:32 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20006c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2650.519399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=13201 comm=syz-executor.4 10:11:33 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:33 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:11:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e4c852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:11:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000840)=[{{&(0x7f0000000140), 0x6e, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/86, 0x56}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/163, 0xa3}], 0x6, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/2, 0x2}], 0x1, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x2, 0x1517d85d766a44a, &(0x7f00000008c0)={0x77359400}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000900)={0xe}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r6 = dup3(r1, r3, 0x80000) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r7, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r7, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x5) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000940)={0x80000000}) sendmmsg$inet(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000980), &(0x7f00000009c0)='./file0\x00', 0x4bc4d939, 0x3, &(0x7f0000000ac0)=[{&(0x7f0000000a00)="c0b2582407ea5bad9c6c267104354c341c8e4101b97c6d8a19dd4b68c8570ec59f1c21234ae5", 0x26, 0x100}, {&(0x7f0000001e00)="c981e882267b4dc78ba70355fd560b8d7e52463f5dd61237c516f6cf18e67b705fab0a1c3b3fb4c0eabf15c7c835e8ad70f4fec2d7a9e8e01df89f6f18e857a858dd0465aa192cb7c6103d3adfbcd727c2b92bb79a601b04e40a141b172f5ca1579450a71cc966b0e083a31702d0288cf25c2dbb5ce799e08a491da6e3e213b76cba0254a11242cfa78f0d33efd36d05cd12aa28cf14a8ed6bbe546040a195bab2da501782fc1ba60a9beeb333eb6bccaaafce9d602faeff1cdf9f120382a8e119cd1a4f6a152343267b3815651958f2050fe334f39eccb9cd920db408b9fe12e5d2d4559a9e7ec7a2eeb6e69d7b814ce8030eb38b1b232e08cb20eec34c80b54ff91d9e6011e7651b2093475ad8d143408e8e60cf8068a2eaf8e99f677d44e354d1fa26a73f8ceed035297a7900892092deaad1d9e0e1bd48d2f000602f685dd800c490c3e2ab29b1f6346412fee303bc314d69b26f97d05629b6e977eb596219d24558feb8bb2c6153301ec230cd79609bca0f4d0c1cf1ef5873ae81f78fac430f6085fe47f573c73a08c41d6370b9df42bbafd962e92b49645163d4b6dccf0a67c43b26938265a3ff749dfcf3cc7db42c58016c51cabcef4e4cc1e73dab1c363cab9ad36864319f043c809d108e30dcc45f5c6ef009fcedcd0364d5cc64c4de900c7710e165ed03c2346ad9fdbbda7dbb7d2e4774695650a09d33e94bca7aafec15346dd947108b9575d898943e4a7c2a725be698517e3201ec4d804e050203b826283e0bee228e489284acc2b16aa4062a1f2d919b398a3d5c9a7eae4cbd3c201fab8a564d6bd6261e58c9b83e2dfdf522e8daa867cbe8d946c391f812ad85a4b474e4ff3623775a7eb4408379d7b55f11a22f11ef8042572249053ea12c246bb7064f01cc07b1051f3ce469a5ffa041d1382fe727126c67aa21ad750bc897e3a766c8061aaf3b879e3120acdd9e88351e5e9b4297676fb71b8bcc5995231205d374cad301aa3f92664e920fc99e7863f708816d48ef7bbcaa1f63b0c8faeade19006eb1c0b08cfa00f23742d132d789b9dc8cb9ced0ab5722740c6fb76db4cdd2ff2b631a73f23f53d11f5518742a7e8976641cd964f02aa7795a40755718977adc700adc78f96a175266d9410a11e6ed19c60bc4bbb59bfd9a3eabd4973d785cc5beac583d284123fa15fffb35c04bd4abc6ad855637f615e1a54a6d8d261b9382f9c20d83eb7c21a19b633c533b140583f54ca2201c61f9e5328467cda9b085b9e2bcffbfb66cd29c498e5e330bce3c91e730be14d9a105806b4cc77d0065d1941bda10d909a0cbbd1f9179c7f9e54c5ad660d670d9f271151d790ff771ce8e1d16576ff9baa0d6ddbc9ad2f6bfdd152080e6c5f102b341e74621bb0cadd8e9f65076e0102a8381c882d46aa73da68ef26357dd0a14dd5ed4a91312db999bc4e0700f1e72d01ff51e67d9ed6c9a0cce3f51f51f09c13e003b0fcb714eb1d5195cdec94e78682cab458ae870521c77f3e8cd7906c945fdceec1eca9e1f9b1e5efefb2cf8c77de906d798f9855152baa7a4392703a9ddc6750d46df7aab21d67f41850ebe10ecaccfad76e394eab79976791b4b404084d8c9a2f0a0653f0b613c438ee36f3069aee6a6a8e3ef0bd4d3cfb34a7df68afc1206504b964c9b542b79c7e7359b953bf7face38a97ac472224dac3c82a5f9b350635db5323efe6cad59315a0c834eca58a7b2989651c5568271be2e06d7b251dde9db1c5dc7f66176e464224ded76f622ef2650eb215c4e7f1018de78894d77d4a42f3d8e9c028ae40d56f97d071991b30e7e8186b29a11b7f9602207768e29ebabc277fdfcff726d809812529f5f9c288d924ad869e9b2a8de9ac927b8c935134b0ef552e35b313578629a8e2a93c445f0062ff0fc75a854faeab7cafda31f9f5e12464f67391f24bad207549af5e9319794625f54a429aa4ce45e5f72ae3a932629edec3bac823176e684f7c33aaa9b2a2f7b31ab7726f97b034e529e24cb674924517d7a2c8430998d5fa3bb1ecb200d1c4f46cb0de628d740756d8bd38c50d9a019a636a1df06a5476f4a059176d4f1ffc0f185791271304e7dfc2da0b0c43ed9370064fb75dc3b537a2dc68d1e237a326a7b91d3c59e08cb95e161c618fca35a73186921c120132bf3ef5193ed4391c4c0b65596e8d73fe3b6cfede00b02c92bf8907d23689fd510b79201312e00c9675c4af3bbdd878e017fd844a213de0fd3b406e516c19b9f2e11aa37e34db7dccee35ff92002bf28dbba78983f70221a991a41cc95116d346afad53ccdc315bec5eb34bc0145ee640bc7275d5c33ea6ca65fd3ad057a42072badacd7dbdae5d9b0125e3e5724751a44608ac10938798849f91a50469684f77630471a1c0ed13ee11ed7cfcde72bd5d3b5634d99e4402d53fbcaf1ede4666a5d4e337d77805bfd4f83ad91ee3a5680c092af8a8a693f76e19f263191db4fb5be31ec2c974f966be6bd260b38cf449086d170b8c29f2473c5c8b716e5fe3e65f00131769dbe13cbdc04eddcdc430ecc50ad98e804e351a147f7feb5c244410899f03a1eb838b3b462c14a55d4a6da5d03178e44520f18dce5c523415432c1ecb14e6c4e3bc5020460bfd5633395d2b47da69bf7afb7f2e6195c806284050f152158c19129f27ea19c20ccdbdd4d0ace5772706466b96ed736c3e8332f6ec686775e6787fa85c07cb77fc8bd60ae58ddd15365760def26f4ce02f6ba6f8c9dd8b5d28b1d854f287fb73af690f99b906fae402eea3abb6ce485318510eef2a2fedc27505836cb7cd48fb2506e1b98304ac9bcc1e1b80ba685eb3cbf5a1320b13d04b756ea3526936ef2124b9e578a56530411d011f8ff98bbbc633852906968d2f0298c8e84e2ad40c30c94c5fd0ed67fda5d8c0402ed97b3e4833a8ebce2e8553b9bb3295ed8d45061397d78c833759086951ddace7c768deb622645cab1e22dd731dd1c6276894b476156f706f33a8d8192b0336737685d777828f62553a9fda76cf82ee5f249b6a6d0b2164a5b44f2cbf046a29d2cbbaa9a2c9ef0447c221b86e974a2936682d53380b6a411b7fdc8064fa30a9ad8949331be64de7ffb4d87ef7b8a48c3c4cbf5d82efb17bc2eb478932e6aca8ea869c299f8068ba167d0fb69847cfbae4f7a32cfb9ee8656dc56adc60485ad8b20382333636055e85e9f5cf775949dbc9de456984a7a167f893bf59d8f785f22aeaedd680c639234db81cd834b2cec1fca3e7ad99332053abb3e3b8753762673c410013c8efe81a9637933ce0dda04845eebe637921429c91262a8e8eb263d939e4fb6f0886b0e5317e934c272c2b52965e75d4a126e5e150f4268fe48e99fbc87e94f14fe773bf645582a8eb2084df17b0244616555043a3320faab3f55fc12369391aea586745b8c64dee2050fffdb50e11d6ce58273961ed92532142dc6b1ab43689b57c20bd6d3a3ae16729ddecf9dddf5520621987451b0cb2e8a733a00b6aae55258907f1ccc43d6d155bf94bd0d4a06e266d4e4d9ab35276ddae8e2b51c26b0f5b7ed1df51d63cd0c2e8b7f324b9defa2fc20c003413c71af5deba18ce392b3588e04eaa31c62f1c729adfeae4b2d65175e9c5d2dc54a300eb13666a88caec3ab5fa421f8dcb91b62d8abadf1ef999fb48cfc1a1adaad42ef90ef920f2ae3d722f6ec28497a5067603ed65c63270c41c93c26c299aa6aed459384bbb4c221a4c08264fec87de232928bd66d8269c7ad5ca8c3744accc432881bb70b3b882ee6c89cf312e723895c955e69b4d5e687f5ca2b1d4ea8d01dea7400e0dd7c51ddcc80922b4d25794cb1570f31903c3bf68ac9f14ec8fe11612541c7a6051538fb556e7bfd46eb1d4e573726b9592d4a6d51b5056edbdb61bf0fc618f75dc079b7e53281561960fbc7bb11e17c7c4937f25a31ac5bfed5f3e5691caf382658c7dfcead07db9fbc51c92bec3aa6af6657d86ae154a5c1185895f51f32f33ba6180dc75d1dea3dc4fdc0b4b48aade4b522be7d7d9ae5fafd4e8a7f1fe88536cd2912cd0314e2e579b936a5b8842dac30f4817b219d0d6bb2856fedf6d99ef90a1204754e2cce5b9e1b77ee397280a385f23cfb38f2889fb906b96a8509b14932926a043b5a2a6dd8c3009240621f3b69276f6678dcc5bd254acc7248bc9bfd52249c777e353a71669105e05d36b50a4363ae28dfeef1405d67e14bf940afed17268b0a89412d450d573cefd849149780187d5cbac380377a0c17f9978d23cb8fc1db1bf63c79ca673f3fa215d617d2ada19724cab4f4ed373a21fad03fa82e278c9f8db1f3b732d278a2fbdcba8d08c335bc32d5cf9f4ff16c1cf7b66074a665113c2bc272d4c28d5c2e674adec6b148f11ff02d3201c3e9f9252e8e9d6d6201dcd3b4356bb7db17611c96adab67b7826a19b5ca23d5e526b52ae502a426b98fc3a7da0a2687b18814763716a3d74d4438771cd3ea8afb20e94b85a06fd8282f34b6e85add13807b73221b4230b6a339cc321e91387544478605f02330f52f664dfe925d65050f3775b12cb11e18ff245f6666b3a5f8d31bd17f4b73e1f26acc65086faa43ecb9be3f9974d7d0ae3256dfd4e7b34db57711d289c40b8f555020afff45f9aed6675a0468ad580141f9b217b6a546148a229a842ab3a2f5b493248b6e17b6f5021a6684ec780a01cfe5691e17697f00bcb644339ee3c282c0a340be8a2badd2168b6d3fc4531e6fb9a1f1d263f230314daf234d6bf57f413b872b00d65171844b62bfb1b437100a19b79af3360560916a8dcffccb3946e6d1c07e6239c7bca5c39136efe0171fa9538c11682e892eafe8a0091d09956a0adf7d665100d539bd284ef9e09d00104d548e4beeb2338240d711cf06f34104c76784cc4b993533731deefe7d2bbe7450dc2623e7c8202f6ad1b894a762a8055017231128d4b492820097ee93bfb8bdf384785c0860416233e3a6c077aa1f7d891ae0c5c1e41042deba8e3a1165ca272acabf778f157822bf6bfbb12777b06af4fe941e4f8f35db8085f0b4a06487ea58fff7f7d3b34d06a7365f8148cfe5b9baeee70cf429a0aaac45ca0d8023762dd71a41bbbd1b45ee2d0a919785395ce1423b4962cced592eaafcb5ef62ef81cb9614e929c224a0066671829de1ab8576b83841443a81e8f918c33c0671f8a7f4d3ee95f63b940e965cf4b5fe52e79778944fb99e4e94f1fc027276fc3884537431bc286f85422d073b8112471f0f2c9e7eb0566b1fa3e79e3a1bef73eb9ca1ec6c7feaefe5006359085944a329632e629a0a6ce9cbc1d347b71b59cc0bdf794bdc9d5c5b8944a89f1c7e21813a185f28961cb4ac12f1ba1e76b35e19e293ed50342c53acf8e07549b7230114400288fa1c59300c762272dd27cea370635328cf82f322f384b543dad454a1c233ebd868dcc2cc5d00425e91f261f49e1abda6b667ec45c6e1dbdded6023579c97452e0582283af0ba0214f3c59565960033925d223ced601972346eb9cc9739191692767f2a387598dadb960880d8078959b586469ea2605ba300e9b6cf086fa454bb2ab4772f54806642e0ade762f4c3a606073135408c0141c4234ab295c3682d0495b0b8e72845d7b4b2529e41c3fc561f36b8354b49a225037908c7eaec3e25e288be2cfd4d28acbd091d9a9034844182d7b6271bd51855ef822f572577d6a04a842b5a04ae5b5e7e66c76b78021e3b29ad7d2567a35e4673faf68882640d2497b4b7b9f99e462e13e966a5217f", 0x1000, 0x7}, {&(0x7f0000000a40)="17d59752ddafdf634ad30b5978e7a5054bc83948c5da6b433481eca8cbed541fd4bd41a5927598216b493a3b30d048b207aaf11dbba8ee5e6902626c58d0429fca063324d45fc0468c0db09d865cb65a3cf04e4db4f4aa81379ea000ea7677210c29e6e083cd670221d66f136f752daa968afc4dac2f80dc88921a8193", 0x7d, 0x64be}], 0x20000, &(0x7f0000000b40)={[{@block}, {@map_normal}, {@check_strict}, {@gid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@map_acorn}], [{@smackfsroot={'smackfsroot', 0x3d, '&\''}}, {@smackfsroot={'smackfsroot', 0x3d, '!'}}, {@fowner_lt={'fowner<', r2}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x1f}}, {@smackfsroot={'smackfsroot', 0x3d, '%-'}}]}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x6002, 0x0) openat(r8, &(0x7f0000000100)='./file0\x00', 0x2, 0x133) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2650.562416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1054 sclass=netlink_route_socket pid=13205 comm=syz-executor.4 10:11:33 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, 0x0) socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000023, 0x0) 10:11:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000024, 0x0) 10:11:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200074001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:11:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 49) 10:11:46 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x3000) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0xc00000000000, 0x1, 0x6) 10:11:46 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x81}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:11:46 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x0, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:11:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e05852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e68852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2664.106299] selinux_netlink_send: 2 callbacks suppressed [ 2664.106314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26654 sclass=netlink_route_socket pid=13246 comm=syz-executor.2 [ 2664.116662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=13249 comm=syz-executor.4 [ 2664.126847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26654 sclass=netlink_route_socket pid=13253 comm=syz-executor.2 [ 2664.129082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=13255 comm=syz-executor.4 10:11:46 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmget(0x3, 0x2000, 0x54000000, &(0x7f0000ffe000/0x2000)=nil) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000040)=""/163) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/50) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) 10:11:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e06852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:11:46 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e6c852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2664.172329] FAULT_INJECTION: forcing a failure. [ 2664.172329] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.175749] CPU: 0 PID: 13243 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2664.177389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.179343] Call Trace: [ 2664.179963] dump_stack+0x107/0x167 [ 2664.180810] should_fail.cold+0x5/0xa [ 2664.181726] ? ip6_setup_cork+0x1e4/0x1740 [ 2664.182710] should_failslab+0x5/0x20 [ 2664.183597] kmem_cache_alloc_trace+0x55/0x320 [ 2664.184666] ip6_setup_cork+0x1e4/0x1740 [ 2664.185624] ? ip6_make_skb+0xdc/0x4e0 [ 2664.186533] ip6_make_skb+0x22d/0x4e0 [ 2664.187419] ? ip_frag_init+0x350/0x350 [ 2664.188347] ? ip6_push_pending_frames+0xf0/0xf0 [ 2664.189452] ? ip6_dst_hoplimit+0x199/0x440 [ 2664.190482] ? lock_downgrade+0x6d0/0x6d0 [ 2664.191450] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2664.192717] udpv6_sendmsg+0x20d0/0x2af0 [ 2664.193669] ? ip_frag_init+0x350/0x350 [ 2664.194601] ? udp_v6_push_pending_frames+0x360/0x360 [ 2664.195804] ? perf_event_task_disable+0x390/0x390 [ 2664.196937] ? lock_downgrade+0x6d0/0x6d0 [ 2664.197910] ? hrtimer_start_range_ns+0x336/0xae0 [ 2664.199035] ? lock_acquire+0x197/0x470 [ 2664.199975] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2664.201219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=13260 comm=syz-executor.4 [ 2664.204032] ? trace_hardirqs_on+0x5b/0x180 [ 2664.205047] ? sock_has_perm+0x1ea/0x280 [ 2664.206005] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2664.207231] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2664.208489] ? trace_hardirqs_on+0x5b/0x180 [ 2664.209266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27678 sclass=netlink_route_socket pid=13259 comm=syz-executor.2 [ 2664.209498] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2664.209537] ? security_socket_sendmsg+0x62/0xb0 [ 2664.213934] ? udp_v6_push_pending_frames+0x360/0x360 [ 2664.214170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1566 sclass=netlink_route_socket pid=13261 comm=syz-executor.4 [ 2664.215139] inet6_sendmsg+0x105/0x140 [ 2664.215160] ? inet6_compat_ioctl+0x320/0x320 [ 2664.215177] sock_sendmsg+0xf2/0x190 [ 2664.215198] ____sys_sendmsg+0x334/0x870 [ 2664.220911] ? trace_hardirqs_on+0x5b/0x180 [ 2664.221925] ? kernel_sendmsg+0x50/0x50 [ 2664.222850] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2664.224109] ? ___sys_sendmsg+0xd2/0x170 [ 2664.225048] ? ___sys_sendmsg+0xdc/0x170 [ 2664.226001] ___sys_sendmsg+0xf3/0x170 [ 2664.226906] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.227968] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2664.229012] ? _raw_spin_unlock_irq+0x27/0x30 [ 2664.230082] ? finish_task_switch+0x1a4/0x5d0 [ 2664.231118] ? __switch_to+0x572/0xf70 [ 2664.232012] ? __switch_to_asm+0x3a/0x60 [ 2664.232941] ? __switch_to_asm+0x34/0x60 [ 2664.233883] ? __schedule+0x82c/0x1ea0 [ 2664.234785] ? io_schedule_timeout+0x140/0x140 [ 2664.235847] __sys_sendmmsg+0x195/0x470 [ 2664.236766] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2664.237774] ? lock_downgrade+0x6d0/0x6d0 [ 2664.238743] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2664.239856] ? wait_for_completion_io+0x270/0x270 [ 2664.240967] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.242044] ? vfs_write+0x354/0xa70 [ 2664.242903] ? fput_many+0x2f/0x1a0 [ 2664.243743] ? ksys_write+0x1a9/0x260 [ 2664.244619] ? __ia32_sys_read+0xb0/0xb0 [ 2664.245570] __x64_sys_sendmmsg+0x99/0x100 [ 2664.246552] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.247738] do_syscall_64+0x33/0x40 [ 2664.248597] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2664.249792] RIP: 0033:0x7fba2f88eb19 [ 2664.250654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.254890] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2664.256634] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2664.258286] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2664.259929] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.261582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.263219] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2664.272477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27678 sclass=netlink_route_socket pid=13262 comm=syz-executor.2 10:12:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 50) 10:12:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x136efe05a84a8e52, 0x2d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:12:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e07852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e74852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000025, 0x0) 10:12:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:12:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20007a001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:02 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x0, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) [ 2679.899982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1822 sclass=netlink_route_socket pid=13288 comm=syz-executor.4 10:12:02 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x6000) mlock2(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) [ 2679.917275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29726 sclass=netlink_route_socket pid=13295 comm=syz-executor.2 [ 2679.933269] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1822 sclass=netlink_route_socket pid=13299 comm=syz-executor.4 [ 2679.949659] FAULT_INJECTION: forcing a failure. [ 2679.949659] name failslab, interval 1, probability 0, space 0, times 0 [ 2679.952001] CPU: 1 PID: 13294 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2679.953388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2679.955055] Call Trace: [ 2679.955600] dump_stack+0x107/0x167 [ 2679.956332] should_fail.cold+0x5/0xa [ 2679.957096] ? create_object.isra.0+0x3a/0xa20 [ 2679.958034] should_failslab+0x5/0x20 [ 2679.958796] kmem_cache_alloc+0x5b/0x310 [ 2679.959611] create_object.isra.0+0x3a/0xa20 [ 2679.960494] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2679.961511] kmem_cache_alloc_trace+0x151/0x320 [ 2679.962465] ip6_setup_cork+0x1e4/0x1740 [ 2679.963287] ip6_make_skb+0x22d/0x4e0 [ 2679.964056] ? ip_frag_init+0x350/0x350 [ 2679.964854] ? ip6_push_pending_frames+0xf0/0xf0 [ 2679.965819] ? ip6_dst_hoplimit+0x199/0x440 [ 2679.966683] ? lock_downgrade+0x6d0/0x6d0 [ 2679.967531] udpv6_sendmsg+0x20d0/0x2af0 [ 2679.968350] ? ip_frag_init+0x350/0x350 [ 2679.969165] ? udp_v6_push_pending_frames+0x360/0x360 [ 2679.970213] ? trace_hardirqs_on+0x5b/0x180 [ 2679.971085] ? lock_acquire+0x197/0x470 [ 2679.971883] ? find_held_lock+0x2c/0x110 [ 2679.972704] ? lock_acquire+0x197/0x470 [ 2679.973495] ? find_held_lock+0x2c/0x110 [ 2679.974333] ? sock_has_perm+0x1ea/0x280 [ 2679.975164] ? __import_iovec+0x458/0x590 [ 2679.975994] ? udp_v6_push_pending_frames+0x360/0x360 [ 2679.977023] inet6_sendmsg+0x105/0x140 [ 2679.977820] ? inet6_compat_ioctl+0x320/0x320 [ 2679.978711] sock_sendmsg+0xf2/0x190 [ 2679.979456] ____sys_sendmsg+0x334/0x870 [ 2679.980266] ? kernel_sendmsg+0x50/0x50 [ 2679.981059] ? do_recvmmsg+0x6d0/0x6d0 [ 2679.981843] ? __lock_acquire+0x1657/0x5b00 [ 2679.982716] ___sys_sendmsg+0xf3/0x170 [ 2679.983494] ? sendmsg_copy_msghdr+0x160/0x160 [ 2679.984402] ? vmacache_find+0x55/0x2a0 [ 2679.985206] ? lock_acquire+0x197/0x470 [ 2679.986014] ? find_held_lock+0x2c/0x110 [ 2679.986830] ? __might_fault+0xd3/0x180 [ 2679.987628] ? lock_downgrade+0x6d0/0x6d0 [ 2679.988457] ? asm_exc_page_fault+0x1e/0x30 [ 2679.989353] __sys_sendmmsg+0x195/0x470 [ 2679.990158] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2679.991035] ? lock_downgrade+0x6d0/0x6d0 [ 2679.991875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2679.992860] ? wait_for_completion_io+0x270/0x270 [ 2679.993830] ? rcu_read_lock_any_held+0x75/0xa0 [ 2679.994776] ? vfs_write+0x354/0xa70 [ 2679.995523] ? fput_many+0x2f/0x1a0 [ 2679.996254] ? ksys_write+0x1a9/0x260 [ 2679.997013] ? __ia32_sys_read+0xb0/0xb0 [ 2679.997846] __x64_sys_sendmmsg+0x99/0x100 [ 2679.998696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2679.999727] do_syscall_64+0x33/0x40 [ 2680.000473] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2680.001498] RIP: 0033:0x7fba2f88eb19 [ 2680.002253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.005933] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2680.007457] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2680.008882] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2680.010319] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.011743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2680.013173] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2680.035739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29726 sclass=netlink_route_socket pid=13309 comm=syz-executor.2 10:12:02 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x0, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) recvfrom(r2, 0x0, 0xffffff7d, 0x0, 0x0, 0x0) 10:12:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200081001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:02 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e7a852e00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e08852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:02 executing program 7: r0 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x3000) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmdt(r0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) 10:12:02 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000026, 0x0) [ 2680.173596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2078 sclass=netlink_route_socket pid=13320 comm=syz-executor.4 [ 2680.189634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2078 sclass=netlink_route_socket pid=13325 comm=syz-executor.4 [ 2680.194899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=13321 comm=syz-executor.2 10:12:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 51) 10:12:02 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200ec0001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2680.254539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=13331 comm=syz-executor.2 10:12:02 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e09852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2680.323663] FAULT_INJECTION: forcing a failure. [ 2680.323663] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.325708] CPU: 1 PID: 13336 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2680.326802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.328091] Call Trace: [ 2680.328513] dump_stack+0x107/0x167 [ 2680.329097] should_fail.cold+0x5/0xa [ 2680.329698] ? create_object.isra.0+0x3a/0xa20 [ 2680.330424] should_failslab+0x5/0x20 [ 2680.331023] kmem_cache_alloc+0x5b/0x310 [ 2680.331317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2334 sclass=netlink_route_socket pid=13339 comm=syz-executor.4 [ 2680.331658] ? lock_downgrade+0x6d0/0x6d0 [ 2680.331685] create_object.isra.0+0x3a/0xa20 [ 2680.335451] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2680.336245] __kmalloc_track_caller+0x177/0x370 [ 2680.336969] ? ip6_setup_cork+0x670/0x1740 [ 2680.337636] kmemdup+0x23/0x50 [ 2680.338151] ip6_setup_cork+0x670/0x1740 [ 2680.338786] ip6_make_skb+0x22d/0x4e0 [ 2680.339383] ? ip_frag_init+0x350/0x350 [ 2680.340005] ? ip6_push_pending_frames+0xf0/0xf0 [ 2680.340747] ? ip6_dst_hoplimit+0x199/0x440 [ 2680.341409] ? lock_downgrade+0x6d0/0x6d0 [ 2680.342065] udpv6_sendmsg+0x20d0/0x2af0 [ 2680.342694] ? ip_frag_init+0x350/0x350 [ 2680.343327] ? udp_v6_push_pending_frames+0x360/0x360 [ 2680.344131] ? lock_acquire+0x197/0x470 [ 2680.344744] ? find_held_lock+0x2c/0x110 [ 2680.345381] ? lock_acquire+0x197/0x470 [ 2680.346018] ? find_held_lock+0x2c/0x110 [ 2680.346685] ? sock_has_perm+0x1ea/0x280 [ 2680.347348] ? __import_iovec+0x458/0x590 [ 2680.347994] ? udp_v6_push_pending_frames+0x360/0x360 [ 2680.348799] inet6_sendmsg+0x105/0x140 [ 2680.349400] ? inet6_compat_ioctl+0x320/0x320 [ 2680.350111] sock_sendmsg+0xf2/0x190 [ 2680.350687] ____sys_sendmsg+0x334/0x870 [ 2680.351321] ? kernel_sendmsg+0x50/0x50 [ 2680.351932] ? do_recvmmsg+0x6d0/0x6d0 [ 2680.352530] ? __lock_acquire+0x1657/0x5b00 [ 2680.353205] ___sys_sendmsg+0xf3/0x170 [ 2680.353829] ? sendmsg_copy_msghdr+0x160/0x160 [ 2680.354535] ? vmacache_find+0x55/0x2a0 [ 2680.355165] ? lock_acquire+0x197/0x470 [ 2680.355786] ? find_held_lock+0x2c/0x110 [ 2680.356425] ? __might_fault+0xd3/0x180 [ 2680.357053] ? lock_downgrade+0x6d0/0x6d0 [ 2680.357709] ? asm_exc_page_fault+0x1e/0x30 [ 2680.358400] __sys_sendmmsg+0x195/0x470 [ 2680.359023] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2680.359697] ? lock_downgrade+0x6d0/0x6d0 [ 2680.360353] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2680.361106] ? wait_for_completion_io+0x270/0x270 [ 2680.361865] ? rcu_read_lock_any_held+0x75/0xa0 [ 2680.362586] ? vfs_write+0x354/0xa70 [ 2680.362694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2334 sclass=netlink_route_socket pid=13341 comm=syz-executor.4 [ 2680.363165] ? fput_many+0x2f/0x1a0 [ 2680.363179] ? ksys_write+0x1a9/0x260 [ 2680.363193] ? __ia32_sys_read+0xb0/0xb0 [ 2680.363218] __x64_sys_sendmmsg+0x99/0x100 [ 2680.368050] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2680.368856] do_syscall_64+0x33/0x40 [ 2680.369432] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2680.370233] RIP: 0033:0x7fba2f88eb19 [ 2680.370815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.373681] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2680.374877] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2680.375987] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2680.377089] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.378206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2680.379310] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2695.052237] FAULT_INJECTION: forcing a failure. [ 2695.052237] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.053514] CPU: 1 PID: 13352 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2695.054266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.055158] Call Trace: [ 2695.055448] dump_stack+0x107/0x167 [ 2695.055842] should_fail.cold+0x5/0xa [ 2695.056255] ? create_object.isra.0+0x3a/0xa20 [ 2695.056745] should_failslab+0x5/0x20 [ 2695.057154] kmem_cache_alloc+0x5b/0x310 [ 2695.057591] ? lock_downgrade+0x6d0/0x6d0 [ 2695.058047] create_object.isra.0+0x3a/0xa20 [ 2695.058523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.059070] __kmalloc_track_caller+0x177/0x370 [ 2695.059847] ? ip6_setup_cork+0x670/0x1740 [ 2695.060300] kmemdup+0x23/0x50 [ 2695.060650] ip6_setup_cork+0x670/0x1740 [ 2695.061099] ip6_make_skb+0x22d/0x4e0 [ 2695.061535] ? ip_frag_init+0x350/0x350 [ 2695.062007] ? ip6_push_pending_frames+0xf0/0xf0 [ 2695.062549] ? ip6_dst_hoplimit+0x199/0x440 [ 2695.063041] ? lock_downgrade+0x6d0/0x6d0 [ 2695.063523] udpv6_sendmsg+0x20d0/0x2af0 [ 2695.063992] ? ip_frag_init+0x350/0x350 [ 2695.064454] ? udp_v6_push_pending_frames+0x360/0x360 [ 2695.065039] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2695.065652] ? trace_hardirqs_on+0x5b/0x180 [ 2695.066143] ? lock_acquire+0x197/0x470 [ 2695.066592] ? find_held_lock+0x2c/0x110 [ 2695.067059] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2695.067664] ? sock_has_perm+0x1ea/0x280 [ 2695.068142] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2695.068748] ? trace_hardirqs_on+0x5b/0x180 [ 2695.069245] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2695.069847] ? udp_v6_push_pending_frames+0x360/0x360 [ 2695.070442] inet6_sendmsg+0x105/0x140 [ 2695.070863] ? inet6_compat_ioctl+0x320/0x320 [ 2695.071326] sock_sendmsg+0xf2/0x190 [ 2695.071726] ____sys_sendmsg+0x334/0x870 [ 2695.072161] ? kernel_sendmsg+0x50/0x50 [ 2695.072594] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.073018] ? __lock_acquire+0x1657/0x5b00 [ 2695.073485] ___sys_sendmsg+0xf3/0x170 [ 2695.073909] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.074440] ? vmacache_find+0x55/0x2a0 [ 2695.074875] ? lock_acquire+0x197/0x470 [ 2695.075307] ? find_held_lock+0x2c/0x110 10:12:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r2, &(0x7f0000000180), &(0x7f0000000240)=@v3={0x3000000, [{0x1, 0x4}, {0x5, 0x4}], r3}, 0x18, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:12:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 52) 10:12:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) [ 2695.075756] ? __might_fault+0xd3/0x180 perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000027, 0x0) 10:12:17 executing program 7: r0 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmdt(r0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000800000/0x800000)=nil, 0x2000) 10:12:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0x0) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00850a00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000f0001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0a852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2695.076319] ? lock_downgrade+0x6d0/0x6d0 [ 2695.076784] ? asm_exc_page_fault+0x1e/0x30 [ 2695.077250] __sys_sendmmsg+0x195/0x470 [ 2695.077673] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2695.078151] ? lapic_timer_set_periodic+0x60/0x60 [ 2695.078701] ? clockevents_program_event+0x131/0x360 [ 2695.079244] ? tick_program_event+0xa8/0x140 [ 2695.079743] ? hrtimer_interrupt+0x771/0x9b0 [ 2695.080217] __x64_sys_sendmmsg+0x99/0x100 [ 2695.080693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.081242] do_syscall_64+0x33/0x40 [ 2695.081657] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2695.082207] RIP: 0033:0x7fba2f88eb19 [ 2695.082625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.084576] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2695.085425] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2695.086208] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2695.087019] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.087786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.088604] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2695.094562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=13365 comm=syz-executor.4 [ 2695.095599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2695.109602] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:12:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852500000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0x0) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:17 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget(0x2, 0x2000, 0x40, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) 10:12:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) 10:12:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0b852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2695.216385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2695.229348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2695.236594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2846 sclass=netlink_route_socket pid=13384 comm=syz-executor.4 [ 2695.249482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2846 sclass=netlink_route_socket pid=13392 comm=syz-executor.4 10:12:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00855f00000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005f00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0c852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 53) [ 2695.314534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=95 sclass=netlink_route_socket pid=13400 comm=syz-executor.6 [ 2695.320505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2695.335065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3102 sclass=netlink_route_socket pid=13402 comm=syz-executor.4 [ 2695.346388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3102 sclass=netlink_route_socket pid=13406 comm=syz-executor.4 [ 2695.369671] FAULT_INJECTION: forcing a failure. [ 2695.369671] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.370952] CPU: 1 PID: 13405 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2695.371686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.372563] Call Trace: [ 2695.372853] dump_stack+0x107/0x167 [ 2695.373248] should_fail.cold+0x5/0xa [ 2695.373662] ? create_object.isra.0+0x3a/0xa20 [ 2695.374160] should_failslab+0x5/0x20 [ 2695.374573] kmem_cache_alloc+0x5b/0x310 [ 2695.375005] ? lock_chain_count+0x20/0x20 [ 2695.375453] create_object.isra.0+0x3a/0xa20 [ 2695.375916] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.376463] kmem_cache_alloc_node+0x169/0x330 [ 2695.376954] __alloc_skb+0x6d/0x5b0 [ 2695.377343] alloc_skb_with_frags+0x92/0x570 [ 2695.377817] sock_alloc_send_pskb+0x7af/0x930 [ 2695.378319] ? sk_alloc+0x350/0x350 [ 2695.378724] ? lock_acquire+0x197/0x470 [ 2695.379149] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2695.379701] ? lock_release+0x680/0x680 [ 2695.380120] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2695.380656] ? ip6_mtu+0x1bb/0x3d0 [ 2695.381036] ? lock_downgrade+0x6d0/0x6d0 [ 2695.381487] ? ip_frag_init+0x350/0x350 [ 2695.381937] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2695.382469] ? ip6_mtu+0x1e9/0x3d0 [ 2695.382865] ? ip6_setup_cork+0xfb7/0x1740 [ 2695.383342] ip6_make_skb+0x2de/0x4e0 [ 2695.383762] ? ip_frag_init+0x350/0x350 [ 2695.384210] ? ip_frag_init+0x350/0x350 [ 2695.384655] ? ip6_push_pending_frames+0xf0/0xf0 [ 2695.385183] ? ip6_dst_hoplimit+0x199/0x440 [ 2695.385663] ? lock_downgrade+0x6d0/0x6d0 [ 2695.386141] udpv6_sendmsg+0x20d0/0x2af0 [ 2695.386599] ? ip_frag_init+0x350/0x350 [ 2695.387048] ? udp_v6_push_pending_frames+0x360/0x360 [ 2695.387623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.388214] ? lock_acquire+0x197/0x470 [ 2695.388640] ? find_held_lock+0x2c/0x110 [ 2695.389096] ? sock_has_perm+0x1ea/0x280 [ 2695.389552] ? __import_iovec+0x458/0x590 [ 2695.390008] ? udp_v6_push_pending_frames+0x360/0x360 [ 2695.390551] inet6_sendmsg+0x105/0x140 [ 2695.390965] ? inet6_compat_ioctl+0x320/0x320 [ 2695.391435] sock_sendmsg+0xf2/0x190 [ 2695.391833] ____sys_sendmsg+0x334/0x870 [ 2695.392261] ? kernel_sendmsg+0x50/0x50 [ 2695.392684] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.393116] ? __lock_acquire+0x1657/0x5b00 [ 2695.393580] ___sys_sendmsg+0xf3/0x170 [ 2695.394026] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.394539] ? vmacache_find+0x55/0x2a0 [ 2695.394990] ? lock_acquire+0x197/0x470 [ 2695.395445] ? find_held_lock+0x2c/0x110 [ 2695.395902] ? __might_fault+0xd3/0x180 [ 2695.396345] ? lock_downgrade+0x6d0/0x6d0 [ 2695.396807] ? asm_exc_page_fault+0x1e/0x30 10:12:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000028, 0x0) 10:12:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3fb, 0x200, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) ioctl$RTC_VL_CLR(r1, 0x7014) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2695.397297] __sys_sendmmsg+0x195/0x470 [ 2695.397910] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2695.398423] ? lock_downgrade+0x6d0/0x6d0 [ 2695.398891] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2695.399430] ? wait_for_completion_io+0x270/0x270 [ 2695.399968] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.400487] ? vfs_write+0x354/0xa70 [ 2695.400905] ? fput_many+0x2f/0x1a0 [ 2695.401309] ? ksys_write+0x1a9/0x260 [ 2695.401734] ? __ia32_sys_read+0xb0/0xb0 [ 2695.402203] __x64_sys_sendmmsg+0x99/0x100 [ 2695.402681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.403253] do_syscall_64+0x33/0x40 [ 2695.403670] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2695.404239] RIP: 0033:0x7fba2f88eb19 [ 2695.404656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.406718] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2695.407564] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2695.408359] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2695.409152] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.409944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.410745] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:12:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007300852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) fsync(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) shutdown(r2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:12:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000029, 0x0) 10:12:33 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000, &(0x7f00000001c0)=0x5, 0x2, 0x4) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) r5 = pidfd_getfd(r4, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd=r6, 0x80000000, &(0x7f0000000140)=[{&(0x7f0000000040)="465d19e1f22aecc5d39b8ecf13a89b7bd5d38a22b8d590bf5c85c89d8c94c74906a5fadf867dafcfeb58d1cb7bc8888b6bbe74c7c39ed92fc29981ca92e29b00e376dacfbe078ef0b820e903e44c5cd7e97dcd376de06f32ad9cacd68601c6797ecb22ad5a255f018d020ceb93ea117b028ff1c1ebf4371086fae774fd3185ec8a081aa5ed6b273fc9eced0b791a5684fba7bb93452b6eee29797fb22f498687d2f20563ec46c2565281e4a71bed1906169a6e222a1dcf7e3c4f14c4ebfca4d5eeceeb0a837785817af6", 0xca}], 0x1, 0x5, 0x0, {0x1, r7}}, 0x3f) 10:12:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0d852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2710.597148] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3358 sclass=netlink_route_socket pid=13435 comm=syz-executor.4 10:12:33 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0x0) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e02000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 54) [ 2710.603718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2710.613822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3358 sclass=netlink_route_socket pid=13438 comm=syz-executor.4 [ 2710.619489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=13436 comm=syz-executor.6 [ 2710.643844] FAULT_INJECTION: forcing a failure. [ 2710.643844] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.646556] CPU: 0 PID: 13431 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2710.647970] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.649622] Call Trace: [ 2710.650176] dump_stack+0x107/0x167 [ 2710.650932] should_fail.cold+0x5/0xa [ 2710.651732] ? create_object.isra.0+0x3a/0xa20 [ 2710.652667] should_failslab+0x5/0x20 [ 2710.653440] kmem_cache_alloc+0x5b/0x310 [ 2710.654291] ? lock_chain_count+0x20/0x20 [ 2710.655134] create_object.isra.0+0x3a/0xa20 [ 2710.656035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2710.657081] kmem_cache_alloc_node+0x169/0x330 [ 2710.658023] __alloc_skb+0x6d/0x5b0 [ 2710.658772] alloc_skb_with_frags+0x92/0x570 [ 2710.659680] sock_alloc_send_pskb+0x7af/0x930 [ 2710.660602] ? sk_alloc+0x350/0x350 [ 2710.661332] ? lock_acquire+0x197/0x470 [ 2710.662144] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2710.663203] ? lock_release+0x680/0x680 [ 2710.664023] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2710.665031] ? ip6_mtu+0x1bb/0x3d0 [ 2710.665747] ? lock_downgrade+0x6d0/0x6d0 [ 2710.666603] ? ip_frag_init+0x350/0x350 [ 2710.667429] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2710.668380] ? ip6_mtu+0x1e9/0x3d0 [ 2710.669108] ? ip6_setup_cork+0xfb7/0x1740 [ 2710.669966] ip6_make_skb+0x2de/0x4e0 [ 2710.670751] ? ip_frag_init+0x350/0x350 [ 2710.671568] ? ip_frag_init+0x350/0x350 [ 2710.672377] ? ip6_push_pending_frames+0xf0/0xf0 [ 2710.673350] ? ip6_dst_hoplimit+0x199/0x440 [ 2710.674251] ? lock_downgrade+0x6d0/0x6d0 [ 2710.675128] udpv6_sendmsg+0x20d0/0x2af0 [ 2710.675961] ? ip_frag_init+0x350/0x350 [ 2710.676775] ? udp_v6_push_pending_frames+0x360/0x360 [ 2710.677841] ? perf_event_task_disable+0x390/0x390 [ 2710.678851] ? lock_downgrade+0x6d0/0x6d0 [ 2710.679700] ? hrtimer_start_range_ns+0x336/0xae0 [ 2710.680690] ? lock_acquire+0x197/0x470 [ 2710.681506] ? find_held_lock+0x2c/0x110 [ 2710.682370] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2710.683481] ? sock_has_perm+0x1ea/0x280 [ 2710.684333] ? __import_iovec+0x458/0x590 [ 2710.685184] ? udp_v6_push_pending_frames+0x360/0x360 [ 2710.686253] inet6_sendmsg+0x105/0x140 10:12:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0e852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2710.687052] ? inet6_compat_ioctl+0x320/0x320 [ 2710.688099] sock_sendmsg+0xf2/0x190 [ 2710.688855] ____sys_sendmsg+0x334/0x870 [ 2710.689669] ? kernel_sendmsg+0x50/0x50 [ 2710.690471] ? do_recvmmsg+0x6d0/0x6d0 [ 2710.691284] ? __lock_acquire+0x1657/0x5b00 [ 2710.692167] ___sys_sendmsg+0xf3/0x170 [ 2710.692974] ? sendmsg_copy_msghdr+0x160/0x160 [ 2710.693892] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2710.694823] ? _raw_spin_unlock_irq+0x27/0x30 [ 2710.695724] ? lock_acquire+0x197/0x470 [ 2710.696543] ? find_held_lock+0x2c/0x110 [ 2710.697359] ? __might_fault+0xd3/0x180 [ 2710.698150] ? lock_downgrade+0x6d0/0x6d0 [ 2710.698994] ? io_schedule_timeout+0x140/0x140 [ 2710.699922] __sys_sendmmsg+0x195/0x470 [ 2710.700719] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2710.701580] ? lock_downgrade+0x6d0/0x6d0 [ 2710.702430] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2710.703393] ? wait_for_completion_io+0x270/0x270 [ 2710.704353] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.705273] ? vfs_write+0x354/0xa70 [ 2710.706021] ? fput_many+0x2f/0x1a0 [ 2710.706756] ? ksys_write+0x1a9/0x260 [ 2710.707516] ? __ia32_sys_read+0xb0/0xb0 [ 2710.708335] __x64_sys_sendmmsg+0x99/0x100 [ 2710.709178] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.710220] do_syscall_64+0x33/0x40 [ 2710.710964] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2710.711986] RIP: 0033:0x7fba2f88eb19 [ 2710.712729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.716385] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2710.717894] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2710.719319] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 10:12:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) sendto(r1, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r3, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(r4, &(0x7f00000001c0)="e507112202f7ebae346b2a7642971656b4efab4465c8b5a3e96372e103e12980580011176189084ca8899015fb1ef04bfe835a219d8ffe715b0f7d61367c2f4eb09ec9025b649bbf76b61a1cccbcee92ee4c881565f8d27a772650037426df16ecf1e684b97b20e24000634410a5afd02c8ddba2962c5dc8d08db1988636ec2e881b754ddfa1cfbe39a429d08709", 0x8e, 0x90, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x5) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x44000) [ 2710.720736] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.722243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.723663] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2710.755510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3614 sclass=netlink_route_socket pid=13448 comm=syz-executor.4 [ 2710.776247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3614 sclass=netlink_route_socket pid=13451 comm=syz-executor.4 10:12:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200002001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e03000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:33 executing program 0: socket$inet(0xa, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:33 executing program 7: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) vmsplice(r0, &(0x7f0000001340)=[{&(0x7f00000013c0)="eacb767b045204561a65988a95fcc1ecdb6d57f79b89a2bfdcfa16761fc9c8ad0e0e95b0d01b4f9dbc6ad38f3b382c8dce28cb22773542f21160bdba5808c8fc97381ac71a2be7c486a461bc8817a8e696aca45eda839a8a99278857ad60a53b43ec3405edcdb88383860a389ec7ccb660df8ab39ee05dd551885911e6ece06818bcf04cc2ef5c6a27019ec8bc39cc56e023cafa917e45c85f2903ab2739382dff9ee712745fbad76bd60314e50306351092f9a115f8fc0f47cc321bd8677bb3dce37a711386c27c5625f1f4aeba2abc7514819867c416b42679f743789e", 0xde}, {&(0x7f00000000c0)="c909ddd343e5a89ee024728b487c3ab679281331b0f2920d2ce7764e1623a05410dea883630bfda06fe486c9526d0573fc62bb56ebc948b4dc0947dd655af0927db4c3385b8d9460a874b967c2ab8c26555bec3409cf3ffa24fd0b6ba5f279443cc63a72a79e848e450c58695b643fc8cb9b87e363cdf4016e6f0d10ff378acc35d6a738c8e692f7f612", 0x8a}, {&(0x7f0000000180)="0729bfbb4023f6e186faeba3baa69a00ff73a1003afd22b3b087ddf0b2be0d750b45814d547a0f38b5b51b1ddb5b1990540cd09f3011b297ca1b9a5680b3796e87e5aff2b2ef810e6529b6c7c11f25c2b483d4494fd2353c540765bf28d3180e962a30124f6f024be9677012ec8582ffd4dd70e573aa33befc098fb8c2dec207b06966436cd4b44026c21cf8c7098b908d209239bb7b9b0ce8a500600d357316638557e8af2f9bc5afcee73f4c84f37976f87d4ff406ac", 0xb7}, {&(0x7f0000000240)="144e95e6a922ec55a9b4eaaa6dea0b32c8bae886b702026d0fc11dc0bbe0be3b6ca19bbe45194de4b4d0274019d76d6486c9c0e8bd7b711bd53aa259b8f19d416c9dfa48c75cb67df17e259da886ba95058d3a058df1a9c70c97b70591a9f2bcd187289513a9ba52d037106c520966f52a4b600b606fcc8f892ff3849deafb4c4a06e951d71de25863eb04c89c47948b0776c3d8ab15f72aa58cecc966a1d82ed6c4d656cff6de032190b423617174809533e7f3f58f44d91d41720d295b54b263074b064c9d2abba2f78ad467bbd5a5ef2565663d9c8b4bf4006bf42b62a0ccfd5fe5fc0e795e46a416c0c6b439", 0xee}, {&(0x7f0000000340)="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", 0x1000}], 0x5, 0x9) 10:12:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002a, 0x0) [ 2710.924733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2710.952707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:12:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002b, 0x0) 10:12:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0f852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200003001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:48 executing program 0: socket$inet(0xa, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:12:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x2004, 0x0, 0x0, 0x8}, 0x0, 0x0, r2, 0x2) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:12:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 55) 10:12:48 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x6, &(0x7f0000ffe000/0x1000)=nil) 10:12:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e04000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2725.592072] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3870 sclass=netlink_route_socket pid=13486 comm=syz-executor.4 [ 2725.605354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2725.610628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3870 sclass=netlink_route_socket pid=13495 comm=syz-executor.4 [ 2725.623389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2725.633419] FAULT_INJECTION: forcing a failure. [ 2725.633419] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.635812] CPU: 0 PID: 13487 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2725.637201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.638862] Call Trace: [ 2725.639409] dump_stack+0x107/0x167 [ 2725.640139] should_fail.cold+0x5/0xa [ 2725.640947] should_failslab+0x5/0x20 [ 2725.641727] __kmalloc_node_track_caller+0x74/0x3b0 [ 2725.642729] ? alloc_skb_with_frags+0x92/0x570 [ 2725.643664] __alloc_skb+0xb1/0x5b0 [ 2725.644390] alloc_skb_with_frags+0x92/0x570 [ 2725.645270] sock_alloc_send_pskb+0x7af/0x930 [ 2725.646189] ? sk_alloc+0x350/0x350 [ 2725.646963] ? lock_acquire+0x197/0x470 [ 2725.647782] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2725.648818] ? lock_release+0x680/0x680 [ 2725.649619] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2725.650626] ? ip6_mtu+0x1bb/0x3d0 [ 2725.651330] ? lock_downgrade+0x6d0/0x6d0 [ 2725.652147] ? ip_frag_init+0x350/0x350 [ 2725.652938] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2725.653860] ? ip6_mtu+0x1e9/0x3d0 [ 2725.654588] ? ip6_setup_cork+0xfb7/0x1740 [ 2725.655425] ip6_make_skb+0x2de/0x4e0 [ 2725.656171] ? ip_frag_init+0x350/0x350 [ 2725.656964] ? ip_frag_init+0x350/0x350 [ 2725.657751] ? ip6_push_pending_frames+0xf0/0xf0 [ 2725.658698] ? ip6_dst_hoplimit+0x199/0x440 [ 2725.659547] ? lock_downgrade+0x6d0/0x6d0 [ 2725.660380] udpv6_sendmsg+0x20d0/0x2af0 [ 2725.661183] ? ip_frag_init+0x350/0x350 [ 2725.661976] ? udp_v6_push_pending_frames+0x360/0x360 [ 2725.663027] ? trace_hardirqs_on+0x5b/0x180 [ 2725.663889] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2725.664963] ? lock_acquire+0x197/0x470 [ 2725.665744] ? find_held_lock+0x2c/0x110 [ 2725.666581] ? sock_has_perm+0x1ea/0x280 [ 2725.667435] ? __import_iovec+0x458/0x590 [ 2725.668290] ? udp_v6_push_pending_frames+0x360/0x360 [ 2725.669324] inet6_sendmsg+0x105/0x140 [ 2725.670106] ? inet6_compat_ioctl+0x320/0x320 [ 2725.671021] sock_sendmsg+0xf2/0x190 [ 2725.671788] ____sys_sendmsg+0x334/0x870 [ 2725.672626] ? kernel_sendmsg+0x50/0x50 [ 2725.673440] ? do_recvmmsg+0x6d0/0x6d0 [ 2725.674217] ? __lock_acquire+0x1657/0x5b00 [ 2725.675098] ___sys_sendmsg+0xf3/0x170 [ 2725.675874] ? sendmsg_copy_msghdr+0x160/0x160 [ 2725.676779] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2725.677661] ? _raw_spin_unlock_irq+0x27/0x30 [ 2725.678556] ? lock_acquire+0x197/0x470 [ 2725.679339] ? find_held_lock+0x2c/0x110 [ 2725.680143] ? __might_fault+0xd3/0x180 [ 2725.680929] ? lock_downgrade+0x6d0/0x6d0 [ 2725.681743] ? io_schedule_timeout+0x140/0x140 [ 2725.682668] __sys_sendmmsg+0x195/0x470 [ 2725.683469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2725.684321] ? lock_downgrade+0x6d0/0x6d0 [ 2725.685153] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2725.686107] ? wait_for_completion_io+0x270/0x270 [ 2725.687073] ? rcu_read_lock_any_held+0x75/0xa0 [ 2725.687986] ? vfs_write+0x354/0xa70 [ 2725.688728] ? fput_many+0x2f/0x1a0 [ 2725.689449] ? ksys_write+0x1a9/0x260 [ 2725.690198] ? __ia32_sys_read+0xb0/0xb0 [ 2725.691011] __x64_sys_sendmmsg+0x99/0x100 [ 2725.691848] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.692865] do_syscall_64+0x33/0x40 [ 2725.693601] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2725.694616] RIP: 0033:0x7fba2f88eb19 [ 2725.695351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.699006] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2725.700525] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2725.701929] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2725.703354] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2725.704885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2725.706321] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:12:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e05000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:12:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200004001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:12:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e48852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:48 executing program 0: socket$inet(0xa, 0x3, 0xff) syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(0xffffffffffffffff, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) [ 2725.772389] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18462 sclass=netlink_route_socket pid=13502 comm=syz-executor.4 [ 2725.777727] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:12:48 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000001000)) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/4096) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) [ 2725.811340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2725.819595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18462 sclass=netlink_route_socket pid=13514 comm=syz-executor.4 10:12:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002c, 0x0) 10:12:48 executing program 7: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00614df65b3d8b000000800000ffffff7f7138e296b18a1e"]) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:12:48 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e4c852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:12:48 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e06000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2726.005532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2726.011711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19486 sclass=netlink_route_socket pid=13528 comm=syz-executor.4 [ 2726.022351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19486 sclass=netlink_route_socket pid=13530 comm=syz-executor.4 [ 2726.025433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:00 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002d, 0x0) 10:13:00 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e07000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x80) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc819a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2738.275891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26654 sclass=netlink_route_socket pid=13543 comm=syz-executor.4 10:13:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 56) 10:13:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e68852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:00 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, 0x0, 0x0, 0x6c00) [ 2738.288913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26654 sclass=netlink_route_socket pid=13548 comm=syz-executor.4 [ 2738.294887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:00 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200005001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2738.304818] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:00 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, 0x0, 0x0, 0x6c00) 10:13:00 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e6c852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2738.348899] FAULT_INJECTION: forcing a failure. [ 2738.348899] name failslab, interval 1, probability 0, space 0, times 0 [ 2738.351771] CPU: 0 PID: 13553 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2738.353334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2738.355192] Call Trace: [ 2738.355792] dump_stack+0x107/0x167 [ 2738.356611] should_fail.cold+0x5/0xa [ 2738.357458] ? create_object.isra.0+0x3a/0xa20 [ 2738.358473] should_failslab+0x5/0x20 [ 2738.359325] kmem_cache_alloc+0x5b/0x310 [ 2738.360231] create_object.isra.0+0x3a/0xa20 [ 2738.361207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2738.362334] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2738.363466] ? alloc_skb_with_frags+0x92/0x570 [ 2738.364419] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27678 sclass=netlink_route_socket pid=13563 comm=syz-executor.4 [ 2738.364466] __alloc_skb+0xb1/0x5b0 [ 2738.366476] alloc_skb_with_frags+0x92/0x570 [ 2738.367472] sock_alloc_send_pskb+0x7af/0x930 [ 2738.368469] ? sk_alloc+0x350/0x350 [ 2738.369270] ? lock_acquire+0x197/0x470 [ 2738.370147] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2738.371313] ? lock_release+0x680/0x680 [ 2738.372207] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2738.372362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27678 sclass=netlink_route_socket pid=13564 comm=syz-executor.4 [ 2738.373320] ? ip6_mtu+0x1bb/0x3d0 [ 2738.373342] ? lock_downgrade+0x6d0/0x6d0 [ 2738.376219] ? ip_frag_init+0x350/0x350 [ 2738.377115] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2738.378141] ? ip6_mtu+0x1e9/0x3d0 [ 2738.378936] ? ip6_setup_cork+0xfb7/0x1740 [ 2738.379882] ip6_make_skb+0x2de/0x4e0 [ 2738.380711] ? ip_frag_init+0x350/0x350 [ 2738.381589] ? ip_frag_init+0x350/0x350 [ 2738.382459] ? ip6_push_pending_frames+0xf0/0xf0 [ 2738.383513] ? ip6_dst_hoplimit+0x199/0x440 [ 2738.384466] ? lock_downgrade+0x6d0/0x6d0 [ 2738.385392] udpv6_sendmsg+0x20d0/0x2af0 [ 2738.386295] ? ip_frag_init+0x350/0x350 [ 2738.387195] ? udp_v6_push_pending_frames+0x360/0x360 [ 2738.388322] ? lock_acquire+0x197/0x470 [ 2738.389185] ? find_held_lock+0x2c/0x110 [ 2738.390073] ? lock_acquire+0x197/0x470 [ 2738.390952] ? find_held_lock+0x2c/0x110 [ 2738.391858] ? sock_has_perm+0x1ea/0x280 [ 2738.392767] ? __import_iovec+0x458/0x590 [ 2738.393673] ? udp_v6_push_pending_frames+0x360/0x360 [ 2738.394807] inet6_sendmsg+0x105/0x140 [ 2738.395658] ? inet6_compat_ioctl+0x320/0x320 [ 2738.396629] sock_sendmsg+0xf2/0x190 [ 2738.397439] ____sys_sendmsg+0x334/0x870 [ 2738.398325] ? kernel_sendmsg+0x50/0x50 [ 2738.399198] ? do_recvmmsg+0x6d0/0x6d0 [ 2738.400057] ? __lock_acquire+0x1657/0x5b00 [ 2738.401011] ___sys_sendmsg+0xf3/0x170 [ 2738.401848] ? sendmsg_copy_msghdr+0x160/0x160 [ 2738.402869] ? lock_acquire+0x197/0x470 [ 2738.403727] ? find_held_lock+0x2c/0x110 [ 2738.404603] ? __might_fault+0xd3/0x180 [ 2738.405460] ? lock_downgrade+0x6d0/0x6d0 [ 2738.406358] ? asm_exc_page_fault+0x1e/0x30 [ 2738.407330] __sys_sendmmsg+0x195/0x470 [ 2738.408190] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2738.409108] ? lock_downgrade+0x6d0/0x6d0 [ 2738.410007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2738.411060] ? wait_for_completion_io+0x270/0x270 [ 2738.412093] ? rcu_read_lock_any_held+0x75/0xa0 [ 2738.413095] ? vfs_write+0x354/0xa70 [ 2738.413895] ? fput_many+0x2f/0x1a0 [ 2738.414683] ? ksys_write+0x1a9/0x260 [ 2738.415499] ? __ia32_sys_read+0xb0/0xb0 [ 2738.416359] __x64_sys_sendmmsg+0x99/0x100 [ 2738.417269] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2738.418354] do_syscall_64+0x33/0x40 [ 2738.419157] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2738.420236] RIP: 0033:0x7fba2f88eb19 [ 2738.421023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2738.424961] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2738.426581] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2738.428091] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2738.429603] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2738.431144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2738.432666] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:13:16 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, 0x0, 0x0, 0x6c00) 10:13:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 57) 10:13:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002e, 0x0) 10:13:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200006001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:16 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e74852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:16 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e08000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:16 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffe000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x1000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:16 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x2a, 0x25117912f38a7baf, 0x8) sendto$inet(r1, &(0x7f00000000c0)="7474970188a8438643caded25f1f71aa38e37a97f161e44554", 0x19, 0x4000, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2754.427375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29726 sclass=netlink_route_socket pid=13583 comm=syz-executor.4 [ 2754.430782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2754.460833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2754.462534] FAULT_INJECTION: forcing a failure. [ 2754.462534] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.465445] CPU: 1 PID: 13576 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2754.466847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2754.468481] Call Trace: [ 2754.469018] dump_stack+0x107/0x167 [ 2754.469743] should_fail.cold+0x5/0xa [ 2754.470503] ? __alloc_skb+0x6d/0x5b0 [ 2754.471277] should_failslab+0x5/0x20 [ 2754.472036] kmem_cache_alloc_node+0x55/0x330 [ 2754.472925] __alloc_skb+0x6d/0x5b0 [ 2754.473653] alloc_skb_with_frags+0x92/0x570 [ 2754.474541] sock_alloc_send_pskb+0x7af/0x930 [ 2754.475480] ? sk_alloc+0x350/0x350 [ 2754.476206] ? lock_acquire+0x197/0x470 [ 2754.476995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2754.478033] ? lock_release+0x680/0x680 [ 2754.478619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29726 sclass=netlink_route_socket pid=13592 comm=syz-executor.4 [ 2754.478841] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2754.478872] ? ip6_mtu+0x1bb/0x3d0 [ 2754.483009] ? lock_downgrade+0x6d0/0x6d0 [ 2754.483829] ? ip_frag_init+0x350/0x350 [ 2754.484634] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2754.485567] ? ip6_mtu+0x1e9/0x3d0 [ 2754.486284] ? ip6_setup_cork+0xfb7/0x1740 [ 2754.487134] ip6_make_skb+0x2de/0x4e0 [ 2754.487889] ? ip_frag_init+0x350/0x350 [ 2754.488685] ? ip_frag_init+0x350/0x350 [ 2754.489478] ? ip6_push_pending_frames+0xf0/0xf0 [ 2754.490419] ? ip6_dst_hoplimit+0x199/0x440 [ 2754.491280] ? lock_downgrade+0x6d0/0x6d0 [ 2754.492119] udpv6_sendmsg+0x20d0/0x2af0 [ 2754.492932] ? ip_frag_init+0x350/0x350 [ 2754.493731] ? udp_v6_push_pending_frames+0x360/0x360 [ 2754.494782] ? lock_acquire+0x197/0x470 [ 2754.495582] ? find_held_lock+0x2c/0x110 [ 2754.496396] ? lock_acquire+0x197/0x470 [ 2754.497187] ? find_held_lock+0x2c/0x110 [ 2754.498014] ? sock_has_perm+0x1ea/0x280 [ 2754.498857] ? __import_iovec+0x458/0x590 [ 2754.499679] ? udp_v6_push_pending_frames+0x360/0x360 [ 2754.500704] inet6_sendmsg+0x105/0x140 [ 2754.501478] ? inet6_compat_ioctl+0x320/0x320 [ 2754.502365] sock_sendmsg+0xf2/0x190 [ 2754.503120] ____sys_sendmsg+0x334/0x870 [ 2754.503925] ? kernel_sendmsg+0x50/0x50 [ 2754.504709] ? do_recvmmsg+0x6d0/0x6d0 [ 2754.505484] ? __lock_acquire+0x1657/0x5b00 [ 2754.506357] ___sys_sendmsg+0xf3/0x170 [ 2754.507143] ? sendmsg_copy_msghdr+0x160/0x160 [ 2754.508045] ? vmacache_find+0x55/0x2a0 [ 2754.508845] ? lock_acquire+0x197/0x470 [ 2754.509631] ? find_held_lock+0x2c/0x110 [ 2754.510440] ? __might_fault+0xd3/0x180 [ 2754.511237] ? lock_downgrade+0x6d0/0x6d0 [ 2754.512062] ? asm_exc_page_fault+0x1e/0x30 [ 2754.512938] __sys_sendmmsg+0x195/0x470 [ 2754.513743] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2754.514600] ? lock_downgrade+0x6d0/0x6d0 [ 2754.515472] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2754.516442] ? wait_for_completion_io+0x270/0x270 [ 2754.517445] ? rcu_read_lock_any_held+0x75/0xa0 [ 2754.518367] ? vfs_write+0x354/0xa70 [ 2754.519130] ? fput_many+0x2f/0x1a0 [ 2754.519857] ? ksys_write+0x1a9/0x260 [ 2754.520626] ? __ia32_sys_read+0xb0/0xb0 [ 2754.521441] __x64_sys_sendmmsg+0x99/0x100 [ 2754.522304] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2754.523342] do_syscall_64+0x33/0x40 [ 2754.524094] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2754.525111] RIP: 0033:0x7fba2f88eb19 [ 2754.525878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2754.529847] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2754.531488] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2754.533016] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2754.534545] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2754.536088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2754.537615] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:13:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e09000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e7a852e0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x0) 10:13:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x1b) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2754.606528] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200007001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2754.631768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2754.643459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=13600 comm=syz-executor.4 10:13:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000002f, 0x0) 10:13:17 executing program 7: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x4, 0xc1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/7) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) 10:13:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0a000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2754.706600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31262 sclass=netlink_route_socket pid=13606 comm=syz-executor.4 10:13:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x0) [ 2754.787399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2754.816368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:29 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x0) 10:13:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = gettid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1048, 0x20, 0x200, 0x70bd2a, 0x25dfdbfd, {0x12}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x2a, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x6f, 0x0, 0x0, @fd=r0}, @nested={0xc, 0x1d, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r1}]}, @typed={0x1004, 0x93, 0x0, 0x0, @binary="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"}]}, 0x1048}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:13:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000030, 0x0) 10:13:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00850a0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0b000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 58) 10:13:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200008001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:29 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x7c7a19f1321f691) shmget(0x1, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) [ 2767.153787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2767.166617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2767.171725] FAULT_INJECTION: forcing a failure. [ 2767.171725] name failslab, interval 1, probability 0, space 0, times 0 10:13:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x840) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x20, 0x7c, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2767.173030] CPU: 1 PID: 13648 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2767.173956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.174876] Call Trace: [ 2767.175197] dump_stack+0x107/0x167 [ 2767.175619] should_fail.cold+0x5/0xa [ 2767.176059] ? ip6_setup_cork+0x1e4/0x1740 [ 2767.176536] should_failslab+0x5/0x20 [ 2767.176959] kmem_cache_alloc_trace+0x55/0x320 [ 2767.177475] ip6_setup_cork+0x1e4/0x1740 [ 2767.177937] ip6_make_skb+0x22d/0x4e0 [ 2767.178362] ? ip_frag_init+0x350/0x350 [ 2767.178808] ? ip6_push_pending_frames+0xf0/0xf0 [ 2767.179347] ? ip6_dst_hoplimit+0x199/0x440 [ 2767.179827] ? lock_downgrade+0x6d0/0x6d0 [ 2767.180298] udpv6_sendmsg+0x20d0/0x2af0 [ 2767.180753] ? ip_frag_init+0x350/0x350 [ 2767.181199] ? udp_v6_push_pending_frames+0x360/0x360 [ 2767.181777] ? perf_event_task_disable+0x390/0x390 [ 2767.182327] ? lock_downgrade+0x6d0/0x6d0 [ 2767.182797] ? hrtimer_start_range_ns+0x336/0xae0 [ 2767.183353] ? lock_acquire+0x197/0x470 [ 2767.183792] ? find_held_lock+0x2c/0x110 [ 2767.184252] ? sock_has_perm+0x1ea/0x280 [ 2767.184715] ? __import_iovec+0x458/0x590 [ 2767.185180] ? udp_v6_push_pending_frames+0x360/0x360 [ 2767.185752] inet6_sendmsg+0x105/0x140 [ 2767.186187] ? inet6_compat_ioctl+0x320/0x320 [ 2767.186687] sock_sendmsg+0xf2/0x190 [ 2767.187115] ____sys_sendmsg+0x334/0x870 [ 2767.187568] ? kernel_sendmsg+0x50/0x50 [ 2767.188013] ? do_recvmmsg+0x6d0/0x6d0 [ 2767.188444] ? __lock_acquire+0x1657/0x5b00 [ 2767.188949] ___sys_sendmsg+0xf3/0x170 [ 2767.189388] ? sendmsg_copy_msghdr+0x160/0x160 [ 2767.189906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.189937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2767.190493] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2767.190516] ? trace_hardirqs_on+0x5b/0x180 [ 2767.193205] ? lock_acquire+0x197/0x470 [ 2767.193650] ? find_held_lock+0x2c/0x110 [ 2767.194115] ? __might_fault+0xd3/0x180 [ 2767.194556] ? lock_downgrade+0x6d0/0x6d0 [ 2767.195038] ? io_schedule_timeout+0x140/0x140 [ 2767.195556] __sys_sendmmsg+0x195/0x470 [ 2767.196007] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2767.196484] ? lock_downgrade+0x6d0/0x6d0 [ 2767.196953] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2767.197504] ? wait_for_completion_io+0x270/0x270 [ 2767.198047] ? rcu_read_lock_any_held+0x75/0xa0 [ 2767.198573] ? vfs_write+0x354/0xa70 [ 2767.199000] ? fput_many+0x2f/0x1a0 [ 2767.199407] ? ksys_write+0x1a9/0x260 [ 2767.199832] ? __ia32_sys_read+0xb0/0xb0 [ 2767.200285] __x64_sys_sendmmsg+0x99/0x100 [ 2767.200764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.201349] do_syscall_64+0x33/0x40 [ 2767.201771] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2767.202351] RIP: 0033:0x7fba2f88eb19 [ 2767.202776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.204841] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2767.205697] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2767.206500] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2767.207318] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.208112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2767.208906] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2767.222443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200009001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:29 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x43c, 0x3a, 0x4) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e0085250000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000031, 0x0) 10:13:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 59) 10:13:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0c000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2767.330358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000a001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:29 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000)=0x4, 0xc1, 0x0) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000040)=""/7) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x64) 10:13:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000140), &(0x7f0000000180)=0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000100)={0x40, 0x58}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) 10:13:29 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) [ 2767.391437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2767.414702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2767.415304] FAULT_INJECTION: forcing a failure. [ 2767.415304] name failslab, interval 1, probability 0, space 0, times 0 [ 2767.418133] CPU: 1 PID: 13675 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2767.418914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2767.419809] Call Trace: [ 2767.420111] dump_stack+0x107/0x167 [ 2767.420517] should_fail.cold+0x5/0xa [ 2767.420936] should_failslab+0x5/0x20 [ 2767.421346] __kmalloc_track_caller+0x79/0x370 [ 2767.421840] ? ip6_setup_cork+0x670/0x1740 [ 2767.422307] kmemdup+0x23/0x50 [ 2767.422655] ip6_setup_cork+0x670/0x1740 [ 2767.423119] ip6_make_skb+0x22d/0x4e0 [ 2767.423529] ? ip_frag_init+0x350/0x350 [ 2767.423990] ? ip6_push_pending_frames+0xf0/0xf0 [ 2767.424497] ? ip6_dst_hoplimit+0x199/0x440 [ 2767.424984] ? lock_downgrade+0x6d0/0x6d0 [ 2767.425460] udpv6_sendmsg+0x20d0/0x2af0 [ 2767.425919] ? ip_frag_init+0x350/0x350 [ 2767.426364] ? udp_v6_push_pending_frames+0x360/0x360 [ 2767.426948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2767.427540] ? lock_acquire+0x197/0x470 [ 2767.427989] ? find_held_lock+0x2c/0x110 [ 2767.428433] ? sock_has_perm+0x1ea/0x280 [ 2767.428906] ? __import_iovec+0x458/0x590 [ 2767.429350] ? udp_v6_push_pending_frames+0x360/0x360 [ 2767.429933] inet6_sendmsg+0x105/0x140 [ 2767.430365] ? inet6_compat_ioctl+0x320/0x320 [ 2767.430859] sock_sendmsg+0xf2/0x190 [ 2767.431303] ____sys_sendmsg+0x334/0x870 [ 2767.431763] ? kernel_sendmsg+0x50/0x50 [ 2767.432201] ? do_recvmmsg+0x6d0/0x6d0 [ 2767.432631] ? __lock_acquire+0x1657/0x5b00 [ 2767.433114] ___sys_sendmsg+0xf3/0x170 [ 2767.433545] ? sendmsg_copy_msghdr+0x160/0x160 [ 2767.434049] ? vmacache_find+0x55/0x2a0 [ 2767.434494] ? lock_acquire+0x197/0x470 [ 2767.434945] ? find_held_lock+0x2c/0x110 [ 2767.435413] ? __might_fault+0xd3/0x180 [ 2767.435856] ? lock_downgrade+0x6d0/0x6d0 [ 2767.436324] __sys_sendmmsg+0x195/0x470 [ 2767.436767] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2767.437244] ? lock_downgrade+0x6d0/0x6d0 [ 2767.437713] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2767.438250] ? wait_for_completion_io+0x270/0x270 [ 2767.438786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2767.439315] ? vfs_write+0x354/0xa70 [ 2767.439729] ? fput_many+0x2f/0x1a0 [ 2767.440132] ? ksys_write+0x1a9/0x260 [ 2767.440553] ? __ia32_sys_read+0xb0/0xb0 [ 2767.441008] __x64_sys_sendmmsg+0x99/0x100 [ 2767.441477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2767.442049] do_syscall_64+0x33/0x40 [ 2767.442460] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2767.443046] RIP: 0033:0x7fba2f88eb19 [ 2767.443460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2767.445506] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2767.446351] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2767.447156] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2767.447949] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2767.448743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2767.449531] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:13:29 executing program 7: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000b001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:29 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000032, 0x0) 10:13:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000000c0)={r0, 0x1000, 0x6, 0x100000000}) sendto$inet(r2, &(0x7f0000000100)="39ebb75439f0f34cd9b9868a054672c1b41e5d59631a771cf966032a5608a5cd77dbf46ea7b242bbbba23659d8226b156645ad38751be860341256440a56de27676e7844204c907aed85b01bb6afa78001c1ed094c4e9aeb74ee4a6558e38c1ea1ac7fd01cee2194103be13691b0e00027218f748d849b71bea3058c377f18fe27595b7aab7cc9a20570c022e7627f5b4990c9bc44d34d97985cbc3d082f63039bc353c0197038d84aee7b8e306fd010ef7bbaeab7866f06e56fd7a339c56ab895b1fd582b7f2c7cb036053a680f0af3628c0a34812a91ec27dd7562f95705e53245", 0xe2, 0x20000000, &(0x7f0000000200)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000001d80)={0x5, 0xffffffa2, 0x74, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xb77c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000280), 0x6, 0x80000) setsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000340)="5d5349e1996dce2554edda89683c018ad4ed2faeaa9347ed234c1f59b90694b0c5370e8fc3d09461139324d1b15227fc041499eb1d6a155b6494526aa88610309c222f8f330881be542f5852691eadd4c5a740a12fac1d2e06b4fcae0e198b3a3134a2535ebb90eed414eb3529f578c23058076c574e20ca3ee308aa7e1fb52dc389294a9d0d795fd15d00a0ac94d14e15840a7e00c5928d28fbd019807fdc7d5641917a5306a0266d183f1bfda963763e65be9ede", 0xb5) fcntl$dupfd(r3, 0x0, r4) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) 10:13:29 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00855f0000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0d000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2767.522387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2767.544677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r3, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x5) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x40, 0x9, 0x6, 0x0, 0x3, 0x2000c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x100, 0x7}, 0x11888, 0x8, 0x100, 0x2, 0x3f, 0xa585, 0xf782, 0x0, 0xffffe8c0, 0x0, 0x7fffffff}, r2, 0xc, r3, 0x8) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:13:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000033, 0x0) 10:13:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0e000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2767.588495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:30 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmget(0x3, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) 10:13:43 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0xc8222f3dc95091cc, &(0x7f0000ffb000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) 10:13:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000034, 0x0) 10:13:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000000c0)={0x0, 0xea60}, 0x10) readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f00000000c0)="9e", 0x1) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:13:43 executing program 0: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '^:+,,\xd9-\x00'}, @NLBL_MGMT_A_FAMILY={0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x70}}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0xb93, &(0x7f0000000040), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000000080), 0x4) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000002100)=""/4095, 0xfff, 0x6) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffc000/0x2000)=nil) r2 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) [ 2781.314250] __nla_validate_parse: 3 callbacks suppressed [ 2781.314258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0f000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 60) 10:13:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0200000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2781.323236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2781.326690] FAULT_INJECTION: forcing a failure. [ 2781.326690] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.328237] CPU: 1 PID: 13730 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2781.328971] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.329849] Call Trace: [ 2781.330138] dump_stack+0x107/0x167 [ 2781.330528] should_fail.cold+0x5/0xa [ 2781.330942] should_failslab+0x5/0x20 [ 2781.331361] __kmalloc_track_caller+0x79/0x370 [ 2781.331857] ? ip6_setup_cork+0x670/0x1740 [ 2781.332312] kmemdup+0x23/0x50 [ 2781.332656] ip6_setup_cork+0x670/0x1740 [ 2781.333094] ip6_make_skb+0x22d/0x4e0 [ 2781.333510] ? ip_frag_init+0x350/0x350 [ 2781.333933] ? ip6_push_pending_frames+0xf0/0xf0 [ 2781.334442] ? ip6_dst_hoplimit+0x199/0x440 [ 2781.334904] ? lock_downgrade+0x6d0/0x6d0 [ 2781.335380] udpv6_sendmsg+0x20d0/0x2af0 [ 2781.335476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2781.335817] ? ip_frag_init+0x350/0x350 [ 2781.335844] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.338640] ? perf_event_task_disable+0x390/0x390 [ 2781.339177] ? lock_downgrade+0x6d0/0x6d0 [ 2781.339621] ? hrtimer_start_range_ns+0x336/0xae0 [ 2781.340134] ? lock_acquire+0x197/0x470 [ 2781.340559] ? find_held_lock+0x2c/0x110 [ 2781.341010] ? sock_has_perm+0x1ea/0x280 [ 2781.341452] ? __import_iovec+0x458/0x590 [ 2781.341896] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.342454] inet6_sendmsg+0x105/0x140 [ 2781.342875] ? inet6_compat_ioctl+0x320/0x320 [ 2781.343361] sock_sendmsg+0xf2/0x190 [ 2781.343777] ____sys_sendmsg+0x334/0x870 [ 2781.344222] ? kernel_sendmsg+0x50/0x50 [ 2781.344660] ? do_recvmmsg+0x6d0/0x6d0 [ 2781.345078] ? __lock_acquire+0x1657/0x5b00 [ 2781.345562] ___sys_sendmsg+0xf3/0x170 [ 2781.345981] ? sendmsg_copy_msghdr+0x160/0x160 [ 2781.346489] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2781.347065] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2781.347566] ? trace_hardirqs_on+0x5b/0x180 [ 2781.348040] ? lock_acquire+0x197/0x470 [ 2781.348483] ? find_held_lock+0x2c/0x110 [ 2781.348925] ? __might_fault+0xd3/0x180 [ 2781.349356] ? lock_downgrade+0x6d0/0x6d0 [ 2781.349797] ? io_schedule_timeout+0x140/0x140 [ 2781.350309] __sys_sendmmsg+0x195/0x470 [ 2781.350743] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2781.351214] ? lock_downgrade+0x6d0/0x6d0 [ 2781.351679] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.352208] ? wait_for_completion_io+0x270/0x270 [ 2781.352726] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.353224] ? vfs_write+0x354/0xa70 [ 2781.353629] ? fput_many+0x2f/0x1a0 [ 2781.354020] ? ksys_write+0x1a9/0x260 [ 2781.354430] ? __ia32_sys_read+0xb0/0xb0 [ 2781.354870] __x64_sys_sendmmsg+0x99/0x100 [ 2781.355347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.355905] do_syscall_64+0x33/0x40 [ 2781.356299] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2781.356852] RIP: 0033:0x7fba2f88eb19 [ 2781.357258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.359220] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2781.360036] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2781.360806] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2781.361592] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.362348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.363124] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:13:43 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2781.402363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 61) 10:13:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000035, 0x0) 10:13:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e48000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000012, 0x0) 10:13:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0300000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2781.508765] FAULT_INJECTION: forcing a failure. [ 2781.508765] name failslab, interval 1, probability 0, space 0, times 0 [ 2781.511666] CPU: 0 PID: 13751 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2781.513183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2781.514165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2781.514978] Call Trace: [ 2781.515008] dump_stack+0x107/0x167 [ 2781.515034] should_fail.cold+0x5/0xa [ 2781.518086] ? __alloc_skb+0x6d/0x5b0 [ 2781.518897] ? __alloc_skb+0x6d/0x5b0 [ 2781.519730] should_failslab+0x5/0x20 [ 2781.520544] kmem_cache_alloc_node+0x55/0x330 [ 2781.521509] __alloc_skb+0x6d/0x5b0 [ 2781.522306] alloc_skb_with_frags+0x92/0x570 [ 2781.523276] sock_alloc_send_pskb+0x7af/0x930 [ 2781.524255] ? sk_alloc+0x350/0x350 [ 2781.525024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2781.526814] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2781.528002] ? __ip6_append_data.isra.0+0x1bde/0x3a70 [ 2781.529102] ? __ip6_append_data.isra.0+0x1bf2/0x3a70 [ 2781.530219] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2781.531310] ? ip6_mtu+0x1bb/0x3d0 [ 2781.532074] ? lock_downgrade+0x6d0/0x6d0 [ 2781.532962] ? ip_frag_init+0x350/0x350 [ 2781.533827] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2781.534825] ? ip6_mtu+0x1e9/0x3d0 [ 2781.535604] ? ip6_setup_cork+0xfb7/0x1740 [ 2781.536509] ip6_make_skb+0x2de/0x4e0 [ 2781.537322] ? ip_frag_init+0x350/0x350 [ 2781.538180] ? ip_frag_init+0x350/0x350 [ 2781.539036] ? ip6_push_pending_frames+0xf0/0xf0 [ 2781.540063] ? ip6_dst_hoplimit+0x199/0x440 [ 2781.540988] ? lock_downgrade+0x6d0/0x6d0 [ 2781.541888] udpv6_sendmsg+0x20d0/0x2af0 [ 2781.542759] ? ip_frag_init+0x350/0x350 [ 2781.543639] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.544750] ? lock_acquire+0x197/0x470 [ 2781.545593] ? find_held_lock+0x2c/0x110 [ 2781.546477] ? lock_acquire+0x197/0x470 [ 2781.547339] ? find_held_lock+0x2c/0x110 [ 2781.548227] ? sock_has_perm+0x1ea/0x280 [ 2781.549110] ? __import_iovec+0x458/0x590 [ 2781.549995] ? udp_v6_push_pending_frames+0x360/0x360 [ 2781.551098] inet6_sendmsg+0x105/0x140 [ 2781.551934] ? inet6_compat_ioctl+0x320/0x320 [ 2781.552886] sock_sendmsg+0xf2/0x190 [ 2781.553682] ____sys_sendmsg+0x334/0x870 [ 2781.554545] ? kernel_sendmsg+0x50/0x50 [ 2781.555404] ? do_recvmmsg+0x6d0/0x6d0 [ 2781.556236] ? __lock_acquire+0x1657/0x5b00 [ 2781.557169] ___sys_sendmsg+0xf3/0x170 [ 2781.557997] ? sendmsg_copy_msghdr+0x160/0x160 [ 2781.558967] ? vmacache_find+0x55/0x2a0 [ 2781.559832] ? lock_acquire+0x197/0x470 [ 2781.560682] ? find_held_lock+0x2c/0x110 [ 2781.561552] ? __might_fault+0xd3/0x180 [ 2781.562408] ? lock_downgrade+0x6d0/0x6d0 [ 2781.563296] ? asm_exc_page_fault+0x1e/0x30 [ 2781.564236] __sys_sendmmsg+0x195/0x470 [ 2781.565085] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2781.566008] ? lock_downgrade+0x6d0/0x6d0 [ 2781.566902] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2781.567951] ? wait_for_completion_io+0x270/0x270 [ 2781.568980] ? rcu_read_lock_any_held+0x75/0xa0 [ 2781.569977] ? vfs_write+0x354/0xa70 [ 2781.570773] ? fput_many+0x2f/0x1a0 [ 2781.571552] ? ksys_write+0x1a9/0x260 [ 2781.572368] ? __ia32_sys_read+0xb0/0xb0 [ 2781.573242] __x64_sys_sendmmsg+0x99/0x100 [ 2781.574144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2781.575271] do_syscall_64+0x33/0x40 [ 2781.576071] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2781.577167] RIP: 0033:0x7fba2f88eb19 [ 2781.577971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2781.581918] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2781.583553] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2781.585082] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2781.586604] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2781.588150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2781.589678] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2781.614406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:13:44 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000036, 0x0) [ 2795.661582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000037, 0x0) 10:13:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="020000000800160057ffffffdf0003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b804000084ffa88bb950087d1ad800364e8a721daebd7f5f631e8d9abb2633488832ae73efcdee3aa8f610441a6755be133085bdd2e0c6c366d20f505812a3d336092c3018fcb58f2ba21b7c666a6f3d75f7127ad977232c8cd81d9ac37c2a9f18bb8b644af78de87b3341acbb04b7dbeb3c0f0dac3bf9e42f4d2282c6ff0cf1c3ba30a20b5d4578aa431a25a625c3e5608c59ae3e00ed86cb988a1518bccc56c66edfee5ff382457ba826e3cad50932df456577d54b54000a62cdaa4e7dd18ba72a2373f0d6df5af9a25abde145263a196040360334a307abb7378b656b506de66350c1195c129948dc6d5a6bb5da9bcb88ce57e59447bd23cb18fcea3d3721ae7775028df43500b4"], 0x288}, 0x1, 0x0, 0x0, 0x240c0000}, 0x4080) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x0, 0x20, 0x3, 0x0, 0xe7f, 0x3020a, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x82000000000, 0x3}, 0x809, 0x10000, 0x2, 0x1, 0x3ff, 0x80, 0x5, 0x0, 0xff}, 0x0, 0xf, 0xffffffffffffffff, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000240)=""/73, 0x49}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000000)=""/1, 0x1}, {&(0x7f0000000700)=""/217, 0xd9}, {&(0x7f00000002c0)=""/83, 0x53}, {&(0x7f0000000800)=""/111, 0x6f}, {&(0x7f0000000880)=""/164, 0xa4}], 0x7, &(0x7f00000009c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x40}}, {{&(0x7f0000000a00), 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000000ac0)=""/120, 0x78}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)}, {&(0x7f0000001b80)=""/49, 0x31}, {&(0x7f0000001bc0)=""/78, 0x4e}], 0x6}}], 0x2, 0x40010042, &(0x7f0000001d40)={0x77359400}) r3 = syz_open_dev$vcsu(&(0x7f0000001e00), 0x1ff, 0x410200) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x7f, 0x6, 0x81, 0x2d, 0x0, 0x955f, 0x20000, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x4, 0x7}, 0x4a0, 0x3f, 0xd1fb, 0x1, 0x8000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, r2, 0xa, r3, 0x2) 10:13:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 62) 10:13:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000d001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0400000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e4c000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:13:58 executing program 7: modify_ldt$read(0x0, &(0x7f0000000000), 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:13:58 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') gettid() socket$inet(0xa, 0x3, 0xff) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) [ 2795.695317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2795.699641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2795.714825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:13:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000e001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:13:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e68000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2795.738399] FAULT_INJECTION: forcing a failure. [ 2795.738399] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.740011] CPU: 1 PID: 13794 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2795.740803] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.741735] Call Trace: [ 2795.742015] dump_stack+0x107/0x167 [ 2795.742429] should_fail.cold+0x5/0xa [ 2795.742860] ? create_object.isra.0+0x3a/0xa20 [ 2795.743392] should_failslab+0x5/0x20 [ 2795.743819] kmem_cache_alloc+0x5b/0x310 [ 2795.744277] ? lock_downgrade+0x6d0/0x6d0 [ 2795.744741] create_object.isra.0+0x3a/0xa20 [ 2795.745237] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2795.745753] __kmalloc_track_caller+0x177/0x370 [ 2795.746270] ? ip6_setup_cork+0x670/0x1740 [ 2795.746746] kmemdup+0x23/0x50 [ 2795.747106] ip6_setup_cork+0x670/0x1740 [ 2795.747554] ip6_make_skb+0x22d/0x4e0 [ 2795.747980] ? ip_frag_init+0x350/0x350 [ 2795.748425] ? ip6_push_pending_frames+0xf0/0xf0 [ 2795.748956] ? ip6_dst_hoplimit+0x199/0x440 [ 2795.749429] ? lock_downgrade+0x6d0/0x6d0 [ 2795.749890] udpv6_sendmsg+0x20d0/0x2af0 [ 2795.750328] ? ip_frag_init+0x350/0x350 [ 2795.750759] ? udp_v6_push_pending_frames+0x360/0x360 [ 2795.751327] ? perf_event_task_disable+0x390/0x390 [ 2795.751823] ? lock_downgrade+0x6d0/0x6d0 [ 2795.752270] ? hrtimer_start_range_ns+0x336/0xae0 [ 2795.752791] ? lock_acquire+0x197/0x470 [ 2795.753217] ? find_held_lock+0x2c/0x110 [ 2795.753632] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.754192] ? sock_has_perm+0x1ea/0x280 [ 2795.754615] ? __import_iovec+0x458/0x590 [ 2795.755058] ? udp_v6_push_pending_frames+0x360/0x360 [ 2795.755581] inet6_sendmsg+0x105/0x140 [ 2795.756001] ? inet6_compat_ioctl+0x320/0x320 [ 2795.756447] sock_sendmsg+0xf2/0x190 [ 2795.756819] ____sys_sendmsg+0x334/0x870 [ 2795.757258] ? kernel_sendmsg+0x50/0x50 [ 2795.757654] ? do_recvmmsg+0x6d0/0x6d0 [ 2795.758076] ? __lock_acquire+0x1657/0x5b00 [ 2795.758514] ___sys_sendmsg+0xf3/0x170 [ 2795.758944] ? sendmsg_copy_msghdr+0x160/0x160 [ 2795.759412] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2795.759973] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2795.760469] ? trace_hardirqs_on+0x5b/0x180 [ 2795.760936] ? lock_acquire+0x197/0x470 [ 2795.761370] ? find_held_lock+0x2c/0x110 [ 2795.761807] ? __might_fault+0xd3/0x180 [ 2795.762242] ? lock_downgrade+0x6d0/0x6d0 [ 2795.762694] ? io_schedule_timeout+0x140/0x140 [ 2795.763204] __sys_sendmmsg+0x195/0x470 [ 2795.763649] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2795.764132] ? lock_downgrade+0x6d0/0x6d0 [ 2795.764594] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2795.765123] ? wait_for_completion_io+0x270/0x270 [ 2795.765651] ? rcu_read_lock_any_held+0x75/0xa0 [ 2795.766171] ? vfs_write+0x354/0xa70 [ 2795.766577] ? fput_many+0x2f/0x1a0 [ 2795.766982] ? ksys_write+0x1a9/0x260 [ 2795.767400] ? __ia32_sys_read+0xb0/0xb0 [ 2795.767857] __x64_sys_sendmmsg+0x99/0x100 [ 2795.768311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.768879] do_syscall_64+0x33/0x40 [ 2795.769277] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2795.769814] RIP: 0033:0x7fba2f88eb19 [ 2795.770227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.772095] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2795.772917] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2795.773676] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2795.774411] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.775174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2795.775952] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:13:58 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0500000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:13:58 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_RMID(0x0, 0x0) 10:13:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0400000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2795.822834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2795.831561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2795.857429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2795.869866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2795.886594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:13 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) pread64(r0, &(0x7f0000000200)=""/169, 0xa9, 0x4) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0xc5, 0x7f, 0x101, 0x7d, @empty, @mcast2, 0x8, 0x20, 0x5, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r2, 0x8, 0x700, 0x3, 0x3f, {{0x8, 0x4, 0x1, 0x34, 0x20, 0x64, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0xa, "af4d402c774a09cb"}]}}}}}) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x81, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) kcmp(r3, 0xffffffffffffffff, 0x1, r0, r0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:14:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000038, 0x0) 10:14:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000f001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:13 executing program 7: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000000100)=0xe8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r0, 0x2f, 0x2, 0xd7, 0x3, 0x47, @dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, 0x700, 0x80, 0xffff0001, 0x3}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1a8, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40011}, 0x4054) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, 0x0, r5) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0xffffffffffffffff, r1, r5}, 0xc) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x5, 0x20) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 10:14:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0600000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 63) [ 2811.253265] FAULT_INJECTION: forcing a failure. [ 2811.253265] name failslab, interval 1, probability 0, space 0, times 0 [ 2811.254527] CPU: 1 PID: 13836 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2811.255266] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2811.256134] Call Trace: [ 2811.256423] dump_stack+0x107/0x167 [ 2811.256816] should_fail.cold+0x5/0xa [ 2811.257235] ? create_object.isra.0+0x3a/0xa20 [ 2811.257727] should_failslab+0x5/0x20 [ 2811.258138] kmem_cache_alloc+0x5b/0x310 [ 2811.258584] ? lock_chain_count+0x20/0x20 [ 2811.259031] create_object.isra.0+0x3a/0xa20 [ 2811.259514] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2811.260057] kmem_cache_alloc_node+0x169/0x330 [ 2811.260545] __alloc_skb+0x6d/0x5b0 [ 2811.260953] alloc_skb_with_frags+0x92/0x570 [ 2811.261431] sock_alloc_send_pskb+0x7af/0x930 [ 2811.261958] ? sk_alloc+0x350/0x350 [ 2811.262350] ? lock_acquire+0x197/0x470 [ 2811.262777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2811.263350] ? lock_release+0x680/0x680 [ 2811.263803] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2811.264353] ? ip6_mtu+0x1bb/0x3d0 [ 2811.264738] ? lock_downgrade+0x6d0/0x6d0 [ 2811.265187] ? ip_frag_init+0x350/0x350 [ 2811.265628] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2811.266134] ? ip6_mtu+0x1e9/0x3d0 [ 2811.266519] ? ip6_setup_cork+0xfb7/0x1740 [ 2811.266966] ip6_make_skb+0x2de/0x4e0 [ 2811.267371] ? ip_frag_init+0x350/0x350 [ 2811.267821] ? ip_frag_init+0x350/0x350 [ 2811.268259] ? ip6_push_pending_frames+0xf0/0xf0 [ 2811.268771] ? ip6_dst_hoplimit+0x199/0x440 [ 2811.269234] ? lock_downgrade+0x6d0/0x6d0 [ 2811.269692] udpv6_sendmsg+0x20d0/0x2af0 [ 2811.270141] ? ip_frag_init+0x350/0x350 [ 2811.270581] ? udp_v6_push_pending_frames+0x360/0x360 [ 2811.271134] ? trace_hardirqs_on+0x5b/0x180 [ 2811.271623] ? lock_acquire+0x197/0x470 [ 2811.272057] ? find_held_lock+0x2c/0x110 [ 2811.272501] ? lock_acquire+0x197/0x470 [ 2811.272932] ? find_held_lock+0x2c/0x110 [ 2811.273372] ? sock_has_perm+0x1ea/0x280 [ 2811.273817] ? __import_iovec+0x458/0x590 [ 2811.274270] ? udp_v6_push_pending_frames+0x360/0x360 [ 2811.274803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2811.274838] inet6_sendmsg+0x105/0x140 [ 2811.277062] ? inet6_compat_ioctl+0x320/0x320 [ 2811.277554] sock_sendmsg+0xf2/0x190 [ 2811.277957] ____sys_sendmsg+0x334/0x870 [ 2811.278398] ? kernel_sendmsg+0x50/0x50 [ 2811.278832] ? do_recvmmsg+0x6d0/0x6d0 [ 2811.279260] ? __lock_acquire+0x1657/0x5b00 [ 2811.279739] ___sys_sendmsg+0xf3/0x170 [ 2811.280156] ? sendmsg_copy_msghdr+0x160/0x160 [ 2811.280638] ? vmacache_find+0x55/0x2a0 [ 2811.281086] ? lock_acquire+0x197/0x470 [ 2811.281511] ? find_held_lock+0x2c/0x110 [ 2811.281954] ? __might_fault+0xd3/0x180 [ 2811.282386] ? lock_downgrade+0x6d0/0x6d0 [ 2811.282842] ? asm_exc_page_fault+0x1e/0x30 [ 2811.283311] __sys_sendmmsg+0x195/0x470 [ 2811.283746] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2811.284221] ? lock_downgrade+0x6d0/0x6d0 [ 2811.284683] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2811.285214] ? wait_for_completion_io+0x270/0x270 [ 2811.285744] ? rcu_read_lock_any_held+0x75/0xa0 [ 2811.286252] ? vfs_write+0x354/0xa70 [ 2811.286661] ? fput_many+0x2f/0x1a0 [ 2811.287056] ? ksys_write+0x1a9/0x260 [ 2811.287476] ? __ia32_sys_read+0xb0/0xb0 [ 2811.287928] __x64_sys_sendmmsg+0x99/0x100 [ 2811.288396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2811.288963] do_syscall_64+0x33/0x40 [ 2811.289369] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2811.289926] RIP: 0033:0x7fba2f88eb19 [ 2811.290340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2811.292362] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2811.293181] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2811.293954] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2811.294731] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2811.295527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2811.296307] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:14:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e6c000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20f000001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2811.299374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2811.305947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2811.324416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0700000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2811.358489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2811.360621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) socketpair(0x22, 0xa, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:14:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000039, 0x0) 10:14:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e74000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:26 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) kcmp(r2, 0xffffffffffffffff, 0x6, r3, r4) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000039c0)={'syztnl1\x00', &(0x7f0000003940)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0x1000, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x101, 0x2}}) [ 2824.468432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0800000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 64) 10:14:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200048001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2824.478306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2824.508661] FAULT_INJECTION: forcing a failure. [ 2824.508661] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.510024] CPU: 1 PID: 13863 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2824.510813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.511758] Call Trace: [ 2824.512080] dump_stack+0x107/0x167 [ 2824.512500] should_fail.cold+0x5/0xa [ 2824.512939] should_failslab+0x5/0x20 [ 2824.513367] __kmalloc_node_track_caller+0x74/0x3b0 [ 2824.513917] ? alloc_skb_with_frags+0x92/0x570 [ 2824.514307] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2824.514439] __alloc_skb+0xb1/0x5b0 [ 2824.516696] alloc_skb_with_frags+0x92/0x570 [ 2824.517190] sock_alloc_send_pskb+0x7af/0x930 [ 2824.517666] ? sk_alloc+0x350/0x350 [ 2824.518083] ? lock_acquire+0x197/0x470 [ 2824.518520] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2824.519098] ? lock_release+0x680/0x680 [ 2824.519546] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2824.520095] ? ip6_mtu+0x1bb/0x3d0 [ 2824.520487] ? lock_downgrade+0x6d0/0x6d0 [ 2824.520950] ? ip_frag_init+0x350/0x350 [ 2824.521395] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2824.521907] ? ip6_mtu+0x1e9/0x3d0 [ 2824.522302] ? ip6_setup_cork+0xfb7/0x1740 [ 2824.522777] ip6_make_skb+0x2de/0x4e0 [ 2824.523179] ? ip_frag_init+0x350/0x350 [ 2824.523632] ? ip_frag_init+0x350/0x350 [ 2824.524066] ? ip6_push_pending_frames+0xf0/0xf0 [ 2824.524591] ? ip6_dst_hoplimit+0x199/0x440 [ 2824.525065] ? lock_downgrade+0x6d0/0x6d0 [ 2824.525420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2824.525548] udpv6_sendmsg+0x20d0/0x2af0 [ 2824.527801] ? ip_frag_init+0x350/0x350 [ 2824.528256] ? udp_v6_push_pending_frames+0x360/0x360 [ 2824.528829] ? trace_hardirqs_on+0x5b/0x180 [ 2824.529307] ? lock_acquire+0x197/0x470 [ 2824.529751] ? find_held_lock+0x2c/0x110 [ 2824.530204] ? lock_acquire+0x197/0x470 [ 2824.530643] ? find_held_lock+0x2c/0x110 [ 2824.531114] ? sock_has_perm+0x1ea/0x280 [ 2824.531577] ? __import_iovec+0x458/0x590 [ 2824.532017] ? udp_v6_push_pending_frames+0x360/0x360 [ 2824.532596] inet6_sendmsg+0x105/0x140 [ 2824.533023] ? inet6_compat_ioctl+0x320/0x320 [ 2824.533515] sock_sendmsg+0xf2/0x190 [ 2824.533933] ____sys_sendmsg+0x334/0x870 [ 2824.534394] ? kernel_sendmsg+0x50/0x50 [ 2824.534828] ? do_recvmmsg+0x6d0/0x6d0 [ 2824.535263] ? __lock_acquire+0x1657/0x5b00 [ 2824.535724] ___sys_sendmsg+0xf3/0x170 [ 2824.536161] ? sendmsg_copy_msghdr+0x160/0x160 [ 2824.536668] ? vmacache_find+0x55/0x2a0 [ 2824.537117] ? lock_acquire+0x197/0x470 [ 2824.537564] ? find_held_lock+0x2c/0x110 [ 2824.537996] ? __might_fault+0xd3/0x180 [ 2824.538440] ? lock_downgrade+0x6d0/0x6d0 [ 2824.538878] ? asm_exc_page_fault+0x1e/0x30 [ 2824.539379] __sys_sendmmsg+0x195/0x470 [ 2824.539817] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2824.540307] ? lock_downgrade+0x6d0/0x6d0 [ 2824.540753] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2824.541295] ? wait_for_completion_io+0x270/0x270 [ 2824.541814] ? rcu_read_lock_any_held+0x75/0xa0 [ 2824.542352] ? vfs_write+0x354/0xa70 [ 2824.542749] ? fput_many+0x2f/0x1a0 [ 2824.543170] ? ksys_write+0x1a9/0x260 [ 2824.543573] ? __ia32_sys_read+0xb0/0xb0 [ 2824.544046] __x64_sys_sendmmsg+0x99/0x100 [ 2824.544497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.545085] do_syscall_64+0x33/0x40 [ 2824.545481] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2824.546053] RIP: 0033:0x7fba2f88eb19 [ 2824.546446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.548514] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2824.549324] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2824.550127] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2824.550927] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.551737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.552533] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:14:27 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x10000) r1 = eventfd2(0x40, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000020", @ANYRES16=r4, @ANYBLOB="0100000000000000000018000000"], 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002080)={{r1}, r2, 0x2, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x0, {0x22, 0xc66, 0x7fffffff, 0x7f, 0x6}, [0x9]}}, @devid=r5}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000040)={{}, r2, 0x8, @unused=[0x100000001, 0x100000001, 0x99, 0xfbf], @name="54d438e51b73b6b646de90a6cf9ec1f55e2d2461271cfee24c721b3826e8daf964f958067ddb30b64e5b250976d0b3bbf4d615010ad29a73a02e9aa8ff0d82e70229c617a7e4b8d2f8ade6680dbdde731265b653ab072debaa94150fefa284800cd96a21a6df607dac8d9917df74d9b8aa285cd57d7f24d2305d4223e593c421da500380da095e831511382550db2e503d6c409c678f4163d6d9f86ed864b7d3b87866334e20f5f8625c688ec4104e7d72eaa9b6848010d26bf26c2d40f61ad9b52abc5a7e7555675fe71eadadd895f5231990e974dd33cf1bc058c425262cf23fa1552919a2b3fb7bbb38980b964926c1fdb7da93b466fcb55c3de6306cdedc78b8eacc98ebb33c157c070da8547ad5d4a86d3fa3f70918d21742d8f60075fb45045dcf8c77bc550a51bd82b26df7c84c6918d0f4cdf6c7d75bc4755011725db18161783744b56d4f08717a4730b632ee986d360c982059c00d4349d4b4f84587f71ea343cd0979a85a3eeb69a04791554d4dbf1ccfd86f2c56c265ce9547f15396c2dda58935e6dc98bb3fb63b9503070d941acb9bb174b9036bf18f03e6a237885f106c32120914d5a076899ca17120bd0000640d1ddf2f98ec485b0452b6d853b597406cfcb94d1f87d85480f8f4dc3eb123de60ae4691dded812896674784e5dfa580a4b95266a872bd383c65fd8d8bc362721fc90e8f14664720a3641e710b404c53d7ce8782b0e201c1599baca84bd6da4b18ff538a5b794976943a2d600a4888785982011a6a4ee14d4bfeca85c91c170075b87e635fb4aa9b43ff216fe3dbbca2bc1c0f117d8a4bb319683292b6247a8d52707338a3bbf583986c0b07277e88aac34e663851b413e795aa5772ac5946bf42af55ecc39265d34399ab8bad54cb9a4c8627ca5160383681503bc76998ccaf40fdd6147640ba4c3823972dce253cff846da922a06c78ae6d77f807eddb0a179a1dbd9e29e48f190d1dae4b8bdea6e0c58aca6cc8b0cbbc35bcfdde35283316653f2d1790426d6c19a2d244e0bf8c2c3de4c457ca033e5d57e6a4b3c5824735c207902c5e174a21ef101d75f4bf128368182c6bf7a32b586f20d6081ac2c5cd64a93a79efde22f7db3251d664a6544fa07f5e3aa80827210c895d46f1f3bd65ac289dc2722e7308793d3e6bdaf235b9b471343a9bf7c041e469c11e26bd6f7009b9d26b4f64bbb891f6e0eb7c82bc66418e86ef3fb1634afd6d41b375672280b3db207d7a2aaa135d91f05ccf7ce5bd7c97baa7a94645d2cb0ce514a37e489891135d828ec6b04aa9df02bd28e1d01164ad4cde86f188ea036b11309b0431d41fde2eb766e9412da6b3fef026911fd72113c517dd154d30609f72fc994afa76b834b6202e2e7f6103261093a012cebd4c4c1bc5d2cff9a8011daae0d8fb8b27deb19dc8c2bb924143fa1d2c13d6ee7948cc1c65ccd4a0e7c36130da76f4241fa04747c4573ffe30aa25f929beb10332ca1df75901c832a3f0cf0f90888785b5fee7113c282a31bd89530e42269774611ffe8f46342f66af6d77caca2f3d655582c30048a1e31863a503dbcd5f7311463f903c824e512514543d9f2cc156ced5659418e1698927f7842bce4bfcfde07b02b5f58bcb5c77f5112716b978e67c5b76fbfb195c54e288d2ec7cc8f0602105b5a025db0dda7acab2db71b9e1a36f2281d8e6f09a7b7520570e7339af23aff4238516806b79d1d7d7fe25ab496c51618777ff89a942e991ca0c2a1f5064e547fcdfff0781676501b23fee792c6dc20eba236092068c1c32cb994a780514fa0f9588d43d353b6900b83c020b081dee8896056a454a5cedad0472acbbb91dd4e9aa6bb4107523fc33eca7042f52f1c86972f734879c6e344b46c313ef4f14b4c299c23fdb3f668789a42d07d3c46ecc3769af2bed5d7e5156c08bedbf8942c0cd6dae2ef8ebcc3b87847c0bf58f244076ef790a2b6071480147a61403d216a66f55c3cfc1ea90ab3381e172bf3fb9628ca3a07768ba3f64f1325093f1acada030ccaa3596111c95c7f2930ba3865fd12abe870c753fc8920cc192c7ee3c9e09b0b108c826a1fdc5738e98c2e8a0d1a462d0440391aa158c2e68c85af5272f2acdf9411ea9d0ef14b59db020ce9d99fd765b5a628dce31b10ee0b5fc165bfc7f27bc0701e7848e761f9eddc9e67d37e919eec43f3a27766910b3b72c289d27f50f9c5c1d475b988c4e4c766e4506b4938d1e618ce23ff485005afd3ba44220ae15b58dbd075796173569f0a4ecebda3c9274378b0297d1a8cb83c25a1aaab3e714048515f7c2fd6615b7f06664b3ad616115b5738538e9fde6ad7da5caa793570a93e7d20bf3931439d056369d8b57cba55666fff7eb1c4e34878f249956b41b828b32e6ab9821efd269fd1ac32e110223f3cdf2d77a297f3bcacd616a1698a610bbfa095ac665dde74960bf89450a746e44cae931afc8f5499f5ce4bee5804da617c5cfcfed220b9e567f81d3dca38aa0c9f45a7afdb378e7a21a79112ebe9eb2178035706749fc64ea526edeb9ca1f01ffa2f79c62faafce2d1117790a2c2b0c9f0444abb3f84e410ed9627694ee897c879ce6c7894429565a7796beaaebfb906c1d680d4aa4f5373f48766812042f69381620c39373c8e3ceb369a901e5ead21b4874c03d00d2600785cd6237983b7e1a6fca6054b0ab6a8764ac1f8188970cccc9c5e9a9341de98db1adf8bb6ffcc902c86e6f7a27df5bfde44686b13f19646896423e5e72a5f2628e63e90723eb8431b620432ae977af5e57bca405efdf70d221c5dda4b5b103b7d6c3f08f570e9689c6266acb0f66248d5e63919fec7ac931148bd3c25bfc762b111c2378480df0468f2d890e52133eeee9712d817cd4574afe8b6b97937a6a7aadbdff71ffe95d3a23f57539fa55bdf7b141ab7dc27bd109c8c89899286d3d66f0f9b84bae8ffb50a295efc14027b70969ce8aa6bfbc82bea645b7b69ef9c7067b463457a76256eacfaa373ffcb2d6ec3c5ed265922ceb703afda551099366c0989ae7e0eaffd9965a829c37a711851834ad6a8a2da8d7db38b626f8e0fef8e1f5aab2d31416b56d58ac05dd2e3477e6c956ef196a85b257bfcfc505915d484ca1d03160edd18e9cf398d910063d28b4bca80d9cef38f00947aee34190fe2f9fc4bb70526750f42546a7fec6a19b5e815da16a84e662a27d5cd119fee048367ac3fcefe86a91d130310c76ef108f830550ab73d793ca98232d3ac5aafd247d3c09aca03f83a0c8243cd6059516ce4538dc17d4981710a558437dbbdb16e19f1db63a87b6f131bf9bf2f978608f720d9a4aaede389855a7c11f718311ccde7d378a3caa2e305f85761821436a2e859be1808c74f3f65a79d7203f12813b609c295b1a189d84932c8e67d6609f01d8c177d812a4140cf69edddb05369485e81f5f7bab425913a92f74c1ff406a2237596f77b4549ecfa482d2d665f6a9d36574bf5d3168f449d3bec877826339cd742bfcb54bd1174bc0edd710b4d6dae36745ae821fe0a5d86d535fd4a70293ecfb86944ce43cf9e9731cbeeb2f5133e48b290f2e555cd981af646beccb4b41dd3b461bc149ad2e02cffa6772706ae89503f211683ab397c317fc4f447064af22ac82d4f9aeb28f1ef472eaea1a7abb461a861cfccda72ba6ad9a6b7eae49ca413b6ffd8147da7330bb62d426c6bbd35c059e1eb76e262746899b36eea980d5250bcd66a8b8bd270288a9840284b8d7e59900489e7ffe74dc53949ccc96780dd6f8574e6b0798db18559cf456ff70880d3e3eb171905d52a308474173cbc776bb3df1882d055101159567d5b978b5df64ea3ed4b5ab0cfc00258f527d0da4f35caa52b01e3096fa203443f8c61dd46dcd3435c4969c2cbb162456475aadeb7deb697f795ceda90d4eb0498b16faa0e392e4dc7b3effb8510f9fe0756af00d7f675b71f2651e6fc75f3307233bb2d1dd9e2587e7ebf2aa9b00916bedff4c817126beb7aeba76d7a2cfb32144fd27b1f4ae514c479069001adf1319b992e9e11b56a59be3bd66518d8d482bf63d98ac291378b632fa7030450501eb94e09cb6cc62e00beeca2b45baf1dfadc971b4537dfaa247d61348f841c8cbade65a0819cea62bd2dc607318158582abd81a88718fef75160d89f2bd890cd8f08fedcf6000fa1ad9896050c9f5a74bc967b2f6dc935539747cc5d83482609a0c80f7fde3e365ffcbbe612a9e025679fcaf91908edf53f9d4aecb36cd1b8e4dc3abcf26bcd5458eac0dd63ab139b2b502324d904271650bc8fa249e46bcb77d240a8a5665c31aeb54542f929d87f69271b6db619ae1e5dc1acf24ce13b89a1dfb7fa69eeb9f51ca213d33bc09f65bed687ca2d62664d86c6c3ace9b1baf102213f5ebffba9ef034e5992bcc63ea8dfcd105e9e31cc5a680b5ca391a40d23df2b317c289d989645993777ca79e3315ff695d044a844ccf55f174297dc209d1ee2ef139d564752a7d774085c6d716353ab59700d4c360e92c48cea9079ebec31fed29876353b2ca5e7397556366ee446fac1756a9a2bc05983991f787770f7e4382b81033cc019e229f1c358200370a0a1e0f05afd4c87d65486a3e5f9f7b55eb15c9450a9d65d8ab473fb56312e6712b411aaa40aec91483401d9d348c5541f9f675fe1407feae5794f60076a05b521f53de833f36c9ad59bf0a003b8e9dad85e4efc48054f68c378c38ffbbc934edde16c29c7a0bb8d3868fb8da5f78201ab235c22a8d5312cd58e5c82777a9696059ad29f08ce34c82ccb02498e41e72896e723cf6f662842018721be9a8e29f054416eec9946677afec417e6a27429fc481ed69a985bbab0a8603acea002091bdf3322c18ebca13c777c507aa85e0b72a4ff44781e1f01a06840f0534fb952c06ee162bc1338c672b81916d0886a96bef30048db30d75059c118703bc3d4169ee2b0cf36d64b0c7a4e6f9b3652dc4c802b7f178171f7e7af44f42a9dd567424fd00c43052b6998ddaeeb9d13172ed1ebf62ba2fe90a40a8e3ee0da06e662934a00b61a96cdaa85c3723d359ce34f801f65fa04adc66239bc9791720349f3ee517aa35767f5360a8f060e6576fcdd65781b089e6e8584f5047809466f28b982ad51ce582526cfeb91e95520a676e3460e784643880554ffd37d721e0b6356b1405fa244d9d90d847603ae797e9fc607cbd01c3bc8db433b742d129743b741d9e8c2cfe8f3fd0e9941776c0d24706b030b4d0e81e2cd38aba48ad10f0d40d6f6db4fb55dd2b9da6979abb4f482074ced31eba05d8b49bbdf1c1bef80d14a7b9be6b598d08d73859445a8e85b0817e4713581d1d45c9d2dadb451b277e793d44f903b84ff24dda8067a73c1decb17c153744eb2a4b93a66964eb4d850e359860328e6c7911d98bc746411c7f0428e576a87723c471dc39dc477fd74008dcce6b030b146ea6fab02fa10112e3567fd41a93d12d747b801db83853389f9bba81b44882c3ca3426972163d4889e319a7fe0da24cc92e3975a6aad10b28b538107ca87803b63e778b61efc57f7e1211c45d3199ae9e9e9cdf287647fec73e752b2304d5bd3c35f36986d073ed18903d4b3943850c1ef281d93e3b6ecfd3fe849f070108a61f9d8ab0f200c87f8d1a8d5f280f9dc26374bd38d21c7af0dd638f10214d41834a9ce6c1a"}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:14:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e7a000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000038, 0x0) 10:14:27 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0900000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2824.590309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2824.596330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2824.603331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2824.609769] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:27 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20004c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:27 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ef0000000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2824.667825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2824.680255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2840.657243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:43 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) kcmp(r2, 0xffffffffffffffff, 0x6, r3, r4) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000039c0)={'syztnl1\x00', &(0x7f0000003940)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0x1000, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x101, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty}, 0x0) 10:14:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0a00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200068001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852eac010000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000003a, 0x0) 10:14:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 65) 10:14:43 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmdt(r0) 10:14:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0xa, 0x3, 0xff) sendto(r1, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="ad83f8c1b9d8b70c2b886a5b1e65bd97eec64bd722d8311c0bc31d352f2dd5e68ec72234279d731e56812d4a4e8a4286091dccf2a858f9e14fe59703e6f70613d920283b67a38f672e04d73e961aef214e1ad72e49a0f5374926f9160dfec888ce0c0de5525e1f3b5cdbe256992986e148ece0cb50e3af264460b658e0e8371050a6e3a9419cda21788d3e7b0e7c6e6b82b786e9dd33e991a5483bbcb77a8d9a0a3c246cd9053402753c1625505486bef9fc7337cdc3118abd42722fbe1125", 0xbf, 0x8000, &(0x7f0000000140)={0x2, 0xf462, @multicast1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x1, 0x2, 0x4, @dev={0xfe, 0x80, '\x00', 0xb}, @mcast2, 0x7, 0x8000, 0x1, 0x80}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r5, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r6, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x0, 0x8000, 0x66f4, 0x7, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x67, 0x0, 0xff, 0x2f, 0x0, @loopback, @private=0xa4ce, {[@timestamp_addr={0x44, 0x34, 0xeb, 0x1, 0xa, [{@empty, 0x10000}, {@multicast2, 0x1}, {@loopback, 0xfffffffc}, {@multicast1, 0x20}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x1f}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000400)={0x370, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x488}}}]}}, {{0x8, 0x1, r5}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2840.659242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2840.663339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2840.668781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0b00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00030000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2840.691686] FAULT_INJECTION: forcing a failure. [ 2840.691686] name failslab, interval 1, probability 0, space 0, times 0 [ 2840.694423] CPU: 0 PID: 13911 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2840.695824] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2840.697518] Call Trace: [ 2840.698060] dump_stack+0x107/0x167 [ 2840.698799] should_fail.cold+0x5/0xa [ 2840.699569] ? create_object.isra.0+0x3a/0xa20 [ 2840.700508] should_failslab+0x5/0x20 [ 2840.701274] kmem_cache_alloc+0x5b/0x310 [ 2840.702099] create_object.isra.0+0x3a/0xa20 [ 2840.702984] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2840.704017] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2840.705042] ? alloc_skb_with_frags+0x92/0x570 [ 2840.705965] __alloc_skb+0xb1/0x5b0 [ 2840.706701] alloc_skb_with_frags+0x92/0x570 [ 2840.707597] sock_alloc_send_pskb+0x7af/0x930 [ 2840.708526] ? sk_alloc+0x350/0x350 [ 2840.709263] ? lock_acquire+0x197/0x470 [ 2840.710064] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2840.711121] ? lock_release+0x680/0x680 [ 2840.711936] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2840.712954] ? ip6_mtu+0x1bb/0x3d0 [ 2840.713674] ? lock_downgrade+0x6d0/0x6d0 [ 2840.714504] ? ip_frag_init+0x350/0x350 [ 2840.715316] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2840.716276] ? ip6_mtu+0x1e9/0x3d0 [ 2840.716993] ? ip6_setup_cork+0xfb7/0x1740 [ 2840.717846] ip6_make_skb+0x2de/0x4e0 [ 2840.718611] ? ip_frag_init+0x350/0x350 [ 2840.719414] ? ip_frag_init+0x350/0x350 [ 2840.720226] ? ip6_push_pending_frames+0xf0/0xf0 [ 2840.721188] ? ip6_dst_hoplimit+0x199/0x440 [ 2840.722054] ? lock_downgrade+0x6d0/0x6d0 [ 2840.722899] udpv6_sendmsg+0x20d0/0x2af0 [ 2840.723723] ? ip_frag_init+0x350/0x350 [ 2840.724541] ? udp_v6_push_pending_frames+0x360/0x360 [ 2840.725603] ? perf_event_task_disable+0x390/0x390 [ 2840.726606] ? lock_downgrade+0x6d0/0x6d0 [ 2840.727462] ? lock_acquire+0x197/0x470 [ 2840.728280] ? find_held_lock+0x2c/0x110 [ 2840.729118] ? sock_has_perm+0x1ea/0x280 [ 2840.729970] ? __import_iovec+0x458/0x590 [ 2840.730819] ? udp_v6_push_pending_frames+0x360/0x360 [ 2840.731888] inet6_sendmsg+0x105/0x140 [ 2840.732684] ? inet6_compat_ioctl+0x320/0x320 [ 2840.733599] sock_sendmsg+0xf2/0x190 [ 2840.734359] ____sys_sendmsg+0x334/0x870 [ 2840.735211] ? kernel_sendmsg+0x50/0x50 [ 2840.735493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2840.736067] ? do_recvmmsg+0x6d0/0x6d0 [ 2840.736093] ? __lock_acquire+0x1657/0x5b00 [ 2840.737494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2840.737783] ___sys_sendmsg+0xf3/0x170 [ 2840.740727] ? sendmsg_copy_msghdr+0x160/0x160 [ 2840.741661] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2840.742273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2840.742577] ? _raw_spin_unlock_irq+0x27/0x30 [ 2840.744060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2840.744365] ? lock_acquire+0x197/0x470 [ 2840.746028] ? find_held_lock+0x2c/0x110 [ 2840.746870] ? __might_fault+0xd3/0x180 [ 2840.747684] ? lock_downgrade+0x6d0/0x6d0 [ 2840.748553] ? io_schedule_timeout+0x140/0x140 [ 2840.749514] __sys_sendmmsg+0x195/0x470 [ 2840.750347] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2840.751250] ? lock_downgrade+0x6d0/0x6d0 [ 2840.752125] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2840.753129] ? wait_for_completion_io+0x270/0x270 [ 2840.754109] ? rcu_read_lock_any_held+0x75/0xa0 [ 2840.755082] ? vfs_write+0x354/0xa70 [ 2840.755844] ? fput_many+0x2f/0x1a0 [ 2840.756619] ? ksys_write+0x1a9/0x260 [ 2840.757392] ? __ia32_sys_read+0xb0/0xb0 [ 2840.758224] __x64_sys_sendmmsg+0x99/0x100 [ 2840.759084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2840.760129] do_syscall_64+0x33/0x40 [ 2840.760889] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2840.761918] RIP: 0033:0x7fba2f88eb19 [ 2840.762703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2840.766386] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2840.767977] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2840.769413] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2840.770850] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2840.772292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2840.773718] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2840.819836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 10:14:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0c00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00050000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00030000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:43 executing program 7: mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffc000/0x4000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) [ 2840.828859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:43 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20006c001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:43 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00060000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x0) 10:14:57 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) kcmp(r2, 0xffffffffffffffff, 0x6, r3, r4) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000039c0)={'syztnl1\x00', &(0x7f0000003940)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0x1000, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x101, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r5, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) 10:14:57 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 66) 10:14:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200074001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ea9060000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000003b, 0x0) 10:14:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x5, 0x7, 0x1, 0x1, 0x0, 0xffffffff, 0x2544, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8001, 0x4, @perf_config_ext={0x599a, 0x6}, 0x500, 0x2, 0x8, 0x7, 0x7f, 0x8000, 0x3, 0x0, 0xfffffff7, 0x0, 0x5}, r2, 0x4, 0xffffffffffffffff, 0x8) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 10:14:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0d00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2854.660223] __nla_validate_parse: 5 callbacks suppressed [ 2854.660235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2854.675695] FAULT_INJECTION: forcing a failure. [ 2854.675695] name failslab, interval 1, probability 0, space 0, times 0 [ 2854.678407] CPU: 0 PID: 13975 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2854.679817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2854.681500] Call Trace: [ 2854.682040] dump_stack+0x107/0x167 [ 2854.682726] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2854.682789] should_fail.cold+0x5/0xa [ 2854.685290] ? create_object.isra.0+0x3a/0xa20 [ 2854.686215] should_failslab+0x5/0x20 [ 2854.686994] kmem_cache_alloc+0x5b/0x310 [ 2854.687822] create_object.isra.0+0x3a/0xa20 [ 2854.688746] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2854.689784] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2854.690822] ? alloc_skb_with_frags+0x92/0x570 [ 2854.691757] __alloc_skb+0xb1/0x5b0 [ 2854.692516] alloc_skb_with_frags+0x92/0x570 [ 2854.693421] sock_alloc_send_pskb+0x7af/0x930 [ 2854.694334] ? sk_alloc+0x350/0x350 [ 2854.695084] ? lock_acquire+0x197/0x470 [ 2854.695892] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2854.696958] ? lock_release+0x680/0x680 [ 2854.697773] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2854.698794] ? ip6_mtu+0x1bb/0x3d0 [ 2854.699508] ? lock_downgrade+0x6d0/0x6d0 [ 2854.700379] ? ip_frag_init+0x350/0x350 [ 2854.701206] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2854.702168] ? ip6_mtu+0x1e9/0x3d0 [ 2854.702887] ? ip6_setup_cork+0xfb7/0x1740 [ 2854.703740] ip6_make_skb+0x2de/0x4e0 [ 2854.704521] ? ip_frag_init+0x350/0x350 [ 2854.705326] ? ip_frag_init+0x350/0x350 [ 2854.706133] ? ip6_push_pending_frames+0xf0/0xf0 [ 2854.707090] ? ip6_dst_hoplimit+0x199/0x440 [ 2854.707962] ? lock_downgrade+0x6d0/0x6d0 [ 2854.708810] udpv6_sendmsg+0x20d0/0x2af0 [ 2854.709644] ? ip_frag_init+0x350/0x350 [ 2854.710471] ? udp_v6_push_pending_frames+0x360/0x360 [ 2854.711524] ? perf_event_task_disable+0x390/0x390 [ 2854.712536] ? lock_downgrade+0x6d0/0x6d0 [ 2854.713380] ? hrtimer_start_range_ns+0x336/0xae0 [ 2854.714369] ? lock_acquire+0x197/0x470 [ 2854.715178] ? find_held_lock+0x2c/0x110 [ 2854.716009] ? sock_has_perm+0x1ea/0x280 [ 2854.716852] ? __import_iovec+0x458/0x590 [ 2854.717682] ? udp_v6_push_pending_frames+0x360/0x360 [ 2854.718734] inet6_sendmsg+0x105/0x140 [ 2854.719532] ? inet6_compat_ioctl+0x320/0x320 [ 2854.720450] sock_sendmsg+0xf2/0x190 [ 2854.721201] ____sys_sendmsg+0x334/0x870 [ 2854.722025] ? kernel_sendmsg+0x50/0x50 [ 2854.722837] ? do_recvmmsg+0x6d0/0x6d0 [ 2854.723625] ? __lock_acquire+0x1657/0x5b00 [ 2854.724520] ___sys_sendmsg+0xf3/0x170 [ 2854.725308] ? sendmsg_copy_msghdr+0x160/0x160 [ 2854.726236] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2854.727133] ? _raw_spin_unlock_irq+0x27/0x30 [ 2854.728051] ? lock_acquire+0x197/0x470 [ 2854.728856] ? find_held_lock+0x2c/0x110 [ 2854.729684] ? __might_fault+0xd3/0x180 [ 2854.730496] ? lock_downgrade+0x6d0/0x6d0 [ 2854.731332] ? io_schedule_timeout+0x140/0x140 [ 2854.732292] __sys_sendmmsg+0x195/0x470 [ 2854.733110] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2854.733988] ? lock_downgrade+0x6d0/0x6d0 [ 2854.734838] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2854.735817] ? wait_for_completion_io+0x270/0x270 [ 2854.736800] ? rcu_read_lock_any_held+0x75/0xa0 [ 2854.737747] ? vfs_write+0x354/0xa70 [ 2854.738498] ? fput_many+0x2f/0x1a0 [ 2854.739233] ? ksys_write+0x1a9/0x260 [ 2854.740002] ? __ia32_sys_read+0xb0/0xb0 [ 2854.740845] __x64_sys_sendmmsg+0x99/0x100 [ 2854.741700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2854.742744] do_syscall_64+0x33/0x40 [ 2854.743503] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2854.744552] RIP: 0033:0x7fba2f88eb19 [ 2854.745312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2854.749027] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2854.750561] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2854.751995] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2854.753451] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2854.754881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2854.756331] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2854.770535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:57 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/120) shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) 10:14:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0e00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:57 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20007a001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:14:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00070000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:14:57 executing program 0: r0 = socket$inet(0xa, 0x3, 0xff) sendto(r0, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ftruncate(r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') r2 = gettid() process_vm_readv(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) kcmp(r2, 0xffffffffffffffff, 0x6, r3, r4) pread64(r1, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000039c0)={'syztnl1\x00', &(0x7f0000003940)={'sit0\x00', 0x0, 0x4, 0x80, 0x8, 0x1000, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x7800, 0x101, 0x2}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r5, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) [ 2854.894439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2854.910234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:14:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000003c, 0x0) [ 2854.949313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:57 executing program 7: shmat(0x0, &(0x7f0000ffb000/0x5000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget(0x2, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_RMID(r0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:14:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x70, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0x400, 0xfffffffffffffffc, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2854.981975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:14:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0f00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:14:57 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00090000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2855.087541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2855.124663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2855.148408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000a0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000003d, 0x0) 10:15:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000f0001e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:12 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) (fail_nth: 1) [ 2869.813928] __nla_validate_parse: 1 callbacks suppressed [ 2869.813951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:12 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000ffc000/0x2000)=nil) 10:15:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) setsockopt(r2, 0x1000, 0x7, &(0x7f0000000080)="5d799fa0fd484da69d70d97df57a4eb7627c233bdd21b432b49cb0acb453b23a5413afced30c4683d999017b7e49923fef174a147fa88d7a37c40630bb073b32122d2b481c091a6cf17610a203b690d6b3d0c1ccf0886f979ebe64870d432d6b4e818735169ef731d46d2ceea49dec7e227bac870c5579a8d553ad067e2b92ee2d7b1967c685da14fa90dbbdb850e19020c07fe069c5fb075a58e414cd9f01a5cfd0bf15b19c82ee7825748c6da93b6b296b5f1240f53e3ed4e22f93b66fa79faca68d4a6999cf3b1f9099e834c14d727c24f561748c72e37097", 0xda) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:15:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e4800000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 67) [ 2869.824196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2869.831392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2869.840844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2869.849543] FAULT_INJECTION: forcing a failure. [ 2869.849543] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.852517] CPU: 1 PID: 14047 Comm: syz-executor.0 Not tainted 5.10.178 #1 [ 2869.854010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.855801] Call Trace: [ 2869.856389] dump_stack+0x107/0x167 [ 2869.857183] should_fail.cold+0x5/0xa [ 2869.858013] ? kvmalloc_node+0x119/0x170 [ 2869.858894] should_failslab+0x5/0x20 [ 2869.859717] __kmalloc_node+0x76/0x420 [ 2869.860578] ? __lock_acquire+0xbb1/0x5b00 [ 2869.861500] kvmalloc_node+0x119/0x170 [ 2869.862346] seq_read_iter+0x9d6/0x12b0 [ 2869.863211] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2869.864358] seq_read+0x3dd/0x5b0 [ 2869.865102] ? seq_read_iter+0x12b0/0x12b0 [ 2869.866020] ? fsnotify+0xf50/0xf50 [ 2869.866796] ? _cond_resched+0x12/0x80 [ 2869.867652] ? seq_read_iter+0x12b0/0x12b0 [ 2869.868575] proc_reg_read+0x22a/0x300 [ 2869.869424] ? proc_reg_write+0x300/0x300 [ 2869.870305] vfs_read+0x228/0x580 [ 2869.871069] __x64_sys_pread64+0x201/0x260 [ 2869.871968] ? ksys_pread64+0x1b0/0x1b0 [ 2869.872848] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2869.873961] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.875079] do_syscall_64+0x33/0x40 [ 2869.875879] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2869.876967] RIP: 0033:0x7f1afa870b19 [ 2869.877759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.881656] RSP: 002b:00007f1af7de6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2869.883262] RAX: ffffffffffffffda RBX: 00007f1afa983f60 RCX: 00007f1afa870b19 [ 2869.884778] RDX: 0000000000000ffa RSI: 0000000020002100 RDI: 0000000000000004 [ 2869.886279] RBP: 00007f1af7de61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.887778] R10: 0000000000006c00 R11: 0000000000000246 R12: 0000000000000001 [ 2869.889290] R13: 00007ffe5ef633ff R14: 00007f1af7de6300 R15: 0000000000022000 10:15:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000b0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000003e, 0x0) 10:15:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e4c00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2869.907249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2869.915461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2869.934468] FAULT_INJECTION: forcing a failure. [ 2869.934468] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.935700] CPU: 0 PID: 14051 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2869.936410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.937228] Call Trace: [ 2869.937505] dump_stack+0x107/0x167 [ 2869.937868] should_fail.cold+0x5/0xa [ 2869.938248] ? ip6_setup_cork+0x1e4/0x1740 [ 2869.938681] should_failslab+0x5/0x20 [ 2869.939062] kmem_cache_alloc_trace+0x55/0x320 [ 2869.939525] ip6_setup_cork+0x1e4/0x1740 [ 2869.939936] ip6_make_skb+0x22d/0x4e0 [ 2869.940323] ? ip_frag_init+0x350/0x350 [ 2869.940722] ? ip6_push_pending_frames+0xf0/0xf0 [ 2869.941197] ? ip6_dst_hoplimit+0x199/0x440 [ 2869.941673] ? lock_downgrade+0x6d0/0x6d0 [ 2869.942099] udpv6_sendmsg+0x20d0/0x2af0 [ 2869.942504] ? ip_frag_init+0x350/0x350 [ 2869.942906] ? udp_v6_push_pending_frames+0x360/0x360 [ 2869.943470] ? lock_acquire+0x197/0x470 [ 2869.943872] ? find_held_lock+0x2c/0x110 [ 2869.944331] ? lock_acquire+0x197/0x470 [ 2869.944738] ? find_held_lock+0x2c/0x110 [ 2869.945188] ? sock_has_perm+0x1ea/0x280 [ 2869.945625] ? __import_iovec+0x458/0x590 [ 2869.946074] ? udp_v6_push_pending_frames+0x360/0x360 [ 2869.946617] inet6_sendmsg+0x105/0x140 [ 2869.947037] ? inet6_compat_ioctl+0x320/0x320 [ 2869.947499] sock_sendmsg+0xf2/0x190 [ 2869.947904] ____sys_sendmsg+0x334/0x870 [ 2869.948370] ? kernel_sendmsg+0x50/0x50 [ 2869.948791] ? do_recvmmsg+0x6d0/0x6d0 [ 2869.949201] ? __lock_acquire+0x1657/0x5b00 [ 2869.949671] ___sys_sendmsg+0xf3/0x170 [ 2869.950073] ? sendmsg_copy_msghdr+0x160/0x160 [ 2869.950560] ? vmacache_find+0x55/0x2a0 [ 2869.950975] ? lock_acquire+0x197/0x470 [ 2869.951397] ? find_held_lock+0x2c/0x110 [ 2869.951825] ? __might_fault+0xd3/0x180 [ 2869.952224] ? lock_downgrade+0x6d0/0x6d0 [ 2869.952669] ? lock_is_held_type+0xd2/0x110 [ 2869.953121] __sys_sendmmsg+0x195/0x470 [ 2869.953563] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2869.954010] ? lock_downgrade+0x6d0/0x6d0 [ 2869.954467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2869.954965] ? wait_for_completion_io+0x270/0x270 [ 2869.955482] ? rcu_read_lock_any_held+0x75/0xa0 [ 2869.955969] ? vfs_write+0x354/0xa70 [ 2869.956386] ? fput_many+0x2f/0x1a0 [ 2869.956764] ? ksys_write+0x1a9/0x260 [ 2869.957166] ? __ia32_sys_read+0xb0/0xb0 [ 2869.957592] __x64_sys_sendmmsg+0x99/0x100 [ 2869.958055] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.958586] do_syscall_64+0x33/0x40 [ 2869.958993] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2869.959520] RIP: 0033:0x7fba2f88eb19 [ 2869.959920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.961880] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2869.962685] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2869.963433] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2869.964183] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.964951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2869.965703] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2869.971836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:15:12 executing program 7: shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2869.985581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:15:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000c0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20004d021e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:12 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000080)="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") perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2870.028330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2870.037285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:12 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e6800000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e6c00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:26 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0x80) 10:15:26 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) (fail_nth: 2) 10:15:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000031e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000d0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2883.801112] FAULT_INJECTION: forcing a failure. [ 2883.801112] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.802443] CPU: 0 PID: 14088 Comm: syz-executor.0 Not tainted 5.10.178 #1 [ 2883.803230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2883.804168] Call Trace: [ 2883.804483] dump_stack+0x107/0x167 [ 2883.804896] should_fail.cold+0x5/0xa [ 2883.805344] ? create_object.isra.0+0x3a/0xa20 [ 2883.805860] should_failslab+0x5/0x20 [ 2883.806293] kmem_cache_alloc+0x5b/0x310 [ 2883.806756] create_object.isra.0+0x3a/0xa20 [ 2883.807258] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2883.807840] __kmalloc_node+0x1ae/0x420 [ 2883.808032] __nla_validate_parse: 2 callbacks suppressed [ 2883.808043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2883.808293] kvmalloc_node+0x119/0x170 [ 2883.810789] seq_read_iter+0x9d6/0x12b0 [ 2883.811243] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2883.811849] seq_read+0x3dd/0x5b0 [ 2883.812241] ? seq_read_iter+0x12b0/0x12b0 [ 2883.812731] ? fsnotify+0xf50/0xf50 [ 2883.813144] ? _cond_resched+0x12/0x80 [ 2883.813586] ? seq_read_iter+0x12b0/0x12b0 [ 2883.814062] proc_reg_read+0x22a/0x300 [ 2883.814502] ? proc_reg_write+0x300/0x300 [ 2883.814968] vfs_read+0x228/0x580 [ 2883.815359] __x64_sys_pread64+0x201/0x260 [ 2883.815839] ? ksys_pread64+0x1b0/0x1b0 [ 2883.816287] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2883.816891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2883.817468] do_syscall_64+0x33/0x40 [ 2883.817890] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2883.818466] RIP: 0033:0x7f1afa870b19 [ 2883.818884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2883.820936] RSP: 002b:00007f1af7de6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2883.821775] RAX: ffffffffffffffda RBX: 00007f1afa983f60 RCX: 00007f1afa870b19 [ 2883.822569] RDX: 0000000000000ffa RSI: 0000000020002100 RDI: 0000000000000004 [ 2883.823358] RBP: 00007f1af7de61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.824146] R10: 0000000000006c00 R11: 0000000000000246 R12: 0000000000000001 [ 2883.824467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2883.824950] R13: 00007ffe5ef633ff R14: 00007f1af7de6300 R15: 0000000000022000 [ 2883.830736] FAULT_INJECTION: forcing a failure. [ 2883.830736] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.833824] CPU: 1 PID: 14098 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2883.834312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2883.835395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2883.835402] Call Trace: [ 2883.835426] dump_stack+0x107/0x167 [ 2883.835450] should_fail.cold+0x5/0xa [ 2883.835471] ? create_object.isra.0+0x3a/0xa20 10:15:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000041, 0x0) 10:15:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 68) 10:15:26 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2883.841760] should_failslab+0x5/0x20 [ 2883.842596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2883.844510] kmem_cache_alloc+0x5b/0x310 [ 2883.845435] create_object.isra.0+0x3a/0xa20 [ 2883.846431] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2883.847585] kmem_cache_alloc_trace+0x151/0x320 [ 2883.848649] ip6_setup_cork+0x1e4/0x1740 [ 2883.849577] ip6_make_skb+0x22d/0x4e0 [ 2883.850438] ? ip_frag_init+0x350/0x350 [ 2883.851336] ? ip6_push_pending_frames+0xf0/0xf0 [ 2883.852419] ? ip6_dst_hoplimit+0x199/0x440 [ 2883.853388] ? lock_downgrade+0x6d0/0x6d0 [ 2883.854329] udpv6_sendmsg+0x20d0/0x2af0 [ 2883.855237] ? ip_frag_init+0x350/0x350 [ 2883.856130] ? udp_v6_push_pending_frames+0x360/0x360 [ 2883.857294] ? trace_hardirqs_on+0x5b/0x180 [ 2883.858262] ? lock_acquire+0x197/0x470 [ 2883.859145] ? find_held_lock+0x2c/0x110 [ 2883.860057] ? lock_acquire+0x197/0x470 [ 2883.860948] ? find_held_lock+0x2c/0x110 [ 2883.861868] ? sock_has_perm+0x1ea/0x280 [ 2883.862793] ? __import_iovec+0x458/0x590 [ 2883.863716] ? udp_v6_push_pending_frames+0x360/0x360 [ 2883.864879] inet6_sendmsg+0x105/0x140 [ 2883.865746] ? inet6_compat_ioctl+0x320/0x320 10:15:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000e0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2883.866739] sock_sendmsg+0xf2/0x190 [ 2883.867689] ____sys_sendmsg+0x334/0x870 [ 2883.868610] ? kernel_sendmsg+0x50/0x50 [ 2883.869488] ? do_recvmmsg+0x6d0/0x6d0 [ 2883.870356] ? __lock_acquire+0x1657/0x5b00 [ 2883.871334] ___sys_sendmsg+0xf3/0x170 [ 2883.872197] ? sendmsg_copy_msghdr+0x160/0x160 [ 2883.873217] ? vmacache_find+0x55/0x2a0 [ 2883.874115] ? lock_acquire+0x197/0x470 [ 2883.875002] ? find_held_lock+0x2c/0x110 [ 2883.875906] ? __might_fault+0xd3/0x180 [ 2883.876795] ? lock_downgrade+0x6d0/0x6d0 [ 2883.877718] ? asm_exc_page_fault+0x1e/0x30 [ 2883.878694] __sys_sendmmsg+0x195/0x470 [ 2883.879586] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2883.880551] ? lock_downgrade+0x6d0/0x6d0 [ 2883.881495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2883.882569] ? wait_for_completion_io+0x270/0x270 [ 2883.883645] ? rcu_read_lock_any_held+0x75/0xa0 [ 2883.884688] ? vfs_write+0x354/0xa70 [ 2883.885517] ? fput_many+0x2f/0x1a0 [ 2883.886328] ? ksys_write+0x1a9/0x260 [ 2883.887176] ? __ia32_sys_read+0xb0/0xb0 [ 2883.888087] __x64_sys_sendmmsg+0x99/0x100 [ 2883.889042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2883.890190] do_syscall_64+0x33/0x40 [ 2883.891016] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2883.892153] RIP: 0033:0x7fba2f88eb19 [ 2883.892985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2883.897070] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2883.898755] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2883.900333] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2883.901935] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.903509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2883.905090] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2883.921759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000042, 0x0) [ 2883.929619] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:26 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmat(0x0, &(0x7f0000ff7000/0x8000)=nil, 0x2000) shmdt(r0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmdt(r0) 10:15:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ec00e0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:26 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) (fail_nth: 3) 10:15:26 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e7400000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000051e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2883.999821] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2884.011594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2884.023647] FAULT_INJECTION: forcing a failure. [ 2884.023647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2884.026314] CPU: 1 PID: 14123 Comm: syz-executor.0 Not tainted 5.10.178 #1 [ 2884.027830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.029639] Call Trace: [ 2884.030231] dump_stack+0x107/0x167 [ 2884.031036] should_fail.cold+0x5/0xa [ 2884.031873] _copy_to_user+0x2e/0x180 [ 2884.032712] simple_read_from_buffer+0xcc/0x160 [ 2884.033734] proc_fail_nth_read+0x198/0x230 [ 2884.034674] ? proc_sessionid_read+0x230/0x230 [ 2884.035657] ? security_file_permission+0x24e/0x570 [ 2884.036761] ? perf_trace_initcall_start+0x101/0x380 [ 2884.037881] ? proc_sessionid_read+0x230/0x230 [ 2884.038874] vfs_read+0x228/0x580 [ 2884.039637] ksys_read+0x12d/0x260 [ 2884.040408] ? vfs_write+0xa70/0xa70 [ 2884.041237] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2884.042374] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2884.043504] do_syscall_64+0x33/0x40 [ 2884.044312] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2884.045446] RIP: 0033:0x7f1afa82369c [ 2884.046263] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2884.050248] RSP: 002b:00007f1af7de6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2884.051907] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1afa82369c [ 2884.053488] RDX: 000000000000000f RSI: 00007f1af7de61e0 RDI: 0000000000000006 [ 2884.055036] RBP: 00007f1af7de61d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.056601] R10: 0000000000006c00 R11: 0000000000000246 R12: 0000000000000001 [ 2884.058158] R13: 00007ffe5ef633ff R14: 00007f1af7de6300 R15: 0000000000022000 [ 2884.061498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2884.073674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2898.548235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000f0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000100)={0x0, 0x0, 0x5}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000080)="14d1dfdbaa8e5b6d5cf933b82d19821276e504"}) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 69) 10:15:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e7a00000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000043, 0x0) 10:15:41 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:15:41 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/224) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r1 = shmget(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000100)=""/90) shmctl$IPC_RMID(0x0, 0x0) 10:15:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000061e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2898.556840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2898.561646] FAULT_INJECTION: forcing a failure. [ 2898.561646] name failslab, interval 1, probability 0, space 0, times 0 [ 2898.562962] CPU: 1 PID: 14147 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2898.563712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2898.564615] Call Trace: [ 2898.564914] dump_stack+0x107/0x167 [ 2898.565303] should_fail.cold+0x5/0xa [ 2898.565711] should_failslab+0x5/0x20 [ 2898.566123] __kmalloc_track_caller+0x79/0x370 [ 2898.566608] ? ip6_setup_cork+0x670/0x1740 [ 2898.567072] kmemdup+0x23/0x50 [ 2898.567413] ip6_setup_cork+0x670/0x1740 [ 2898.567857] ip6_make_skb+0x22d/0x4e0 [ 2898.568278] ? ip_frag_init+0x350/0x350 [ 2898.568741] ? ip6_push_pending_frames+0xf0/0xf0 [ 2898.569263] ? ip6_dst_hoplimit+0x199/0x440 [ 2898.569724] ? lock_downgrade+0x6d0/0x6d0 [ 2898.570177] udpv6_sendmsg+0x20d0/0x2af0 [ 2898.570626] ? ip_frag_init+0x350/0x350 [ 2898.571058] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.571630] ? perf_event_task_disable+0x390/0x390 [ 2898.572152] ? lock_downgrade+0x6d0/0x6d0 [ 2898.572591] ? hrtimer_start_range_ns+0x336/0xae0 [ 2898.573115] ? lock_acquire+0x197/0x470 [ 2898.573544] ? find_held_lock+0x2c/0x110 [ 2898.573987] ? sock_has_perm+0x1ea/0x280 [ 2898.574445] ? __import_iovec+0x458/0x590 [ 2898.574895] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.575444] inet6_sendmsg+0x105/0x140 [ 2898.575864] ? inet6_compat_ioctl+0x320/0x320 [ 2898.576347] sock_sendmsg+0xf2/0x190 [ 2898.576752] ____sys_sendmsg+0x334/0x870 [ 2898.577192] ? kernel_sendmsg+0x50/0x50 [ 2898.577622] ? do_recvmmsg+0x6d0/0x6d0 [ 2898.578044] ? __lock_acquire+0x1657/0x5b00 [ 2898.578519] ___sys_sendmsg+0xf3/0x170 [ 2898.578939] ? sendmsg_copy_msghdr+0x160/0x160 [ 2898.579436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2898.580000] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2898.580482] ? trace_hardirqs_on+0x5b/0x180 [ 2898.580969] ? lock_acquire+0x197/0x470 [ 2898.581316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2898.581392] ? find_held_lock+0x2c/0x110 [ 2898.581410] ? __might_fault+0xd3/0x180 [ 2898.584063] ? lock_downgrade+0x6d0/0x6d0 [ 2898.584497] ? io_schedule_timeout+0x140/0x140 [ 2898.584989] __sys_sendmmsg+0x195/0x470 [ 2898.585411] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2898.585867] ? lock_downgrade+0x6d0/0x6d0 [ 2898.586311] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2898.586832] ? wait_for_completion_io+0x270/0x270 [ 2898.587345] ? rcu_read_lock_any_held+0x75/0xa0 [ 2898.587840] ? vfs_write+0x354/0xa70 [ 2898.588239] ? fput_many+0x2f/0x1a0 [ 2898.588631] ? ksys_write+0x1a9/0x260 [ 2898.589033] ? __ia32_sys_read+0xb0/0xb0 [ 2898.589470] __x64_sys_sendmmsg+0x99/0x100 [ 2898.589918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2898.590467] do_syscall_64+0x33/0x40 [ 2898.590868] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2898.591410] RIP: 0033:0x7fba2f88eb19 [ 2898.591816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.593783] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2898.594602] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2898.595369] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2898.596121] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.596898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2898.597651] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:15:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00480000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2898.635545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2898.637026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2898.639155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:41 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7f, 0x2a8b, 0x8001}) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) fsetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000a607aefe834a9ff9b898071b9cc8762585734a6d7bbb2886bc121290f5d954d243db1b2e61bb2686704c910fc837581fbbbcab8c1cf27c799baaf85e4623decfd9d9bf29f4746f7148f476b2fd1dad3c4c9d14bf65f45a57c6b1d276427b0e0ba5791a0e97bc927b91990d385273b19044db8eaa4a8ccfee4611717ce62e5280da349c835bdd20bfcc025d176821e07caf1171e4c4d9d2482710a42fb2151680f9c76e93d8e7438c8e3197f88e1e2bf3d946acaf12f71412164d622834e597cdc623b936d6bc63e9eceacb165056a9427d68478f780b9be96755dec8d7444e119384b5701957ba56fb3b401352ac70e4470265af"], &(0x7f0000000100)='-:\x00', 0x3, 0x1) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) 10:15:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e004c0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:41 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0x200030fa, 0x6c00) 10:15:41 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x10e00, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x80}}, 0x40800) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:15:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000044, 0x0) [ 2898.699230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2898.706184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:41 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x8, @mcast1, 0x4}}, 0x80) recvfrom$inet(r2, &(0x7f0000000080)=""/254, 0xfe, 0x40000042, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 70) 10:15:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000071e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:41 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00680000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:41 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ef000000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2898.793484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2898.797564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2898.863810] FAULT_INJECTION: forcing a failure. [ 2898.863810] name failslab, interval 1, probability 0, space 0, times 0 [ 2898.866575] CPU: 0 PID: 14189 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2898.867993] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2898.869811] Call Trace: [ 2898.870348] dump_stack+0x107/0x167 [ 2898.871077] should_fail.cold+0x5/0xa [ 2898.871842] ? __alloc_skb+0x6d/0x5b0 [ 2898.872626] should_failslab+0x5/0x20 [ 2898.873395] kmem_cache_alloc_node+0x55/0x330 [ 2898.874299] __alloc_skb+0x6d/0x5b0 [ 2898.875035] alloc_skb_with_frags+0x92/0x570 [ 2898.875930] sock_alloc_send_pskb+0x7af/0x930 [ 2898.876852] ? sk_alloc+0x350/0x350 [ 2898.877586] ? lock_acquire+0x197/0x470 [ 2898.878383] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2898.879447] ? lock_release+0x680/0x680 [ 2898.880266] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2898.881305] ? ip6_mtu+0x1bb/0x3d0 [ 2898.882027] ? lock_downgrade+0x6d0/0x6d0 [ 2898.882864] ? ip_frag_init+0x350/0x350 [ 2898.883677] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2898.884625] ? ip6_mtu+0x1e9/0x3d0 [ 2898.885360] ? ip6_setup_cork+0xfb7/0x1740 [ 2898.886215] ip6_make_skb+0x2de/0x4e0 [ 2898.886979] ? ip_frag_init+0x350/0x350 [ 2898.887785] ? ip_frag_init+0x350/0x350 [ 2898.888589] ? ip6_push_pending_frames+0xf0/0xf0 [ 2898.889562] ? ip6_dst_hoplimit+0x199/0x440 [ 2898.890430] ? lock_downgrade+0x6d0/0x6d0 [ 2898.891283] udpv6_sendmsg+0x20d0/0x2af0 [ 2898.892104] ? ip_frag_init+0x350/0x350 [ 2898.892931] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.893972] ? lock_acquire+0x197/0x470 [ 2898.894777] ? find_held_lock+0x2c/0x110 [ 2898.895600] ? lock_acquire+0x197/0x470 [ 2898.896404] ? find_held_lock+0x2c/0x110 [ 2898.897255] ? sock_has_perm+0x1ea/0x280 [ 2898.898095] ? __import_iovec+0x458/0x590 [ 2898.898928] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.899969] inet6_sendmsg+0x105/0x140 [ 2898.900760] ? inet6_compat_ioctl+0x320/0x320 [ 2898.901660] sock_sendmsg+0xf2/0x190 [ 2898.902409] ____sys_sendmsg+0x334/0x870 [ 2898.903235] ? kernel_sendmsg+0x50/0x50 [ 2898.904033] ? do_recvmmsg+0x6d0/0x6d0 [ 2898.904847] ? __lock_acquire+0x1657/0x5b00 [ 2898.905726] ___sys_sendmsg+0xf3/0x170 [ 2898.906519] ? sendmsg_copy_msghdr+0x160/0x160 [ 2898.907436] ? vmacache_find+0x55/0x2a0 [ 2898.908247] ? lock_acquire+0x197/0x470 [ 2898.909061] ? find_held_lock+0x2c/0x110 [ 2898.909893] ? __might_fault+0xd3/0x180 [ 2898.910697] ? lock_downgrade+0x6d0/0x6d0 [ 2898.911537] ? asm_exc_page_fault+0x1e/0x30 [ 2898.912422] __sys_sendmmsg+0x195/0x470 [ 2898.913250] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2898.914119] ? lock_downgrade+0x6d0/0x6d0 [ 2898.914966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2898.915944] ? wait_for_completion_io+0x270/0x270 [ 2898.916928] ? rcu_read_lock_any_held+0x75/0xa0 [ 2898.917869] ? vfs_write+0x354/0xa70 [ 2898.918622] ? fput_many+0x2f/0x1a0 [ 2898.919358] ? ksys_write+0x1a9/0x260 [ 2898.920125] ? __ia32_sys_read+0xb0/0xb0 [ 2898.920967] __x64_sys_sendmmsg+0x99/0x100 [ 2898.921829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2898.922867] do_syscall_64+0x33/0x40 [ 2898.923624] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2898.924667] RIP: 0033:0x7fba2f88eb19 [ 2898.925426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.929156] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2898.930695] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2898.932134] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2898.933577] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.935019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2898.936450] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:15:54 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:15:54 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0xa3) 10:15:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000045, 0x0) 10:15:54 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 71) 10:15:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000091e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ee601000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup2(r4, r4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r6, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r6, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r7, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x2400c041) syz_io_uring_submit(r2, 0x0, &(0x7f0000000b00)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/131, 0x83}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/100, 0x64}, {&(0x7f0000000640)=""/244, 0xf4}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/121, 0x79}, {&(0x7f00000008c0)=""/218, 0xda}], 0xa, &(0x7f0000000a80)=""/48, 0x30}, 0x0, 0x10040}, 0x4) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:15:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e006c0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2912.237471] __nla_validate_parse: 2 callbacks suppressed [ 2912.237483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.263442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2912.267475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.268740] FAULT_INJECTION: forcing a failure. [ 2912.268740] name failslab, interval 1, probability 0, space 0, times 0 [ 2912.272267] CPU: 0 PID: 14213 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2912.273662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.275310] Call Trace: [ 2912.275843] dump_stack+0x107/0x167 [ 2912.276571] should_fail.cold+0x5/0xa [ 2912.277339] ? create_object.isra.0+0x3a/0xa20 [ 2912.278249] should_failslab+0x5/0x20 [ 2912.279014] kmem_cache_alloc+0x5b/0x310 [ 2912.279822] ? lock_downgrade+0x6d0/0x6d0 [ 2912.280650] create_object.isra.0+0x3a/0xa20 [ 2912.281547] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2912.282561] __kmalloc_track_caller+0x177/0x370 [ 2912.283488] ? ip6_setup_cork+0x670/0x1740 [ 2912.284337] kmemdup+0x23/0x50 [ 2912.284986] ip6_setup_cork+0x670/0x1740 [ 2912.285803] ip6_make_skb+0x22d/0x4e0 [ 2912.286560] ? ip_frag_init+0x350/0x350 [ 2912.287355] ? ip6_push_pending_frames+0xf0/0xf0 [ 2912.288301] ? ip6_dst_hoplimit+0x199/0x440 [ 2912.289176] ? lock_downgrade+0x6d0/0x6d0 [ 2912.290009] udpv6_sendmsg+0x20d0/0x2af0 [ 2912.290813] ? ip_frag_init+0x350/0x350 [ 2912.291612] ? udp_v6_push_pending_frames+0x360/0x360 [ 2912.292665] ? perf_event_task_disable+0x390/0x390 [ 2912.293648] ? lock_downgrade+0x6d0/0x6d0 [ 2912.294456] ? hrtimer_start_range_ns+0x336/0xae0 [ 2912.295397] ? lock_acquire+0x197/0x470 [ 2912.296210] ? find_held_lock+0x2c/0x110 [ 2912.297063] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2912.298156] ? sock_has_perm+0x1ea/0x280 [ 2912.298998] ? _copy_from_user+0xfb/0x1b0 [ 2912.299842] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 2912.300816] ? __import_iovec+0x458/0x590 [ 2912.301648] ? udp_v6_push_pending_frames+0x360/0x360 [ 2912.302680] inet6_sendmsg+0x105/0x140 [ 2912.303461] ? inet6_compat_ioctl+0x320/0x320 [ 2912.304352] sock_sendmsg+0xf2/0x190 [ 2912.305099] ____sys_sendmsg+0x334/0x870 [ 2912.305912] ? kernel_sendmsg+0x50/0x50 [ 2912.306705] ? do_recvmmsg+0x6d0/0x6d0 [ 2912.307499] ? find_held_lock+0x2c/0x110 [ 2912.308329] ___sys_sendmsg+0xf3/0x170 [ 2912.309136] ? sendmsg_copy_msghdr+0x160/0x160 [ 2912.310061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2912.311121] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2912.312027] ? trace_hardirqs_on+0x5b/0x180 [ 2912.312905] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2912.313816] ? finish_task_switch+0x126/0x5d0 [ 2912.314846] ? finish_task_switch+0xef/0x5d0 [ 2912.315949] ? __switch_to+0x572/0xf70 [ 2912.316943] ? __switch_to_asm+0x3a/0x60 [ 2912.317956] ? __switch_to_asm+0x34/0x60 [ 2912.318977] ? __schedule+0x82c/0x1ea0 [ 2912.319894] ? io_schedule_timeout+0x140/0x140 [ 2912.320869] __sys_sendmmsg+0x195/0x470 [ 2912.321750] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2912.322662] ? lock_downgrade+0x6d0/0x6d0 [ 2912.323531] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2912.324527] ? wait_for_completion_io+0x270/0x270 [ 2912.325508] ? rcu_read_lock_any_held+0x75/0xa0 [ 2912.326436] ? vfs_write+0x354/0xa70 [ 2912.327190] ? fput_many+0x2f/0x1a0 [ 2912.327919] ? ksys_write+0x1a9/0x260 [ 2912.328677] ? __ia32_sys_read+0xb0/0xb0 [ 2912.329510] __x64_sys_sendmmsg+0x99/0x100 [ 2912.330376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2912.331409] do_syscall_64+0x33/0x40 [ 2912.332149] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2912.333182] RIP: 0033:0x7fba2f88eb19 [ 2912.333934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.337615] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2912.339131] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2912.340554] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2912.341987] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.343413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.344854] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2912.360744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:54 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x14a) 10:15:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00740000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:15:54 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) 10:15:54 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0003000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:15:54 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000a1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:15:54 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000046, 0x0) [ 2912.507378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.515512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2912.526764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.535430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:15:55 executing program 7: sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2, 0x4, 0x7f, 0x2, 0x0, @private1, @mcast2, 0x700, 0x0, 0x5}}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000840)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x640040}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x42c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5f7dbe20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3331}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffeb}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xe6}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x459}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffa2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc04}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x36, 0x3, "085fc76b0a7de9554dc42e01eb107f913ae6024cb1e015281cab48b03aaf4275de05cd27ab6290e2cb991b4d0b270f374b26"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x80, 0x3, "41205494eb1a08af626cd3f8693265e6a050fb5cfa1dbe7993b702d62d27383a264693dec6e59fa0dfe6eadf3b3899d6c64ac1220c666e66e66293e19ae85d777ab239d292a1a427a7b7474c6fd37fcefda113c44f5f3e8c243edbb56f65abdaa37eaf62126bd745eddea8e5820465f7b10748aa5a35a2eeeccc28c6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xb6, 0x3, "664d87a54dfdd416da0eaf3318a3af8b4471adaa10400a19a14c6cfdf0b9c97f43b96ce1e93757e2835ff55b4ca774f123d3d12afe90bb0113d0db4938e5143827d9999e75ae52ed60a3ca9a0159a981d727b17714136b70a3ae96168b8accd09abdeeba71b4fad07a5c1a7c2a880834d5c95d49732a0ca1317cbb8ef2823ddf28de4ae4c0d419f14cec33043990c7b7263ca96b0a2cca390fd942abd6cee8cf332b011a353caf3179e073de0a809f136be4"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4008090}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddb3f000d0000001c00f48008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000180140002006970365f767469300000000000000000080003000300000014000200766972745f77696669300000000000001400020076657468315f746f5f626174616476001c00018008000100", @ANYRES32=r0, @ANYBLOB="08000300020000000800030002000000"], 0x94}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) 10:15:55 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x1f1) 10:15:55 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x1, 0x400000) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r3 = socket$inet(0xa, 0x3, 0xff) sendto(r3, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0xaa05, 0x4e24, 0x3, 0x2, 0x20}, {0x6, 0x8, 0x4, 0x0, 0x3, 0x7, 0xffffffffffffffff, 0x7}, {0x3, 0x3f, 0x4f2, 0x5}, 0x6, 0x0, 0x1, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d3, 0x33}, 0x2, @in6=@local, 0x3503, 0x1, 0x2, 0x2, 0xf7, 0x5, 0x2}}, 0xe8) sendto$inet(r4, &(0x7f0000000180)="424c4593f31279b611a6c1364df8eedc07e2bd5587cc281f145f25b0e19743a626943553b11e331945576cba0be7c6584e14f79b9b8abaecf3f8a6ce6173806be5634ccb648bb26e5fa2600094da9aa51a04fe9c0384c0bc78fbbc90229d8950b543c892b97ae18c72cf7117f9ce22232344319e423f60528eb59274ad8cf8c0127202606220436f55aef7c9b2e1be933ec5c8d8e3dd28b66d40768791f140", 0x9f, 0x40050, &(0x7f0000000240)={0x2, 0x4e22, @loopback}, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000100)=0x3, r1, &(0x7f0000000140)=0x3, 0x1, 0x0) 10:15:55 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0005000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2912.683605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2912.694505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0006000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:16:09 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000b1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:16:09 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e007a0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000047, 0x0) [ 2927.305132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) ftruncate(r2, 0x7fff) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 72) 10:16:09 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2000) 10:16:09 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmdt(r1) shmdt(r1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2927.318453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2927.321695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:09 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2300) 10:16:09 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2a00) [ 2927.346629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) pread64(r2, &(0x7f0000000080)=""/98, 0x62, 0x7) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2927.389545] FAULT_INJECTION: forcing a failure. [ 2927.389545] name failslab, interval 1, probability 0, space 0, times 0 [ 2927.390859] CPU: 1 PID: 14285 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2927.391602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.392488] Call Trace: [ 2927.392786] dump_stack+0x107/0x167 [ 2927.393198] should_fail.cold+0x5/0xa [ 2927.393614] ? create_object.isra.0+0x3a/0xa20 [ 2927.394129] should_failslab+0x5/0x20 [ 2927.394534] kmem_cache_alloc+0x5b/0x310 [ 2927.394965] ? lock_chain_count+0x20/0x20 [ 2927.395407] create_object.isra.0+0x3a/0xa20 [ 2927.395875] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2927.396413] kmem_cache_alloc_node+0x169/0x330 [ 2927.396902] __alloc_skb+0x6d/0x5b0 [ 2927.397308] alloc_skb_with_frags+0x92/0x570 [ 2927.397781] sock_alloc_send_pskb+0x7af/0x930 [ 2927.398263] ? sk_alloc+0x350/0x350 [ 2927.398647] ? lock_acquire+0x197/0x470 [ 2927.399072] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2927.399632] ? lock_release+0x680/0x680 [ 2927.400068] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2927.400609] ? ip6_mtu+0x1bb/0x3d0 [ 2927.400994] ? lock_downgrade+0x6d0/0x6d0 [ 2927.401429] ? ip_frag_init+0x350/0x350 [ 2927.401854] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2927.402347] ? ip6_mtu+0x1e9/0x3d0 [ 2927.402730] ? ip6_setup_cork+0xfb7/0x1740 [ 2927.403184] ip6_make_skb+0x2de/0x4e0 [ 2927.403584] ? ip_frag_init+0x350/0x350 [ 2927.404013] ? ip_frag_init+0x350/0x350 [ 2927.404436] ? ip6_push_pending_frames+0xf0/0xf0 [ 2927.404943] ? ip6_dst_hoplimit+0x199/0x440 [ 2927.405414] ? lock_downgrade+0x6d0/0x6d0 [ 2927.405858] udpv6_sendmsg+0x20d0/0x2af0 [ 2927.406287] ? ip_frag_init+0x350/0x350 [ 2927.406713] ? udp_v6_push_pending_frames+0x360/0x360 [ 2927.407259] ? trace_hardirqs_on+0x5b/0x180 [ 2927.407721] ? lock_acquire+0x197/0x470 [ 2927.408144] ? find_held_lock+0x2c/0x110 [ 2927.408587] ? lock_acquire+0x197/0x470 [ 2927.409011] ? find_held_lock+0x2c/0x110 [ 2927.409446] ? sock_has_perm+0x1ea/0x280 [ 2927.409888] ? __import_iovec+0x458/0x590 [ 2927.410333] ? udp_v6_push_pending_frames+0x360/0x360 [ 2927.410884] inet6_sendmsg+0x105/0x140 [ 2927.411296] ? inet6_compat_ioctl+0x320/0x320 [ 2927.411767] sock_sendmsg+0xf2/0x190 [ 2927.412160] ____sys_sendmsg+0x334/0x870 [ 2927.412600] ? kernel_sendmsg+0x50/0x50 [ 2927.413039] ? do_recvmmsg+0x6d0/0x6d0 [ 2927.413470] ? __lock_acquire+0x1657/0x5b00 [ 2927.413950] ___sys_sendmsg+0xf3/0x170 [ 2927.414381] ? sendmsg_copy_msghdr+0x160/0x160 [ 2927.414878] ? vmacache_find+0x55/0x2a0 [ 2927.415318] ? lock_acquire+0x197/0x470 [ 2927.415751] ? find_held_lock+0x2c/0x110 [ 2927.416200] ? __might_fault+0xd3/0x180 [ 2927.416639] ? lock_downgrade+0x6d0/0x6d0 [ 2927.417097] ? asm_exc_page_fault+0x1e/0x30 [ 2927.417576] __sys_sendmmsg+0x195/0x470 [ 2927.418012] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2927.418486] ? lock_downgrade+0x6d0/0x6d0 [ 2927.418947] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2927.419471] ? wait_for_completion_io+0x270/0x270 [ 2927.420007] ? rcu_read_lock_any_held+0x75/0xa0 [ 2927.420516] ? vfs_write+0x354/0xa70 [ 2927.420933] ? fput_many+0x2f/0x1a0 [ 2927.421349] ? ksys_write+0x1a9/0x260 [ 2927.421767] ? __ia32_sys_read+0xb0/0xb0 [ 2927.422219] __x64_sys_sendmmsg+0x99/0x100 [ 2927.422682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2927.423256] do_syscall_64+0x33/0x40 [ 2927.423665] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2927.424224] RIP: 0033:0x7fba2f88eb19 [ 2927.424635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.426664] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2927.427500] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2927.428284] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2927.429084] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.429858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.430634] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:16:22 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget(0x2, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/136) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x65) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f00000000c0), 0x4, 0x3) 10:16:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3e, 0x200, 0x70bd26, 0x25dfdbfd, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:22 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 73) 10:16:22 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2b00) 10:16:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00810000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0007000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:16:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000048, 0x0) [ 2940.197812] FAULT_INJECTION: forcing a failure. [ 2940.197812] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.199440] CPU: 1 PID: 14311 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2940.200178] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.201046] Call Trace: [ 2940.201372] dump_stack+0x107/0x167 [ 2940.201758] should_fail.cold+0x5/0xa [ 2940.202175] ? create_object.isra.0+0x3a/0xa20 [ 2940.202662] should_failslab+0x5/0x20 [ 2940.203072] kmem_cache_alloc+0x5b/0x310 [ 2940.203508] ? lock_chain_count+0x20/0x20 [ 2940.203948] create_object.isra.0+0x3a/0xa20 [ 2940.204420] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2940.204963] kmem_cache_alloc_node+0x169/0x330 [ 2940.205453] __alloc_skb+0x6d/0x5b0 [ 2940.205839] alloc_skb_with_frags+0x92/0x570 [ 2940.206316] sock_alloc_send_pskb+0x7af/0x930 [ 2940.206791] ? sk_alloc+0x350/0x350 [ 2940.207179] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.207734] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2940.208266] ? ip6_mtu+0x1bb/0x3d0 [ 2940.208646] ? lock_downgrade+0x6d0/0x6d0 [ 2940.209092] ? ip_frag_init+0x350/0x350 [ 2940.209529] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2940.210031] ? ip6_mtu+0x1e9/0x3d0 [ 2940.210418] ? ip6_setup_cork+0xfb7/0x1740 [ 2940.210870] ip6_make_skb+0x2de/0x4e0 [ 2940.211275] ? ip_frag_init+0x350/0x350 [ 2940.211704] ? ip_frag_init+0x350/0x350 [ 2940.212130] ? ip6_push_pending_frames+0xf0/0xf0 [ 2940.212642] ? ip6_dst_hoplimit+0x199/0x440 [ 2940.213102] ? lock_downgrade+0x6d0/0x6d0 [ 2940.213562] udpv6_sendmsg+0x20d0/0x2af0 [ 2940.213807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2940.214023] ? ip_frag_init+0x350/0x350 [ 2940.214038] ? udp_v6_push_pending_frames+0x360/0x360 [ 2940.214052] ? perf_event_task_disable+0x390/0x390 [ 2940.214061] ? lock_downgrade+0x6d0/0x6d0 [ 2940.214072] ? hrtimer_start_range_ns+0x336/0xae0 [ 2940.214085] ? lock_acquire+0x197/0x470 [ 2940.214094] ? find_held_lock+0x2c/0x110 [ 2940.214112] ? sock_has_perm+0x1ea/0x280 [ 2940.214133] ? __import_iovec+0x458/0x590 [ 2940.214142] ? udp_v6_push_pending_frames+0x360/0x360 [ 2940.214153] inet6_sendmsg+0x105/0x140 [ 2940.214163] ? inet6_compat_ioctl+0x320/0x320 [ 2940.214171] sock_sendmsg+0xf2/0x190 [ 2940.214191] ____sys_sendmsg+0x334/0x870 [ 2940.222558] ? kernel_sendmsg+0x50/0x50 [ 2940.222808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2940.223006] ? do_recvmmsg+0x6d0/0x6d0 [ 2940.223018] ? __lock_acquire+0x1657/0x5b00 [ 2940.223043] ___sys_sendmsg+0xf3/0x170 [ 2940.226160] ? sendmsg_copy_msghdr+0x160/0x160 [ 2940.226664] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2940.227249] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2940.227748] ? trace_hardirqs_on+0x5b/0x180 [ 2940.228238] ? lock_acquire+0x197/0x470 [ 2940.228678] ? find_held_lock+0x2c/0x110 [ 2940.229137] ? __might_fault+0xd3/0x180 [ 2940.229591] ? lock_downgrade+0x6d0/0x6d0 [ 2940.230053] ? io_schedule_timeout+0x140/0x140 [ 2940.230572] __sys_sendmmsg+0x195/0x470 [ 2940.231022] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2940.231498] ? lock_downgrade+0x6d0/0x6d0 [ 2940.231970] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2940.232513] ? wait_for_completion_io+0x270/0x270 [ 2940.233050] ? rcu_read_lock_any_held+0x75/0xa0 [ 2940.233583] ? vfs_write+0x354/0xa70 [ 2940.233995] ? fput_many+0x2f/0x1a0 [ 2940.234399] ? ksys_write+0x1a9/0x260 [ 2940.234823] ? __ia32_sys_read+0xb0/0xb0 [ 2940.235278] __x64_sys_sendmmsg+0x99/0x100 [ 2940.235746] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.236318] do_syscall_64+0x33/0x40 [ 2940.236735] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2940.237318] RIP: 0033:0x7fba2f88eb19 [ 2940.237733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.239785] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2940.240634] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2940.241435] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 10:16:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000c1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 2940.242222] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.243214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2940.244007] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:16:22 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2d00) [ 2940.265114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e06a90000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2940.271146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2940.294746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:22 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6000000, 0x50, 0xffffffffffffffff, 0x2) [ 2940.305921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2940.344312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0009000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:16:22 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e01ac0000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2940.347852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2940.354796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2940.358636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e3009000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2952.815448] __nla_validate_parse: 2 callbacks suppressed [ 2952.815472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 74) 10:16:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0ec00000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2952.825461] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000049, 0x0) 10:16:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {0x0}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x5) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x18249, 0x0, 0x3, 0x0, 0x2000, 0x101, 0x0, 0x0, 0xfff, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r3, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r3, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r3, 0x0, 0x5) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ppoll(&(0x7f0000000180)=[{}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x6c8}, {r3, 0x80}, {r4, 0x8000}], 0x5, &(0x7f00000001c0), &(0x7f0000000200)={[0x80]}, 0x8) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:35 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x2000) 10:16:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000600c1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:16:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000a000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:16:35 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x2e00) [ 2952.843543] FAULT_INJECTION: forcing a failure. [ 2952.843543] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.844860] CPU: 1 PID: 14360 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2952.845612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.846488] Call Trace: [ 2952.846781] dump_stack+0x107/0x167 [ 2952.847174] should_fail.cold+0x5/0xa [ 2952.847585] ? create_object.isra.0+0x3a/0xa20 [ 2952.848076] should_failslab+0x5/0x20 [ 2952.848482] kmem_cache_alloc+0x5b/0x310 [ 2952.848927] create_object.isra.0+0x3a/0xa20 [ 2952.849401] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.849950] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2952.850488] ? alloc_skb_with_frags+0x92/0x570 [ 2952.850971] __alloc_skb+0xb1/0x5b0 [ 2952.851365] alloc_skb_with_frags+0x92/0x570 [ 2952.851845] sock_alloc_send_pskb+0x7af/0x930 [ 2952.852330] ? sk_alloc+0x350/0x350 [ 2952.852723] ? lock_acquire+0x197/0x470 [ 2952.853146] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2952.853714] ? lock_release+0x680/0x680 [ 2952.854144] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 2952.854686] ? ip6_mtu+0x1bb/0x3d0 [ 2952.855061] ? lock_downgrade+0x6d0/0x6d0 [ 2952.855506] ? ip_frag_init+0x350/0x350 [ 2952.855936] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 2952.856430] ? ip6_mtu+0x1e9/0x3d0 [ 2952.856813] ? ip6_setup_cork+0xfb7/0x1740 [ 2952.857264] ip6_make_skb+0x2de/0x4e0 [ 2952.857675] ? ip_frag_init+0x350/0x350 [ 2952.858119] ? ip_frag_init+0x350/0x350 [ 2952.858578] ? ip6_push_pending_frames+0xf0/0xf0 [ 2952.859081] ? ip6_dst_hoplimit+0x199/0x440 [ 2952.859540] ? lock_downgrade+0x6d0/0x6d0 [ 2952.859987] udpv6_sendmsg+0x20d0/0x2af0 [ 2952.860421] ? ip_frag_init+0x350/0x350 [ 2952.860844] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.861412] ? trace_hardirqs_on+0x5b/0x180 [ 2952.861877] ? lock_acquire+0x197/0x470 [ 2952.862296] ? find_held_lock+0x2c/0x110 [ 2952.862726] ? lock_acquire+0x197/0x470 [ 2952.863147] ? find_held_lock+0x2c/0x110 [ 2952.863594] ? sock_has_perm+0x1ea/0x280 [ 2952.864041] ? __import_iovec+0x458/0x590 [ 2952.864488] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.865042] inet6_sendmsg+0x105/0x140 [ 2952.865479] ? inet6_compat_ioctl+0x320/0x320 [ 2952.865965] sock_sendmsg+0xf2/0x190 [ 2952.866363] ____sys_sendmsg+0x334/0x870 [ 2952.866796] ? kernel_sendmsg+0x50/0x50 [ 2952.867221] ? do_recvmmsg+0x6d0/0x6d0 [ 2952.867631] ? __lock_acquire+0x1657/0x5b00 [ 2952.868098] ___sys_sendmsg+0xf3/0x170 [ 2952.868511] ? sendmsg_copy_msghdr+0x160/0x160 [ 2952.869000] ? vmacache_find+0x55/0x2a0 [ 2952.869449] ? lock_acquire+0x197/0x470 [ 2952.869872] ? find_held_lock+0x2c/0x110 [ 2952.870312] ? __might_fault+0xd3/0x180 [ 2952.870733] ? lock_downgrade+0x6d0/0x6d0 [ 2952.871175] ? asm_exc_page_fault+0x1e/0x30 [ 2952.871649] __sys_sendmmsg+0x195/0x470 [ 2952.872080] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2952.872535] ? lock_downgrade+0x6d0/0x6d0 [ 2952.872984] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.873514] ? wait_for_completion_io+0x270/0x270 [ 2952.874027] ? rcu_read_lock_any_held+0x75/0xa0 [ 2952.874521] ? vfs_write+0x354/0xa70 [ 2952.874927] ? fput_many+0x2f/0x1a0 [ 2952.875321] ? ksys_write+0x1a9/0x260 [ 2952.875732] ? __ia32_sys_read+0xb0/0xb0 [ 2952.876163] __x64_sys_sendmmsg+0x99/0x100 [ 2952.876616] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2952.877163] do_syscall_64+0x33/0x40 [ 2952.877576] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2952.878120] RIP: 0033:0x7fba2f88eb19 [ 2952.878527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.880462] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2952.881273] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2952.882074] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2952.882830] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.883588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.884344] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 2952.886357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00f00000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2952.925669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2952.931827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r4, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x5) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r4, r0, 0x6}) r5 = socket$inet(0xa, 0x3, 0xff) sendto(r5, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000340)={{0x0, 0x400, 0xfffffffffffffffc, 0x0, 0x4, 0x8, 0x391f, 0xffffffff, 0x2, 0xce, 0x806, 0x3, 0x3f, 0x7}}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2952.949309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00400300000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:35 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x5) mmap$usbmon(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x100010, r0, 0xed6e) 10:16:35 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x3000) [ 2953.008391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000b000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2953.045380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:16:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000d1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:16:35 executing program 7: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x2, 0x3, 0x6}) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) [ 2953.134482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2953.154430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:35 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x4c00) 10:16:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 75) 10:16:35 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004a, 0x0) 10:16:35 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000c000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:16:35 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget(0x0, 0x3000, 0x8, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:16:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000800000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) sendto(r1, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast1}, &(0x7f00000000c0)=0xc) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x84) getsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f00000001c0)=""/79, &(0x7f0000000240)=0x4f) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r4 = socket$inet(0xa, 0x3, 0xff) sendto(r4, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f0000000340)={'raw\x00', 0xf7, "a890aaad66e8e59d01451de1fa65d8ec6b1c300540ebd66f47a5c9dee353fe1bca4a0710c2fa023420a579a1dd1385caae16f0cd0596caaeea629a4e560866d73cdc0e6c295a3b37571586455c6328cd9031e9783c5469c015cb29a9852c18a29823e2ed78edd883b1a986e9b75127a87b7bdb4df1efc1325eb533068b038d03103ea4105f96a02731728c72f6ae92f96b490d7db76c6c55477938ad10e8d3ae4237347dcb053064d98721542010af7f961dcff594a87f828dd29f9bdd38ccf9c9e035b308ea837e7894bc7bd740fd0b174edd59d44b5adaf6ff198d60fc072af2bf92f2d99c8175e5d26e9dcc92353eb542e85c01c673"}, &(0x7f0000000280)=0x11b) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2953.328851] FAULT_INJECTION: forcing a failure. [ 2953.328851] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.330840] CPU: 0 PID: 14417 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2953.331798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.332946] Call Trace: [ 2953.333334] dump_stack+0x107/0x167 [ 2953.333845] should_fail.cold+0x5/0xa [ 2953.334387] ? ip6_setup_cork+0x1e4/0x1740 [ 2953.334981] should_failslab+0x5/0x20 [ 2953.335517] kmem_cache_alloc_trace+0x55/0x320 [ 2953.336172] ip6_setup_cork+0x1e4/0x1740 [ 2953.336754] ip6_make_skb+0x22d/0x4e0 [ 2953.337293] ? ip_frag_init+0x350/0x350 [ 2953.337899] ? ip6_push_pending_frames+0xf0/0xf0 [ 2953.338608] ? ip6_dst_hoplimit+0x199/0x440 [ 2953.339234] ? lock_downgrade+0x6d0/0x6d0 [ 2953.339853] udpv6_sendmsg+0x20d0/0x2af0 [ 2953.340443] ? ip_frag_init+0x350/0x350 [ 2953.341026] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.341779] ? lock_acquire+0x197/0x470 [ 2953.342341] ? find_held_lock+0x2c/0x110 [ 2953.342930] ? lock_acquire+0x197/0x470 [ 2953.343482] ? find_held_lock+0x2c/0x110 [ 2953.344065] ? sock_has_perm+0x1ea/0x280 [ 2953.344653] ? __import_iovec+0x458/0x590 [ 2953.345242] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.345970] inet6_sendmsg+0x105/0x140 [ 2953.346525] ? inet6_compat_ioctl+0x320/0x320 [ 2953.347160] sock_sendmsg+0xf2/0x190 [ 2953.347687] ____sys_sendmsg+0x334/0x870 [ 2953.348276] ? kernel_sendmsg+0x50/0x50 [ 2953.348845] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.349412] ? __lock_acquire+0x1657/0x5b00 [ 2953.350049] ___sys_sendmsg+0xf3/0x170 [ 2953.350599] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.351251] ? vmacache_find+0x55/0x2a0 [ 2953.351829] ? lock_acquire+0x197/0x470 [ 2953.352390] ? find_held_lock+0x2c/0x110 [ 2953.352972] ? __might_fault+0xd3/0x180 [ 2953.353566] ? lock_downgrade+0x6d0/0x6d0 [ 2953.354173] ? asm_exc_page_fault+0x1e/0x30 [ 2953.354800] __sys_sendmmsg+0x195/0x470 [ 2953.355376] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2953.355990] ? lock_downgrade+0x6d0/0x6d0 [ 2953.356595] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2953.357291] ? wait_for_completion_io+0x270/0x270 [ 2953.357973] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.358655] ? vfs_write+0x354/0xa70 [ 2953.359203] ? fput_many+0x2f/0x1a0 [ 2953.359713] ? ksys_write+0x1a9/0x260 [ 2953.360278] ? __ia32_sys_read+0xb0/0xb0 [ 2953.360866] __x64_sys_sendmmsg+0x99/0x100 [ 2953.361484] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2953.362229] do_syscall_64+0x33/0x40 [ 2953.362764] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2953.363498] RIP: 0033:0x7fba2f88eb19 [ 2953.364043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.366684] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2953.367766] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2953.368780] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2953.369831] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.370876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.371899] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:16:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 76) 10:16:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000e1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:16:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004b, 0x0) 10:16:52 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x5800) 10:16:52 executing program 1: connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:16:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00034000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:52 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x2000) 10:16:52 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000d000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 2970.212697] __nla_validate_parse: 4 callbacks suppressed [ 2970.212709] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2970.216447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2970.237865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2970.245636] FAULT_INJECTION: forcing a failure. [ 2970.245636] name failslab, interval 1, probability 0, space 0, times 0 [ 2970.248289] CPU: 0 PID: 14444 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2970.249708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2970.251411] Call Trace: [ 2970.251951] dump_stack+0x107/0x167 [ 2970.252695] should_fail.cold+0x5/0xa [ 2970.253479] ? ip6_setup_cork+0x1e4/0x1740 [ 2970.254354] should_failslab+0x5/0x20 [ 2970.255126] kmem_cache_alloc_trace+0x55/0x320 [ 2970.256055] ip6_setup_cork+0x1e4/0x1740 [ 2970.256882] ip6_make_skb+0x22d/0x4e0 [ 2970.257666] ? ip_frag_init+0x350/0x350 [ 2970.258470] ? ip6_push_pending_frames+0xf0/0xf0 [ 2970.259428] ? ip6_dst_hoplimit+0x199/0x440 [ 2970.260300] ? lock_downgrade+0x6d0/0x6d0 [ 2970.261149] udpv6_sendmsg+0x20d0/0x2af0 [ 2970.261975] ? ip_frag_init+0x350/0x350 [ 2970.262785] ? udp_v6_push_pending_frames+0x360/0x360 [ 2970.263834] ? perf_event_task_disable+0x390/0x390 [ 2970.264816] ? lock_downgrade+0x6d0/0x6d0 [ 2970.265668] ? hrtimer_start_range_ns+0x336/0xae0 [ 2970.266644] ? lock_acquire+0x197/0x470 [ 2970.267447] ? find_held_lock+0x2c/0x110 [ 2970.268283] ? sock_has_perm+0x1ea/0x280 [ 2970.269124] ? __import_iovec+0x458/0x590 [ 2970.269972] ? udp_v6_push_pending_frames+0x360/0x360 [ 2970.271020] inet6_sendmsg+0x105/0x140 [ 2970.271805] ? inet6_compat_ioctl+0x320/0x320 [ 2970.272722] sock_sendmsg+0xf2/0x190 [ 2970.273484] ____sys_sendmsg+0x334/0x870 [ 2970.274321] ? kernel_sendmsg+0x50/0x50 [ 2970.275136] ? do_recvmmsg+0x6d0/0x6d0 [ 2970.275921] ? __lock_acquire+0x1657/0x5b00 [ 2970.276817] ___sys_sendmsg+0xf3/0x170 [ 2970.277613] ? sendmsg_copy_msghdr+0x160/0x160 [ 2970.278551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2970.279604] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2970.280521] ? trace_hardirqs_on+0x5b/0x180 [ 2970.281392] ? lock_acquire+0x197/0x470 [ 2970.282203] ? find_held_lock+0x2c/0x110 [ 2970.283034] ? __might_fault+0xd3/0x180 [ 2970.283840] ? lock_downgrade+0x6d0/0x6d0 [ 2970.284673] ? io_schedule_timeout+0x140/0x140 [ 2970.285644] __sys_sendmmsg+0x195/0x470 [ 2970.286449] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2970.287330] ? lock_downgrade+0x6d0/0x6d0 [ 2970.288178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2970.289159] ? wait_for_completion_io+0x270/0x270 [ 2970.290137] ? rcu_read_lock_any_held+0x75/0xa0 [ 2970.291071] ? vfs_write+0x354/0xa70 [ 2970.291823] ? fput_many+0x2f/0x1a0 [ 2970.292559] ? ksys_write+0x1a9/0x260 [ 2970.293327] ? __ia32_sys_read+0xb0/0xb0 [ 2970.294162] __x64_sys_sendmmsg+0x99/0x100 [ 2970.295012] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2970.296062] do_syscall_64+0x33/0x40 [ 2970.296813] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2970.297857] RIP: 0033:0x7fba2f88eb19 [ 2970.298610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2970.302356] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2970.303894] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2970.305330] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2970.306785] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2970.308222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2970.309690] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:16:52 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852effffe000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:16:52 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) [ 2970.328490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:16:52 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c02) 10:16:52 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10000, 0x132) [ 2970.416482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2970.443002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000e000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852efffff000000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 77) 10:17:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004c, 0x0) 10:17:08 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmget(0x2, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:17:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000c00e1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:08 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c03) 10:17:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)="4a06363863fd79fb57f6ef0443f30dfb96dedf03d359165e7dd6ea90e19a1d0db06b6c50361180a1fb10781e56933f72b905", 0x32, 0x4000090, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2985.977669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2986.007330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2986.030438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2986.030582] FAULT_INJECTION: forcing a failure. [ 2986.030582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2986.034942] CPU: 1 PID: 14491 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2986.036336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2986.038029] Call Trace: [ 2986.038575] dump_stack+0x107/0x167 [ 2986.039322] should_fail.cold+0x5/0xa [ 2986.040093] _copy_from_user+0x2e/0x1b0 [ 2986.040906] __copy_msghdr_from_user+0x91/0x4b0 [ 2986.041863] ? __ia32_sys_shutdown+0x80/0x80 [ 2986.042748] ? udp_v6_push_pending_frames+0x360/0x360 [ 2986.043785] ? inet6_sendmsg+0xbd/0x140 [ 2986.044585] ? inet6_compat_ioctl+0x320/0x320 [ 2986.045486] ? sock_sendmsg+0x55/0x190 [ 2986.046280] sendmsg_copy_msghdr+0xa1/0x160 [ 2986.047145] ? do_recvmmsg+0x6d0/0x6d0 [ 2986.047933] ? __lock_acquire+0x1657/0x5b00 [ 2986.048806] ___sys_sendmsg+0xc6/0x170 [ 2986.049586] ? sendmsg_copy_msghdr+0x160/0x160 [ 2986.050515] ? vmacache_find+0x55/0x2a0 [ 2986.051322] ? lock_acquire+0x197/0x470 [ 2986.052117] ? find_held_lock+0x2c/0x110 [ 2986.052940] ? __might_fault+0xd3/0x180 [ 2986.053737] ? lock_downgrade+0x6d0/0x6d0 [ 2986.054583] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2986.055679] __sys_sendmmsg+0x195/0x470 [ 2986.056480] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2986.057341] ? lock_downgrade+0x6d0/0x6d0 [ 2986.058191] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2986.059155] ? wait_for_completion_io+0x270/0x270 [ 2986.060121] ? rcu_read_lock_any_held+0x75/0xa0 [ 2986.061053] ? vfs_write+0x354/0xa70 [ 2986.061815] ? fput_many+0x2f/0x1a0 [ 2986.062546] ? ksys_write+0x1a9/0x260 [ 2986.063310] ? __ia32_sys_read+0xb0/0xb0 [ 2986.064130] __x64_sys_sendmmsg+0x99/0x100 [ 2986.064985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2986.066024] do_syscall_64+0x33/0x40 [ 2986.066773] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2986.067800] RIP: 0033:0x7fba2f88eb19 [ 2986.068549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2986.072241] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2986.073769] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2986.075194] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2986.076617] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2986.078053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2986.079483] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:17:08 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mmap$usbmon(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x80010, 0xffffffffffffffff, 0x1000) [ 2986.093542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:08 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000f1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:08 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c04) 10:17:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852ec00e000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000001000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2986.187718] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:08 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:17:08 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004d, 0x0) [ 2986.223420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2986.229425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2986.244422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x80) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001cc0)={@local, 0x0}, &(0x7f0000001d00)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002e00)={{{@in6=@private1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001d40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r5, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) sendmmsg$inet(r2, &(0x7f0000003240)=[{{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1f, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="57f0a73c007ebb2829aaff37a1170646e48630912fb74a789289a429c8d5edd1293cb509466fb2d5816022b4c7d1d9", 0x2f}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="3c000000000000000000000007000000891f1c7f000001ac1414aaac14143864010101e000000100000000ac1414bb01440c4f700000000400000059000000001c000000000000000000d58c08000000", @ANYRES32=0x0, @ANYBLOB="64010100ac141435000000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae00000010000000014000000000000000000000002000000020000000000000058010000000000000000000007000000444cb2310a01010100000003e0000002fffffff60a01010000000004ffffffff00000000ac1e0001000000a8ac1414aa00000080ac1414bb000000057f000001000000040a0101010000000444287f30000046d10000000780000000000000090000ffff00000005000000f300000001fffffbff830bf000000000ac1e010144349373ac14141700004cc06401010100000009e0000002000003efac1e0101000000046401010200000007e000000100000001071310e0000001ac1e01017f0000017f000001861300000001000dddb75cd6f9b64bb830f678072bcf7f000001ffffffffe00000027f000001ac1414aaac1e0001ac1e01010a01010064010100ac1e01014418e4000000000100000004000002400001000100000008072ba3ac1e0101ac1414aaac1e0001ffffffffac1414bb0000000000000000ac1414bbe00000020000000000140000000000000000000000020000000600000000000000"], 0x220}}, {{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000180)="88652a6084d1a0155dd206e5854d51ff41bd8ab8049185107a0bf1d67e8084bad6c48d5d5d998f68929262ed23db94b901cc8d12862f7003f94911f778cdc82185905d4bfbb62dbeb4f5c9cab7207e7b1a922b1d630a6f36a164fa3321ab8660e76dc3cd635b015f4be194f55f70a5cdac5f27fc0485981718796d8f77b3381306120b1963f941540aead92a6bdf20e1814e49f0308eb82a223f422787772bc1946acde2b556c42696172c4f3b040ee4819e5da78004aded715631a04a8bc8329c75c65c731947bf5ebb55e7930f51f5513784e0b1dff2d809247cf926b02f6db58bae1ad684ecfa0c40", 0xea}], 0x1, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0xcc, [@broadcast, @empty, @remote, @multicast2]}, @rr={0x7, 0x1f, 0xb1, [@multicast2, @empty, @local, @loopback, @private=0xa010102, @broadcast, @empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x78, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x98}}, {{&(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000017c0)=[{&(0x7f0000000640)="8c260accf2245973af11a20932e00319069c91ff4661112ee934203d03ab943977a6acf4eba7489746df13c0827de1bd9828baac7acf3c003d27f568d97bd6ce123db2711f6d7c50bb6f21fa0354e21e6b63832d6e86bb9edf99a588ea936d0dbe8ba94f4340f7fcd7a249ba93b8979dfbb164e48a943433201174d90e3d350d1b4d74ab505d11d8db476d187a4543d0e02856dbf8eeb3f8290334a63f00c9648e25e8569c3783773752f41d6f5dba9ef0a05ea0c1391b805392e96f693fed7e25fef06e1d07b06e35105d10062f3c2fafb0e1068e540855b17206af06427b5e9ba3bbec617c4a103016bdea76ce126dd746f48bfd4aee5b829f7aba", 0xfc}, {&(0x7f0000000740)="63e517e2b51492e82ca1b62a769b8c664387452b9c51029e6464868f238eedb7c7a763f92b8faef4a491d758fbd2bcad61c78a2cdb65eea092a83e58e189a302721be32370d9398431ca07df15e7559668fa30a1bde1560e", 0x58}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000001e00)="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", 0x1000}], 0x4, &(0x7f0000001800)}}, {{&(0x7f0000001840)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001c40)=[{&(0x7f0000001880)="93162dfdda7211550618f161ccb7d8438c9ad6eeca59e7794eda071a5888379f80b7f5bc08fbeb489b755445e824d089fb3e1e240f2fa5769a557821abf5ce591375308e04cbcae92c4dd67358cfe5a5b4a7affb6dcb29a9c71a6073d03c3ff580be739b7daeb858cb705be33351c72af583930c14e0a90316977cbbfb32ef7c64479fe493e90ec6d30c92079f95f77768d503025eb8876c1cccb8c87d0f33a8493791f7cf52e894bb1178eebd0938c629f2715f36669e30d5abbc7a6510f3483dc11ffdbc6289bd58576fc89cee507d87fd54a761e2162c40b63f", 0xdb}, {&(0x7f0000001980)="2f6cd4182cf9b409988f55f5062d3d95ac97a2da5346d2736f1faf82c5dc265ec4eec193b2dd8de5774115d37d25bb9bae6e65f13099a5ca46d1821c77a0d3dc7e25b49218340becf2647fa5f766d4f46c2a7902d134a04d5b250676ad7d7f494ccb6c98859c24ed9b0c6a9135f46b432f2c609a4dff94e6ad46ecf37f57715544a5aa18a354a68db7a262e293f4dd406d359f65cb", 0x95}, {&(0x7f0000001a40)="f8051aa481e90cac5159d8a30384b585dd9db3d14a42f25889a0de1b42e407fcc71942c4bcbb398c7d27f8112c819f9e32d12617dc96ee257ff1492223f53ffc42a6b4992904626a45fdc997c803566c1bbdddad9daf6d5064aebef47b7ee091bef7", 0x62}, {&(0x7f0000001ac0)="d7460f45e9e303abac7f06458e33ed26c372c0fd56b0dfd02033d367a667c481d4cefa11c72c4d92b88e932ed706569a2d2816320415", 0x36}, {&(0x7f0000001b00)="fe8d4af47e48d22c4fb879176f7fe29e94cf8fac13090f90dab6512f782a45cb85be18d29d9a51e018544d82234f508578d38efa1532334625d17c9f166910348406c326065d095d988a1ec2438e972871", 0x51}, {&(0x7f0000001b80)="5ede554b0e4999d03f81076dae8e07067c69fdeb7d14e0edec9422d38f1bab937b6fea6a0ddc354d98f7c713b45bfc78f32cf2f637c1b19c160fa946afd2e5f3661937158a1f3232cfa70d994dc947faec868aadd22e1affafbcbda0a3f7540e16107c5d552a943a815da3dce400703155596998e25ccdc8f55dd90f67ee5892035b09d56c3d87adbee60609640773625aebb5a3d3a669468e42d7a0731b6722b8e0b23fde06c03ab99eacc91f2cc30482c2d100", 0xb4}], 0x6, &(0x7f0000002f00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x55, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x10}, 0x80000000}, {@broadcast, 0x8}, {@broadcast}, {@private=0xa010102, 0x173}, {@rand_addr=0x64010100, 0x1}, {@loopback}, {@loopback, 0xd638}]}, @ssrr={0x89, 0x1b, 0x70, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @empty, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0xf, 0xba, [@loopback, @private=0xa010101, @multicast2]}, @generic={0x44, 0x6, "fd6fb298"}, @timestamp_addr={0x44, 0x24, 0x58, 0x1, 0x8, [{@empty, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}, {@empty, 0x4}, {@loopback, 0x400}]}, @generic={0x94, 0x5, "5297b2"}, @end, @cipso={0x86, 0x3a, 0x3, [{0x6, 0x9, "048ad181a20235"}, {0x2, 0x12, "737f14a583c5567e60881905c070a649"}, {0x5, 0xb, "742360d30518c557cd"}, {0x5, 0xe, "89868c193ef02f24b527bffa"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x1a0}}, {{&(0x7f00000030c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000003180)=[{&(0x7f0000003100)="00651fab7649d7610f4011c138c0d5361cd65d0f10e101f894ccf0af54966957b97c68a5984d539c8b4ad99f3666239354f9addb57b7e4a1eb", 0x39}, {&(0x7f0000003140)="5876292b970fad795327b2fead6ebed3c112d8ee9c829c00ed8adb51b5a3cffce5fc0e1d", 0x24}], 0x2, &(0x7f00000031c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x17, 0x8f, [@remote, @empty, @multicast2, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x43}]}, @timestamp_prespec={0x44, 0x34, 0xde, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x362dd7dc}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xb8d7}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x3}, {@multicast1, 0x4}, {@empty, 0x3ff}, {@multicast2, 0x80000001}]}, @generic={0x88, 0xb, "475feddc5813f47116"}]}}}], 0x80}}], 0x5, 0x2400e085) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2986.361411] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:08 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c05) 10:17:08 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000002000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2986.373773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1280, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x8, 0x0, 0xc9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x9) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:21 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e000f000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004e, 0x0) 10:17:21 executing program 7: shmget(0x0, 0x4000, 0x80, &(0x7f0000ffb000/0x4000)=nil) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x7000) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/189) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/254) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x4, &(0x7f0000ffa000/0x2000)=nil) 10:17:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000481e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 78) 10:17:21 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c06) 10:17:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000003000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2999.157290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.178499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.181329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2999.183044] FAULT_INJECTION: forcing a failure. [ 2999.183044] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.183081] CPU: 1 PID: 14560 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 2999.183088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2999.183092] Call Trace: [ 2999.183110] dump_stack+0x107/0x167 [ 2999.183122] should_fail.cold+0x5/0xa [ 2999.183138] should_failslab+0x5/0x20 [ 2999.183150] __kmalloc_track_caller+0x79/0x370 [ 2999.183161] ? ip6_setup_cork+0x670/0x1740 [ 2999.183174] kmemdup+0x23/0x50 [ 2999.183185] ip6_setup_cork+0x670/0x1740 [ 2999.183199] ip6_make_skb+0x22d/0x4e0 [ 2999.183210] ? ip_frag_init+0x350/0x350 [ 2999.183221] ? ip6_push_pending_frames+0xf0/0xf0 [ 2999.183235] ? ip6_dst_hoplimit+0x199/0x440 [ 2999.183246] ? lock_downgrade+0x6d0/0x6d0 [ 2999.183263] udpv6_sendmsg+0x20d0/0x2af0 [ 2999.183275] ? ip_frag_init+0x350/0x350 [ 2999.183289] ? udp_v6_push_pending_frames+0x360/0x360 [ 2999.183303] ? lock_acquire+0x197/0x470 [ 2999.183313] ? find_held_lock+0x2c/0x110 [ 2999.183326] ? lock_acquire+0x197/0x470 [ 2999.183335] ? find_held_lock+0x2c/0x110 [ 2999.183354] ? sock_has_perm+0x1ea/0x280 [ 2999.183375] ? __import_iovec+0x458/0x590 [ 2999.183385] ? udp_v6_push_pending_frames+0x360/0x360 [ 2999.183396] inet6_sendmsg+0x105/0x140 [ 2999.183405] ? inet6_compat_ioctl+0x320/0x320 [ 2999.183415] sock_sendmsg+0xf2/0x190 [ 2999.183424] ____sys_sendmsg+0x334/0x870 [ 2999.183435] ? kernel_sendmsg+0x50/0x50 [ 2999.183443] ? do_recvmmsg+0x6d0/0x6d0 [ 2999.183454] ? __lock_acquire+0x1657/0x5b00 [ 2999.183469] ___sys_sendmsg+0xf3/0x170 [ 2999.183479] ? sendmsg_copy_msghdr+0x160/0x160 [ 2999.183496] ? vmacache_find+0x55/0x2a0 [ 2999.201504] ? lock_acquire+0x197/0x470 [ 2999.201937] ? find_held_lock+0x2c/0x110 [ 2999.202372] ? __might_fault+0xd3/0x180 [ 2999.202800] ? lock_downgrade+0x6d0/0x6d0 [ 2999.203244] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2999.203837] __sys_sendmmsg+0x195/0x470 [ 2999.204269] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2999.204728] ? lock_downgrade+0x6d0/0x6d0 [ 2999.205181] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2999.205712] ? wait_for_completion_io+0x270/0x270 [ 2999.206269] ? rcu_read_lock_any_held+0x75/0xa0 [ 2999.206790] ? vfs_write+0x354/0xa70 [ 2999.207208] ? fput_many+0x2f/0x1a0 [ 2999.207610] ? ksys_write+0x1a9/0x260 [ 2999.208030] ? __ia32_sys_read+0xb0/0xb0 [ 2999.208482] __x64_sys_sendmmsg+0x99/0x100 [ 2999.208953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2999.209513] do_syscall_64+0x33/0x40 [ 2999.209934] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2999.210508] RIP: 0033:0x7fba2f88eb19 [ 2999.210920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2999.212965] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2999.213815] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 2999.214608] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 2999.215398] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.216198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2999.217001] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:17:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:21 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000004000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 2999.253200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:21 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c07) 10:17:21 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010101}, 0xfdd2, 0x0, 0x0, 0x0, 0x1d}}], 0x1, 0x4048000) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2999.289610] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2999.295812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000004c1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x100000, 0x0) 10:17:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000005000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 3013.744412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3013.757053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3013.760659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3013.762269] FAULT_INJECTION: forcing a failure. [ 3013.762269] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.763561] CPU: 1 PID: 14597 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3013.764308] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.765196] Call Trace: [ 3013.765501] dump_stack+0x107/0x167 [ 3013.765901] should_fail.cold+0x5/0xa [ 3013.766338] ? create_object.isra.0+0x3a/0xa20 [ 3013.766835] should_failslab+0x5/0x20 [ 3013.767251] kmem_cache_alloc+0x5b/0x310 [ 3013.767692] ? lock_downgrade+0x6d0/0x6d0 [ 3013.768151] create_object.isra.0+0x3a/0xa20 [ 3013.768631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3013.769180] __kmalloc_track_caller+0x177/0x370 [ 3013.769904] ? ip6_setup_cork+0x670/0x1740 [ 3013.770495] kmemdup+0x23/0x50 [ 3013.770891] ip6_setup_cork+0x670/0x1740 [ 3013.771348] ip6_make_skb+0x22d/0x4e0 [ 3013.771762] ? ip_frag_init+0x350/0x350 [ 3013.772203] ? ip6_push_pending_frames+0xf0/0xf0 [ 3013.772718] ? ip6_dst_hoplimit+0x199/0x440 [ 3013.773185] ? lock_downgrade+0x6d0/0x6d0 [ 3013.773639] udpv6_sendmsg+0x20d0/0x2af0 [ 3013.774084] ? ip_frag_init+0x350/0x350 [ 3013.774521] ? udp_v6_push_pending_frames+0x360/0x360 [ 3013.775081] ? perf_event_task_disable+0x390/0x390 [ 3013.775599] ? lock_downgrade+0x6d0/0x6d0 [ 3013.776052] ? hrtimer_start_range_ns+0x336/0xae0 [ 3013.776562] ? lock_acquire+0x197/0x470 [ 3013.776992] ? find_held_lock+0x2c/0x110 [ 3013.777430] ? sock_has_perm+0x1ea/0x280 [ 3013.777878] ? __import_iovec+0x458/0x590 [ 3013.778328] ? udp_v6_push_pending_frames+0x360/0x360 [ 3013.778896] inet6_sendmsg+0x105/0x140 [ 3013.779323] ? inet6_compat_ioctl+0x320/0x320 [ 3013.779808] sock_sendmsg+0xf2/0x190 [ 3013.780216] ____sys_sendmsg+0x334/0x870 [ 3013.780656] ? kernel_sendmsg+0x50/0x50 [ 3013.781087] ? do_recvmmsg+0x6d0/0x6d0 [ 3013.781508] ? __lock_acquire+0x1657/0x5b00 [ 3013.781968] ___sys_sendmsg+0xf3/0x170 [ 3013.782411] ? sendmsg_copy_msghdr+0x160/0x160 [ 3013.782908] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.783479] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3013.783963] ? trace_hardirqs_on+0x5b/0x180 [ 3013.784437] ? lock_acquire+0x197/0x470 [ 3013.784868] ? find_held_lock+0x2c/0x110 [ 3013.785308] ? __might_fault+0xd3/0x180 [ 3013.785741] ? lock_downgrade+0x6d0/0x6d0 [ 3013.786195] ? io_schedule_timeout+0x140/0x140 [ 3013.786699] __sys_sendmmsg+0x195/0x470 [ 3013.787135] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3013.787601] ? lock_downgrade+0x6d0/0x6d0 [ 3013.788054] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3013.788581] ? wait_for_completion_io+0x270/0x270 [ 3013.789108] ? rcu_read_lock_any_held+0x75/0xa0 [ 3013.789613] ? vfs_write+0x354/0xa70 [ 3013.790019] ? fput_many+0x2f/0x1a0 [ 3013.790408] ? ksys_write+0x1a9/0x260 [ 3013.790821] ? __ia32_sys_read+0xb0/0xb0 [ 3013.791264] __x64_sys_sendmmsg+0x99/0x100 [ 3013.791719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.792279] do_syscall_64+0x33/0x40 [ 3013.792687] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3013.793240] RIP: 0033:0x7fba2f88eb19 [ 3013.793645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.795580] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3013.796406] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3013.797169] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3013.797944] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.798731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3013.799507] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:17:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000024d1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 79) 10:17:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0930000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:36 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c0a) 10:17:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x40000000000004f, 0x0) 10:17:36 executing program 7: readv(0xffffffffffffffff, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0}, {&(0x7f0000001a00)=""/144, 0x90}, {&(0x7f0000001ac0)=""/104, 0x68}], 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x5) r0 = syz_open_dev$vcsu(0xfffffffffffffffe, 0x3, 0x200000) r1 = syz_open_dev$vcsn(&(0x7f0000001b80), 0x3f, 0x400) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000001bc0)='io.pressure\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x2000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) r6 = socket$inet(0xa, 0x3, 0xff) sendto(r6, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab68", 0x26, 0x0, &(0x7f0000000140)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r8, 0x0, r10) clone3(&(0x7f0000001f00)={0x12004000, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)=0x0, {0x1e}, &(0x7f0000001e00)=""/35, 0x23, &(0x7f0000001e40)=""/99, &(0x7f0000001ec0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) sendmmsg$unix(r0, &(0x7f0000002080)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000080)="dafce9a62b104eded53451", 0xb}, {&(0x7f00000000c0)="27cca293fd2cd578bf8e92a84498b78e7a3147cb4384bb379a976ae5147b312c8ebbe95ddaf5461d131c57d17efd38d5f6812553a5d0a7a013dea4c96c9b19157c9a35fba1c22a29a560683b6c20c66f25b2544763e1010c8b752415903a39b31828077073772d7198ce4fd570f3e2a0768c86948120d3922593ad8439c578593d4d7e28b83c91a3e9f66686c4124db41cdf2b", 0x93}, {&(0x7f0000000180)="cf18c05d649d49661e4e32ba11e798b71cc08cea872140745372124619adf722f82f2b06c73407c9bd183113c031e75e94d9f1937e95e8773f678c6041bf19e5bc30aae21e9923", 0x47}, {&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="36a178180b520de67f80ba94dcf989cbbce5c4f115e5d6426f419dfe573e6cffdcd78924caaf8ad0b1f40c4e7139f5a54f3ef5dabd31e675c214882ef2f602a84506", 0x42}, {&(0x7f0000000380)="daac46c638586ae08b1bf01a0b78d82470f90d5a44be8d001988f4ff11a17367d011f4e9abe911cc2bfd7af90848045d83e84ad34b3a55be87f628bd02448d0e8817d00067ce937c4056a956a3f7c39308e7265e6b02f95eb4dc37e19585dd02a3b8f14cf5f89196c047fe85413f4f0e055ad0804b7d5c8cd493ed77267e94fd8a967b1ab69d9ad51ef01e127092b4ba014b3c48acbf14d42888fea69c3f62769547622d38d7c207b14e721d6fed2b1a37cecc998f4d8fc93aa705c3aebfa7f681a242", 0xc3}, {&(0x7f0000000480)="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", 0x1000}], 0x7, 0x0, 0x0, 0x4000}}, {{&(0x7f0000001500)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001580)="e46c15b32556ab36e4fc38a303adb7c4f1e89c77b8818d450ca889ea619ddf78f9ef1a5c024991e7d57d2b1d5ea96e5bb2aac0605477653a3f69ee1d84bd3621c81e8f33975d9d6a7b4f88e025836c4b34f283b5829ea029565934a053a6ff6c247622fb727a6b91edc416331e5bab9857b4720b7ed2e8f994cec5d1dff5712681c8efe36e8a00dab9e718948465cb63727f64b7c6f3a29d40d921ac69249594c6dad0b85d36904d88af10f81261e11b32e02af979", 0xb5}, {&(0x7f0000001640)="680889496c99d9f1e66c9f8072b3493ccc00303bec44356d25dd4c72bff3b63d62aa634a4576fd4114e5b0d493527e201061ed7a9d867d470d3b7b5ad7b16ed6d9d0c2cf627a2f8b98415d99f58af21453cf9a26b663ed1de3418879f399a3306714c41df46d671570fa1e9969e24a181b516d7d02421bcb108b18ee8ba175efea033f1c56bff889ba55ffe4d17ba3486b2fc51e4b497ab7bbf3eb47518dde425ee5a67cdc25b8fecba315a5c4d5697fc8140daf3a8ea6f12948d76ba44bffe55b4cba22f5daf27572823b6d58ad2981a86347e371739298", 0xd8}, {&(0x7f0000001740)="7e4d44295c6880cc91b0387da8b59a328741b981f4e2da987f4e36bcc14f786208a59c41a45cacc4a187b6f21f705e0e46ad58ca9e4b71538e3a050eed505c7df886ac22be92140ecc6da291991566aa0aa6fa17f6336d676e696319c1f298402c028bb85a5af8ce61eaa4db8c6cfc4b5a52191700787f2642cd9d71e07a941699c08d6df72e7850f7851293ccc8ae2304861538852ba2938bb1785fd508513f425bf3463ddc548649d97e94d7eb2cc8187d7ca1ef", 0xb5}, {&(0x7f0000001800)="cefe0a28ce7c37d9a4c351e5901941f96c2a98ff5e23d1a7109efdc3c23f9688a92993eaaae7681acd26521a762852fe6f4d19069fe044a4d9b43633d563866918cc6335a51f33e290e5bde868ea9780cca0a8955ab626734ddbebaea5acf161f2141c84b29a394fb425e1e2d74d167beb264da3e03872", 0x77}, {&(0x7f0000001880)="112d2e6872e0e3fc324f49d4e2698d1996515e6c10433283ab2c90b5403feb838687dca5aaa9933139060318791d71fe489858d05419d093fef8df9bc3519d6393d841096af1e0c2cbc00e6d96f5c46bcaf2800801c892dca78e584d1914894c0aca3af75eb33c3cba7fb8aa1420e3f83c539b2f8fecd801aeb974bbb825d395da1457", 0x83}], 0x5, &(0x7f00000025c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000619fe3113238c586300c535557dc17947596af2a723a8489ade13e6be737b47098594e7938c91c7460a73c1dd30b02a2cc5ca8ff894172e48a3c86a18d2c87048bff94e8c3f75f825797c540908c783eee6ad9cf04b316b92582f945c397ca3bc0f150aec8435fd9851f759e9fd8c4", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES32=r10, @ANYBLOB="000000001c0000001e000000e4cdff5fd88a37540100000007000000a384e5bf888b63abbb0bc4742d5a403a9de935b67307962f8198d1d228249af56da739ed3e0311c3aa881b4b3998741cba7a81c9a24f3e13876277da09d15abead8240a1e63b9921af83047d96d8f0b1d29fbfc444d249f8a2409b5d5b02c9f9c424ddab534a626750eebea11a827d00df3a2965dfd7ccd517b183a5763c36e599229fb2d345cde51bd6c498", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES64=r8, @ANYBLOB='\x00\x00\x00\x00'], 0xf0}}], 0x2, 0xc884) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:17:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000006000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:36 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c10) [ 3013.871664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3013.879734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0048000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 3013.889760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3013.898829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000007000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000050, 0x0) 10:17:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000c601e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e004c000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 3013.953654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3013.960429] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3013.971976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:36 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c48) 10:17:36 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x41, 0x0) r1 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000140)=""/249) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, 0xffffffffffffffff, 0xbe959000) 10:17:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000008000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0068000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 80) 10:17:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000009000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:36 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:17:36 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c4c) [ 3014.116809] FAULT_INJECTION: forcing a failure. [ 3014.116809] name failslab, interval 1, probability 0, space 0, times 0 [ 3014.118405] CPU: 1 PID: 14651 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3014.119146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3014.120045] Call Trace: [ 3014.120336] dump_stack+0x107/0x167 [ 3014.120724] should_fail.cold+0x5/0xa [ 3014.121131] ? create_object.isra.0+0x3a/0xa20 [ 3014.121611] should_failslab+0x5/0x20 [ 3014.122013] kmem_cache_alloc+0x5b/0x310 [ 3014.122444] ? lock_chain_count+0x20/0x20 [ 3014.122887] create_object.isra.0+0x3a/0xa20 [ 3014.123354] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3014.123887] kmem_cache_alloc_node+0x169/0x330 [ 3014.124385] __alloc_skb+0x6d/0x5b0 [ 3014.124776] alloc_skb_with_frags+0x92/0x570 [ 3014.125245] sock_alloc_send_pskb+0x7af/0x930 [ 3014.125722] ? sk_alloc+0x350/0x350 [ 3014.126120] ? lock_acquire+0x197/0x470 [ 3014.126541] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3014.127094] ? lock_release+0x680/0x680 [ 3014.127524] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 3014.128065] ? ip6_mtu+0x1bb/0x3d0 [ 3014.128448] ? lock_downgrade+0x6d0/0x6d0 [ 3014.128885] ? ip_frag_init+0x350/0x350 [ 3014.129325] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 3014.129824] ? ip6_mtu+0x1e9/0x3d0 [ 3014.130265] ? ip6_setup_cork+0xfb7/0x1740 [ 3014.130730] ip6_make_skb+0x2de/0x4e0 [ 3014.131130] ? ip_frag_init+0x350/0x350 [ 3014.131552] ? ip_frag_init+0x350/0x350 [ 3014.131986] ? ip6_push_pending_frames+0xf0/0xf0 [ 3014.132497] ? ip6_dst_hoplimit+0x199/0x440 [ 3014.132960] ? lock_downgrade+0x6d0/0x6d0 [ 3014.133425] udpv6_sendmsg+0x20d0/0x2af0 [ 3014.133857] ? ip_frag_init+0x350/0x350 [ 3014.134287] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.134834] ? trace_hardirqs_on+0x5b/0x180 [ 3014.135284] ? lock_acquire+0x197/0x470 [ 3014.135695] ? find_held_lock+0x2c/0x110 [ 3014.136127] ? lock_acquire+0x197/0x470 [ 3014.136548] ? find_held_lock+0x2c/0x110 [ 3014.136984] ? sock_has_perm+0x1ea/0x280 [ 3014.137425] ? __import_iovec+0x458/0x590 [ 3014.137858] ? udp_v6_push_pending_frames+0x360/0x360 [ 3014.138412] inet6_sendmsg+0x105/0x140 [ 3014.138825] ? inet6_compat_ioctl+0x320/0x320 [ 3014.139292] sock_sendmsg+0xf2/0x190 [ 3014.139681] ____sys_sendmsg+0x334/0x870 [ 3014.140129] ? kernel_sendmsg+0x50/0x50 [ 3014.140554] ? do_recvmmsg+0x6d0/0x6d0 [ 3014.140974] ? __lock_acquire+0x1657/0x5b00 [ 3014.141430] ___sys_sendmsg+0xf3/0x170 [ 3014.141846] ? sendmsg_copy_msghdr+0x160/0x160 [ 3014.142343] ? vmacache_find+0x55/0x2a0 [ 3014.142782] ? lock_acquire+0x197/0x470 [ 3014.143196] ? find_held_lock+0x2c/0x110 [ 3014.143638] ? __might_fault+0xd3/0x180 [ 3014.144056] ? lock_downgrade+0x6d0/0x6d0 [ 3014.144493] ? asm_exc_page_fault+0x1e/0x30 [ 3014.144951] __sys_sendmmsg+0x195/0x470 [ 3014.145372] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3014.145826] ? lock_downgrade+0x6d0/0x6d0 [ 3014.146285] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3014.146804] ? wait_for_completion_io+0x270/0x270 [ 3014.147318] ? rcu_read_lock_any_held+0x75/0xa0 [ 3014.147823] ? vfs_write+0x354/0xa70 [ 3014.148223] ? fput_many+0x2f/0x1a0 [ 3014.148608] ? ksys_write+0x1a9/0x260 [ 3014.149014] ? __ia32_sys_read+0xb0/0xb0 [ 3014.149461] __x64_sys_sendmmsg+0x99/0x100 [ 3014.149908] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3014.150470] do_syscall_64+0x33/0x40 [ 3014.150861] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3014.151413] RIP: 0033:0x7fba2f88eb19 [ 3014.151813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3014.153787] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3014.154604] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3014.155345] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3014.156085] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3014.156838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3014.157616] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:17:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e006c000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000681e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3028.003429] __nla_validate_parse: 9 callbacks suppressed [ 3028.003437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.018270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 81) 10:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0074000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:50 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000a000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:17:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000051, 0x0) 10:17:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001b80)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001c80)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r2, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r3, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'sit0\x00', r4, 0x0, 0x1, 0x7, 0x4919944c, 0x10, @mcast1, @mcast1, 0x0, 0x1, 0x4, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000004600)={'sit0\x00', &(0x7f0000004580)={'ip6_vti0\x00', 0x0, 0x2f, 0xe1, 0x1, 0x10001, 0x0, @remote, @private0, 0x8000, 0x700, 0x3, 0x10000}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000004e80)={'syztnl2\x00', &(0x7f0000004e00)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x6, 0xfff, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x7800, 0x1, 0x5}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="df721685fff1226edca816c818373f5fe7c15efdd8cc915b311b1eaa6975c9185b3a98980f7e37f44207935d587fe64532593a34f799932734edf2dbb52bcdfc52d680ed923d02ab5d486d20727cc8477d49718e84b2ef77eec9586cc848bb6b327ad5c9216f", 0x66}, {&(0x7f0000000180)="9ca6c99594eda1c570674baabe9bd3542c82a7c86961e9ee74972829b1391e80196855ad724d58e9", 0x28}, {&(0x7f00000001c0)="8afdd1c5a05652a40a70f591719669886da4a5d22f4bee4e28fd99979c2b2a6a1151edeb317b061329a720a4f424cf258933d6cdeb5c38254870e3fe7644583fe6ebdbd1ff0fa7c0de9c563f7c8baed2e15c38f8f9c199c4970e07a9199bbaf0d132e7c2444c40ab832f679160278ba33ea660695f03ae15ac88cd894336485d2f40aa04058bf757859f6c0300baac59f2bc5d921f0a08b1135b", 0x9a}, {&(0x7f0000000280)="ccb372000160db0edd8c1254a46221d50cc16c7d7295900cc87b294dccf909db601e07e6260568e0637f773183ad2134b3d00ee69f6ac6322dd3184a6a9a0762115cb5e756e27db3108618998038f5f6566ace4fd007301d19f18c769e5681e261f590eb1f0d24dc0e8bb3fd630952ff9b73e97bfbece06272ada4489ed4f1", 0x7f}, {&(0x7f0000000340)="ef7d74017f091c07e810a92e3ddc64440d0a958b5bdfffeaa865650ef335b57093b0478811e56b19554127932b0c1fb40f7484c57ca177955d517e4fc6a738652bdc2d46517a0e2d07b79285e417912e23b2932bb640423d03b6ee2ff9873c743efbbd675fd47d779d66ef839601e42b2feb98108337438f0a85273475c217dbcfc2609682f62fc3921f2b85b912f9326da9ea07f4e1", 0x96}, {&(0x7f0000000400)="087acfc1565763ffe45bca5ab0f15994b33132d87bf2e61df80994e210f62b98ae71e294e393b1a8db78fb9ce150d83c8e1482f641fba96b341f4b2585466edf9780c66a4f308a6167e3f73b1d10f5a6b8439ba857624e87ceeecb", 0x5b}, {&(0x7f0000000480)="2ffd30c6ab879b7029f89c6a72dbaabadf75ec040a066cdaacb75faabd2a1cb0e59d7dfd4af3ad43b0efcca668e08762a6b211c74efc67cddd9a44ea65092b4dc1c6c88f7f7d9c8cba", 0x49}, {&(0x7f0000000500)="4a65d2f31b9fcd4610c05d10c1d2cf8200769c695d5604502a220f41fc3f74a07f5d31475567aad793231d5662fd72d28a53bb0da2bf0d49eefada5a24121bc66a1093df046d", 0x46}], 0x8, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010102}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000700)="6d94fa5a021158c383faa29b77109c07d4fd74040499394272b14c7608756a35aed356abcfecc16081dde8e03b6c7f10980631a5097dd229e0870b6c18c890940e4128713aa2c87f1eb6f340491812ffbfd4d686fa79ef1c516748305d5d5dc9ba520e4218b600bf29d1e17f191075363bf926acd88098643da13815a4f3003e47d1010992a4526dff328e0687544f06d400fb5f5c1befbbccb8cac9d88eea1245fbe46fbed462e4e6", 0xa9}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast1}}}, @ip_tos_u8={{0x11}}], 0x88}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="d8358744c4cfa167d354e87b9b1cae9c3d28f84091cb5c770327761ed6ad0ee003d7f13bdc434caef49a8aceae877d20ab8253098fe595824ee3a0c736ffaaeb36585f507525ef863407701b625a4c3998c106f8e0d629a9798dd762da74703bb436b483054b799a1ffb90b36686eb25333f0097df7e2d2a888fe25ce88b9a47336ed3d0a6f2821e9c21d2eef8d46d2fe1de953780cf359d35343726688ac49384204b3d996d28b4ac88137e04a8", 0xae}, {&(0x7f00000019c0)="b3a6de97a804247c4e2185ed2e6d77475134c4c3cdbf8c10e27877b011bbfd7cbb6bb713b627db324e662acbc6e2f10db3c2bfdbdc0fa3a2a8d5787cf6e83bea453af13ca11bd14fd0965f57905e46d0d62f1c2bd88f02e6160630015812e959efa0945ed2145a6a2a227ef163f5da1525be6faf11011003c643f8e4ce6f2375ca1c1d7095074991ad3fdd66f83bfcf30dc1e2d1b5e24a058716e7cf", 0x9c}], 0x3, &(0x7f0000001e00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x88}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev={0xac, 0x14, 0x14, 0x27}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0xd8}}, {{&(0x7f0000001cc0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001d00), 0x0, &(0x7f0000001f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}], 0x88}}, {{&(0x7f0000001d40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000030c0)=[{&(0x7f0000001fc0)="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", 0xfc}, {&(0x7f00000020c0)="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", 0x1000}], 0x2, &(0x7f0000003100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@generic={0x94, 0x3, "d8"}, @generic={0x44, 0xf, "774cbdfc63c23a1c6df81aa611"}, @noop, @noop, @timestamp_addr={0x44, 0x44, 0x81, 0x1, 0x0, [{@empty, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3f}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@loopback, 0x480}, {@loopback, 0x100}, {@local, 0x4}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}]}, @timestamp_prespec={0x44, 0x34, 0x72, 0x3, 0xd, [{@broadcast, 0x81}, {@local, 0x5}, {@loopback, 0x1f}, {@loopback, 0x3}, {@remote, 0x3}, {@remote, 0xffffffc8}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x3a, 0x1, 0x8, [{@multicast2, 0xec46f51}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@local, 0x3ff}, {@rand_addr=0x64010102, 0xfffffe01}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x827}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @broadcast}}}], 0x118}}, {{&(0x7f0000003240)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000004480)=[{&(0x7f0000003280)}, {&(0x7f00000032c0)="5db3afdb27d046172f9f26e528bd35c56a958c5d7d2832cb6210e2c43cc2fd61dfd5f2b24214550860d37d1f3bbf288273f86c274236136a34c47d3d7f42be2bd321dc950e511a3f27434653256eac89462e2e975908b4647292aa987a4fc43be866ccb63e2ecfc97193d70009f10a71e8be9380d43d64245bf76a03d0a26afbc012b1c138bfa02556777fd93deb86ea5c250bc92f5ce05b193b12845af27602d1980aef02d6e722949946abd6dd085037e09f64c1c00acbb0b9b052fd05780e71b189898070b78dd57c6e3de415318ead7efe706f1b056816ecd92576b5f84c9eccf931dbf97e4531cd31", 0xeb}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f00000043c0)="062cf30ddc6a68d37f4dcfba0af0c51e48b5c7596f98a4556be9749bc75d71a1b76d267fdcc80251514a70925b98666c434d3029a75d2a2b3df6bb2fec86bda8d108704b8aac606274cc70130ccaba81bd52910553c2ba5eaf496039800be1f691953a459ec95087f92f8485dbd6fe13e78716b3ee707ab5d12d852d37eb078a181a2193a0ff751d1d37b7af3f16fce7c9427c96024e401b790685a7711b2fbff8a7fcfc76e5adf30674a7dc37dd06935b7f4d385f0448674a6e73", 0xbb}], 0x4, &(0x7f0000004640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf64a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @broadcast}}}], 0xe0}}, {{&(0x7f0000004740)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000004840)=[{&(0x7f0000004780)="3c3c757d7a588bcff73feecba5be417f1e83389dd4bdd734a7b2aa39d4", 0x1d}, {&(0x7f00000047c0)="77251d6d823e44c9652586583c47bdef54f6eab859bc0abe0faab7449cb931ffda1e0275084c6f3ab8221d502ad37031aebdfd032f7983fb35b7871e6560f0d6862468279d72", 0x46}], 0x2, &(0x7f0000004880)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000700f3ca860a000000010704480944145d017f00000100000004ac1e0001000007ff440cd96000000001000000068307cb640101020000000000000011000000000000000000000001000cae62a5b02b288c4aa3a59e0000040000000000000008000000000000000000"], 0x90}}, {{&(0x7f0000004940)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000004b00)=[{&(0x7f0000004980)="198679619d2e717b2973f9e243b94485d01b42ec0c4d29c333264b61fb1b82ec4e2d1a8ab2932a4df21e910f683afb75649884fb957ff831ff6414d37e0e03efd7e0357641742fcce8cc41432171fe1b32f96ee6b62d11090a00206691cd5922926d470b28e0eed3f9ebf8bbff923705c83ade66757ef73f98e696196d9b907831fbc84b6880c3c57d2e166eb1a4d837ad338418eb87868b818b8e3ae28ab45f046f55ed879c8cd6503584766041b7c9ff39e0253c963278fe11cecbbab9bfe176e74c2ab6a89da9b379e9", 0xcb}, {&(0x7f0000004a80)="49dda883c94441db9eec1ce9146b4ba7664441599f9730f18e488dcf2e6d632b36f61efb059713854b9bd641f74b85f0afd92cd331d057878d9e3a7f1ef1d1d726ae9e013eb8f48c9b134aacb7f416e0da8a206cb8cb2a16d995f9ef6ccdf69e6ab0a7cd5f1b59260fa78b5198e92edc11325caa3f352af37656b012", 0x7c}], 0x2, &(0x7f0000004b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffc01}}], 0x38}}, {{&(0x7f0000004b80)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000004cc0)=[{&(0x7f0000004bc0)="d1bc24c851afc629ac188ba7b6c22c63b23c71da7a7025de9b9b64c2d62a5f7e9322e8b479b8b89f5f6a7c1e3938d57e5b5c1dd4666484f30989fc93cefbc8f304a80489d8e0869b45998f06cab880ab17c9d62e6029b7ab60ff5a167182", 0x5e}, {&(0x7f0000004c40)="3dc7a34da9f0b59e1f3863a3dd549514e1151752fb4ff5ea75e0a52a6573b355b4a096158dc8bae9318971dd71524b0f54245a1e7709796b4770b7a3f62bd1c36aecdaf2506bb411ad054031", 0x4c}], 0x2}}, {{&(0x7f0000004d00)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000004dc0)=[{&(0x7f0000004d40)="b405d9668dbc35d7a65c68ac22b2e29960d6338c50421065da9bbce98dc0b0d95b8222aedf57e792be0db74d3ebe8f50ab00fea062aa7c5f218a26cee909621458d94cb6d5b5cfc3870ce0bd0b51e3db625a54fa0ba939c62b665e28a1", 0x5d}], 0x1, &(0x7f0000004ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe8c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x50}}], 0xa, 0x4001) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x5, 0x80000000}) sendmmsg$inet(r7, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:17:50 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:17:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000006c1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:17:50 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c68) 10:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e007a000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:17:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000741e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3028.077372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:17:50 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c6c) [ 3028.085177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.094436] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.120415] FAULT_INJECTION: forcing a failure. [ 3028.120415] name failslab, interval 1, probability 0, space 0, times 0 [ 3028.123549] CPU: 0 PID: 14692 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3028.124954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3028.126636] Call Trace: [ 3028.127171] dump_stack+0x107/0x167 [ 3028.127905] should_fail.cold+0x5/0xa [ 3028.128673] ? create_object.isra.0+0x3a/0xa20 [ 3028.129604] should_failslab+0x5/0x20 [ 3028.130397] kmem_cache_alloc+0x5b/0x310 [ 3028.131234] ? lock_chain_count+0x20/0x20 [ 3028.132070] create_object.isra.0+0x3a/0xa20 [ 3028.132956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3028.133978] kmem_cache_alloc_node+0x169/0x330 [ 3028.134933] __alloc_skb+0x6d/0x5b0 10:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0081000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 3028.135673] alloc_skb_with_frags+0x92/0x570 [ 3028.136653] sock_alloc_send_pskb+0x7af/0x930 [ 3028.137566] ? sk_alloc+0x350/0x350 [ 3028.138338] ? lock_acquire+0x197/0x470 [ 3028.139152] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3028.140233] ? lock_release+0x680/0x680 [ 3028.141045] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 3028.142051] ? ip6_mtu+0x1bb/0x3d0 [ 3028.142786] ? lock_downgrade+0x6d0/0x6d0 [ 3028.143627] ? ip_frag_init+0x350/0x350 [ 3028.144438] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 3028.145393] ? ip6_mtu+0x1e9/0x3d0 [ 3028.146113] ? ip6_setup_cork+0xfb7/0x1740 [ 3028.146980] ip6_make_skb+0x2de/0x4e0 [ 3028.147741] ? ip_frag_init+0x350/0x350 [ 3028.148543] ? ip_frag_init+0x350/0x350 [ 3028.149346] ? ip6_push_pending_frames+0xf0/0xf0 [ 3028.150321] ? ip6_dst_hoplimit+0x199/0x440 [ 3028.151192] ? lock_downgrade+0x6d0/0x6d0 [ 3028.152039] udpv6_sendmsg+0x20d0/0x2af0 [ 3028.152860] ? ip_frag_init+0x350/0x350 [ 3028.153658] ? udp_v6_push_pending_frames+0x360/0x360 10:17:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000007a1e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3028.154715] ? perf_event_task_disable+0x390/0x390 [ 3028.155730] ? lock_downgrade+0x6d0/0x6d0 [ 3028.156565] ? hrtimer_start_range_ns+0x336/0xae0 [ 3028.157539] ? lock_acquire+0x197/0x470 [ 3028.158350] ? find_held_lock+0x2c/0x110 [ 3028.159186] ? sock_has_perm+0x1ea/0x280 [ 3028.160023] ? __import_iovec+0x458/0x590 [ 3028.160855] ? udp_v6_push_pending_frames+0x360/0x360 [ 3028.161910] inet6_sendmsg+0x105/0x140 [ 3028.162694] ? inet6_compat_ioctl+0x320/0x320 [ 3028.163580] sock_sendmsg+0xf2/0x190 [ 3028.164324] ____sys_sendmsg+0x334/0x870 [ 3028.165136] ? kernel_sendmsg+0x50/0x50 [ 3028.165342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3028.165924] ? do_recvmmsg+0x6d0/0x6d0 [ 3028.165955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3028.167020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.167643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3028.169368] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.169831] ? trace_hardirqs_on+0x5b/0x180 [ 3028.172914] ___sys_sendmsg+0xf3/0x170 [ 3028.173694] ? sendmsg_copy_msghdr+0x160/0x160 [ 3028.174618] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3028.175504] ? _raw_spin_unlock_irq+0x27/0x30 [ 3028.176395] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3028.177283] ? finish_task_switch+0x126/0x5d0 [ 3028.178176] ? finish_task_switch+0xef/0x5d0 [ 3028.179058] ? __switch_to+0x572/0xf70 [ 3028.179833] ? __switch_to_asm+0x3a/0x60 [ 3028.180636] ? __switch_to_asm+0x34/0x60 [ 3028.181447] ? __schedule+0x82c/0x1ea0 [ 3028.182231] ? io_schedule_timeout+0x140/0x140 [ 3028.183162] __sys_sendmmsg+0x195/0x470 [ 3028.183958] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3028.184812] ? lock_downgrade+0x6d0/0x6d0 [ 3028.185650] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3028.186638] ? wait_for_completion_io+0x270/0x270 [ 3028.187595] ? rcu_read_lock_any_held+0x75/0xa0 [ 3028.188534] ? vfs_write+0x354/0xa70 [ 3028.189281] ? fput_many+0x2f/0x1a0 [ 3028.190018] ? ksys_write+0x1a9/0x260 [ 3028.190803] ? __ia32_sys_read+0xb0/0xb0 [ 3028.191612] __x64_sys_sendmmsg+0x99/0x100 [ 3028.192475] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3028.193495] do_syscall_64+0x33/0x40 [ 3028.194232] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3028.195272] RIP: 0033:0x7fba2f88eb19 [ 3028.196015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3028.199736] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3028.201243] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3028.202695] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3028.204131] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3028.205567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3028.207020] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:17:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0ec0000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 3028.209801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3028.230628] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:17:50 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000)="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", 0xfb}, 0x68) 10:17:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000811e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:18:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e01e6000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000b000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x3, 0x87a14f87, 0xfc, 0x8001, 0x16}) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:18:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 82) 10:18:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000052, 0x0) 10:18:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000ec01e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:18:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r0, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) copy_file_range(r1, &(0x7f0000000100), r0, 0x0, 0xab3d, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01001ce6cba557faa43c38dfd88f00000100000018000000", @ANYRES32=r2, @ANYBLOB="96000000000000002e2f66696c653000"]) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:18:03 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c74) [ 3040.941378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3040.945403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3040.957607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3040.967822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00f0000000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) [ 3041.002670] FAULT_INJECTION: forcing a failure. [ 3041.002670] name failslab, interval 1, probability 0, space 0, times 0 10:18:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000c000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 3041.005563] CPU: 0 PID: 14743 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3041.007199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.009014] Call Trace: [ 3041.009601] dump_stack+0x107/0x167 [ 3041.010410] should_fail.cold+0x5/0xa [ 3041.011272] ? create_object.isra.0+0x3a/0xa20 [ 3041.012273] should_failslab+0x5/0x20 [ 3041.013116] kmem_cache_alloc+0x5b/0x310 [ 3041.014011] ? lock_downgrade+0x6d0/0x6d0 [ 3041.014933] create_object.isra.0+0x3a/0xa20 [ 3041.015896] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3041.017010] __kmalloc_track_caller+0x177/0x370 [ 3041.018035] ? ip6_setup_cork+0x670/0x1740 [ 3041.018976] kmemdup+0x23/0x50 [ 3041.019680] ip6_setup_cork+0x670/0x1740 [ 3041.020580] ip6_make_skb+0x22d/0x4e0 [ 3041.021411] ? ip_frag_init+0x350/0x350 [ 3041.022285] ? ip6_push_pending_frames+0xf0/0xf0 [ 3041.023350] ? ip6_dst_hoplimit+0x199/0x440 [ 3041.024294] ? lock_downgrade+0x6d0/0x6d0 [ 3041.025212] udpv6_sendmsg+0x20d0/0x2af0 [ 3041.026102] ? ip_frag_init+0x350/0x350 [ 3041.026987] ? udp_v6_push_pending_frames+0x360/0x360 [ 3041.028116] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3041.029299] ? lock_acquire+0x197/0x470 [ 3041.030168] ? find_held_lock+0x2c/0x110 [ 3041.031074] ? lock_acquire+0x197/0x470 [ 3041.031942] ? find_held_lock+0x2c/0x110 [ 3041.032849] ? sock_has_perm+0x1ea/0x280 [ 3041.033759] ? __import_iovec+0x458/0x590 [ 3041.034665] ? udp_v6_push_pending_frames+0x360/0x360 [ 3041.035775] inet6_sendmsg+0x105/0x140 [ 3041.036613] ? inet6_compat_ioctl+0x320/0x320 [ 3041.037574] sock_sendmsg+0xf2/0x190 [ 3041.038377] ____sys_sendmsg+0x334/0x870 [ 3041.039265] ? kernel_sendmsg+0x50/0x50 [ 3041.040118] ? do_recvmmsg+0x6d0/0x6d0 [ 3041.040960] ? __lock_acquire+0x1657/0x5b00 [ 3041.041900] ___sys_sendmsg+0xf3/0x170 [ 3041.042762] ? sendmsg_copy_msghdr+0x160/0x160 [ 3041.043750] ? do_user_addr_fault+0x549/0xc60 [ 3041.044731] ? lock_acquire+0x197/0x470 [ 3041.045586] ? find_held_lock+0x2c/0x110 [ 3041.046480] ? __might_fault+0xd3/0x180 [ 3041.047339] ? lock_downgrade+0x6d0/0x6d0 [ 3041.048241] ? asm_exc_page_fault+0x1e/0x30 [ 3041.049190] __sys_sendmmsg+0x195/0x470 [ 3041.050056] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3041.051001] ? lock_downgrade+0x6d0/0x6d0 [ 3041.051804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3041.051911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3041.054179] ? wait_for_completion_io+0x270/0x270 [ 3041.055247] ? rcu_read_lock_any_held+0x75/0xa0 [ 3041.056251] ? vfs_write+0x354/0xa70 [ 3041.057065] ? fput_many+0x2f/0x1a0 [ 3041.057854] ? ksys_write+0x1a9/0x260 [ 3041.058706] ? __ia32_sys_read+0xb0/0xb0 [ 3041.059594] __x64_sys_sendmmsg+0x99/0x100 [ 3041.059775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3041.060519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3041.060541] do_syscall_64+0x33/0x40 [ 3041.063744] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3041.063761] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3041.064852] RIP: 0033:0x7fba2f88eb19 [ 3041.064876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.064895] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3041.072527] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3041.074059] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3041.075591] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.077114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.078655] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 [ 3041.079317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000053, 0x0) 10:18:03 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffa000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/30) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) 10:18:03 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c7a) 10:18:03 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0040030000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000d000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000f01e00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:18:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80]}, 0x8) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) sendfile(r1, r2, &(0x7f0000000100)=0x800, 0x4e83) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x70, 0x0, 0xfe, 0x5, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000081}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3041.232382] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:18:03 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x7500) [ 3041.253825] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:03 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup2(r2, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x6b9ca07ab63b2da1, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, {0x230}, 0x1, {0x0, r4}}, 0x7ff) 10:18:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 83) 10:18:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000e000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000080000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0xff00) 10:18:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000054, 0x0) 10:18:17 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) 10:18:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000f00852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:18:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) copy_file_range(r1, &(0x7f0000000200)=0x3, r1, &(0x7f0000000240)=0x80, 0x6, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r2, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x5) recvfrom(r2, &(0x7f0000000080)=""/209, 0xd1, 0x2020, &(0x7f0000000180)=@nfc_llcp={0x27, 0x2850000, 0x0, 0x5, 0x3, 0x1, "07735430cca747d01e8339a35ad420003005e3b06c3eed23a678ca3d013d4c50e1b9f5ec245aa2618812b52dae24df5b37f6160ca3a8e0555bacf5cd07beb7", 0x2d}, 0x80) [ 3055.235375] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=14797 comm=syz-executor.6 [ 3055.266554] __nla_validate_parse: 2 callbacks suppressed [ 3055.266565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3055.276254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3055.282355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3055.302398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3055.306779] FAULT_INJECTION: forcing a failure. [ 3055.306779] name failslab, interval 1, probability 0, space 0, times 0 [ 3055.309453] CPU: 0 PID: 14805 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3055.310916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3055.312681] Call Trace: [ 3055.313248] dump_stack+0x107/0x167 [ 3055.314002] should_fail.cold+0x5/0xa [ 3055.314812] ? create_object.isra.0+0x3a/0xa20 [ 3055.315743] should_failslab+0x5/0x20 [ 3055.316541] kmem_cache_alloc+0x5b/0x310 [ 3055.317382] create_object.isra.0+0x3a/0xa20 [ 3055.318259] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3055.319326] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3055.320355] ? alloc_skb_with_frags+0x92/0x570 [ 3055.321297] __alloc_skb+0xb1/0x5b0 [ 3055.322037] alloc_skb_with_frags+0x92/0x570 [ 3055.322964] sock_alloc_send_pskb+0x7af/0x930 [ 3055.323887] ? sk_alloc+0x350/0x350 [ 3055.324640] ? lock_acquire+0x197/0x470 [ 3055.325449] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3055.326532] ? lock_release+0x680/0x680 [ 3055.327347] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 3055.328384] ? ip6_mtu+0x1bb/0x3d0 [ 3055.329139] ? lock_downgrade+0x6d0/0x6d0 [ 3055.329981] ? ip_frag_init+0x350/0x350 [ 3055.330834] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 3055.331780] ? ip6_mtu+0x1e9/0x3d0 [ 3055.332500] ? ip6_setup_cork+0xfb7/0x1740 [ 3055.333366] ip6_make_skb+0x2de/0x4e0 [ 3055.334136] ? ip_frag_init+0x350/0x350 [ 3055.334950] ? ip_frag_init+0x350/0x350 [ 3055.335761] ? ip6_push_pending_frames+0xf0/0xf0 [ 3055.336728] ? ip6_dst_hoplimit+0x199/0x440 [ 3055.337624] ? lock_downgrade+0x6d0/0x6d0 [ 3055.338503] udpv6_sendmsg+0x20d0/0x2af0 [ 3055.339353] ? ip_frag_init+0x350/0x350 [ 3055.340187] ? udp_v6_push_pending_frames+0x360/0x360 [ 3055.341222] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3055.342350] ? lock_acquire+0x197/0x470 [ 3055.343166] ? find_held_lock+0x2c/0x110 [ 3055.344023] ? sock_has_perm+0x1ea/0x280 [ 3055.344875] ? __import_iovec+0x458/0x590 [ 3055.345717] ? udp_v6_push_pending_frames+0x360/0x360 [ 3055.346760] inet6_sendmsg+0x105/0x140 [ 3055.347548] ? inet6_compat_ioctl+0x320/0x320 [ 3055.348461] sock_sendmsg+0xf2/0x190 [ 3055.349230] ____sys_sendmsg+0x334/0x870 [ 3055.350059] ? kernel_sendmsg+0x50/0x50 [ 3055.350880] ? do_recvmmsg+0x6d0/0x6d0 [ 3055.351675] ? __lock_acquire+0x1657/0x5b00 [ 3055.352560] ___sys_sendmsg+0xf3/0x170 [ 3055.353350] ? sendmsg_copy_msghdr+0x160/0x160 [ 3055.354271] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3055.355195] ? _raw_spin_unlock_irq+0x27/0x30 [ 3055.356114] ? lock_acquire+0x197/0x470 [ 3055.356911] ? find_held_lock+0x2c/0x110 [ 3055.357733] ? __might_fault+0xd3/0x180 [ 3055.358532] ? lock_downgrade+0x6d0/0x6d0 [ 3055.359381] ? io_schedule_timeout+0x140/0x140 [ 3055.360328] __sys_sendmmsg+0x195/0x470 [ 3055.361150] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3055.362034] ? lock_downgrade+0x6d0/0x6d0 [ 3055.362895] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3055.363866] ? wait_for_completion_io+0x270/0x270 [ 3055.364840] ? rcu_read_lock_any_held+0x75/0xa0 [ 3055.365780] ? vfs_write+0x354/0xa70 [ 3055.366545] ? fput_many+0x2f/0x1a0 [ 3055.367290] ? ksys_write+0x1a9/0x260 [ 3055.368076] ? __ia32_sys_read+0xb0/0xb0 [ 3055.368912] __x64_sys_sendmmsg+0x99/0x100 [ 3055.369779] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3055.370845] do_syscall_64+0x33/0x40 [ 3055.371604] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3055.372642] RIP: 0033:0x7fba2f88eb19 [ 3055.373406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3055.377195] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3055.378756] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3055.380217] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3055.381663] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3055.383137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3055.384597] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:18:17 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) accept4$packet(r1, 0x0, &(0x7f0000000040), 0x80800) 10:18:17 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000000)=0x81, 0x10001, 0x2) 10:18:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000000f000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:17 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0003400000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000001000000cb870000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 3055.441867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3055.452563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3055.462714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3055.466599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 10:18:17 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) 10:18:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000055, 0x0) 10:18:17 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000048000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) [ 3055.578432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3055.590941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3070.795952] ------------[ cut here ]------------ [ 3070.796932] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 3070.797986] WARNING: CPU: 1 PID: 14859 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 3070.798934] Modules linked in: [ 3070.799283] CPU: 1 PID: 14859 Comm: syz-executor.0 Not tainted 5.10.178 #1 [ 3070.800023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3070.800923] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 3070.801482] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 d4 1c 8f fd e8 cf 1c 8f fd 8b 54 24 04 48 89 ee 48 c7 c7 20 1f 95 84 e8 d9 f9 24 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 5d cb ba fd e9 97 fb ff ff 4c 89 [ 3070.803456] RSP: 0018:ffff888047a1f508 EFLAGS: 00010286 [ 3070.804046] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 10:18:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r5) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 84) 10:18:33 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcf, 0x1, 0x20, 0x11, 0x0, 0x8, 0x80204, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xa371, 0x7}, 0xc20, 0x3, 0x2, 0x2, 0x8, 0x1f, 0x3, 0x0, 0x2eb6, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r2, 0x3) 10:18:33 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0x3, 0xff) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') readv(r1, &(0x7f0000001540)=[{&(0x7f0000000140)=""/44, 0x2c}, {0x0, 0x74}], 0x2) bind$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x5) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xf1, 0x1c}}}}, [@NL80211_ATTR_VENDOR_DATA={0x30, 0xc5, "0f47a3a4bb93c9199daaf0e151a86f7800d7cdca76dcd540b6ea1bc0e371eb2dabedaa5c2bc3aee3e370bfd2"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xe7}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x10) 10:18:33 executing program 7: r0 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x3, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/184) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x1000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_STAT(r2, 0x2, &(0x7f00000000c0)=""/4096) 10:18:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852effffe00000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e0000004c000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001200852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3070.804811] RDX: 0000000000040000 RSI: ffffffff81299e33 RDI: ffffed1008f43e93 [ 3070.805816] RBP: ffff888045a3c000 R08: 0000000000000001 R09: ffff88806cf27fdb [ 3070.806593] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888045a3cbc0 [ 3070.807374] R13: 0000000002000000 R14: ffff888045a3dda0 R15: ffff888045a3dd98 [ 3070.808151] FS: 00007f1af7de6700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 3070.809025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3070.809643] CR2: 0000001b2d224000 CR3: 0000000046490000 CR4: 0000000000350ee0 [ 3070.810404] Call Trace: [ 3070.810692] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 3070.811967] ieee80211_set_mcast_rate+0x37/0x50 [ 3070.813786] ? ieee80211_set_wds_peer+0x30/0x30 [ 3070.815380] nl80211_set_mcast_rate+0x30b/0x650 [ 3070.816146] ? nl80211_update_owe_info+0x750/0x750 [ 3070.816953] ? nl80211_pre_doit+0xa2/0x630 [ 3070.817628] genl_family_rcv_msg_doit+0x22d/0x330 [ 3070.818407] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 3070.819489] ? cap_capable+0x1d6/0x240 [ 3070.820161] ? ns_capable+0xe2/0x110 [ 3070.820773] genl_rcv_msg+0x33c/0x5a0 [ 3070.821425] ? genl_get_cmd+0x480/0x480 [ 3070.822102] ? nl80211_update_owe_info+0x750/0x750 [ 3070.822923] ? lock_release+0x680/0x680 [ 3070.823587] ? netlink_deliver_tap+0xf4/0xcd0 [ 3070.824354] netlink_rcv_skb+0x14b/0x430 [ 3070.825036] ? genl_get_cmd+0x480/0x480 [ 3070.825680] ? netlink_ack+0xab0/0xab0 10:18:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2008000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = dup2(r3, r3) syz_io_uring_submit(r2, 0x0, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0xfffffffd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x2, 0xfffff054) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0xffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x8) fchmod(0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000180)="914b3a7c66a0f6b80ecbe85465320b032395ecba6c50181affa83f4a4fbaf82791bb755f7fc46e849b8a67ee", 0x2c}], 0x1, 0x0, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x400000000000056, 0x0) [ 3070.826336] ? netlink_deliver_tap+0x1c4/0xcd0 [ 3070.827341] ? is_vmalloc_addr+0x7b/0xb0 [ 3070.828024] genl_rcv+0x24/0x40 [ 3070.828555] netlink_unicast+0x549/0x7f0 [ 3070.829241] ? netlink_attachskb+0x870/0x870 [ 3070.829968] ? __virt_addr_valid+0x128/0x350 [ 3070.830682] netlink_sendmsg+0x90f/0xdf0 [ 3070.831374] ? netlink_unicast+0x7f0/0x7f0 [ 3070.832085] ? netlink_unicast+0x7f0/0x7f0 [ 3070.832766] sock_sendmsg+0x154/0x190 [ 3070.833406] ____sys_sendmsg+0x70d/0x870 [ 3070.834092] ? kernel_sendmsg+0x50/0x50 [ 3070.834721] ? do_recvmmsg+0x6d0/0x6d0 [ 3070.835384] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3070.836273] ___sys_sendmsg+0xf3/0x170 [ 3070.836891] ? sendmsg_copy_msghdr+0x160/0x160 [ 3070.837637] ? lock_downgrade+0x6d0/0x6d0 [ 3070.838328] ? finish_task_switch+0x126/0x5d0 [ 3070.839073] ? lock_downgrade+0x6d0/0x6d0 [ 3070.839727] ? __fget_files+0x296/0x4c0 [ 3070.840396] ? __fget_light+0xea/0x290 [ 3070.841032] __sys_sendmsg+0xe5/0x1b0 [ 3070.841644] ? __sys_sendmsg_sock+0x40/0x40 [ 3070.842356] ? io_schedule_timeout+0x140/0x140 [ 3070.843122] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3070.843982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3070.844818] ? trace_hardirqs_on+0x5b/0x180 [ 3070.845543] do_syscall_64+0x33/0x40 [ 3070.846184] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3070.847056] RIP: 0033:0x7f1afa870b19 [ 3070.847624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.850444] RSP: 002b:00007f1af7de6188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3070.850766] FAULT_INJECTION: forcing a failure. [ 3070.850766] name failslab, interval 1, probability 0, space 0, times 0 [ 3070.851646] RAX: ffffffffffffffda RBX: 00007f1afa983f60 RCX: 00007f1afa870b19 [ 3070.851674] RDX: 0000000000000000 RSI: 0000000020000f00 RDI: 0000000000000007 [ 3070.851683] RBP: 00007f1afa8caf6d R08: 0000000000000000 R09: 0000000000000000 [ 3070.851693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3070.851702] R13: 00007ffe5ef633ff R14: 00007f1af7de6300 R15: 0000000000022000 [ 3070.851725] irq event stamp: 2005 [ 3070.851743] hardirqs last enabled at (2011): [] vprintk_emit+0x486/0x4d0 [ 3070.851760] hardirqs last disabled at (2016): [] vprintk_emit+0x418/0x4d0 [ 3070.851777] softirqs last enabled at (1940): [] asm_call_irq_on_stack+0x12/0x20 [ 3070.851794] softirqs last disabled at (1935): [] asm_call_irq_on_stack+0x12/0x20 [ 3070.851810] ---[ end trace a2600932c723d982 ]--- [ 3070.854146] CPU: 0 PID: 14865 Comm: syz-executor.5 Not tainted 5.10.178 #1 [ 3070.870972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3070.872630] Call Trace: [ 3070.873173] dump_stack+0x107/0x167 [ 3070.873912] should_fail.cold+0x5/0xa [ 3070.874682] ? create_object.isra.0+0x3a/0xa20 [ 3070.875623] should_failslab+0x5/0x20 [ 3070.876389] kmem_cache_alloc+0x5b/0x310 [ 3070.877211] create_object.isra.0+0x3a/0xa20 [ 3070.878097] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3070.879142] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3070.880164] ? alloc_skb_with_frags+0x92/0x570 [ 3070.881087] __alloc_skb+0xb1/0x5b0 [ 3070.881823] alloc_skb_with_frags+0x92/0x570 [ 3070.882727] sock_alloc_send_pskb+0x7af/0x930 [ 3070.883649] ? sk_alloc+0x350/0x350 [ 3070.884388] ? lock_acquire+0x197/0x470 [ 3070.885194] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3070.886249] ? lock_release+0x680/0x680 [ 3070.887072] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 3070.888089] ? ip6_mtu+0x1bb/0x3d0 [ 3070.888801] ? lock_downgrade+0x6d0/0x6d0 [ 3070.889629] ? ip_frag_init+0x350/0x350 [ 3070.890438] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 3070.891371] ? ip6_mtu+0x1e9/0x3d0 [ 3070.892080] ? ip6_setup_cork+0xfb7/0x1740 [ 3070.892927] ip6_make_skb+0x2de/0x4e0 [ 3070.893673] ? ip_frag_init+0x350/0x350 [ 3070.894466] ? ip_frag_init+0x350/0x350 [ 3070.895272] ? ip6_push_pending_frames+0xf0/0xf0 [ 3070.896219] ? ip6_dst_hoplimit+0x199/0x440 [ 3070.897088] ? lock_downgrade+0x6d0/0x6d0 [ 3070.897936] udpv6_sendmsg+0x20d0/0x2af0 [ 3070.898747] ? ip_frag_init+0x350/0x350 [ 3070.899578] ? udp_v6_push_pending_frames+0x360/0x360 [ 3070.900636] ? perf_event_task_disable+0x390/0x390 [ 3070.901629] ? lock_downgrade+0x6d0/0x6d0 [ 3070.902466] ? hrtimer_start_range_ns+0x336/0xae0 [ 3070.903455] ? lock_acquire+0x197/0x470 [ 3070.904260] ? find_held_lock+0x2c/0x110 [ 3070.905088] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3070.906192] ? sock_has_perm+0x1ea/0x280 [ 3070.907065] ? __import_iovec+0x458/0x590 [ 3070.907913] ? udp_v6_push_pending_frames+0x360/0x360 [ 3070.908967] inet6_sendmsg+0x105/0x140 [ 3070.909746] ? inet6_compat_ioctl+0x320/0x320 [ 3070.910660] sock_sendmsg+0xf2/0x190 [ 3070.911421] ____sys_sendmsg+0x334/0x870 [ 3070.912250] ? kernel_sendmsg+0x50/0x50 [ 3070.913055] ? do_recvmmsg+0x6d0/0x6d0 [ 3070.913852] ? __lock_acquire+0x1657/0x5b00 [ 3070.914758] ___sys_sendmsg+0xf3/0x170 [ 3070.915551] ? sendmsg_copy_msghdr+0x160/0x160 [ 3070.916466] ? _raw_spin_unlock_irq+0x1f/0x30 [ 3070.917366] ? _raw_spin_unlock_irq+0x27/0x30 [ 3070.918271] ? lock_acquire+0x197/0x470 [ 3070.919087] ? find_held_lock+0x2c/0x110 [ 3070.919911] ? __might_fault+0xd3/0x180 [ 3070.920709] ? lock_downgrade+0x6d0/0x6d0 [ 3070.921537] ? io_schedule_timeout+0x140/0x140 [ 3070.922464] __sys_sendmmsg+0x195/0x470 [ 3070.923276] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3070.924143] ? lock_downgrade+0x6d0/0x6d0 [ 3070.924989] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3070.925959] ? wait_for_completion_io+0x270/0x270 [ 3070.926955] ? rcu_read_lock_any_held+0x75/0xa0 [ 3070.927899] ? vfs_write+0x354/0xa70 [ 3070.928665] ? fput_many+0x2f/0x1a0 [ 3070.929407] ? ksys_write+0x1a9/0x260 [ 3070.930179] ? __ia32_sys_read+0xb0/0xb0 [ 3070.931018] __x64_sys_sendmmsg+0x99/0x100 [ 3070.931884] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3070.932934] do_syscall_64+0x33/0x40 [ 3070.933687] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 3070.934725] RIP: 0033:0x7fba2f88eb19 [ 3070.935493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3070.939210] RSP: 002b:00007fba2ce04188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3070.940764] RAX: ffffffffffffffda RBX: 00007fba2f9a1f60 RCX: 00007fba2f88eb19 [ 3070.942220] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000003 [ 3070.943676] RBP: 00007fba2ce041d0 R08: 0000000000000000 R09: 0000000000000000 [ 3070.945135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3070.946574] R13: 00007fff5c0ef01f R14: 00007fba2ce04300 R15: 0000000000022000 10:18:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001300852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3070.982526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3070.984340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3070.989168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3070.994481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852efffff00000000000000000000400000008000800", @ANYBLOB], 0x20}}, 0x4000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x81) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x210000, 0xa) 10:18:33 executing program 0: socket$inet(0xa, 0x3, 0xff) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/raw6\x00') socket$inet(0xa, 0xa, 0x8000) pread64(r0, &(0x7f0000002100)=""/4090, 0xffa, 0x6c00) 10:18:33 executing program 7: r0 = shmget(0x2, 0x2000, 0x80, &(0x7f0000c1f000/0x2000)=nil) shmat(r0, &(0x7f0000e74000/0x3000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) 10:18:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001e00852e00000068000000000000000004000000080008"], 0x20}}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 10:18:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001400852e0000000000000000000000000400000008000800", @ANYRES32=r2, @ANYBLOB], 0x20}}, 0x4000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000180)=0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x8) fallocate(r3, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r4, &(0x7f0000000140)='./file1\x00', 0x0, 0xa) [ 3071.092725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3071.105551] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3071.134774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 10:18:33 executing program 7: shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x16, @rand_addr=' \x01\x00', 0x3c436a3b}, 0x1c) [ 3071.156383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. VM DIAGNOSIS: 10:18:33 Registers: info registers vcpu 0 RAX=861153dd5c9a797f RBX=0a44f6cc21aae1a3 RCX=c3e4c95ad0ded1d0 RDX=597a74cabc95f228 RSI=1f3ef71f10f224fd RDI=ee654676011d672c RBP=ffff88806ce391a0 RSP=ffff888045bcfb88 R8 =0000000000000001 R9 =0000000000000003 R10=ffffed1008b79f72 R11=0000000000000001 R12=e6383b69a1b72379 R13=ffff888046fabc38 R14=ffff888046fabc60 R15=0000000000000001 RIP=ffffffff81eed29d RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555558f400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555590c18 CR3=00000000481b0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f0b3aa2b7c000007f0b3aa2b7c8 XMM02=00007f0b3aa2b7e000007f0b3aa2b7c0 XMM03=00007f0b3aa2b7c800007f0b3aa2b7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822c1f0c RDI=ffffffff879e41a0 RBP=ffffffff879e4160 RSP=ffff888047a1ee50 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3c880 R14=fffffbfff0f3c836 R15=dffffc0000000000 RIP=ffffffff822c1f60 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1af7de6700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d224000 CR3=0000000046490000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffff00000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=0000000000000000000000000000ff00 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000