xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000040)=0x9, 0x6df49081) sendfile(r1, r2, 0x0, 0x10000000c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {0x0, r5}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005e700)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e900)={0xc6e0, [], 0x8, "a41504786c9fb5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005f900)={0x80000000000, [], 0x5, "6b65fad3a2e74e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000060900)={0x0, [], 0x32, "63ec276f135209"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000061900)={{0x0, 0x7, 0x101, 0x2, 0x9, 0x7f, 0x1, 0xfffffff9, 0x3f, 0x80, 0x7, 0x6, 0xf8, 0x20000000000000, 0x4}}) 20:28:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 21) 20:28:39 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = epoll_create(0x8000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x20000001}) openat$cgroup_type(r3, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:28:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x24, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x13}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000001200), 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001580)={{{@in=@remote, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@remote}}, &(0x7f0000001680)=0xe8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000001740)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3, 0x3, 0x3, 0x0, 0x0, {0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x20}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x74b5}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x44040) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f00000001c0)={{r2}, "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"}) 20:28:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="e6023600410008004b33fec0cefcedcc64456dc3026fc7270300a28ce2d10d69c19cc92a89e0e8006ce92d1ea02d49bcf41c21e99e30bd00ab"], 0x54, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:28:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x50) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) creat(&(0x7f00000019c0)='./file0\x00', 0x0) [ 2201.519562] FAULT_INJECTION: forcing a failure. [ 2201.519562] name failslab, interval 1, probability 0, space 0, times 0 [ 2201.521902] CPU: 1 PID: 34767 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2201.523281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2201.524950] Call Trace: [ 2201.525494] dump_stack+0x107/0x167 [ 2201.526255] should_fail.cold+0x5/0xa [ 2201.527031] ? dst_alloc+0x9e/0x610 [ 2201.527781] should_failslab+0x5/0x20 [ 2201.528565] kmem_cache_alloc+0x5b/0x310 [ 2201.529409] dst_alloc+0x9e/0x610 [ 2201.530146] rt_dst_alloc+0x73/0x440 [ 2201.530905] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2201.531984] ip_route_output_key_hash+0x18d/0x340 [ 2201.532967] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2201.534103] ? mark_lock+0xf5/0x2df0 [ 2201.534864] ? __lock_acquire+0x1657/0x5b00 [ 2201.535760] ip_route_output_flow+0x23/0x150 [ 2201.536661] ip_tunnel_xmit+0x70e/0x2f50 [ 2201.537494] ? usage_accumulate+0x70/0x110 [ 2201.538363] ? __is_insn_slot_addr+0x94/0x290 [ 2201.539271] ? perf_trace_lock+0xac/0x490 [ 2201.540115] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2201.541077] sit_tunnel_xmit+0xef0/0x2960 [ 2201.541948] ? ipip_rcv+0x4f0/0x4f0 [ 2201.542693] ? skb_crc32c_csum_help+0x80/0x80 [ 2201.543600] ? lock_acquire+0x197/0x470 [ 2201.544405] ? __dev_queue_xmit+0x1c2/0x2710 [ 2201.545306] ? netif_skb_features+0x536/0xa00 [ 2201.546254] dev_hard_start_xmit+0x1cb/0x6f0 [ 2201.547150] __dev_queue_xmit+0x17ec/0x2710 [ 2201.548031] ? find_held_lock+0x2c/0x110 [ 2201.548863] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2201.549797] ? lock_downgrade+0x6d0/0x6d0 [ 2201.550643] ? lock_acquire+0x197/0x470 [ 2201.551446] ? ip_finish_output2+0x220/0x21f0 [ 2201.552359] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2201.553426] neigh_connected_output+0x382/0x4d0 [ 2201.554401] ip_finish_output2+0x6f1/0x21f0 [ 2201.555280] ? nf_hook_slow+0xfc/0x1e0 [ 2201.556069] ? ip_frag_next+0x9e0/0x9e0 [ 2201.556873] ? nf_hook+0x160/0x510 [ 2201.557591] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2201.558625] __ip_finish_output.part.0+0x5f3/0xb50 [ 2201.559616] ? ip_fragment.constprop.0+0x240/0x240 [ 2201.560597] ? nf_hook+0x510/0x510 [ 2201.561328] ip_output+0x2f7/0x600 [ 2201.562071] ip_send_skb+0xdd/0x260 [ 2201.562811] udp_send_skb+0x6da/0x11d0 [ 2201.563606] udp_sendmsg+0x197f/0x2170 [ 2201.564401] ? ip_frag_init+0x350/0x350 [ 2201.565214] ? udp_setsockopt+0xc0/0xc0 [ 2201.566051] ? mark_lock+0xf5/0x2df0 [ 2201.566812] ? mark_lock+0xf5/0x2df0 [ 2201.567570] ? lock_chain_count+0x20/0x20 [ 2201.568407] ? lock_chain_count+0x20/0x20 [ 2201.569252] ? __lockdep_reset_lock+0x180/0x180 [ 2201.570236] ? __lock_acquire+0x1657/0x5b00 [ 2201.571122] udpv6_sendmsg+0x1b4e/0x2af0 [ 2201.571956] ? __lock_acquire+0x1657/0x5b00 [ 2201.572842] ? udp_v6_push_pending_frames+0x360/0x360 [ 2201.573899] ? __lockdep_reset_lock+0x180/0x180 [ 2201.574863] ? __lockdep_reset_lock+0x180/0x180 [ 2201.575813] ? lock_acquire+0x197/0x470 [ 2201.576629] ? find_held_lock+0x2c/0x110 [ 2201.577463] ? __might_fault+0xd3/0x180 [ 2201.578270] ? lock_downgrade+0x6d0/0x6d0 [ 2201.579115] ? sock_has_perm+0x1ea/0x280 [ 2201.579937] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2201.581012] ? __import_iovec+0x458/0x590 [ 2201.581867] ? udp_v6_push_pending_frames+0x360/0x360 [ 2201.582910] inet6_sendmsg+0x105/0x140 [ 2201.583703] ? inet6_compat_ioctl+0x320/0x320 [ 2201.584602] __sock_sendmsg+0xf2/0x190 [ 2201.585391] ____sys_sendmsg+0x334/0x870 [ 2201.586220] ? sock_write_iter+0x3d0/0x3d0 [ 2201.587051] ? do_recvmmsg+0x6d0/0x6d0 [ 2201.587834] ? __lock_acquire+0x1657/0x5b00 [ 2201.588723] ___sys_sendmsg+0xf3/0x170 [ 2201.589506] ? sendmsg_copy_msghdr+0x160/0x160 [ 2201.590429] ? vmacache_find+0x55/0x2a0 [ 2201.591241] ? __lockdep_reset_lock+0x180/0x180 [ 2201.592184] ? lock_acquire+0x197/0x470 [ 2201.592987] ? find_held_lock+0x2c/0x110 [ 2201.593821] ? __might_fault+0xd3/0x180 [ 2201.594631] ? lock_downgrade+0x6d0/0x6d0 [ 2201.595463] ? asm_exc_page_fault+0x1e/0x30 [ 2201.596354] __sys_sendmmsg+0x195/0x470 [ 2201.597169] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2201.598043] ? lock_downgrade+0x6d0/0x6d0 [ 2201.598914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2201.599887] ? wait_for_completion_io+0x270/0x270 [ 2201.600883] ? rcu_read_lock_any_held+0x75/0xa0 [ 2201.601825] ? vfs_write+0x354/0xa70 [ 2201.602587] ? fput_many+0x2f/0x1a0 [ 2201.603319] ? ksys_write+0x1a9/0x260 [ 2201.604094] ? __ia32_sys_read+0xb0/0xb0 [ 2201.604925] __x64_sys_sendmmsg+0x99/0x100 [ 2201.605782] do_syscall_64+0x33/0x40 [ 2201.606536] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2201.607562] RIP: 0033:0x7f1c4c8a5b19 [ 2201.608317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2201.611994] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2201.613514] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2201.614952] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2201.616378] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2201.617814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2201.619239] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:28:39 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2201.799209] udc-core: couldn't find an available UDC or it's busy [ 2201.801103] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:28:40 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x20000001}) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000280)={0xc}) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472616e736c0037fa7d59d527646f", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',loose,\x00']) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'bond0\x00', {0x4}, 0xf7}) 20:28:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:28:40 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:29:03 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:29:03 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000013c0)="c5", 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7b, 0x5, 0x8, 0xa6, 0x0, 0x3, 0x3, 0xfffffffa, 0x150, 0x40, 0x17c, 0xfffffffe, 0x9, 0x38, 0x1, 0x3, 0x6, 0xed}, [{0xf53f8e820ee02e62, 0x8, 0x0, 0x92, 0x1, 0x3f, 0x1a, 0x5}, {0x6474e551, 0x4, 0x10001, 0x3ff, 0x5, 0x4, 0xa9f9, 0x7}], "0f6cbeaa6da73884f90a51e5595a706ed1e1080cc14cfbbd8a8ddc869596b34921da3d12eecfc9b048faa47f49763443b9e2a8516e94d993fdeb6827c3a16b7643aa79c359c0d5b8c3fcc1a7fa634edcb9d6b815e7dcfd3e31c0ea2d35ca3fe234aa4a3b49fdd2aebe7114f6347162c0dede947ae342e672d38ceed8e19b9c4590025bcf072f163b9d3e88e56ae5fd91cc2c527b443a916dccf4232eb70ef6fa32a7d214ab3539abe7dfc8b3800fd106af44a791d627b4dc347b7c7d5f", ['\x00', '\x00']}, 0x36d) 20:29:03 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x3) r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x684200, 0x18e) ftruncate(0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r4 = fork() r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r4, 0x4, 0xffffffffffffffff, r5) sendmsg$nl_generic(r3, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001240)={&(0x7f0000001e00)=ANY=[@ANYBLOB="a21000009255e79e9e69f10d7800fedbdf25", @ANYRES32=r5, @ANYBLOB="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"], 0x10c4}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x7) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, 0x0, 0x0) kcmp(0x0, r4, 0x2, 0xffffffffffffffff, r2) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x0) 20:29:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 22) 20:29:03 executing program 5: sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, 0x0, 0x414) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) fsmount(0xffffffffffffffff, 0x1, 0x88321c53f34e0158) getdents64(r1, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x108}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r5, 0x93aaa8747485835f}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="eba50c8fefe73f6cc941629da6c18a33fbfea2ca05359bfe48643ebd5288d3d6c56db82214f9d3c84071bdbba6884bd3334509ed9229c4b4c080c51413fdb0bfad55d7027e2072e135d0e4172ef33bc484c77521160f839a3d1f2f70ee9ecb796280513c1ac5c7aafb9c2bd8c72ea31b3c5ac823c941ed186827b5fafb50", @ANYRESHEX=r0]}) pidfd_getfd(r1, r3, 0x0) 20:29:03 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:29:03 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2225.242350] udc-core: couldn't find an available UDC or it's busy [ 2225.243768] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2225.293898] FAULT_INJECTION: forcing a failure. [ 2225.293898] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.296738] CPU: 0 PID: 35589 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2225.298273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.300157] Call Trace: [ 2225.300810] dump_stack+0x107/0x167 [ 2225.301747] should_fail.cold+0x5/0xa [ 2225.302688] ? create_object.isra.0+0x3a/0xa20 [ 2225.303785] should_failslab+0x5/0x20 [ 2225.304695] kmem_cache_alloc+0x5b/0x310 [ 2225.305784] create_object.isra.0+0x3a/0xa20 [ 2225.306783] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2225.308038] kmem_cache_alloc+0x159/0x310 [ 2225.309143] dst_alloc+0x9e/0x610 [ 2225.310123] rt_dst_alloc+0x73/0x440 [ 2225.311070] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2225.312478] ip_route_output_key_hash+0x18d/0x340 [ 2225.313586] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2225.314974] ? mark_lock+0xf5/0x2df0 [ 2225.315841] ? perf_swevent_event+0x491/0x550 [ 2225.317051] ip_route_output_flow+0x23/0x150 [ 2225.318157] ip_tunnel_xmit+0x70e/0x2f50 [ 2225.319230] ? perf_event_switch_output+0x790/0x7d0 [ 2225.320466] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2225.321489] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2225.323090] sit_tunnel_xmit+0xef0/0x2960 [ 2225.324275] ? ipip_rcv+0x4f0/0x4f0 [ 2225.325169] ? skb_crc32c_csum_help+0x80/0x80 [ 2225.326231] ? lock_acquire+0x197/0x470 [ 2225.327157] ? __dev_queue_xmit+0x1c2/0x2710 [ 2225.328340] ? netif_skb_features+0x536/0xa00 [ 2225.329476] dev_hard_start_xmit+0x1cb/0x6f0 [ 2225.330724] __dev_queue_xmit+0x17ec/0x2710 [ 2225.331864] ? find_held_lock+0x2c/0x110 [ 2225.332865] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2225.334000] ? lock_downgrade+0x6d0/0x6d0 [ 2225.334999] ? lock_acquire+0x197/0x470 [ 2225.335918] ? ip_finish_output2+0x220/0x21f0 [ 2225.337060] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2225.338363] neigh_connected_output+0x382/0x4d0 [ 2225.339701] ip_finish_output2+0x6f1/0x21f0 [ 2225.340783] ? nf_hook_slow+0xfc/0x1e0 [ 2225.341744] ? ip_frag_next+0x9e0/0x9e0 [ 2225.342727] ? nf_hook+0x160/0x510 [ 2225.343609] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2225.344863] __ip_finish_output.part.0+0x5f3/0xb50 [ 2225.346091] ? ip_fragment.constprop.0+0x240/0x240 [ 2225.347175] ? nf_hook+0x510/0x510 [ 2225.348257] ip_output+0x2f7/0x600 [ 2225.349225] ip_send_skb+0xdd/0x260 [ 2225.350204] udp_send_skb+0x6da/0x11d0 [ 2225.351355] udp_sendmsg+0x197f/0x2170 [ 2225.352374] ? ip_frag_init+0x350/0x350 [ 2225.353490] ? udp_setsockopt+0xc0/0xc0 [ 2225.354529] ? perf_event_switch_output+0x7d0/0x7d0 [ 2225.355767] ? __lockdep_reset_lock+0x180/0x180 [ 2225.356978] ? mark_lock+0xf5/0x2df0 [ 2225.357866] ? find_held_lock+0x2c/0x110 20:29:03 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_io_uring_setup(0x414b, &(0x7f00000001c0)={0x0, 0x10046e4, 0x1, 0x0, 0x18e, 0x0, r0}, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0x1f, 0x8) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2225.358955] ? perf_event_output_forward+0x13f/0x2c0 [ 2225.360276] ? lock_downgrade+0x6d0/0x6d0 [ 2225.361346] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2225.362792] udpv6_sendmsg+0x1b4e/0x2af0 [ 2225.363790] ? __lock_acquire+0x1657/0x5b00 [ 2225.364983] ? udp_v6_push_pending_frames+0x360/0x360 [ 2225.366420] ? __lockdep_reset_lock+0x180/0x180 [ 2225.367645] ? lock_acquire+0x197/0x470 [ 2225.368567] ? find_held_lock+0x2c/0x110 [ 2225.369635] ? __might_fault+0xd3/0x180 [ 2225.370597] ? lock_downgrade+0x6d0/0x6d0 [ 2225.371547] ? perf_event_switch_output+0x7d0/0x7d0 [ 2225.372711] ? sock_has_perm+0x1ea/0x280 [ 2225.373684] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2225.375269] ? __import_iovec+0x458/0x590 [ 2225.376238] ? udp_v6_push_pending_frames+0x360/0x360 [ 2225.377492] inet6_sendmsg+0x105/0x140 [ 2225.378424] ? inet6_compat_ioctl+0x320/0x320 [ 2225.379449] __sock_sendmsg+0xf2/0x190 [ 2225.380406] ____sys_sendmsg+0x334/0x870 [ 2225.381438] ? sock_write_iter+0x3d0/0x3d0 [ 2225.382404] ? do_recvmmsg+0x6d0/0x6d0 [ 2225.383384] ? __lock_acquire+0x1657/0x5b00 [ 2225.384655] ___sys_sendmsg+0xf3/0x170 [ 2225.385620] ? sendmsg_copy_msghdr+0x160/0x160 [ 2225.386648] ? vmacache_find+0x55/0x2a0 [ 2225.387647] ? __lockdep_reset_lock+0x180/0x180 [ 2225.388871] ? lock_acquire+0x197/0x470 [ 2225.389796] ? find_held_lock+0x2c/0x110 [ 2225.390888] ? __might_fault+0xd3/0x180 [ 2225.391832] ? lock_downgrade+0x6d0/0x6d0 [ 2225.392782] ? asm_exc_page_fault+0x1e/0x30 [ 2225.394166] __sys_sendmmsg+0x195/0x470 [ 2225.395216] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2225.396225] ? lock_downgrade+0x6d0/0x6d0 [ 2225.397520] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2225.398720] ? wait_for_completion_io+0x270/0x270 [ 2225.399868] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.400908] ? vfs_write+0x354/0xa70 [ 2225.401852] ? fput_many+0x2f/0x1a0 [ 2225.402765] ? ksys_write+0x1a9/0x260 [ 2225.403667] ? __ia32_sys_read+0xb0/0xb0 [ 2225.404776] __x64_sys_sendmmsg+0x99/0x100 [ 2225.405804] do_syscall_64+0x33/0x40 [ 2225.406688] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2225.407821] RIP: 0033:0x7f1c4c8a5b19 [ 2225.408677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.412490] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2225.414191] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2225.415723] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2225.417260] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.418810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.420344] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:29:03 executing program 5: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa}]}, 0x1c}}, 0x0) copy_file_range(r2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=0x8000, 0x81, 0x0) pipe(&(0x7f00000000c0)) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}, 0x200000}], 0x7ffff000, 0x0) 20:29:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x12) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2225.505790] audit: type=1400 audit(1703708943.660:104): avc: denied { create } for pid=35820 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 [ 2225.513355] audit: type=1400 audit(1703708943.667:105): avc: denied { connect } for pid=35820 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 20:29:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) fsync(r0) mmap$usbmon(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3, 0x7) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x8}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345}, 0x800) [ 2225.555133] audit: type=1400 audit(1703708943.709:106): avc: denied { write } for pid=35820 comm="syz-executor.5" laddr=fe80::b lport=57577 faddr=fe80:: scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:system_dbusd_var_lib_t:s0 tclass=udp_socket permissive=1 20:29:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 23) [ 2225.695975] FAULT_INJECTION: forcing a failure. [ 2225.695975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2225.698422] CPU: 1 PID: 35827 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2225.699829] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2225.701577] Call Trace: [ 2225.702141] dump_stack+0x107/0x167 [ 2225.702896] should_fail.cold+0x5/0xa [ 2225.703685] _copy_from_user+0x2e/0x1b0 [ 2225.704508] __copy_msghdr_from_user+0x91/0x4b0 [ 2225.705471] ? __ia32_sys_shutdown+0x80/0x80 [ 2225.706394] ? perf_trace_lock+0xac/0x490 [ 2225.707256] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2225.708349] sendmsg_copy_msghdr+0xa1/0x160 [ 2225.709241] ? do_recvmmsg+0x6d0/0x6d0 [ 2225.710062] ? find_held_lock+0x2c/0x110 [ 2225.710916] ___sys_sendmsg+0xc6/0x170 [ 2225.711715] ? sendmsg_copy_msghdr+0x160/0x160 [ 2225.712662] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2225.713725] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2225.714674] ? trace_hardirqs_on+0x5b/0x180 [ 2225.715593] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2225.716517] ? finish_task_switch+0x126/0x5d0 [ 2225.717467] ? finish_task_switch+0xef/0x5d0 [ 2225.718380] ? __switch_to+0x572/0xf70 [ 2225.719192] ? __switch_to_asm+0x3a/0x60 [ 2225.720023] ? __switch_to_asm+0x34/0x60 [ 2225.720886] ? __schedule+0x82c/0x1ea0 [ 2225.721696] ? io_schedule_timeout+0x140/0x140 [ 2225.722703] __sys_sendmmsg+0x195/0x470 [ 2225.723515] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2225.724390] ? lock_downgrade+0x6d0/0x6d0 [ 2225.725255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2225.726269] ? wait_for_completion_io+0x270/0x270 [ 2225.727267] ? rcu_read_lock_any_held+0x75/0xa0 [ 2225.728213] ? vfs_write+0x354/0xa70 [ 2225.728981] ? fput_many+0x2f/0x1a0 [ 2225.729733] ? ksys_write+0x1a9/0x260 [ 2225.730527] ? __ia32_sys_read+0xb0/0xb0 [ 2225.731372] __x64_sys_sendmmsg+0x99/0x100 [ 2225.732248] do_syscall_64+0x33/0x40 [ 2225.733014] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2225.734089] RIP: 0033:0x7f1c4c8a5b19 [ 2225.734845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2225.738633] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2225.740205] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2225.741718] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2225.743222] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2225.744718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2225.746189] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:29:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:29:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@isdn={0x22, 0x4, 0x1, 0x7}, 0xfffffe88, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f0000000000)="e688a8", 0x3}], 0x2}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="000000009ab8000000"]) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000010}) 20:29:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 24) [ 2226.597743] FAULT_INJECTION: forcing a failure. [ 2226.597743] name failslab, interval 1, probability 0, space 0, times 0 [ 2226.600101] CPU: 1 PID: 36314 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2226.601595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2226.603257] Call Trace: [ 2226.603778] dump_stack+0x107/0x167 [ 2226.604501] should_fail.cold+0x5/0xa [ 2226.605251] ? __alloc_skb+0x6d/0x5b0 [ 2226.606001] should_failslab+0x5/0x20 [ 2226.606757] kmem_cache_alloc_node+0x55/0x330 [ 2226.607640] __alloc_skb+0x6d/0x5b0 [ 2226.608361] alloc_skb_with_frags+0x92/0x570 [ 2226.609239] sock_alloc_send_pskb+0x7af/0x930 [ 2226.610142] ? sk_alloc+0x350/0x350 [ 2226.610867] ? perf_trace_lock+0xac/0x490 [ 2226.611678] ? SOFTIRQ_verbose+0x10/0x10 [ 2226.612484] __ip_append_data+0x1628/0x3310 [ 2226.613341] ? fib_select_path+0x95d/0x1e90 [ 2226.614192] ? __lockdep_reset_lock+0x180/0x180 [ 2226.615092] ? ip_frag_init+0x350/0x350 [ 2226.615881] ? ip_finish_output+0x330/0x330 [ 2226.616717] ? ip_route_output_key_hash+0x1a4/0x340 [ 2226.617679] ? ipv4_mtu+0x1ed/0x2c0 [ 2226.618405] ip_make_skb+0x22a/0x2a0 [ 2226.619132] ? ip_frag_init+0x350/0x350 [ 2226.619905] ? ip_flush_pending_frames+0x20/0x20 [ 2226.620833] ? lock_downgrade+0x6d0/0x6d0 [ 2226.621644] ? xfrm_lookup_route+0x65/0x210 [ 2226.622495] udp_sendmsg+0x193f/0x2170 [ 2226.623258] ? ip_frag_init+0x350/0x350 [ 2226.624041] ? udp_setsockopt+0xc0/0xc0 [ 2226.624813] ? mark_lock+0xf5/0x2df0 [ 2226.625544] ? lock_chain_count+0x20/0x20 [ 2226.626361] ? mark_lock+0xf5/0x2df0 [ 2226.627089] ? mark_lock+0xf5/0x2df0 [ 2226.627812] ? lock_chain_count+0x20/0x20 [ 2226.628615] ? lock_chain_count+0x20/0x20 [ 2226.629428] ? prep_new_page+0x16d/0x1d0 [ 2226.630226] ? lock_chain_count+0x20/0x20 [ 2226.631046] ? __lock_acquire+0x1657/0x5b00 [ 2226.631888] udpv6_sendmsg+0x1b4e/0x2af0 [ 2226.632678] ? __lock_acquire+0x1657/0x5b00 [ 2226.633527] ? udp_v6_push_pending_frames+0x360/0x360 [ 2226.634532] ? __lockdep_reset_lock+0x180/0x180 [ 2226.635447] ? __lockdep_reset_lock+0x180/0x180 [ 2226.636358] ? lock_acquire+0x197/0x470 [ 2226.637132] ? find_held_lock+0x2c/0x110 [ 2226.637925] ? __might_fault+0xd3/0x180 [ 2226.638714] ? lock_downgrade+0x6d0/0x6d0 [ 2226.639520] ? sock_has_perm+0x1ea/0x280 [ 2226.640310] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2226.641324] ? __import_iovec+0x458/0x590 [ 2226.642133] ? udp_v6_push_pending_frames+0x360/0x360 [ 2226.643128] inet6_sendmsg+0x105/0x140 [ 2226.643879] ? inet6_compat_ioctl+0x320/0x320 [ 2226.644741] __sock_sendmsg+0xf2/0x190 [ 2226.645491] ____sys_sendmsg+0x334/0x870 [ 2226.646292] ? sock_write_iter+0x3d0/0x3d0 [ 2226.647107] ? do_recvmmsg+0x6d0/0x6d0 [ 2226.647864] ? __lock_acquire+0x1657/0x5b00 [ 2226.648712] ___sys_sendmsg+0xf3/0x170 [ 2226.649464] ? sendmsg_copy_msghdr+0x160/0x160 [ 2226.650345] ? vmacache_find+0x55/0x2a0 [ 2226.651113] ? __lockdep_reset_lock+0x180/0x180 [ 2226.652014] ? lock_acquire+0x197/0x470 [ 2226.652780] ? find_held_lock+0x2c/0x110 [ 2226.653566] ? __might_fault+0xd3/0x180 [ 2226.654353] ? lock_downgrade+0x6d0/0x6d0 [ 2226.655150] ? asm_exc_page_fault+0x1e/0x30 [ 2226.656001] __sys_sendmmsg+0x195/0x470 [ 2226.656773] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2226.657604] ? lock_downgrade+0x6d0/0x6d0 [ 2226.658431] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2226.659364] ? wait_for_completion_io+0x270/0x270 [ 2226.660295] ? rcu_read_lock_any_held+0x75/0xa0 [ 2226.661182] ? vfs_write+0x354/0xa70 [ 2226.661900] ? fput_many+0x2f/0x1a0 [ 2226.662612] ? ksys_write+0x1a9/0x260 [ 2226.663339] ? __ia32_sys_read+0xb0/0xb0 [ 2226.664125] __x64_sys_sendmmsg+0x99/0x100 [ 2226.664940] do_syscall_64+0x33/0x40 [ 2226.665655] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2226.666642] RIP: 0033:0x7f1c4c8a5b19 [ 2226.667355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2226.670975] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2226.672457] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2226.673845] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2226.675241] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2226.676633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2226.678010] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:29:34 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) signalfd4(r0, &(0x7f0000000000)={[0x42]}, 0x8, 0x400) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2256.704655] FAULT_INJECTION: forcing a failure. [ 2256.704655] name failslab, interval 1, probability 0, space 0, times 0 [ 2256.707437] CPU: 1 PID: 36348 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2256.709089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2256.710813] Call Trace: [ 2256.711455] dump_stack+0x107/0x167 [ 2256.712204] should_fail.cold+0x5/0xa [ 2256.712986] ? create_object.isra.0+0x3a/0xa20 [ 2256.713917] should_failslab+0x5/0x20 [ 2256.714890] kmem_cache_alloc+0x5b/0x310 [ 2256.715999] create_object.isra.0+0x3a/0xa20 20:29:34 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:29:34 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x9, 0x0, 0x0, 0x8, 0x0, {0x1}}, 0x1ff) io_setup(0x0, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000380)) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000640)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, 0x0, 0x0, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000700)=ANY=[@ANYBLOB="010000000018000020000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff0f0000090000002e2f66696c6530002862f7e83fd2545765b9ab4e30c8cf50a60b7439dbaa248759c3faee83dabd2f9bca8f2f6b5fef31f498fbd8923200fff17e1ec8a6dd6b9815d7ddcd676e5bcd1c20"]) syz_io_uring_setup(0x2829, &(0x7f0000000680)={0x0, 0x667c, 0x1, 0x1, 0x237, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0), &(0x7f0000000580)) io_submit(0x0, 0x4, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="3c5737611ccf4d59362c670c6049f53eebf61a0c9d13cbf00efe10a59eea7bcc1c555f4e981e36fa27c8cba1b734ec3478edbfd61541253a4531eb2270bae82a033db0c54a14e8f23f50988e049681f3d5971f63751d1173d9d3c1ee247b9a35e17d0a223fd7da51f6c461a1448041c3f4081ae4a82a8546d007117a3cefede7636712b365b8649f7a38a3d5b02aa8b3d0ad6feac7250daf9d219cc8", 0x9c, 0x4, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3ff, r0, &(0x7f0000000280)="d975013d9531923e2a15ad", 0xb, 0x7, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, &(0x7f00000005c0)="1291a37faf12f222d3dfcfa350434d1af7618bf1bd408fadf2e373978f", 0x1d, 0x1, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x7fff, 0xffffffffffffffff, &(0x7f0000000480)="f730bce8b7e2a3de6cf4629b1bb5923d893856d21ff226df5b4bd58f354685a50c73bd7f3748262d2d848ac0de7fcda903da790064b0cfa002fddcaaeb594587b53c391a9edd33b01e7a2799f31bcb5cb1a02dbc03b1ce68ef50f2ddd971a09d403cf278c75a5c037ea1c7c851dcbb60481b5e02f4d8ad1b", 0x78, 0x3, 0x0, 0x3}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 20:29:34 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xf000, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3c, 0x7f, 0x1, 0x20, 0x0, 0x2, 0x20200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x56, 0x8dcc}, 0xa028, 0x7c, 0x1, 0x5, 0x5, 0x20, 0x0, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xd, r0, 0xa) 20:29:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 25) [ 2256.717080] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2256.718277] kmem_cache_alloc_node+0x169/0x330 [ 2256.719408] __alloc_skb+0x6d/0x5b0 [ 2256.720161] alloc_skb_with_frags+0x92/0x570 [ 2256.721241] sock_alloc_send_pskb+0x7af/0x930 [ 2256.722172] ? sk_alloc+0x350/0x350 [ 2256.722946] ? perf_trace_lock+0xac/0x490 [ 2256.723790] ? SOFTIRQ_verbose+0x10/0x10 [ 2256.724633] __ip_append_data+0x1628/0x3310 [ 2256.725526] ? fib_select_path+0x95d/0x1e90 [ 2256.726429] ? __lockdep_reset_lock+0x180/0x180 [ 2256.727381] ? ip_frag_init+0x350/0x350 [ 2256.728212] ? ip_finish_output+0x330/0x330 [ 2256.729094] ? ip_route_output_key_hash+0x1a4/0x340 [ 2256.730109] ? ipv4_mtu+0x1ed/0x2c0 [ 2256.730887] ip_make_skb+0x22a/0x2a0 [ 2256.731656] ? ip_frag_init+0x350/0x350 [ 2256.732477] ? ip_flush_pending_frames+0x20/0x20 [ 2256.733454] ? lock_downgrade+0x6d0/0x6d0 [ 2256.734318] ? xfrm_lookup_route+0x65/0x210 [ 2256.735218] udp_sendmsg+0x193f/0x2170 [ 2256.736029] ? ip_frag_init+0x350/0x350 [ 2256.736859] ? udp_setsockopt+0xc0/0xc0 [ 2256.737675] ? mark_lock+0xf5/0x2df0 [ 2256.738465] ? lock_chain_count+0x20/0x20 [ 2256.739308] ? mark_lock+0xf5/0x2df0 [ 2256.740067] ? mark_lock+0xf5/0x2df0 [ 2256.740823] ? lock_chain_count+0x20/0x20 [ 2256.741663] ? lock_chain_count+0x20/0x20 [ 2256.742519] ? prep_new_page+0x16d/0x1d0 [ 2256.743342] ? lock_chain_count+0x20/0x20 [ 2256.744201] ? __lock_acquire+0x1657/0x5b00 [ 2256.745089] udpv6_sendmsg+0x1b4e/0x2af0 [ 2256.745916] ? __lock_acquire+0x1657/0x5b00 [ 2256.746813] ? udp_v6_push_pending_frames+0x360/0x360 [ 2256.747858] ? __lockdep_reset_lock+0x180/0x180 [ 2256.748813] ? __lockdep_reset_lock+0x180/0x180 [ 2256.749766] ? lock_acquire+0x197/0x470 [ 2256.750588] ? find_held_lock+0x2c/0x110 [ 2256.751417] ? __might_fault+0xd3/0x180 [ 2256.752222] ? lock_downgrade+0x6d0/0x6d0 [ 2256.753069] ? sock_has_perm+0x1ea/0x280 [ 2256.753886] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2256.754965] ? __import_iovec+0x458/0x590 [ 2256.755798] ? udp_v6_push_pending_frames+0x360/0x360 [ 2256.756849] inet6_sendmsg+0x105/0x140 [ 2256.757633] ? inet6_compat_ioctl+0x320/0x320 [ 2256.758547] __sock_sendmsg+0xf2/0x190 [ 2256.759327] ____sys_sendmsg+0x334/0x870 [ 2256.760150] ? sock_write_iter+0x3d0/0x3d0 [ 2256.760992] ? do_recvmmsg+0x6d0/0x6d0 [ 2256.761792] ? __lock_acquire+0x1657/0x5b00 [ 2256.762686] ___sys_sendmsg+0xf3/0x170 [ 2256.763479] ? sendmsg_copy_msghdr+0x160/0x160 [ 2256.764388] ? vmacache_find+0x55/0x2a0 [ 2256.765200] ? __lockdep_reset_lock+0x180/0x180 [ 2256.766156] ? lock_acquire+0x197/0x470 [ 2256.766958] ? find_held_lock+0x2c/0x110 [ 2256.767788] ? __might_fault+0xd3/0x180 [ 2256.768584] ? lock_downgrade+0x6d0/0x6d0 [ 2256.769423] ? asm_exc_page_fault+0x1e/0x30 [ 2256.770307] __sys_sendmmsg+0x195/0x470 [ 2256.771142] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2256.772001] ? lock_downgrade+0x6d0/0x6d0 [ 2256.772860] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2256.773828] ? wait_for_completion_io+0x270/0x270 [ 2256.774832] ? rcu_read_lock_any_held+0x75/0xa0 [ 2256.775835] ? vfs_write+0x354/0xa70 [ 2256.776581] ? fput_many+0x2f/0x1a0 [ 2256.777321] ? ksys_write+0x1a9/0x260 [ 2256.778095] ? __ia32_sys_read+0xb0/0xb0 [ 2256.778943] __x64_sys_sendmmsg+0x99/0x100 [ 2256.779811] do_syscall_64+0x33/0x40 [ 2256.780565] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2256.781605] RIP: 0033:0x7f1c4c8a5b19 [ 2256.782356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2256.786093] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2256.787645] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2256.789083] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2256.790533] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2256.791973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2256.793416] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:29:34 executing program 5: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r4, 0x609, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r5, 0x609, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="474a9d00d5deeab28c12b33c3d66e8b412eb222f", @ANYRES16=r1, @ANYBLOB="0100000000000000ddff2000000009001f007068793000000000050020000000000009001f"], 0x34}}, 0x0) 20:29:34 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x24) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:35 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) r2 = epoll_create(0x8000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x20000001}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000000000)={0x0, 0x8, 0x6, 0x8001, 0x0, 0xffffff14}) 20:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x60) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 26) [ 2257.235671] udc-core: couldn't find an available UDC or it's busy [ 2257.237564] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2257.335022] FAULT_INJECTION: forcing a failure. [ 2257.335022] name failslab, interval 1, probability 0, space 0, times 0 [ 2257.337375] CPU: 1 PID: 36903 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2257.338744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2257.340373] Call Trace: [ 2257.340896] dump_stack+0x107/0x167 [ 2257.341623] should_fail.cold+0x5/0xa [ 2257.342386] should_failslab+0x5/0x20 [ 2257.343163] __kmalloc_node_track_caller+0x74/0x3b0 [ 2257.344149] ? alloc_skb_with_frags+0x92/0x570 [ 2257.345093] __alloc_skb+0xb1/0x5b0 [ 2257.345835] alloc_skb_with_frags+0x92/0x570 [ 2257.346741] sock_alloc_send_pskb+0x7af/0x930 [ 2257.347649] ? sk_alloc+0x350/0x350 [ 2257.348411] ? perf_trace_lock+0xac/0x490 [ 2257.349212] ? SOFTIRQ_verbose+0x10/0x10 [ 2257.350022] __ip_append_data+0x1628/0x3310 [ 2257.350881] ? fib_select_path+0x95d/0x1e90 [ 2257.351720] ? __lockdep_reset_lock+0x180/0x180 [ 2257.352627] ? ip_frag_init+0x350/0x350 [ 2257.353416] ? ip_finish_output+0x330/0x330 [ 2257.354258] ? ip_route_output_key_hash+0x1a4/0x340 [ 2257.355242] ? ipv4_mtu+0x1ed/0x2c0 [ 2257.355957] ip_make_skb+0x22a/0x2a0 [ 2257.356693] ? ip_frag_init+0x350/0x350 [ 2257.357473] ? ip_flush_pending_frames+0x20/0x20 [ 2257.358425] ? lock_downgrade+0x6d0/0x6d0 [ 2257.359263] ? xfrm_lookup_route+0x65/0x210 [ 2257.360145] udp_sendmsg+0x193f/0x2170 [ 2257.360945] ? ip_frag_init+0x350/0x350 [ 2257.361733] ? udp_setsockopt+0xc0/0xc0 [ 2257.362552] ? mark_lock+0xf5/0x2df0 [ 2257.363290] ? mark_lock+0xf5/0x2df0 [ 2257.364027] ? lock_chain_count+0x20/0x20 [ 2257.364832] ? lock_chain_count+0x20/0x20 [ 2257.365675] ? __lockdep_reset_lock+0x180/0x180 [ 2257.366610] ? __lock_acquire+0x1657/0x5b00 [ 2257.367471] udpv6_sendmsg+0x1b4e/0x2af0 [ 2257.368278] ? __lock_acquire+0x1657/0x5b00 [ 2257.369200] ? udp_v6_push_pending_frames+0x360/0x360 [ 2257.370206] ? __lockdep_reset_lock+0x180/0x180 [ 2257.371133] ? __lockdep_reset_lock+0x180/0x180 [ 2257.372050] ? lock_acquire+0x197/0x470 [ 2257.372828] ? find_held_lock+0x2c/0x110 [ 2257.373627] ? __might_fault+0xd3/0x180 [ 2257.374426] ? lock_downgrade+0x6d0/0x6d0 [ 2257.375247] ? sock_has_perm+0x1ea/0x280 [ 2257.376252] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2257.377302] ? __import_iovec+0x458/0x590 [ 2257.378118] ? udp_v6_push_pending_frames+0x360/0x360 [ 2257.379141] inet6_sendmsg+0x105/0x140 [ 2257.379911] ? inet6_compat_ioctl+0x320/0x320 [ 2257.380779] __sock_sendmsg+0xf2/0x190 [ 2257.381542] ____sys_sendmsg+0x334/0x870 [ 2257.382330] ? sock_write_iter+0x3d0/0x3d0 [ 2257.383172] ? do_recvmmsg+0x6d0/0x6d0 [ 2257.383927] ? __lock_acquire+0x1657/0x5b00 [ 2257.384788] ___sys_sendmsg+0xf3/0x170 [ 2257.385547] ? sendmsg_copy_msghdr+0x160/0x160 [ 2257.386438] ? vmacache_find+0x55/0x2a0 [ 2257.387217] ? __lockdep_reset_lock+0x180/0x180 [ 2257.388133] ? lock_acquire+0x197/0x470 [ 2257.388909] ? find_held_lock+0x2c/0x110 [ 2257.389712] ? __might_fault+0xd3/0x180 [ 2257.390496] ? lock_downgrade+0x6d0/0x6d0 [ 2257.391305] ? asm_exc_page_fault+0x1e/0x30 [ 2257.392164] __sys_sendmmsg+0x195/0x470 [ 2257.392944] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2257.393780] ? lock_downgrade+0x6d0/0x6d0 [ 2257.394620] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2257.395560] ? wait_for_completion_io+0x270/0x270 [ 2257.396496] ? rcu_read_lock_any_held+0x75/0xa0 [ 2257.397392] ? vfs_write+0x354/0xa70 [ 2257.398119] ? fput_many+0x2f/0x1a0 [ 2257.398837] ? ksys_write+0x1a9/0x260 [ 2257.399580] ? __ia32_sys_read+0xb0/0xb0 [ 2257.400378] __x64_sys_sendmmsg+0x99/0x100 [ 2257.401211] do_syscall_64+0x33/0x40 [ 2257.401932] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2257.402947] RIP: 0033:0x7f1c4c8a5b19 [ 2257.403673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2257.407221] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2257.408700] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2257.410073] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2257.411467] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2257.412846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2257.414211] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:35 executing program 5: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ac0)=[{{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/146, 0x92}, {&(0x7f0000000400)=""/151, 0x97}, {&(0x7f00000004c0)=""/5, 0x5}], 0x4, &(0x7f0000000540)=""/147, 0x93}, 0xffff}, {{&(0x7f0000000600)=@ax25={{0x3, @rose}, [@default, @netrom, @bcast, @netrom, @bcast, @netrom, @null, @rose]}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000680)=""/215, 0xd7}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/26, 0x1a}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f00000008c0)=""/145, 0x91}], 0x5, &(0x7f0000000a00)=""/140, 0x8c}, 0x10001}, {{&(0x7f0000000ac0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b40)=""/65, 0x41}, {&(0x7f0000000bc0)=""/30, 0x1e}, {&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/214, 0xd6}, {&(0x7f0000000d80)=""/41, 0x29}, {&(0x7f0000000dc0)=""/235, 0xeb}], 0x6, &(0x7f0000000f40)=""/192, 0xc0}, 0x1}, {{&(0x7f0000001000)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000001080)=""/101, 0x65}, {&(0x7f0000001100)=""/222, 0xde}, {&(0x7f0000001200)=""/144, 0x90}, {&(0x7f0000003e80)=""/155, 0x9b}, {&(0x7f0000003f40)=""/54, 0x36}], 0x5}, 0x5}, {{&(0x7f0000001300)=@alg, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001380)=""/78, 0x4e}, {&(0x7f0000001400)=""/165, 0xa5}], 0x2, &(0x7f0000001500)=""/81, 0x51}, 0x8}, {{&(0x7f0000001580)=@alg, 0x80, &(0x7f0000003980)=[{&(0x7f0000001600)=""/246, 0xf6}, {&(0x7f0000001700)=""/24, 0x18}, {&(0x7f0000001740)=""/187, 0xbb}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/81, 0x51}, {&(0x7f0000002880)=""/96, 0x60}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/121, 0x79}], 0x8, &(0x7f0000003a00)=""/163, 0xa3}, 0xff}], 0x6, 0x0, &(0x7f0000003c40)) r0 = socket$inet6(0xa, 0x1, 0x5) bind$inet6(r0, &(0x7f0000003e00)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003c80)={'veth1_to_batadv\x00'}) clock_gettime(0x0, &(0x7f0000003d80)={0x0, 0x0}) select(0x40, &(0x7f0000003cc0)={0x0, 0x1f, 0x5, 0x23, 0x6, 0xfa, 0x4, 0x3f}, &(0x7f0000003d00)={0x5, 0x0, 0x8, 0x3, 0x8, 0x7, 0x6, 0x1ce0}, &(0x7f0000003d40)={0x807, 0x0, 0xffff, 0xc9c9, 0xfff, 0xfffffffffffffffc, 0x8, 0x8}, &(0x7f0000003dc0)={r1, r2/1000+60000}) r3 = add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000000)="73398e8557973a335bcbe7f0d6c13653", 0x10, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000003e40)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "ef627cc50f5deb96b548bbd157ecef3b619a028f3736c82093e82a00b663e54bfa0fda13c9af766380e40d555ce866e2c7409088605da44e988d794ddc41286b", 0x17}, 0x48, r3) 20:29:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x112) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:29:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x300) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x480002, 0x0) r1 = fcntl$dupfd(r0, 0xbac25b3d391565c4, 0xffffffffffffffff) r2 = openat$incfs(r0, &(0x7f0000000100)='.pending_reads\x00', 0x44a000, 0x158) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff7fff}}, './file0\x00'}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x450745c438580058) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @multicast2}}) fcntl$dupfd(r3, 0x406, r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) fcntl$getflags(0xffffffffffffffff, 0x40a) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x9) syz_open_dev$char_usb(0xc, 0xb4, 0x200000000000007) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 20:30:01 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x20000001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000000c0)={0x20000300}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@initdev, @in=@dev}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000100)=0xe8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:30:01 executing program 0: r0 = syz_io_uring_setup(0x247e, &(0x7f0000000180)={0x0, 0x65a, 0x0, 0x2, 0x3e1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000100)=0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x4, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x6, 0x4, 0x0, 0x5, 0x0, 0x1, {0x0, r5}}, 0x75) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000280)) r6 = syz_io_uring_setup(0x27ff, &(0x7f0000000080)={0x0, 0xfffffffd, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000200)) io_uring_enter(r6, 0x1e2, 0x0, 0x1, &(0x7f0000000040)={[0x3ff]}, 0x8) r7 = syz_open_dev$mouse(&(0x7f0000000140), 0x2, 0x80502) renameat2(r7, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4) 20:30:01 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x321) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:01 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 27) 20:30:01 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2283.690790] FAULT_INJECTION: forcing a failure. [ 2283.690790] name failslab, interval 1, probability 0, space 0, times 0 [ 2283.693125] CPU: 1 PID: 37392 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2283.694505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2283.696178] Call Trace: [ 2283.696710] dump_stack+0x107/0x167 [ 2283.697445] should_fail.cold+0x5/0xa [ 2283.698207] ? create_object.isra.0+0x3a/0xa20 [ 2283.699129] should_failslab+0x5/0x20 [ 2283.699890] kmem_cache_alloc+0x5b/0x310 [ 2283.700734] create_object.isra.0+0x3a/0xa20 [ 2283.701624] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2283.702670] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2283.703706] ? alloc_skb_with_frags+0x92/0x570 [ 2283.704633] __alloc_skb+0xb1/0x5b0 [ 2283.705374] alloc_skb_with_frags+0x92/0x570 20:30:01 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:30:01 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82800) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x8280}, {0xffffffffffffffff, 0x4220}, {0xffffffffffffffff, 0x400}, {r0, 0x6040}, {0xffffffffffffffff, 0x9082}, {r1, 0x10}], 0x6, &(0x7f00000000c0), &(0x7f0000000100)={[0x3]}, 0x8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5af86e88fa3a2720}}]}}, 0x0) [ 2283.706274] sock_alloc_send_pskb+0x7af/0x930 [ 2283.707330] ? sk_alloc+0x350/0x350 [ 2283.708133] ? perf_trace_lock+0xac/0x490 [ 2283.708966] ? SOFTIRQ_verbose+0x10/0x10 [ 2283.709796] __ip_append_data+0x1628/0x3310 [ 2283.710670] ? fib_select_path+0x95d/0x1e90 [ 2283.711545] ? __lockdep_reset_lock+0x180/0x180 [ 2283.712466] ? ip_frag_init+0x350/0x350 [ 2283.713272] ? ip_finish_output+0x330/0x330 [ 2283.714130] ? ip_route_output_key_hash+0x1a4/0x340 [ 2283.715137] ? ipv4_mtu+0x1ed/0x2c0 [ 2283.715871] ip_make_skb+0x22a/0x2a0 [ 2283.716615] ? ip_frag_init+0x350/0x350 [ 2283.717416] ? ip_flush_pending_frames+0x20/0x20 [ 2283.718373] ? lock_downgrade+0x6d0/0x6d0 [ 2283.719223] ? xfrm_lookup_route+0x65/0x210 [ 2283.720091] udp_sendmsg+0x193f/0x2170 [ 2283.720881] ? ip_frag_init+0x350/0x350 [ 2283.721690] ? udp_setsockopt+0xc0/0xc0 [ 2283.722483] ? mark_lock+0xf5/0x2df0 [ 2283.723264] ? lock_chain_count+0x20/0x20 [ 2283.724096] ? mark_lock+0xf5/0x2df0 [ 2283.724848] ? mark_lock+0xf5/0x2df0 [ 2283.725593] ? lock_chain_count+0x20/0x20 [ 2283.726423] ? lock_chain_count+0x20/0x20 [ 2283.727265] ? prep_new_page+0x16d/0x1d0 [ 2283.728075] ? lock_chain_count+0x20/0x20 [ 2283.728929] ? __lock_acquire+0x1657/0x5b00 [ 2283.729796] udpv6_sendmsg+0x1b4e/0x2af0 [ 2283.730609] ? __lock_acquire+0x1657/0x5b00 [ 2283.731501] ? udp_v6_push_pending_frames+0x360/0x360 [ 2283.732528] ? __lockdep_reset_lock+0x180/0x180 [ 2283.733466] ? __lockdep_reset_lock+0x180/0x180 [ 2283.734402] ? lock_acquire+0x197/0x470 [ 2283.735200] ? find_held_lock+0x2c/0x110 [ 2283.736016] ? __might_fault+0xd3/0x180 [ 2283.736809] ? lock_downgrade+0x6d0/0x6d0 [ 2283.737644] ? sock_has_perm+0x1ea/0x280 [ 2283.738457] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2283.739536] ? __import_iovec+0x458/0x590 [ 2283.740361] ? udp_v6_push_pending_frames+0x360/0x360 [ 2283.741404] inet6_sendmsg+0x105/0x140 [ 2283.742178] ? inet6_compat_ioctl+0x320/0x320 [ 2283.743095] __sock_sendmsg+0xf2/0x190 [ 2283.743872] ____sys_sendmsg+0x334/0x870 [ 2283.744689] ? sock_write_iter+0x3d0/0x3d0 [ 2283.745536] ? do_recvmmsg+0x6d0/0x6d0 [ 2283.746320] ? __lock_acquire+0x1657/0x5b00 [ 2283.747218] ___sys_sendmsg+0xf3/0x170 [ 2283.748007] ? sendmsg_copy_msghdr+0x160/0x160 [ 2283.748919] ? vmacache_find+0x55/0x2a0 [ 2283.749720] ? __lockdep_reset_lock+0x180/0x180 [ 2283.750662] ? lock_acquire+0x197/0x470 [ 2283.751471] ? find_held_lock+0x2c/0x110 [ 2283.752313] ? __might_fault+0xd3/0x180 [ 2283.753118] ? lock_downgrade+0x6d0/0x6d0 [ 2283.753946] ? asm_exc_page_fault+0x1e/0x30 [ 2283.754844] __sys_sendmmsg+0x195/0x470 [ 2283.755652] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2283.756519] ? lock_downgrade+0x6d0/0x6d0 [ 2283.757383] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2283.758360] ? wait_for_completion_io+0x270/0x270 [ 2283.759361] ? rcu_read_lock_any_held+0x75/0xa0 [ 2283.760293] ? vfs_write+0x354/0xa70 [ 2283.761045] ? fput_many+0x2f/0x1a0 [ 2283.761780] ? ksys_write+0x1a9/0x260 [ 2283.762545] ? __ia32_sys_read+0xb0/0xb0 [ 2283.763375] __x64_sys_sendmmsg+0x99/0x100 [ 2283.764230] do_syscall_64+0x33/0x40 [ 2283.764973] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2283.766002] RIP: 0033:0x7f1c4c8a5b19 [ 2283.766765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2283.770455] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2283.771982] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2283.773416] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2283.774854] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2283.776286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2283.777721] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2283.795888] udc-core: couldn't find an available UDC or it's busy [ 2283.797241] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:30:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x408) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2284.045186] udc-core: couldn't find an available UDC or it's busy [ 2284.046948] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:30:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x480) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 28) 20:30:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f00000003c0)=ANY=[@ANYBLOB="ce71afab8a781df57628e326b9b7ff22f13774b39512fb5ab9183a0caa4bc2a8a210a80dbdf288ead0e7760cce82246386d1be8a56591d31813660626dadd206b6d1ce1f6adebc947a792c4e4fce3c2ac545d9d72ba4e718a9e6499341e3729303a4bebb3794210061746c037b1efd53c745bbe4d7e7d714a9bd3cd90ea9cd309f1d851fa923e2fb1abf4e52c3a87ecf2aeb557fd948bdc854663149"]) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) flistxattr(r5, &(0x7f00000002c0)=""/251, 0xfb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000480)={{0x0, 0x7, 0x5, 0xffffffff, 0x7, 0x401, 0x3, 0x0, 0xd105, 0xb863, 0x2, 0x1, 0x8, 0x1, 0x6}, 0x18, [0x0, 0x0, 0x0]}) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffffff9) [ 2284.290781] FAULT_INJECTION: forcing a failure. [ 2284.290781] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.293094] CPU: 1 PID: 37793 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2284.294475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2284.296138] Call Trace: [ 2284.296674] dump_stack+0x107/0x167 [ 2284.297411] should_fail.cold+0x5/0xa [ 2284.298178] ? dst_alloc+0x9e/0x610 [ 2284.298924] should_failslab+0x5/0x20 [ 2284.299682] kmem_cache_alloc+0x5b/0x310 [ 2284.300500] dst_alloc+0x9e/0x610 [ 2284.301209] rt_dst_alloc+0x73/0x440 [ 2284.301953] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2284.303011] ip_route_output_key_hash+0x18d/0x340 [ 2284.303964] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2284.305058] ? mark_lock+0xf5/0x2df0 [ 2284.305804] ? __lock_acquire+0x1657/0x5b00 [ 2284.306668] ip_route_output_flow+0x23/0x150 [ 2284.307556] ip_tunnel_xmit+0x70e/0x2f50 [ 2284.308368] ? usage_accumulate+0x70/0x110 [ 2284.309207] ? __is_insn_slot_addr+0x94/0x290 [ 2284.310088] ? perf_trace_lock+0xac/0x490 [ 2284.310917] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2284.311851] sit_tunnel_xmit+0xef0/0x2960 [ 2284.312687] ? ipip_rcv+0x4f0/0x4f0 [ 2284.313409] ? skb_crc32c_csum_help+0x80/0x80 [ 2284.314296] ? lock_acquire+0x197/0x470 [ 2284.315097] ? __dev_queue_xmit+0x1c2/0x2710 [ 2284.315982] ? netif_skb_features+0x536/0xa00 [ 2284.316899] dev_hard_start_xmit+0x1cb/0x6f0 [ 2284.317775] __dev_queue_xmit+0x17ec/0x2710 [ 2284.318658] ? find_held_lock+0x2c/0x110 [ 2284.319465] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2284.320363] ? lock_downgrade+0x6d0/0x6d0 [ 2284.321174] ? lock_acquire+0x197/0x470 [ 2284.321950] ? ip_finish_output2+0x220/0x21f0 [ 2284.322842] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2284.323872] neigh_connected_output+0x382/0x4d0 [ 2284.324798] ip_finish_output2+0x6f1/0x21f0 [ 2284.325686] ? nf_hook_slow+0xfc/0x1e0 [ 2284.326451] ? ip_frag_next+0x9e0/0x9e0 [ 2284.327248] ? nf_hook+0x160/0x510 [ 2284.327949] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2284.328954] __ip_finish_output.part.0+0x5f3/0xb50 [ 2284.329919] ? ip_fragment.constprop.0+0x240/0x240 [ 2284.330886] ? nf_hook+0x510/0x510 [ 2284.331598] ip_output+0x2f7/0x600 [ 2284.332304] ip_send_skb+0xdd/0x260 [ 2284.333024] udp_send_skb+0x6da/0x11d0 [ 2284.333808] udp_sendmsg+0x197f/0x2170 [ 2284.334579] ? ip_frag_init+0x350/0x350 [ 2284.335381] ? udp_setsockopt+0xc0/0xc0 [ 2284.336162] ? mark_lock+0xf5/0x2df0 [ 2284.336895] ? lock_chain_count+0x20/0x20 [ 2284.337702] ? mark_lock+0xf5/0x2df0 [ 2284.338436] ? mark_lock+0xf5/0x2df0 [ 2284.339178] ? lock_chain_count+0x20/0x20 [ 2284.339987] ? lock_chain_count+0x20/0x20 [ 2284.340802] ? prep_new_page+0x16d/0x1d0 [ 2284.341592] ? mark_lock+0xf5/0x2df0 [ 2284.342335] ? __lock_acquire+0x1657/0x5b00 [ 2284.343186] udpv6_sendmsg+0x1b4e/0x2af0 [ 2284.343981] ? __lock_acquire+0x1657/0x5b00 [ 2284.344833] ? udp_v6_push_pending_frames+0x360/0x360 [ 2284.345834] ? __lockdep_reset_lock+0x180/0x180 [ 2284.346769] ? __lockdep_reset_lock+0x180/0x180 [ 2284.347688] ? lock_acquire+0x197/0x470 [ 2284.348460] ? find_held_lock+0x2c/0x110 [ 2284.349259] ? __might_fault+0xd3/0x180 [ 2284.350035] ? lock_downgrade+0x6d0/0x6d0 [ 2284.350852] ? lock_chain_count+0x20/0x20 [ 2284.351663] ? sock_has_perm+0x1ea/0x280 [ 2284.352460] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2284.353493] ? __import_iovec+0x458/0x590 [ 2284.354303] ? udp_v6_push_pending_frames+0x360/0x360 [ 2284.355332] inet6_sendmsg+0x105/0x140 [ 2284.356092] ? inet6_compat_ioctl+0x320/0x320 [ 2284.356964] __sock_sendmsg+0xf2/0x190 [ 2284.357731] ____sys_sendmsg+0x334/0x870 [ 2284.358551] ? sock_write_iter+0x3d0/0x3d0 [ 2284.359387] ? do_recvmmsg+0x6d0/0x6d0 [ 2284.360155] ? __lock_acquire+0x1657/0x5b00 [ 2284.361017] ___sys_sendmsg+0xf3/0x170 [ 2284.361780] ? sendmsg_copy_msghdr+0x160/0x160 [ 2284.362684] ? __lockdep_reset_lock+0x180/0x180 [ 2284.363602] ? trace_hardirqs_on+0x5b/0x180 [ 2284.364459] ? lock_acquire+0x197/0x470 [ 2284.365238] ? find_held_lock+0x2c/0x110 [ 2284.366038] ? __might_fault+0xd3/0x180 [ 2284.366847] ? lock_downgrade+0x6d0/0x6d0 [ 2284.367659] ? io_schedule_timeout+0x140/0x140 [ 2284.368562] __sys_sendmmsg+0x195/0x470 [ 2284.369341] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2284.370177] ? lock_downgrade+0x6d0/0x6d0 [ 2284.371017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2284.371959] ? wait_for_completion_io+0x270/0x270 [ 2284.372898] ? rcu_read_lock_any_held+0x75/0xa0 [ 2284.373802] ? vfs_write+0x354/0xa70 [ 2284.374533] ? fput_many+0x2f/0x1a0 [ 2284.375257] ? ksys_write+0x1a9/0x260 [ 2284.376003] ? __ia32_sys_read+0xb0/0xb0 [ 2284.376800] __x64_sys_sendmmsg+0x99/0x100 [ 2284.377621] do_syscall_64+0x33/0x40 [ 2284.378341] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2284.379334] RIP: 0033:0x7f1c4c8a5b19 [ 2284.380054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2284.383601] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2284.385064] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2284.386441] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2284.387825] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2284.389194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2284.390574] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:30:02 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x500) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x400001, 0x84, 0x1a}, 0x18) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x200000, 0x81) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x3c) 20:30:02 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x121) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xffffffff, 0x2, 0x68, 0x2, 0x1, "5290eef8c5eb1860006ea59f23ee18e501d2cd", 0x71, 0x9}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x19, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="1622213f9bb7", &(0x7f00000002c0)=""/4097, 0xffffffff, 0x0, 0x0, 0x0}) 20:30:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x555) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:35 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000001700)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000001780)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') openat(r0, &(0x7f0000000080)='./file0\x00', 0x105000, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x5, 0xe2, &(0x7f0000000280)=""/226}) 20:30:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 29) [ 2316.925124] FAULT_INJECTION: forcing a failure. [ 2316.925124] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.927484] CPU: 1 PID: 38432 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2316.928894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.930589] Call Trace: [ 2316.931149] dump_stack+0x107/0x167 [ 2316.931935] should_fail.cold+0x5/0xa [ 2316.932727] ? create_object.isra.0+0x3a/0xa20 [ 2316.933668] should_failslab+0x5/0x20 [ 2316.934452] kmem_cache_alloc+0x5b/0x310 [ 2316.935315] create_object.isra.0+0x3a/0xa20 [ 2316.936227] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2316.937269] kmem_cache_alloc+0x159/0x310 [ 2316.938126] dst_alloc+0x9e/0x610 [ 2316.938847] rt_dst_alloc+0x73/0x440 [ 2316.939619] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2316.940721] ip_route_output_key_hash+0x18d/0x340 [ 2316.941717] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2316.942854] ? mark_lock+0xf5/0x2df0 [ 2316.943631] ? __lock_acquire+0x1657/0x5b00 [ 2316.944526] ip_route_output_flow+0x23/0x150 [ 2316.945434] ip_tunnel_xmit+0x70e/0x2f50 [ 2316.946270] ? usage_accumulate+0x70/0x110 [ 2316.947165] ? __is_insn_slot_addr+0x94/0x290 [ 2316.948091] ? perf_trace_lock+0xac/0x490 [ 2316.948937] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2316.949902] sit_tunnel_xmit+0xef0/0x2960 [ 2316.950758] ? ipip_rcv+0x4f0/0x4f0 [ 2316.951649] ? skb_crc32c_csum_help+0x80/0x80 [ 2316.952603] ? lock_acquire+0x197/0x470 [ 2316.953568] ? __dev_queue_xmit+0x1c2/0x2710 20:30:35 executing program 3: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x7000, &(0x7f0000000140)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25, 0x83fdc1bfd55267a9]}}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) close(0xffffffffffffffff) 20:30:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:30:35 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:30:35 executing program 0: getxattr(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb, 0x2}, 0x783c, 0xffffffffffffffff, 0x8, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4000, 0xf2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x15c2, &(0x7f0000000240)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x800) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x4000010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0xa5da0344ece916cf, &(0x7f0000000080)=ANY=[@ANYBLOB="cf0400008000fc01000000000000000000000000000000000000000000dc00"/47], 0x28) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x8000000) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(r3, &(0x7f0000000100)='./file0\x00', 0x40) [ 2316.954534] ? netif_skb_features+0x536/0xa00 [ 2316.955595] dev_hard_start_xmit+0x1cb/0x6f0 [ 2316.956516] __dev_queue_xmit+0x17ec/0x2710 [ 2316.957405] ? find_held_lock+0x2c/0x110 [ 2316.958244] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2316.959195] ? lock_downgrade+0x6d0/0x6d0 [ 2316.960040] ? lock_acquire+0x197/0x470 [ 2316.960854] ? ip_finish_output2+0x220/0x21f0 [ 2316.961778] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2316.962856] neigh_connected_output+0x382/0x4d0 [ 2316.963834] ip_finish_output2+0x6f1/0x21f0 [ 2316.964728] ? nf_hook_slow+0xfc/0x1e0 [ 2316.965525] ? ip_frag_next+0x9e0/0x9e0 [ 2316.966340] ? nf_hook+0x160/0x510 [ 2316.967068] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2316.968130] __ip_finish_output.part.0+0x5f3/0xb50 [ 2316.969139] ? ip_fragment.constprop.0+0x240/0x240 [ 2316.970133] ? nf_hook+0x510/0x510 [ 2316.970877] ip_output+0x2f7/0x600 [ 2316.971618] ip_send_skb+0xdd/0x260 [ 2316.972370] udp_send_skb+0x6da/0x11d0 [ 2316.973180] udp_sendmsg+0x197f/0x2170 [ 2316.973984] ? ip_frag_init+0x350/0x350 [ 2316.974817] ? udp_setsockopt+0xc0/0xc0 [ 2316.975638] ? mark_lock+0xf5/0x2df0 [ 2316.976411] ? lock_chain_count+0x20/0x20 [ 2316.977268] ? mark_lock+0xf5/0x2df0 [ 2316.978045] ? mark_lock+0xf5/0x2df0 [ 2316.978818] ? lock_chain_count+0x20/0x20 [ 2316.979686] ? lock_chain_count+0x20/0x20 [ 2316.980553] ? prep_new_page+0x16d/0x1d0 [ 2316.981387] ? lock_chain_count+0x20/0x20 [ 2316.982265] ? __lock_acquire+0x1657/0x5b00 [ 2316.983181] udpv6_sendmsg+0x1b4e/0x2af0 [ 2316.984028] ? __lock_acquire+0x1657/0x5b00 [ 2316.984938] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.986008] ? __lockdep_reset_lock+0x180/0x180 [ 2316.987000] ? __lockdep_reset_lock+0x180/0x180 [ 2316.987972] ? lock_acquire+0x197/0x470 [ 2316.988783] ? find_held_lock+0x2c/0x110 [ 2316.989620] ? __might_fault+0xd3/0x180 [ 2316.990436] ? lock_downgrade+0x6d0/0x6d0 [ 2316.991289] ? sock_has_perm+0x1ea/0x280 [ 2316.992099] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2316.993198] ? __import_iovec+0x458/0x590 [ 2316.994050] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.995108] inet6_sendmsg+0x105/0x140 [ 2316.995924] ? inet6_compat_ioctl+0x320/0x320 [ 2316.996855] __sock_sendmsg+0xf2/0x190 [ 2316.997656] ____sys_sendmsg+0x334/0x870 [ 2316.998494] ? sock_write_iter+0x3d0/0x3d0 [ 2316.999366] ? do_recvmmsg+0x6d0/0x6d0 [ 2317.000165] ? __lock_acquire+0x1657/0x5b00 [ 2317.001072] ___sys_sendmsg+0xf3/0x170 [ 2317.001873] ? sendmsg_copy_msghdr+0x160/0x160 20:30:35 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) sendfile(r0, r1, &(0x7f0000000040), 0x80000000) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x3ea3, 0x10000) connect$inet6(r3, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(r0, r4, 0x2) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2317.002802] ? vmacache_find+0x55/0x2a0 [ 2317.003746] ? __lockdep_reset_lock+0x180/0x180 [ 2317.004742] ? lock_acquire+0x197/0x470 [ 2317.005572] ? find_held_lock+0x2c/0x110 [ 2317.006411] ? __might_fault+0xd3/0x180 [ 2317.007240] ? lock_downgrade+0x6d0/0x6d0 [ 2317.008092] ? asm_exc_page_fault+0x1e/0x30 [ 2317.009014] __sys_sendmmsg+0x195/0x470 [ 2317.009828] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2317.010718] ? lock_downgrade+0x6d0/0x6d0 [ 2317.011596] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2317.012574] ? wait_for_completion_io+0x270/0x270 [ 2317.013564] ? rcu_read_lock_any_held+0x75/0xa0 [ 2317.014500] ? vfs_write+0x354/0xa70 [ 2317.015283] ? fput_many+0x2f/0x1a0 [ 2317.016034] ? ksys_write+0x1a9/0x260 [ 2317.016799] ? __ia32_sys_read+0xb0/0xb0 [ 2317.017630] __x64_sys_sendmmsg+0x99/0x100 [ 2317.018496] do_syscall_64+0x33/0x40 [ 2317.019259] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2317.020300] RIP: 0033:0x7f1c4c8a5b19 [ 2317.021049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2317.024786] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2317.026320] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2317.027765] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2317.029195] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2317.030626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2317.032071] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:30:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:30:35 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x100, @private1}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2317.240073] udc-core: couldn't find an available UDC or it's busy [ 2317.241879] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:30:35 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:30:35 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x4000}, {0xffffffffffffffff, 0x6e23d7b37b12c538}, {r0}], 0x3, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x100]}, 0x8) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:30:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x600) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:35 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x700) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:30:35 executing program 0: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) [ 2318.055854] udc-core: couldn't find an available UDC or it's busy [ 2318.057477] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2354.662846] udc-core: couldn't find an available UDC or it's busy [ 2354.664579] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:31:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 30) 20:31:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:31:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="280002802100050091bd52ac34d1927c990481ad6b6add86c21b5eadc3c6888c73a5037592000000"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000040)=0x17, 0x4) 20:31:12 executing program 3: ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x20000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x1, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc9, &(0x7f00000001c0)=0x1, 0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) pread64(r2, &(0x7f0000000040)=""/86, 0x56, 0xfffffffffffffffd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r3, 0x0) write$bt_hci(r3, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0xa) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt(r3, 0x4, 0x3, &(0x7f0000000200)="71f0c5aded921bff34370e45c28486c6cebbfe16f3ae8906b7a1bb125b96d60cfff4ff4e7c444f31c3e1465c387afea106f9b8abdeb2b65cc730e791702da5b40bc1f8d7b0953f9f78c980767dd9076912597124644eb40931c600a13598ca4f32edcad8e99fd065cc14a15e777e9864bffad5da6dad2767ee74bc5e8ff9fda79ea2bc914e18e535be7059205574801a211887ca46e6459a6b5f082f1c1a499666ce4b3814397f9c1fb5269486e5c994a6e696a8b4d397", 0xb7) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000580)={@loopback, @loopback, @local}, 0xc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000000)) 20:31:12 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) socketpair(0x29, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x10001, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff86, 0x100000001}, 0x0, 0x0, 0x100, 0x8}, r2, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xdc55, r2}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 2354.678519] FAULT_INJECTION: forcing a failure. [ 2354.678519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2354.679897] CPU: 1 PID: 39174 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2354.680716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.681700] Call Trace: [ 2354.681996] dump_stack+0x107/0x167 [ 2354.682402] should_fail.cold+0x5/0xa [ 2354.682830] _copy_from_user+0x2e/0x1b0 [ 2354.683300] __copy_msghdr_from_user+0x91/0x4b0 [ 2354.683834] ? __ia32_sys_shutdown+0x80/0x80 [ 2354.684350] ? udp_v6_push_pending_frames+0x360/0x360 [ 2354.684917] ? inet6_sendmsg+0xbd/0x140 [ 2354.685390] ? inet6_compat_ioctl+0x320/0x320 [ 2354.685921] ? __sock_sendmsg+0x55/0x190 [ 2354.686375] sendmsg_copy_msghdr+0xa1/0x160 [ 2354.686899] ? do_recvmmsg+0x6d0/0x6d0 [ 2354.687336] ? __lock_acquire+0x1657/0x5b00 [ 2354.687829] ___sys_sendmsg+0xc6/0x170 [ 2354.688258] ? sendmsg_copy_msghdr+0x160/0x160 [ 2354.688756] ? vmacache_find+0x55/0x2a0 [ 2354.689207] ? __lockdep_reset_lock+0x180/0x180 [ 2354.689729] ? lock_acquire+0x197/0x470 [ 2354.690166] ? find_held_lock+0x2c/0x110 [ 2354.690617] ? __might_fault+0xd3/0x180 [ 2354.691054] ? lock_downgrade+0x6d0/0x6d0 [ 2354.691512] ? asm_exc_page_fault+0x1e/0x30 [ 2354.692015] __sys_sendmmsg+0x195/0x470 [ 2354.692461] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2354.692938] ? lock_downgrade+0x6d0/0x6d0 [ 2354.693403] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2354.693967] ? wait_for_completion_io+0x270/0x270 sendmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001240)=[{&(0x7f00000001c0)="8f182ab3a296035d66c2a086c2e3edc150df58aab044d77a4432fa8b712168a67568b85454f3e4b2a5554f4c5f6b38f292fe341e0a3b5884b4a02a4013e43829652adfed24e6d0ea85984a27", 0x4c}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000000100)="f0ecac3f47873e9c36249f040d4991af95ec659acee9768aff1a7fdc3275e4ed2b660d", 0x23}], 0x3, 0x0, 0x0, 0x48010}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001300)="a916c8c5d5babe57cb78c623df17abdcce9b944b30157e62e3fec66ab10f02a4f77ef7e3a29d35c4e616e20fa479834c081d2e4b5c8b8b1b5bf1e67cb87dbd8a40e6027f9bbc2ef44f3f2c29b4636b77b741d5dc1d6e513fd5dac30f32f637388860b45029ef617c20eed00a16911f261e982cfd941d99bf74de3d498f733e8fef2668be42d7269dc7143937e6ed556b923dbd66d87b8825d385264b1fc72cbb44917476b47b90cd12f16f6ca53c8eaa31b0bb1a1ab98948dc7ddd7d7ce99d494a1a29ba56a24a7556a819369f0f07c60875109715529d19b8111005043c37d32bb0caf63a3fe685cf", 0xe9}, {&(0x7f0000001400)="3d51d5fcf29a642526376f44ec8450cf369aacd12b2a0c1215c65b15daefbbd30f8cc09535156227a5d5d39bb72fd62b643fa1d2d3f0ae4f69107130bf6a241534f727c5dbd30f561758d09c74b79ddbeeca23e3170b6cef2d943722a44a11422ae5d2954a62deac7c44793ea28b1374fb704749c6aceba11b8c909d28cf3089155fb82a1ead155cc23d19bbc2964384928b8c6b5212a665e0c86b6daf01371b0830d8cd8a7dbdb503240587792b0f7249ef2d5ee0e637269a2fd845873de9b1ea", 0xc1}, {&(0x7f0000001500)="9d0b8951ba4ca37952ddd4bf3818f62891bae16f2bf534db2a578b8957e4cc3cff1f191bf19e46a191ed9d43490724738f128789d96c200f0edc66b8016bafc8365f022e151b61e93da4fb91bccbf2c5179cba5ff529284b3e3b5457c34d41dd8899004726c5bfeeef4794dec4fc39ffdcbd53ff5e", 0x75}, {&(0x7f0000001580)="a800c185c050a43ca0bc67384e848f4d62344f11409a05de789d0e4c0c17db238af930a6122770cbe47a039cf62ceb5abb787dd5944bcf7cac1327b4673a9b44b769aff38ca74d16e45af71bb799ef739bee39e2981704afa81690b7f9f701ffd2a4a5e7fe15d79489815e03f16ce4c65f957ef098c5ba18b38cfd5971321954c7a654c4d5b466e49fb5c25494eb6eae1f4a4d1ca722a0c1d6525cb2401cc9c36723e7eb51583f14c1beb8758dc5b4a9b967a11afd9674bc6367de5cf3173c0db6cb2583309e73b7b14c7960056192f394342885802e27", 0xd7}], 0x4, &(0x7f0000001700)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x18, 0x1, 0x1, [r6, r3]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4]}}], 0x68, 0x20000000}}, {{&(0x7f0000001b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000001b80)="992c3e080b2561ae8ed38840a14123a6b9528f3721fddf0f2b12f4", 0x1b}, {&(0x7f0000001d00)="bb9204a660a6df3c179c64d905eff6ab2301552758b1c4614dca0899bf4df38f383354eefcd8a82fa80ae2926d60fa34b58d4a8bd04420a0062a2755677e9af77d66929276fa025ae90edaf3e4f745b86c1a15f64eb93ac7c4702c8f1ac7d416ba258be38d7dac9025b39dd5a731ebb6c6b9d0eb8c1706c67858", 0x7a}, {&(0x7f0000001e00)="a56afaf64032907d8920513765435319ffdf4c2a0ef099f541158aa7deec14bc78230facc0ef6b3d2e95d61c5b323303d17928864716a7c4b57d8c320ad50bb3ea4be626df406b86abdb2540ec43e72895d25360abe70f36601220cb1445a65addf1569b3ba147042309b6cb6a72065a51480f7c2354c68c65ba84da40b97fc2a4ab7fc482f21453008095f1af9e81b96950949c3e93bdc0b7af9c45f7d57f0b0e062dc5cba46df13105f3ab0197ca36114c3c5f2f4eaff07bfbfcdb9f5db2acc5d172e56e3a7f608fb921ff1196fdeeacfb2aa0c049a7efd9a84e5353535d0d4d7e29f5a2e1ac17e34970db878dcf767c7272", 0xf3}, {&(0x7f0000001f00)="3322a9c563a67ee7e27e8fe873b7e283170ee12504e4abc3e4c1e453889b6f1442e65a185b147e91bbbd2c7b7f1f2ceabd5538aae158a7d3b2ad40b8378d2f08f8d294bc744d5adfdc3da899ec37555caebb2e2680f9453de820878f10bb6ea9e42127279fa75903d36a76f7554eb98581a4b5d4c9f29f0bc92e284e53135baf68890917d6e7ac61d568936bcee22e78ad24dfaa4a30b0ed9da65d59fc1847f60172169c5fea026f1f1ef0be72c17afd1991fc42ddf2040026e7a96fa5428fd1635ad899", 0xc4}, {&(0x7f0000002000)="d72eb358702658f95b8cb8fca05daa6973e5f34d07f5189ec1c9b7818d99312a248ac41d27b6bca567aa4ece16c0eab82c584c04f8a22b4ac9395edc45963ae3214c1c690caaa59f1cc00bcbd86d6d88115542", 0x53}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000003080)="e3b6fcf1cd9e26008c53b140d63a9da34752730c0cc210a84cc30967b404ae29305b13a24f96dfeaba62fcacf83604aa527a7895e4534769358f9ee43c8f6c16b639c89224d7d80544bc7ad29d3c5cf92749236a8017a53631852632fc56dffb0f9a988eb701f5caaca81712b74a28bb9840a00ccd02045af0f9c4b42245e06979ac1d8bff07b583d3ef2cc307a319613e1d8573630ddc631c2a7552a0fb4e960a5fbca92e529063bb83ac910aab", 0xae}, {&(0x7f0000003140)="7973e37ccb8c7305bc2451a5344ab9e13e92278b1db2e648aa7d07c74cbfd541e9f763a33f243f61b5da401ed72a8c7947db29bbed1be5bd50548b991cdce4ddde60b152b519c8760b98a22d54a3bc", 0x4f}], 0x8, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x3, 0x0) 20:31:12 executing program 0: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d02000000000000020000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08008c001a0000000000001a64000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b310041410e0254455854756e6978000052520501894e4d0e010066696c652e636f6c64505824016d8100000000816d01000000000000010000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a08007400180000000000001800080000000008007809140b2a3a08020000010000010546494c4530", 0x1a0, 0xb800}, {&(0x7f0000010d00)='f', 0x1, 0xc000}], 0x0, &(0x7f0000011700)=ANY=[]) statx(r0, &(0x7f0000003040)='./file0\x00', 0x0, 0x0, &(0x7f0000003080)) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x2710}}) 20:31:12 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:31:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x804) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2354.694529] ? rcu_read_lock_any_held+0x75/0xa0 [ 2354.695086] ? vfs_write+0x354/0xa70 [ 2354.695534] ? fput_many+0x2f/0x1a0 [ 2354.695955] ? ksys_write+0x1a9/0x260 [ 2354.696381] ? __ia32_sys_read+0xb0/0xb0 [ 2354.696845] __x64_sys_sendmmsg+0x99/0x100 [ 2354.697319] do_syscall_64+0x33/0x40 [ 2354.697728] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2354.698303] RIP: 0033:0x7f1c4c8a5b19 [ 2354.698719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.700754] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2354.701601] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2354.702381] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2354.703163] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.703964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.704757] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xc00) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:31:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 31) [ 2354.823702] FAULT_INJECTION: forcing a failure. [ 2354.823702] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.824991] CPU: 1 PID: 39500 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2354.825740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.826622] Call Trace: [ 2354.826919] dump_stack+0x107/0x167 [ 2354.827329] should_fail.cold+0x5/0xa [ 2354.827756] ? __alloc_skb+0x6d/0x5b0 [ 2354.828184] should_failslab+0x5/0x20 [ 2354.828604] kmem_cache_alloc_node+0x55/0x330 [ 2354.829116] __alloc_skb+0x6d/0x5b0 [ 2354.829524] alloc_skb_with_frags+0x92/0x570 [ 2354.830023] sock_alloc_send_pskb+0x7af/0x930 [ 2354.830535] ? sk_alloc+0x350/0x350 [ 2354.830946] ? perf_trace_lock+0xac/0x490 [ 2354.831403] ? SOFTIRQ_verbose+0x10/0x10 [ 2354.831879] __ip_append_data+0x1628/0x3310 [ 2354.832380] ? fib_select_path+0x95d/0x1e90 [ 2354.832881] ? __lockdep_reset_lock+0x180/0x180 [ 2354.833415] ? ip_frag_init+0x350/0x350 [ 2354.833885] ? ip_finish_output+0x330/0x330 [ 2354.834377] ? ip_route_output_key_hash+0x1a4/0x340 [ 2354.834946] ? ipv4_mtu+0x1ed/0x2c0 [ 2354.835366] ip_make_skb+0x22a/0x2a0 [ 2354.835803] ? ip_frag_init+0x350/0x350 [ 2354.836255] ? ip_flush_pending_frames+0x20/0x20 [ 2354.836791] ? lock_downgrade+0x6d0/0x6d0 [ 2354.837276] ? xfrm_lookup_route+0x65/0x210 [ 2354.837762] udp_sendmsg+0x193f/0x2170 [ 2354.838213] ? ip_frag_init+0x350/0x350 [ 2354.838699] ? udp_setsockopt+0xc0/0xc0 [ 2354.839159] ? mark_lock+0xf5/0x2df0 [ 2354.839616] ? lock_chain_count+0x20/0x20 [ 2354.840077] ? mark_lock+0xf5/0x2df0 [ 2354.840511] ? mark_lock+0xf5/0x2df0 [ 2354.840933] ? lock_chain_count+0x20/0x20 [ 2354.841408] ? lock_chain_count+0x20/0x20 [ 2354.841890] ? prep_new_page+0x16d/0x1d0 [ 2354.842362] ? lock_chain_count+0x20/0x20 [ 2354.842851] ? __lock_acquire+0x1657/0x5b00 [ 2354.843350] udpv6_sendmsg+0x1b4e/0x2af0 [ 2354.843802] ? __lock_acquire+0x1657/0x5b00 [ 2354.844308] ? udp_v6_push_pending_frames+0x360/0x360 [ 2354.844889] ? __lockdep_reset_lock+0x180/0x180 [ 2354.845411] ? __lockdep_reset_lock+0x180/0x180 [ 2354.845957] ? lock_acquire+0x197/0x470 [ 2354.846417] ? find_held_lock+0x2c/0x110 [ 2354.846878] ? __might_fault+0xd3/0x180 [ 2354.847299] ? lock_downgrade+0x6d0/0x6d0 [ 2354.847775] ? sock_has_perm+0x1ea/0x280 [ 2354.848218] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2354.848807] ? __import_iovec+0x458/0x590 [ 2354.849266] ? udp_v6_push_pending_frames+0x360/0x360 [ 2354.849837] inet6_sendmsg+0x105/0x140 [ 2354.850278] ? inet6_compat_ioctl+0x320/0x320 [ 2354.850771] __sock_sendmsg+0xf2/0x190 [ 2354.851203] ____sys_sendmsg+0x334/0x870 [ 2354.851644] ? sock_write_iter+0x3d0/0x3d0 [ 2354.852088] ? do_recvmmsg+0x6d0/0x6d0 [ 2354.852502] ? __lock_acquire+0x1657/0x5b00 [ 2354.852966] ___sys_sendmsg+0xf3/0x170 [ 2354.853383] ? sendmsg_copy_msghdr+0x160/0x160 [ 2354.853862] ? vmacache_find+0x55/0x2a0 [ 2354.854281] ? __lockdep_reset_lock+0x180/0x180 [ 2354.854775] ? lock_acquire+0x197/0x470 [ 2354.855193] ? find_held_lock+0x2c/0x110 [ 2354.855631] ? __might_fault+0xd3/0x180 [ 2354.856060] ? lock_downgrade+0x6d0/0x6d0 [ 2354.856508] ? asm_exc_page_fault+0x1e/0x30 [ 2354.856980] __sys_sendmmsg+0x195/0x470 [ 2354.857408] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2354.857873] ? lock_downgrade+0x6d0/0x6d0 [ 2354.858323] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2354.858838] ? wait_for_completion_io+0x270/0x270 [ 2354.859347] ? rcu_read_lock_any_held+0x75/0xa0 [ 2354.859854] ? vfs_write+0x354/0xa70 [ 2354.860250] ? fput_many+0x2f/0x1a0 [ 2354.860649] ? ksys_write+0x1a9/0x260 [ 2354.861064] ? __ia32_sys_read+0xb0/0xb0 [ 2354.861497] __x64_sys_sendmmsg+0x99/0x100 [ 2354.861964] do_syscall_64+0x33/0x40 [ 2354.862380] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2354.862941] RIP: 0033:0x7f1c4c8a5b19 [ 2354.863334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2354.865355] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2354.866193] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2354.866968] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2354.867767] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2354.868558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2354.869352] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 32) 20:31:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5e, 0x20210, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x140}, 0x1000, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000003c0), 0x3, 0x200000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x10000000) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x539002, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x8a}}, 0x3) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xffffd000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x185) accept$unix(r3, 0x0, &(0x7f0000000240)) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)='./file1\x00', &(0x7f0000000340), 0x400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) r4 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x220001, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f0000000200)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff], 0x5) openat(r6, &(0x7f0000000280)='./file1\x00', 0x2, 0xd0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) [ 2354.966336] FAULT_INJECTION: forcing a failure. [ 2354.966336] name failslab, interval 1, probability 0, space 0, times 0 [ 2354.967591] CPU: 1 PID: 39612 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2354.968336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2354.969228] Call Trace: [ 2354.969513] dump_stack+0x107/0x167 [ 2354.969912] should_fail.cold+0x5/0xa [ 2354.970322] ? create_object.isra.0+0x3a/0xa20 [ 2354.970821] should_failslab+0x5/0x20 [ 2354.971219] kmem_cache_alloc+0x5b/0x310 [ 2354.971675] create_object.isra.0+0x3a/0xa20 [ 2354.972136] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2354.972688] kmem_cache_alloc_node+0x169/0x330 [ 2354.973175] __alloc_skb+0x6d/0x5b0 [ 2354.973580] alloc_skb_with_frags+0x92/0x570 [ 2354.974053] sock_alloc_send_pskb+0x7af/0x930 [ 2354.974553] ? sk_alloc+0x350/0x350 [ 2354.974953] ? perf_trace_lock+0xac/0x490 [ 2354.975406] ? SOFTIRQ_verbose+0x10/0x10 [ 2354.975848] __ip_append_data+0x1628/0x3310 [ 2354.976322] ? fib_select_path+0x95d/0x1e90 [ 2354.976779] ? __lockdep_reset_lock+0x180/0x180 [ 2354.977285] ? ip_frag_init+0x350/0x350 [ 2354.977713] ? ip_finish_output+0x330/0x330 [ 2354.978182] ? ip_route_output_key_hash+0x1a4/0x340 [ 2354.978712] ? ipv4_mtu+0x1ed/0x2c0 [ 2354.979117] ip_make_skb+0x22a/0x2a0 [ 2354.979519] ? ip_frag_init+0x350/0x350 [ 2354.979971] ? ip_flush_pending_frames+0x20/0x20 [ 2354.980474] ? lock_downgrade+0x6d0/0x6d0 [ 2354.980933] ? xfrm_lookup_route+0x65/0x210 [ 2354.981393] udp_sendmsg+0x193f/0x2170 [ 2354.981824] ? ip_frag_init+0x350/0x350 [ 2354.982268] ? udp_setsockopt+0xc0/0xc0 [ 2354.982698] ? mark_lock+0xf5/0x2df0 [ 2354.983113] ? lock_chain_count+0x20/0x20 [ 2354.983561] ? mark_lock+0xf5/0x2df0 [ 2354.983978] ? mark_lock+0xf5/0x2df0 [ 2354.984381] ? lock_chain_count+0x20/0x20 [ 2354.984835] ? lock_chain_count+0x20/0x20 [ 2354.985297] ? prep_new_page+0x16d/0x1d0 [ 2354.985745] ? lock_chain_count+0x20/0x20 [ 2354.986201] ? __lock_acquire+0x1657/0x5b00 [ 2354.986674] udpv6_sendmsg+0x1b4e/0x2af0 [ 2354.987119] ? __lock_acquire+0x1657/0x5b00 [ 2354.987611] ? udp_v6_push_pending_frames+0x360/0x360 [ 2354.988176] ? __lockdep_reset_lock+0x180/0x180 [ 2354.988697] ? __lockdep_reset_lock+0x180/0x180 [ 2354.989212] ? lock_acquire+0x197/0x470 [ 2354.989646] ? find_held_lock+0x2c/0x110 [ 2354.990088] ? __might_fault+0xd3/0x180 [ 2354.990515] ? lock_downgrade+0x6d0/0x6d0 [ 2354.990980] ? sock_has_perm+0x1ea/0x280 [ 2354.991430] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2354.992014] ? __import_iovec+0x458/0x590 [ 2354.992463] ? udp_v6_push_pending_frames+0x360/0x360 [ 2354.993028] inet6_sendmsg+0x105/0x140 [ 2354.993454] ? inet6_compat_ioctl+0x320/0x320 [ 2354.993945] __sock_sendmsg+0xf2/0x190 [ 2354.994372] ____sys_sendmsg+0x334/0x870 [ 2354.994819] ? sock_write_iter+0x3d0/0x3d0 [ 2354.995283] ? do_recvmmsg+0x6d0/0x6d0 [ 2354.995718] ? __lock_acquire+0x1657/0x5b00 [ 2354.996199] ___sys_sendmsg+0xf3/0x170 [ 2354.996624] ? sendmsg_copy_msghdr+0x160/0x160 [ 2354.997117] ? vmacache_find+0x55/0x2a0 [ 2354.997550] ? __lockdep_reset_lock+0x180/0x180 [ 2354.998064] ? lock_acquire+0x197/0x470 [ 2354.998507] ? find_held_lock+0x2c/0x110 [ 2354.998955] ? __might_fault+0xd3/0x180 [ 2354.999385] ? lock_downgrade+0x6d0/0x6d0 [ 2354.999856] ? asm_exc_page_fault+0x1e/0x30 [ 2355.000342] __sys_sendmmsg+0x195/0x470 [ 2355.000779] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2355.001250] ? lock_downgrade+0x6d0/0x6d0 [ 2355.001718] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.002244] ? wait_for_completion_io+0x270/0x270 [ 2355.002766] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.003274] ? vfs_write+0x354/0xa70 [ 2355.003684] ? fput_many+0x2f/0x1a0 [ 2355.004078] ? ksys_write+0x1a9/0x260 [ 2355.004499] ? __ia32_sys_read+0xb0/0xb0 [ 2355.004943] __x64_sys_sendmmsg+0x99/0x100 [ 2355.005413] do_syscall_64+0x33/0x40 [ 2355.005820] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.006389] RIP: 0033:0x7f1c4c8a5b19 [ 2355.006800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.008822] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2355.009647] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2355.010426] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2355.011200] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.011986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.012765] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:13 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:31:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000002ec0), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x1}], 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="140000000000000000000000740000f6042eabb705f9d23a78e8f3af0f84dbdfec946593bbd21c58bd6302b0fc", @ANYRES32, @ANYBLOB="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"], 0x18, 0x8090}, 0x0) poll(&(0x7f0000000100)=[{r2, 0x234}, {r3}], 0x2, 0x0) recvfrom$inet6(r2, &(0x7f0000000700)=""/4096, 0x1000, 0x20, &(0x7f0000000040)={0xa, 0x4e20, 0xfffff6d5, @empty, 0x5}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x29, 0x4, 0x0, 0x0, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x700, 0x8001, 0x6}}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) recvfrom$inet6(r1, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="eb", 0x35880}], 0x1, &(0x7f0000001900)=ANY=[@ANYBLOB="14000000000000000000000000000000052e", @ANYRES32, @ANYBLOB="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"], 0x18}, 0x0) poll(&(0x7f0000000100)=[{r5, 0x234}, {r6}], 0x2, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f0000000200)="2667bc267119d27b013e94a217d12463a12818b5ea10f369d7e063d5d04e1c057d8959787f6d4a6c47df122321744f391622e1c5f3c961bc5d8f3dde530cedd79a0ff7e54563c00587a01c89fe26d0c6c88f2e5d3c30dac797b47ca31fb959bb66fdcd893e7dfed3b951c962bdc4e3e9296e2397d88ad01995f88996eb46fe12e5dc33ff3e45d8eeb5121a312099442660bdac91d43672ddbadc", 0x9a) 20:31:13 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1200) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:31:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 33) 20:31:13 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000001c0)={0x0, 0x6, 0x1, 0x1}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2355.170378] FAULT_INJECTION: forcing a failure. [ 2355.170378] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.171704] CPU: 1 PID: 39636 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2355.172453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.173361] Call Trace: [ 2355.173664] dump_stack+0x107/0x167 [ 2355.174053] should_fail.cold+0x5/0xa [ 2355.174463] should_failslab+0x5/0x20 [ 2355.174876] __kmalloc_node_track_caller+0x74/0x3b0 [ 2355.175401] ? alloc_skb_with_frags+0x92/0x570 [ 2355.175900] __alloc_skb+0xb1/0x5b0 [ 2355.176287] alloc_skb_with_frags+0x92/0x570 [ 2355.176762] sock_alloc_send_pskb+0x7af/0x930 [ 2355.177250] ? sk_alloc+0x350/0x350 [ 2355.177654] ? perf_trace_lock+0xac/0x490 [ 2355.178090] ? SOFTIRQ_verbose+0x10/0x10 [ 2355.178548] __ip_append_data+0x1628/0x3310 [ 2355.179012] ? fib_select_path+0x95d/0x1e90 [ 2355.179489] ? __lockdep_reset_lock+0x180/0x180 [ 2355.179998] ? ip_frag_init+0x350/0x350 [ 2355.180449] ? ip_finish_output+0x330/0x330 [ 2355.180922] ? ip_route_output_key_hash+0x1a4/0x340 [ 2355.181456] ? ipv4_mtu+0x1ed/0x2c0 [ 2355.181862] ip_make_skb+0x22a/0x2a0 [ 2355.182277] ? ip_frag_init+0x350/0x350 [ 2355.182718] ? ip_flush_pending_frames+0x20/0x20 [ 2355.183244] ? lock_downgrade+0x6d0/0x6d0 [ 2355.183725] ? xfrm_lookup_route+0x65/0x210 [ 2355.184214] udp_sendmsg+0x193f/0x2170 [ 2355.184645] ? ip_frag_init+0x350/0x350 [ 2355.185085] ? udp_setsockopt+0xc0/0xc0 [ 2355.185511] ? mark_lock+0xf5/0x2df0 [ 2355.185926] ? lock_chain_count+0x20/0x20 [ 2355.186392] ? mark_lock+0xf5/0x2df0 [ 2355.186810] ? mark_lock+0xf5/0x2df0 [ 2355.187219] ? lock_chain_count+0x20/0x20 [ 2355.187686] ? lock_chain_count+0x20/0x20 [ 2355.188134] ? prep_new_page+0x16d/0x1d0 [ 2355.188590] ? lock_chain_count+0x20/0x20 [ 2355.189059] ? __lock_acquire+0x1657/0x5b00 [ 2355.189528] udpv6_sendmsg+0x1b4e/0x2af0 [ 2355.189972] ? __lock_acquire+0x1657/0x5b00 [ 2355.190455] ? udp_v6_push_pending_frames+0x360/0x360 [ 2355.191012] ? __lockdep_reset_lock+0x180/0x180 [ 2355.191533] ? __lockdep_reset_lock+0x180/0x180 [ 2355.192055] ? lock_acquire+0x197/0x470 [ 2355.192495] ? find_held_lock+0x2c/0x110 [ 2355.192941] ? __might_fault+0xd3/0x180 [ 2355.193378] ? lock_downgrade+0x6d0/0x6d0 [ 2355.193841] ? sock_has_perm+0x1ea/0x280 [ 2355.194289] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2355.194866] ? __import_iovec+0x458/0x590 [ 2355.195320] ? udp_v6_push_pending_frames+0x360/0x360 [ 2355.195900] inet6_sendmsg+0x105/0x140 [ 2355.196335] ? inet6_compat_ioctl+0x320/0x320 [ 2355.196815] __sock_sendmsg+0xf2/0x190 [ 2355.197253] ____sys_sendmsg+0x334/0x870 [ 2355.197691] ? sock_write_iter+0x3d0/0x3d0 [ 2355.198155] ? do_recvmmsg+0x6d0/0x6d0 [ 2355.198582] ? __lock_acquire+0x1657/0x5b00 [ 2355.199070] ___sys_sendmsg+0xf3/0x170 [ 2355.199503] ? sendmsg_copy_msghdr+0x160/0x160 [ 2355.200007] ? vmacache_find+0x55/0x2a0 [ 2355.200454] ? __lockdep_reset_lock+0x180/0x180 [ 2355.200970] ? lock_acquire+0x197/0x470 [ 2355.201408] ? find_held_lock+0x2c/0x110 [ 2355.201850] ? __might_fault+0xd3/0x180 [ 2355.202290] ? lock_downgrade+0x6d0/0x6d0 [ 2355.202745] ? asm_exc_page_fault+0x1e/0x30 [ 2355.203229] __sys_sendmmsg+0x195/0x470 [ 2355.203678] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2355.204154] ? lock_downgrade+0x6d0/0x6d0 [ 2355.204633] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.205174] ? wait_for_completion_io+0x270/0x270 [ 2355.205708] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.206224] ? vfs_write+0x354/0xa70 [ 2355.206626] ? fput_many+0x2f/0x1a0 [ 2355.207019] ? ksys_write+0x1a9/0x260 [ 2355.207439] ? __ia32_sys_read+0xb0/0xb0 [ 2355.207892] __x64_sys_sendmmsg+0x99/0x100 [ 2355.208367] do_syscall_64+0x33/0x40 [ 2355.208780] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.209347] RIP: 0033:0x7f1c4c8a5b19 [ 2355.209750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.211777] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2355.212608] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2355.213390] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2355.214171] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.214950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.215741] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:13 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x18, 0x5e, 0x7c15c02d21e6d5c5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@nested={0x4}]}, 0x18}}, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/13, 0xd}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000200)=""/108, 0x6c}], 0x4) syz_genetlink_get_family_id$devlink(0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0xc885) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0xffffffff, @mcast1}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @mcast1}}]}, 0x110) clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:31:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 34) [ 2355.742054] FAULT_INJECTION: forcing a failure. [ 2355.742054] name failslab, interval 1, probability 0, space 0, times 0 [ 2355.744337] CPU: 1 PID: 39812 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2355.745706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2355.747357] Call Trace: [ 2355.747902] dump_stack+0x107/0x167 [ 2355.748632] should_fail.cold+0x5/0xa [ 2355.749396] ? create_object.isra.0+0x3a/0xa20 [ 2355.750303] should_failslab+0x5/0x20 [ 2355.751059] kmem_cache_alloc+0x5b/0x310 [ 2355.751886] create_object.isra.0+0x3a/0xa20 [ 2355.752764] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2355.753773] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2355.754777] ? alloc_skb_with_frags+0x92/0x570 [ 2355.755695] __alloc_skb+0xb1/0x5b0 [ 2355.756424] alloc_skb_with_frags+0x92/0x570 [ 2355.757314] sock_alloc_send_pskb+0x7af/0x930 [ 2355.758221] ? sk_alloc+0x350/0x350 [ 2355.758955] ? perf_trace_lock+0xac/0x490 [ 2355.759793] ? SOFTIRQ_verbose+0x10/0x10 [ 2355.760612] __ip_append_data+0x1628/0x3310 [ 2355.761480] ? fib_select_path+0x95d/0x1e90 [ 2355.762340] ? __lockdep_reset_lock+0x180/0x180 [ 2355.763258] ? ip_frag_init+0x350/0x350 [ 2355.764073] ? ip_finish_output+0x330/0x330 [ 2355.764931] ? ip_route_output_key_hash+0x1a4/0x340 [ 2355.765919] ? ipv4_mtu+0x1ed/0x2c0 [ 2355.766653] ip_make_skb+0x22a/0x2a0 [ 2355.767398] ? ip_frag_init+0x350/0x350 [ 2355.768199] ? ip_flush_pending_frames+0x20/0x20 [ 2355.769157] ? lock_downgrade+0x6d0/0x6d0 [ 2355.769983] ? xfrm_lookup_route+0x65/0x210 [ 2355.770847] udp_sendmsg+0x193f/0x2170 [ 2355.771648] ? ip_frag_init+0x350/0x350 [ 2355.772450] ? udp_setsockopt+0xc0/0xc0 [ 2355.773249] ? perf_event_output_forward+0x13f/0x2c0 [ 2355.774258] ? lock_downgrade+0x6d0/0x6d0 [ 2355.775087] ? mark_lock+0xf5/0x2df0 [ 2355.775849] ? perf_prepare_sample+0x1be0/0x1be0 [ 2355.776795] ? lock_downgrade+0x6d0/0x6d0 [ 2355.777633] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2355.778644] udpv6_sendmsg+0x1b4e/0x2af0 [ 2355.779453] ? __lock_acquire+0x1657/0x5b00 [ 2355.780330] ? udp_v6_push_pending_frames+0x360/0x360 [ 2355.781371] ? __lockdep_reset_lock+0x180/0x180 [ 2355.782292] ? perf_event_switch_output+0x7d0/0x7d0 [ 2355.783293] ? lock_acquire+0x197/0x470 [ 2355.784106] ? find_held_lock+0x2c/0x110 [ 2355.784921] ? __might_fault+0xd3/0x180 [ 2355.785714] ? lock_downgrade+0x6d0/0x6d0 [ 2355.786537] ? lock_chain_count+0x20/0x20 [ 2355.787363] ? sock_has_perm+0x1ea/0x280 [ 2355.788184] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2355.789234] ? __import_iovec+0x458/0x590 [ 2355.790059] ? udp_v6_push_pending_frames+0x360/0x360 [ 2355.791090] inet6_sendmsg+0x105/0x140 [ 2355.791871] ? inet6_compat_ioctl+0x320/0x320 [ 2355.792757] __sock_sendmsg+0xf2/0x190 [ 2355.793545] ____sys_sendmsg+0x334/0x870 [ 2355.794350] ? sock_write_iter+0x3d0/0x3d0 [ 2355.795177] ? do_recvmmsg+0x6d0/0x6d0 [ 2355.795988] ? __lock_acquire+0x1657/0x5b00 [ 2355.796857] ___sys_sendmsg+0xf3/0x170 [ 2355.797628] ? sendmsg_copy_msghdr+0x160/0x160 [ 2355.798537] ? __lockdep_reset_lock+0x180/0x180 [ 2355.799452] ? trace_hardirqs_on+0x5b/0x180 [ 2355.800327] ? lock_acquire+0x197/0x470 [ 2355.801110] ? find_held_lock+0x2c/0x110 [ 2355.801927] ? __might_fault+0xd3/0x180 [ 2355.802717] ? lock_downgrade+0x6d0/0x6d0 [ 2355.803539] ? io_schedule_timeout+0x140/0x140 [ 2355.804472] __sys_sendmmsg+0x195/0x470 [ 2355.805268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2355.806125] ? lock_downgrade+0x6d0/0x6d0 [ 2355.806966] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2355.807933] ? wait_for_completion_io+0x270/0x270 [ 2355.808889] ? rcu_read_lock_any_held+0x75/0xa0 [ 2355.809806] ? vfs_write+0x354/0xa70 [ 2355.810547] ? fput_many+0x2f/0x1a0 [ 2355.811272] ? ksys_write+0x1a9/0x260 [ 2355.812047] ? __ia32_sys_read+0xb0/0xb0 [ 2355.812855] __x64_sys_sendmmsg+0x99/0x100 [ 2355.813695] do_syscall_64+0x33/0x40 [ 2355.814433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2355.815453] RIP: 0033:0x7f1c4c8a5b19 [ 2355.816202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2355.819864] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2355.821359] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2355.822763] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2355.824199] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2355.825631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2355.827159] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:14 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}, {0x0}], 0x2}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740)={0x0, 0x5403}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000009c0)='/proc/mdstat\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r3) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x6, 0x4, 0xc, 0x0, 0x1ff}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001040)=0xc) setxattr$system_posix_acl(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32, @ANYBLOB="02000200", @ANYRES32=0xee01, @ANYBLOB="040002000000000008000600", @ANYRES32=0xee00, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB="08000500", @ANYRES32=r5, @ANYBLOB="0800a0a8", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08302c269f09f1f8c76a000300", @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="10000400000000002000010000000000"], 0x84, 0x2) lstat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 20:31:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 35) 20:31:14 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2356.156162] FAULT_INJECTION: forcing a failure. [ 2356.156162] name failslab, interval 1, probability 0, space 0, times 0 [ 2356.158701] CPU: 1 PID: 40047 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2356.160134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2356.161829] Call Trace: [ 2356.162375] dump_stack+0x107/0x167 [ 2356.163125] should_fail.cold+0x5/0xa [ 2356.163916] ? dst_alloc+0x9e/0x610 [ 2356.164667] should_failslab+0x5/0x20 [ 2356.165449] kmem_cache_alloc+0x5b/0x310 [ 2356.166287] dst_alloc+0x9e/0x610 [ 2356.167022] rt_dst_alloc+0x73/0x440 [ 2356.167826] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2356.168915] ip_route_output_key_hash+0x18d/0x340 [ 2356.169901] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2356.171044] ? mark_lock+0xf5/0x2df0 [ 2356.171822] ? __lock_acquire+0x1657/0x5b00 [ 2356.172718] ip_route_output_flow+0x23/0x150 [ 2356.173632] ip_tunnel_xmit+0x70e/0x2f50 [ 2356.174469] ? usage_accumulate+0x70/0x110 [ 2356.175349] ? __is_insn_slot_addr+0x94/0x290 [ 2356.176274] ? perf_trace_lock+0xac/0x490 [ 2356.177133] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2356.178110] sit_tunnel_xmit+0xef0/0x2960 [ 2356.178974] ? ipip_rcv+0x4f0/0x4f0 [ 2356.179746] ? skb_crc32c_csum_help+0x80/0x80 [ 2356.180672] ? lock_acquire+0x197/0x470 [ 2356.181489] ? __dev_queue_xmit+0x1c2/0x2710 [ 2356.182405] ? netif_skb_features+0x536/0xa00 [ 2356.183334] dev_hard_start_xmit+0x1cb/0x6f0 [ 2356.184271] __dev_queue_xmit+0x17ec/0x2710 [ 2356.185165] ? find_held_lock+0x2c/0x110 [ 2356.186009] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2356.186944] ? lock_downgrade+0x6d0/0x6d0 [ 2356.187808] ? lock_acquire+0x197/0x470 [ 2356.188621] ? ip_finish_output2+0x220/0x21f0 [ 2356.189554] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2356.190634] neigh_connected_output+0x382/0x4d0 [ 2356.191609] ip_finish_output2+0x6f1/0x21f0 [ 2356.192527] ? nf_hook_slow+0xfc/0x1e0 [ 2356.193352] ? ip_frag_next+0x9e0/0x9e0 [ 2356.194195] ? nf_hook+0x160/0x510 [ 2356.194947] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2356.196024] __ip_finish_output.part.0+0x5f3/0xb50 [ 2356.197057] ? ip_fragment.constprop.0+0x240/0x240 [ 2356.198076] ? nf_hook+0x510/0x510 [ 2356.198843] ip_output+0x2f7/0x600 [ 2356.199605] ip_send_skb+0xdd/0x260 [ 2356.200407] udp_send_skb+0x6da/0x11d0 [ 2356.201223] udp_sendmsg+0x197f/0x2170 [ 2356.202029] ? ip_frag_init+0x350/0x350 [ 2356.202863] ? udp_setsockopt+0xc0/0xc0 [ 2356.203706] ? mark_lock+0xf5/0x2df0 [ 2356.204482] ? mark_lock+0xf5/0x2df0 [ 2356.205247] ? lock_chain_count+0x20/0x20 [ 2356.206102] ? lock_chain_count+0x20/0x20 [ 2356.206964] ? __lockdep_reset_lock+0x180/0x180 [ 2356.207958] ? __lock_acquire+0x1657/0x5b00 [ 2356.208877] udpv6_sendmsg+0x1b4e/0x2af0 [ 2356.209714] ? __lock_acquire+0x1657/0x5b00 [ 2356.210617] ? udp_v6_push_pending_frames+0x360/0x360 [ 2356.211692] ? __lockdep_reset_lock+0x180/0x180 [ 2356.212663] ? __lockdep_reset_lock+0x180/0x180 [ 2356.213631] ? lock_acquire+0x197/0x470 [ 2356.214446] ? find_held_lock+0x2c/0x110 [ 2356.215291] ? __might_fault+0xd3/0x180 [ 2356.216118] ? lock_downgrade+0x6d0/0x6d0 [ 2356.216982] ? sock_has_perm+0x1ea/0x280 [ 2356.217821] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2356.218912] ? __import_iovec+0x458/0x590 [ 2356.219775] ? udp_v6_push_pending_frames+0x360/0x360 [ 2356.220844] inet6_sendmsg+0x105/0x140 [ 2356.221646] ? inet6_compat_ioctl+0x320/0x320 [ 2356.222568] __sock_sendmsg+0xf2/0x190 [ 2356.223371] ____sys_sendmsg+0x334/0x870 [ 2356.224232] ? sock_write_iter+0x3d0/0x3d0 [ 2356.225097] ? do_recvmmsg+0x6d0/0x6d0 [ 2356.225904] ? __lock_acquire+0x1657/0x5b00 [ 2356.226813] ___sys_sendmsg+0xf3/0x170 [ 2356.227628] ? sendmsg_copy_msghdr+0x160/0x160 [ 2356.228565] ? vmacache_find+0x55/0x2a0 [ 2356.229388] ? __lockdep_reset_lock+0x180/0x180 [ 2356.230355] ? lock_acquire+0x197/0x470 [ 2356.231171] ? find_held_lock+0x2c/0x110 [ 2356.232027] ? __might_fault+0xd3/0x180 [ 2356.232846] ? lock_downgrade+0x6d0/0x6d0 [ 2356.233698] ? asm_exc_page_fault+0x1e/0x30 [ 2356.234615] __sys_sendmmsg+0x195/0x470 [ 2356.235443] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2356.236348] ? lock_downgrade+0x6d0/0x6d0 [ 2356.237228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2356.238233] ? wait_for_completion_io+0x270/0x270 [ 2356.239226] ? rcu_read_lock_any_held+0x75/0xa0 [ 2356.240191] ? vfs_write+0x354/0xa70 [ 2356.240963] ? fput_many+0x2f/0x1a0 [ 2356.241715] ? ksys_write+0x1a9/0x260 [ 2356.242498] ? __ia32_sys_read+0xb0/0xb0 [ 2356.243344] __x64_sys_sendmmsg+0x99/0x100 [ 2356.244243] do_syscall_64+0x33/0x40 [ 2356.245007] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2356.246058] RIP: 0033:0x7f1c4c8a5b19 [ 2356.246831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2356.250612] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2356.252195] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2356.253658] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2356.255120] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.256589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2356.258047] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:46 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1201) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:31:46 executing program 3: preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x800, 0x8800000) lseek(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x20) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000000c0)) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x220400, 0x0) openat(r3, &(0x7f0000000080)='./file1\x00', 0x0, 0x60) openat(0xffffffffffffffff, 0x0, 0x1a340, 0x100) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x4840, 0x0) sendfile(r1, r5, 0x0, 0x100000001) 20:31:46 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 20:31:46 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200df0000000400045539545cee00"/34, 0x22, 0x2102}], 0x0, &(0x7f0000000280)=ANY=[]) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x179) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'geneve0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r1, 0x0, 0x0) inotify_init1(0x0) r2 = accept4$inet6(r0, 0x0, &(0x7f00000002c0), 0x800) r3 = signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, 0x0, 0x0) r4 = syz_io_uring_setup(0x131, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r4, 0x53c9, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r3, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x100) 20:31:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f0000000000)={0x1}, 0x8) ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x1a6) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010100}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x20d315) 20:31:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 36) 20:31:46 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:31:46 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2388.827937] FAULT_INJECTION: forcing a failure. [ 2388.827937] name failslab, interval 1, probability 0, space 0, times 0 [ 2388.828159] udc-core: couldn't find an available UDC or it's busy [ 2388.830288] CPU: 1 PID: 40986 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2388.830315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2388.830321] Call Trace: [ 2388.830346] dump_stack+0x107/0x167 [ 2388.830373] should_fail.cold+0x5/0xa [ 2388.830396] ? create_object.isra.0+0x3a/0xa20 [ 2388.830427] should_failslab+0x5/0x20 [ 2388.832311] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2388.833368] kmem_cache_alloc+0x5b/0x310 [ 2388.833398] create_object.isra.0+0x3a/0xa20 [ 2388.841864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2388.842918] kmem_cache_alloc+0x159/0x310 [ 2388.843779] dst_alloc+0x9e/0x610 [ 2388.844571] rt_dst_alloc+0x73/0x440 [ 2388.845342] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2388.846439] ip_route_output_key_hash+0x18d/0x340 [ 2388.847412] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2388.848553] ? mark_lock+0xf5/0x2df0 [ 2388.849303] ? __lock_acquire+0x1657/0x5b00 [ 2388.850199] ip_route_output_flow+0x23/0x150 [ 2388.851089] ip_tunnel_xmit+0x70e/0x2f50 [ 2388.851927] ? usage_accumulate+0x70/0x110 [ 2388.852787] ? __is_insn_slot_addr+0x94/0x290 [ 2388.853714] ? perf_trace_lock+0xac/0x490 [ 2388.854569] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2388.855546] sit_tunnel_xmit+0xef0/0x2960 [ 2388.856422] ? ipip_rcv+0x4f0/0x4f0 [ 2388.857169] ? skb_crc32c_csum_help+0x80/0x80 [ 2388.858083] ? lock_acquire+0x197/0x470 [ 2388.858894] ? __dev_queue_xmit+0x1c2/0x2710 [ 2388.859804] ? netif_skb_features+0x536/0xa00 [ 2388.860735] dev_hard_start_xmit+0x1cb/0x6f0 [ 2388.861645] __dev_queue_xmit+0x17ec/0x2710 [ 2388.862512] ? find_held_lock+0x2c/0x110 [ 2388.863353] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2388.864296] ? lock_downgrade+0x6d0/0x6d0 [ 2388.865159] ? lock_acquire+0x197/0x470 [ 2388.865990] ? ip_finish_output2+0x220/0x21f0 [ 2388.866919] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2388.867996] neigh_connected_output+0x382/0x4d0 [ 2388.868982] ip_finish_output2+0x6f1/0x21f0 [ 2388.869877] ? nf_hook_slow+0xfc/0x1e0 [ 2388.870685] ? ip_frag_next+0x9e0/0x9e0 [ 2388.871498] ? nf_hook+0x160/0x510 [ 2388.872243] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2388.873289] __ip_finish_output.part.0+0x5f3/0xb50 [ 2388.874294] ? ip_fragment.constprop.0+0x240/0x240 [ 2388.875295] ? nf_hook+0x510/0x510 [ 2388.876055] ip_output+0x2f7/0x600 [ 2388.876791] ip_send_skb+0xdd/0x260 [ 2388.877547] udp_send_skb+0x6da/0x11d0 [ 2388.878364] udp_sendmsg+0x197f/0x2170 [ 2388.879174] ? ip_frag_init+0x350/0x350 [ 2388.880004] ? udp_setsockopt+0xc0/0xc0 [ 2388.880853] ? mark_lock+0xf5/0x2df0 [ 2388.881624] ? mark_lock+0xf5/0x2df0 [ 2388.882380] ? lock_chain_count+0x20/0x20 [ 2388.883232] ? lock_chain_count+0x20/0x20 [ 2388.884089] ? __lockdep_reset_lock+0x180/0x180 [ 2388.885076] ? __lock_acquire+0x1657/0x5b00 [ 2388.885957] udpv6_sendmsg+0x1b4e/0x2af0 [ 2388.886793] ? __lock_acquire+0x1657/0x5b00 [ 2388.887681] ? udp_v6_push_pending_frames+0x360/0x360 [ 2388.888754] ? __lockdep_reset_lock+0x180/0x180 [ 2388.889720] ? __lockdep_reset_lock+0x180/0x180 [ 2388.890684] ? lock_acquire+0x197/0x470 [ 2388.891499] ? find_held_lock+0x2c/0x110 [ 2388.892342] ? __might_fault+0xd3/0x180 [ 2388.893159] ? lock_downgrade+0x6d0/0x6d0 [ 2388.894007] ? lock_chain_count+0x20/0x20 [ 2388.894862] ? sock_has_perm+0x1ea/0x280 [ 2388.895704] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2388.896806] ? __import_iovec+0x458/0x590 [ 2388.897656] ? udp_v6_push_pending_frames+0x360/0x360 [ 2388.898727] inet6_sendmsg+0x105/0x140 [ 2388.899527] ? inet6_compat_ioctl+0x320/0x320 [ 2388.900464] __sock_sendmsg+0xf2/0x190 [ 2388.901271] ____sys_sendmsg+0x334/0x870 [ 2388.902121] ? sock_write_iter+0x3d0/0x3d0 [ 2388.902992] ? do_recvmmsg+0x6d0/0x6d0 [ 2388.903803] ? __lock_acquire+0x1657/0x5b00 [ 2388.904704] ___sys_sendmsg+0xf3/0x170 [ 2388.905508] ? sendmsg_copy_msghdr+0x160/0x160 [ 2388.906442] ? __lockdep_reset_lock+0x180/0x180 [ 2388.907386] ? trace_hardirqs_on+0x5b/0x180 [ 2388.908291] ? lock_acquire+0x197/0x470 [ 2388.909111] ? find_held_lock+0x2c/0x110 [ 2388.909948] ? __might_fault+0xd3/0x180 [ 2388.910769] ? lock_downgrade+0x6d0/0x6d0 [ 2388.911618] ? io_schedule_timeout+0x140/0x140 [ 2388.912581] __sys_sendmmsg+0x195/0x470 [ 2388.913420] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2388.914287] ? lock_downgrade+0x6d0/0x6d0 [ 2388.915143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2388.916162] ? wait_for_completion_io+0x270/0x270 [ 2388.917134] ? rcu_read_lock_any_held+0x75/0xa0 [ 2388.918084] ? vfs_write+0x354/0xa70 [ 2388.918836] ? fput_many+0x2f/0x1a0 [ 2388.919585] ? ksys_write+0x1a9/0x260 [ 2388.920361] ? __ia32_sys_read+0xb0/0xb0 [ 2388.921211] __x64_sys_sendmmsg+0x99/0x100 [ 2388.922091] do_syscall_64+0x33/0x40 [ 2388.922843] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2388.923892] RIP: 0033:0x7f1c4c8a5b19 [ 2388.924654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2388.928406] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2388.929935] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2388.931393] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2388.932861] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2388.934318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2388.935779] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:31:47 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) r2 = epoll_create(0x8000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x20000001}) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000000c0)=0x7bf9, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1}}], 0x1, 0x0) 20:31:47 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1, 0x6}, {}, {0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 20:31:47 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) dup(r1) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xb, 0x5, 0x2000000}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x970c7917c8cb9e10, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x200}}, 0x10000009) lseek(r0, 0x2aec, 0x3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f00000000c0), 0x100000001, 0x40) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000000)=0xe72, 0xffffffff7fffffff) copy_file_range(r3, 0x0, r0, &(0x7f0000000180)=0x18, 0x5, 0x0) 20:31:47 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1800) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:31:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 37) [ 2389.400462] FAULT_INJECTION: forcing a failure. [ 2389.400462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2389.402776] CPU: 1 PID: 41455 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2389.404114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2389.405702] Call Trace: [ 2389.406216] dump_stack+0x107/0x167 [ 2389.406924] should_fail.cold+0x5/0xa [ 2389.407665] _copy_from_user+0x2e/0x1b0 [ 2389.408475] __copy_msghdr_from_user+0x91/0x4b0 [ 2389.409488] ? __ia32_sys_shutdown+0x80/0x80 [ 2389.410360] ? udp_v6_push_pending_frames+0x360/0x360 [ 2389.411358] ? inet6_sendmsg+0xbd/0x140 [ 2389.412130] ? inet6_compat_ioctl+0x320/0x320 [ 2389.412985] ? __sock_sendmsg+0x55/0x190 [ 2389.413774] sendmsg_copy_msghdr+0xa1/0x160 [ 2389.414599] ? do_recvmmsg+0x6d0/0x6d0 [ 2389.415350] ? __lock_acquire+0x1657/0x5b00 [ 2389.416200] ___sys_sendmsg+0xc6/0x170 [ 2389.416950] ? sendmsg_copy_msghdr+0x160/0x160 [ 2389.417833] ? __lockdep_reset_lock+0x180/0x180 [ 2389.418722] ? trace_hardirqs_on+0x5b/0x180 [ 2389.419553] ? lock_acquire+0x197/0x470 [ 2389.420330] ? find_held_lock+0x2c/0x110 [ 2389.421108] ? __might_fault+0xd3/0x180 [ 2389.421861] ? lock_downgrade+0x6d0/0x6d0 [ 2389.422649] ? io_schedule_timeout+0x140/0x140 [ 2389.423527] __sys_sendmmsg+0x195/0x470 [ 2389.424293] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2389.425109] ? lock_downgrade+0x6d0/0x6d0 [ 2389.425912] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2389.426833] ? wait_for_completion_io+0x270/0x270 [ 2389.427748] ? rcu_read_lock_any_held+0x75/0xa0 [ 2389.428641] ? vfs_write+0x354/0xa70 [ 2389.429350] ? fput_many+0x2f/0x1a0 [ 2389.430043] ? ksys_write+0x1a9/0x260 [ 2389.430771] ? __ia32_sys_read+0xb0/0xb0 [ 2389.431548] __x64_sys_sendmmsg+0x99/0x100 [ 2389.432362] do_syscall_64+0x33/0x40 [ 2389.433065] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2389.434033] RIP: 0033:0x7f1c4c8a5b19 [ 2389.434748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2389.438201] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2389.439664] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2389.441024] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2389.442391] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2389.443745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2389.445095] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2389.675560] audit: type=1326 audit(1703709107.829:107): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=41406 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8de157eb19 code=0x0 [ 2390.346468] audit: type=1326 audit(1703709108.500:108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=41406 comm="syz-executor.5" exe="/syz-executor.5" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8de157eb19 code=0x0 [ 2425.085961] FAULT_INJECTION: forcing a failure. [ 2425.085961] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.088390] CPU: 1 PID: 41820 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2425.089789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.091453] Call Trace: [ 2425.091986] dump_stack+0x107/0x167 [ 2425.092754] should_fail.cold+0x5/0xa [ 2425.093524] ? __alloc_skb+0x6d/0x5b0 [ 2425.094300] should_failslab+0x5/0x20 [ 2425.095087] kmem_cache_alloc_node+0x55/0x330 [ 2425.095995] __alloc_skb+0x6d/0x5b0 [ 2425.096743] alloc_skb_with_frags+0x92/0x570 [ 2425.097642] sock_alloc_send_pskb+0x7af/0x930 [ 2425.098560] ? sk_alloc+0x350/0x350 [ 2425.099319] ? perf_trace_lock+0xac/0x490 [ 2425.100161] ? SOFTIRQ_verbose+0x10/0x10 [ 2425.101024] __ip_append_data+0x1628/0x3310 [ 2425.101909] ? fib_select_path+0x95d/0x1e90 [ 2425.102776] ? __lockdep_reset_lock+0x180/0x180 [ 2425.103722] ? ip_frag_init+0x350/0x350 [ 2425.104549] ? ip_finish_output+0x330/0x330 [ 2425.105422] ? ip_route_output_key_hash+0x1a4/0x340 [ 2425.106417] ? ipv4_mtu+0x1ed/0x2c0 [ 2425.107155] ip_make_skb+0x22a/0x2a0 [ 2425.107906] ? ip_frag_init+0x350/0x350 [ 2425.108773] ? ip_flush_pending_frames+0x20/0x20 [ 2425.109744] ? lock_downgrade+0x6d0/0x6d0 [ 2425.110583] ? xfrm_lookup_route+0x65/0x210 [ 2425.111452] udp_sendmsg+0x193f/0x2170 [ 2425.112257] ? ip_frag_init+0x350/0x350 [ 2425.113088] ? udp_setsockopt+0xc0/0xc0 [ 2425.113881] ? mark_lock+0xf5/0x2df0 [ 2425.114642] ? lock_chain_count+0x20/0x20 [ 2425.115475] ? mark_lock+0xf5/0x2df0 [ 2425.116229] ? mark_lock+0xf5/0x2df0 [ 2425.116981] ? lock_chain_count+0x20/0x20 [ 2425.117930] ? lock_chain_count+0x20/0x20 20:32:23 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:32:23 executing program 3: syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0xfc, 0x400}, {&(0x7f0000010100)="00000000000000000000000079d64a30b19941939d5c6a24092e8c9a010040", 0x1f, 0x4e0}], 0x1800, &(0x7f0000013e00)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) openat(r0, &(0x7f0000000180)='./file0\x00', 0x40, 0x80) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x200000, 0x0) 20:32:23 executing program 5: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0xc0000) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x453, 0x4, 0x70bd27, 0x25dfdbfc, "6694e0822cff8132e64ad6caf3", ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4048004}, 0x880) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x400}, {0x0}], 0x0, &(0x7f0000000080)={[{@journal_dev}]}) 20:32:23 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fo', @ANYRESDEC, @ANYBLOB="2c646f6e745f686173682c6465666366696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7053723d3030303030303030303030303030303030303531e1f76566636f6e746578743d757365725f752c61707072616973652c00"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file1\x00'}) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x8c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xcde}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4004044) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file1\x00'}) fsmount(r2, 0x1, 0xf2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 20:32:23 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:32:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 38) 20:32:23 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:32:23 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_io_uring_setup(0x21, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r5}}, 0x7) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2425.118768] ? prep_new_page+0x16d/0x1d0 [ 2425.119679] ? lock_chain_count+0x20/0x20 [ 2425.120549] ? __lock_acquire+0x1657/0x5b00 [ 2425.121421] udpv6_sendmsg+0x1b4e/0x2af0 [ 2425.122243] ? __lock_acquire+0x1657/0x5b00 [ 2425.123127] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.124163] ? __lockdep_reset_lock+0x180/0x180 [ 2425.125113] ? __lockdep_reset_lock+0x180/0x180 [ 2425.126059] ? lock_acquire+0x197/0x470 [ 2425.126856] ? find_held_lock+0x2c/0x110 [ 2425.127679] ? __might_fault+0xd3/0x180 [ 2425.128484] ? lock_downgrade+0x6d0/0x6d0 [ 2425.129322] ? lock_chain_count+0x20/0x20 [ 2425.130159] ? sock_has_perm+0x1ea/0x280 [ 2425.130978] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2425.132038] ? __import_iovec+0x458/0x590 [ 2425.132892] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.133934] inet6_sendmsg+0x105/0x140 [ 2425.134724] ? inet6_compat_ioctl+0x320/0x320 [ 2425.135624] __sock_sendmsg+0xf2/0x190 [ 2425.136408] ____sys_sendmsg+0x334/0x870 [ 2425.137239] ? sock_write_iter+0x3d0/0x3d0 [ 2425.138087] ? do_recvmmsg+0x6d0/0x6d0 [ 2425.138876] ? find_held_lock+0x2c/0x110 [ 2425.139707] ___sys_sendmsg+0xf3/0x170 [ 2425.140511] ? sendmsg_copy_msghdr+0x160/0x160 [ 2425.141436] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.142489] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2425.143391] ? trace_hardirqs_on+0x5b/0x180 [ 2425.144262] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2425.145173] ? finish_task_switch+0x126/0x5d0 [ 2425.146071] ? finish_task_switch+0xef/0x5d0 [ 2425.146958] ? __switch_to+0x572/0xf70 [ 2425.147739] ? __switch_to_asm+0x3a/0x60 [ 2425.148560] ? __switch_to_asm+0x34/0x60 [ 2425.149380] ? __schedule+0x82c/0x1ea0 [ 2425.150174] ? io_schedule_timeout+0x140/0x140 [ 2425.151109] __sys_sendmmsg+0x195/0x470 [ 2425.151917] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2425.152799] ? lock_downgrade+0x6d0/0x6d0 [ 2425.153672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2425.154668] ? wait_for_completion_io+0x270/0x270 [ 2425.155657] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.156617] ? vfs_write+0x354/0xa70 [ 2425.157404] ? fput_many+0x2f/0x1a0 [ 2425.158146] ? ksys_write+0x1a9/0x260 [ 2425.158926] ? __ia32_sys_read+0xb0/0xb0 [ 2425.159762] __x64_sys_sendmmsg+0x99/0x100 [ 2425.160645] do_syscall_64+0x33/0x40 [ 2425.161412] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.162456] RIP: 0033:0x7f1c4c8a5b19 [ 2425.163221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.166945] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2425.168486] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2425.169918] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2425.171354] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.172808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2425.174245] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:32:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 39) [ 2425.267875] FAULT_INJECTION: forcing a failure. [ 2425.267875] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.270423] CPU: 1 PID: 41834 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2425.271817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.273514] Call Trace: [ 2425.274051] dump_stack+0x107/0x167 [ 2425.274793] should_fail.cold+0x5/0xa [ 2425.275564] ? create_object.isra.0+0x3a/0xa20 [ 2425.276505] should_failslab+0x5/0x20 [ 2425.277270] kmem_cache_alloc+0x5b/0x310 [ 2425.278089] create_object.isra.0+0x3a/0xa20 [ 2425.278969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2425.279990] kmem_cache_alloc_node+0x169/0x330 [ 2425.280927] __alloc_skb+0x6d/0x5b0 [ 2425.281665] alloc_skb_with_frags+0x92/0x570 [ 2425.282560] sock_alloc_send_pskb+0x7af/0x930 [ 2425.283478] ? sk_alloc+0x350/0x350 [ 2425.284215] ? perf_trace_lock+0xac/0x490 [ 2425.285066] ? SOFTIRQ_verbose+0x10/0x10 [ 2425.285891] __ip_append_data+0x1628/0x3310 [ 2425.286762] ? fib_select_path+0x95d/0x1e90 [ 2425.287630] ? __lockdep_reset_lock+0x180/0x180 [ 2425.288566] ? ip_frag_init+0x350/0x350 [ 2425.289375] ? ip_finish_output+0x330/0x330 [ 2425.290267] ? ip_route_output_key_hash+0x1a4/0x340 [ 2425.291257] ? ipv4_mtu+0x1ed/0x2c0 [ 2425.291998] ip_make_skb+0x22a/0x2a0 [ 2425.292770] ? ip_frag_init+0x350/0x350 [ 2425.293569] ? ip_flush_pending_frames+0x20/0x20 [ 2425.294525] ? lock_downgrade+0x6d0/0x6d0 [ 2425.295361] ? xfrm_lookup_route+0x65/0x210 [ 2425.296228] udp_sendmsg+0x193f/0x2170 [ 2425.297029] ? ip_frag_init+0x350/0x350 [ 2425.297837] ? udp_setsockopt+0xc0/0xc0 [ 2425.298647] ? mark_lock+0xf5/0x2df0 [ 2425.299398] ? mark_lock+0xf5/0x2df0 [ 2425.300153] ? lock_chain_count+0x20/0x20 [ 2425.300992] ? lock_chain_count+0x20/0x20 [ 2425.301838] ? __lockdep_reset_lock+0x180/0x180 [ 2425.302785] ? __lock_acquire+0x1657/0x5b00 [ 2425.303658] udpv6_sendmsg+0x1b4e/0x2af0 [ 2425.304493] ? __lock_acquire+0x1657/0x5b00 [ 2425.305391] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.306426] ? __lockdep_reset_lock+0x180/0x180 [ 2425.307372] ? __lockdep_reset_lock+0x180/0x180 [ 2425.308313] ? lock_acquire+0x197/0x470 [ 2425.309129] ? find_held_lock+0x2c/0x110 [ 2425.309950] ? __might_fault+0xd3/0x180 [ 2425.310748] ? lock_downgrade+0x6d0/0x6d0 [ 2425.311582] ? lock_chain_count+0x20/0x20 [ 2425.312417] ? sock_has_perm+0x1ea/0x280 [ 2425.313247] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2425.314303] ? __import_iovec+0x458/0x590 [ 2425.315137] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.316184] inet6_sendmsg+0x105/0x140 [ 2425.316986] ? inet6_compat_ioctl+0x320/0x320 [ 2425.317883] __sock_sendmsg+0xf2/0x190 [ 2425.318664] ____sys_sendmsg+0x334/0x870 [ 2425.319483] ? sock_write_iter+0x3d0/0x3d0 [ 2425.320327] ? do_recvmmsg+0x6d0/0x6d0 [ 2425.321124] ? __lock_acquire+0x1657/0x5b00 [ 2425.321162] ___sys_sendmsg+0xf3/0x170 [ 2425.321185] ? sendmsg_copy_msghdr+0x160/0x160 [ 2425.321209] ? __lockdep_reset_lock+0x180/0x180 [ 2425.325030] ? trace_hardirqs_on+0x5b/0x180 [ 2425.325905] ? lock_acquire+0x197/0x470 [ 2425.326722] ? find_held_lock+0x2c/0x110 [ 2425.327561] ? __might_fault+0xd3/0x180 [ 2425.328360] ? lock_downgrade+0x6d0/0x6d0 [ 2425.329209] ? io_schedule_timeout+0x140/0x140 [ 2425.330145] __sys_sendmmsg+0x195/0x470 [ 2425.330955] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2425.331812] ? lock_downgrade+0x6d0/0x6d0 [ 2425.332672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2425.333646] ? wait_for_completion_io+0x270/0x270 [ 2425.334616] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.335544] ? vfs_write+0x354/0xa70 [ 2425.336297] ? fput_many+0x2f/0x1a0 [ 2425.337051] ? ksys_write+0x1a9/0x260 [ 2425.337818] ? __ia32_sys_read+0xb0/0xb0 [ 2425.338647] __x64_sys_sendmmsg+0x99/0x100 [ 2425.339501] do_syscall_64+0x33/0x40 [ 2425.340248] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.341307] RIP: 0033:0x7f1c4c8a5b19 [ 2425.342057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.345833] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2425.347357] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2425.348818] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2425.350255] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.351695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2425.353149] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2425.370790] udc-core: couldn't find an available UDC or it's busy [ 2425.372165] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:32:23 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:32:23 executing program 3: r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{0x0}], 0x0, &(0x7f0000000380)={[{@debug_want_extra_isize}, {@auto_da_alloc}, {@barrier}], [{@seclabel}]}) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000002a80)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x880000, &(0x7f0000002bc0)={[{@orlov}, {@jqfmt_vfsv1}], [{@dont_measure}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002d40)={'wg1\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$KDMKTONE(r1, 0x4b30, 0x1f) write$P9_RREADDIR(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x122) 20:32:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:32:24 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) open$dir(0x0, 0x0, 0x21) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_io_uring_setup(0x2b28, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x8000) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={0x0, @empty, @initdev}, &(0x7f0000000240)=0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) fallocate(r2, 0x0, 0x400, 0x1ff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4007, @fd_index=0x2, 0xfffffffffffffff9, 0x0, 0xfffff41d, 0x0, 0x0, {0x2}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrusage(0x1, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 20:32:24 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c746572000000d2810000000000000000000000000000000e0000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000ff0300000000000000"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x0, 0x0, 0x8000]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r3, 0x0, r3) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x0, &(0x7f00000007c0)="3f7623c0fd5713364c901d3cbce75250", 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) 20:32:24 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x80000001, 0x3) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:32:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2103) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:32:54 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:32:54 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:32:54 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r2 = signalfd(r1, &(0x7f0000000000)={[0x2]}, 0x8) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x66083, 0x0) signalfd(r4, &(0x7f0000000000)={[0x2]}, 0x8) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:32:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 40) 20:32:54 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xec}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044893}, 0x20048010) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x9c, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x1a}, [@typed={0x8, 0x95, 0x0, 0x0, @pid=r1}, @nested={0x7d, 0x0, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @u32=0x2c9}, @generic="bc81adda7e5d1530ef761df54a6dfdbb717ec958170c21ba0e2367445d5e68d44d651d206e7b29d36151e6127dfeb715e6fe49f08a6495eeb0cb3adff8cffc3016b05b8d6d88beb8fa04b7ef0d65d70ad05c60c0e10df2aa16d505414f7a63c27933943cf0c52ce27bae82fc88ccf06c65"]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) unshare(0x1c010000) semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) 20:32:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x42, 0x0) close(r0) clone3(&(0x7f00000008c0)={0x201044100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) openat(r0, &(0x7f00000000c0)='./file1\x00', 0x20040, 0x12c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x280000, 0x46) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x81, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x406, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, r3, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000140)={0x0, 0x100000000}) 20:32:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2400) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:32:54 executing program 5: sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="080002"], 0x24}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x409becb7bdfc1d3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffd38, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x4000045) 20:32:54 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2583, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2456.521801] udc-core: couldn't find an available UDC or it's busy [ 2456.523657] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:32:54 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0\x00') symlinkat(&(0x7f0000000300)='./file2\x00', r0, &(0x7f0000000340)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {0x0}, {&(0x7f0000000380)=""/168, 0xa8}], 0x5, 0x6, 0xfffffffe) fallocate(r2, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r4, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x84) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) sendfile(r0, r5, 0x0, 0x100000001) [ 2456.581973] FAULT_INJECTION: forcing a failure. [ 2456.581973] name failslab, interval 1, probability 0, space 0, times 0 20:32:54 executing program 0: name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[], &(0x7f00000002c0), 0x400) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x68b21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') chdir(&(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x0, 0xff, 0x8, 0x3}, {0x3, 0x80, 0xf7, 0x728}]}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40400, 0xc1) r0 = epoll_create(0x8000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r2, 0x4) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r2, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) syz_io_uring_complete(0x0) clock_gettime(0x0, &(0x7f0000000400)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x20000001}) [ 2456.585358] CPU: 0 PID: 42979 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2456.587077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2456.589047] Call Trace: [ 2456.589761] dump_stack+0x107/0x167 [ 2456.590781] should_fail.cold+0x5/0xa [ 2456.591801] ? create_object.isra.0+0x3a/0xa20 [ 2456.593011] should_failslab+0x5/0x20 [ 2456.593964] kmem_cache_alloc+0x5b/0x310 [ 2456.595174] create_object.isra.0+0x3a/0xa20 [ 2456.596241] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2456.597637] kmem_cache_alloc_node+0x169/0x330 [ 2456.598923] __alloc_skb+0x6d/0x5b0 [ 2456.600012] alloc_skb_with_frags+0x92/0x570 [ 2456.601397] sock_alloc_send_pskb+0x7af/0x930 [ 2456.602857] ? sk_alloc+0x350/0x350 [ 2456.603950] ? perf_trace_lock+0xac/0x490 [ 2456.604999] ? SOFTIRQ_verbose+0x10/0x10 [ 2456.606221] __ip_append_data+0x1628/0x3310 [ 2456.607480] ? fib_select_path+0x95d/0x1e90 [ 2456.608644] ? __lockdep_reset_lock+0x180/0x180 [ 2456.609878] ? ip_frag_init+0x350/0x350 [ 2456.611200] ? ip_finish_output+0x330/0x330 [ 2456.612361] ? ip_route_output_key_hash+0x1a4/0x340 [ 2456.613606] ? ipv4_mtu+0x1ed/0x2c0 [ 2456.614756] ip_make_skb+0x22a/0x2a0 [ 2456.615835] ? ip_frag_init+0x350/0x350 [ 2456.616955] ? ip_flush_pending_frames+0x20/0x20 [ 2456.618365] ? lock_downgrade+0x6d0/0x6d0 [ 2456.619569] ? xfrm_lookup_route+0x65/0x210 [ 2456.620802] udp_sendmsg+0x193f/0x2170 [ 2456.622043] ? ip_frag_init+0x350/0x350 [ 2456.623282] ? udp_setsockopt+0xc0/0xc0 [ 2456.624382] ? perf_event_switch_output+0x7d0/0x7d0 [ 2456.625736] ? perf_event_output_forward+0x13f/0x2c0 [ 2456.627042] ? lock_downgrade+0x6d0/0x6d0 [ 2456.628255] ? mark_lock+0xf5/0x2df0 [ 2456.629267] ? perf_event_output_forward+0x168/0x2c0 [ 2456.630714] ? perf_prepare_sample+0x1be0/0x1be0 [ 2456.631892] ? lock_downgrade+0x6d0/0x6d0 [ 2456.633088] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2456.634665] udpv6_sendmsg+0x1b4e/0x2af0 [ 2456.635774] ? __lock_acquire+0x1657/0x5b00 [ 2456.637122] ? udp_v6_push_pending_frames+0x360/0x360 [ 2456.638592] ? perf_event_switch_output+0x7d0/0x7d0 [ 2456.639905] ? __lockdep_reset_lock+0x180/0x180 [ 2456.641105] ? perf_event_switch_output+0x7d0/0x7d0 [ 2456.642482] ? lock_acquire+0x197/0x470 [ 2456.643498] ? find_held_lock+0x2c/0x110 [ 2456.644683] ? __might_fault+0xd3/0x180 [ 2456.645731] ? lock_downgrade+0x6d0/0x6d0 [ 2456.646813] ? lock_chain_count+0x20/0x20 [ 2456.647894] ? sock_has_perm+0x1ea/0x280 [ 2456.648999] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2456.650732] ? __import_iovec+0x458/0x590 [ 2456.651805] ? udp_v6_push_pending_frames+0x360/0x360 [ 2456.653181] inet6_sendmsg+0x105/0x140 [ 2456.654191] ? inet6_compat_ioctl+0x320/0x320 [ 2456.655307] __sock_sendmsg+0xf2/0x190 [ 2456.656356] ____sys_sendmsg+0x334/0x870 [ 2456.657496] ? sock_write_iter+0x3d0/0x3d0 [ 2456.658542] ? do_recvmmsg+0x6d0/0x6d0 [ 2456.659651] ? find_held_lock+0x2c/0x110 [ 2456.660955] ___sys_sendmsg+0xf3/0x170 [ 2456.662007] ? sendmsg_copy_msghdr+0x160/0x160 [ 2456.663212] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2456.664499] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2456.665617] ? trace_hardirqs_on+0x5b/0x180 [ 2456.666740] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2456.667861] ? finish_task_switch+0x126/0x5d0 [ 2456.668962] ? finish_task_switch+0xef/0x5d0 [ 2456.670045] ? __switch_to+0x572/0xf70 [ 2456.671011] ? __switch_to_asm+0x3a/0x60 [ 2456.672011] ? __switch_to_asm+0x34/0x60 [ 2456.673132] ? __schedule+0x82c/0x1ea0 [ 2456.674314] ? io_schedule_timeout+0x140/0x140 [ 2456.675776] __sys_sendmmsg+0x195/0x470 [ 2456.676943] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2456.678037] ? lock_downgrade+0x6d0/0x6d0 [ 2456.679435] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2456.680715] ? wait_for_completion_io+0x270/0x270 [ 2456.681969] ? rcu_read_lock_any_held+0x75/0xa0 [ 2456.683094] ? vfs_write+0x354/0xa70 [ 2456.684122] ? fput_many+0x2f/0x1a0 [ 2456.685092] ? ksys_write+0x1a9/0x260 [ 2456.686075] ? __ia32_sys_read+0xb0/0xb0 [ 2456.687267] __x64_sys_sendmmsg+0x99/0x100 [ 2456.688382] do_syscall_64+0x33/0x40 [ 2456.689336] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2456.690571] RIP: 0033:0x7f1c4c8a5b19 [ 2456.691493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.695581] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2456.697400] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2456.699047] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2456.700696] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.702362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.703998] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:32:55 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000020000000c00018008000100", @ANYRES32=r1, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @phonet={0x23, 0x7, 0x7, 0x3}, @xdp={0x2c, 0x8, r1, 0x10}, @nfc={0x27, 0x0, 0x0, 0x5}, 0x1819, 0x0, 0x0, 0x0, 0x1, 0x0, 0x54c25869, 0x5, 0x3ff}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007340)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @local, 0x3ff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="9b247722f293399620ec37496cbfec4b0590b3d72a94bf3445a6c1b88099320f5dec0738", 0x24}, {&(0x7f0000000280)="ff6d5f472628e01ab02ce8635746915cc7c08d15fbaca9d4080d0a534bb589e725fa043c1729438ecbc7cb08bb55f0f3b7b21c49bbfd15e3ead8318ff2bee7c4b8dd2f942822792d26c1922f0f0374eb9755576c6a9bcdcc33381983955d1fd9e75efe7d6aa39f0ae69b04cd722d3619ecb3fdc7f9ff4c6c3772ade1d65a93c44d9ec2da18c1", 0x86}, {&(0x7f0000000340)="db00c98dc480628b02c78b8d8b7fe866fcccece059f9c5f4e21e3f2fc66be0f7610b9b5aa9ae1ad30501262777b3ac310d1d94d8d3eeb1a84685765c62f6cc977c39e5028a1ca40285e28373e8de93a1b2500fb59dde51acc15cdeb6294e7ed5b1890d925ac758c12c854b4ef9848fea319cff0dec86b0c0ff617e0c4efa453e0ebfcdadb5ec2b81fbc500e420708caa74857919bea4f5072c1a4325edef3b7ddfa2b8371b3579bbb07abe34ee5d6989115ce38fa406c20fa77c739f7e163777a01a5042ec846ccff8fda58874d9649eb7bd1d4ea53bd6e2048e45602c23dd48bd2ecd80", 0xe4}], 0x3, &(0x7f0000000480)=[@dstopts={{0x88, 0x29, 0x37, {0x8, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x80000001}, @enc_lim={0x4, 0x1, 0x5}, @pad1, @calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0x7, [0x0, 0x4, 0x8, 0x800, 0x80, 0xf1]}}, @ra, @hao={0xc9, 0x10, @private2}, @calipso={0x7, 0x10, {0x2, 0x2, 0x5, 0xfffd, [0x6c8a91e2]}}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}}}, @rthdrdstopts={{0x1038, 0x29, 0x37, {0x16, 0x203, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1, 0xd5b2, [0x6]}}, @generic={0x5, 0x1000, "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"}]}}}], 0x10e0}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001580)="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", 0xfd}, {&(0x7f0000001680)}, {&(0x7f00000016c0)="3433e72b9127a4e9e7720ac197be90d1d69b7436f28150868d08c02f0c12e90bdad84a76cd78bd18b69fe12d91b178b1a30dc6c016dcbcf1f97e207be9826c733ae6600aac29936f9ea52cbac2e08dfd06be87743533a6dfb4c05df267bc9b252213d12a08bb02196a088cc1ae03c9c276a5fef2a6e3243fbad605b652bb143e92034372d5941636d348d25ddac311c9f6292a348f7b59e5ce4841f1671d765c3833dadfdb4992dc4eb8cf7cedb272b991e9828194f5e793a34574185776df07580bc5fa6955e0884f956798b0fc2691add9cdcb3d02e23c4da6b4520d5359583e831ac228c526212a06999c870bfdd97d8be84a4d83ecfc4ce3d81e07ebd735d896fc144a7e8f8cbbbbde4f6a86b4ace5f07409ff3fec1d69c7c64677f24a934762f6c0a102cd320c8005d892f54a3c00a53a801749704c45703942313f32fb98022c2b823bbaf54cac1af754805cf2df484871f413d198b2a3462a266abf23cd09b9604a9cc4bf061312c2e37de7fa55d1ddae68ad1578ac0eee8f626d055d4c375e942667c13f787bd99ceef3f99583bfb6ff067df04b46f850d0d3d564f887c7fd0df9d8f20db52c51849622e4e391ad2d88a0d7169a4c879ff759e6ba911ca45e4eddef6b57bd050ecb2dd8b4b2d06340e800f255e86e5a6a35d3f280c50932958f74806b327d7152e40d3ddb3f7a1fd85eb1dc98409e68eab89949c729219a4ec5589912fba18176e7bdedd17fca16c9b6115fd5fe48184dfbc1db6c2bd548c8e53343c425be36dd359462ad3216781c02513b672b2145336dd3df04fb993493520aced73c2d80a0679fcabcc20653ec5b16f01fa6de7d7874c9790b9125c773d99898fcb90bbc65dde8b73c95bf4240ace29a2252c8c6421ed4cc89c1d39f48ab2625c6cc188e3b7f41db1ea86b13f77470e359bbbd99f7c21e5b67337be4ca62289aed8ef072b213b061d26ab70f3b3340a0b7a6ce131eb941324807f763d83544a3f081a2d8484efa23a930371b960432012f262ec3bc6186411746b513d5167d1729293041b844f9e5bc76ee3366240acd653a7bbe63ba018399147254feb4a744b9e7f86ee4d86a0c025813a41ce2bb3f2cb641169acd5e9df4298a9011330bf1e82494afb1fef7e76c1a05a31306e7168012cc7289ea88eebbebb5313a45c7775c9131bae2bb78d1b98287827fe1d6f7cb2420069ea75276009459026836daa57ddb61bccde3fa7d26f0819ad0721985b66680d203ddd0334b84f8b502e1afafcc2fd2cd9ed5141e0889670d1f5ff496710c3c51d06cbf74d6b7ab973f79af2bd9a567d8914c437b4d477cc455bf75fa329f31379dd97e70859f74717085cf055fbdb9e1d50137282d9dd9d41140e3591c9d8f9168abbbff81f66795afbd6cf340a7a2075faa5580d79a066b12db946d626f2281118c1a5edd443dec405ffcfcdb1a66cc43fadce6672bc29fdd9f8bbede066e98653ebe259e1ffd71f3f9d22697e9bc50e1c7a6124fc48ccb79112561da577ffee585f078ac764c9b3287865348fd841f579628642d350b8e8fec2260b8fbfa1c727c0440fadb1dd647d77be9f36da596ed5c9523f6cbab22b97996afa4c5f4afb88ebf67a9fb394a7f04b6deab759d5e07983f7e6662fd15b7541c16dbee74063b72b5181aa2befa602a2eccd39f8cddb86f377c36dd0b97f3556acfd1b722e04d5ac64e0c730ef09dee5872b33e5c97148590ba0644e1b41d5320f1572883fc00a9cec0e9013c21803766a926342bcb10a986daa8ec095f0920a0c5aefe419ac97e06bdb3537ed0ce3a7682fb52e2d495c2edecc99554781f81ffb4a3aa2d8586842d24ed5e8e9ad421427c3f81deb7e75f626855d53b947625fb014dc5ad78b16809bd5805d861e2f6284f8b0b983743df6aadee9ba9b2c03c55eb8dc4bce7d95819c179a08a09433630dc47b069def4dd8807990e8039b90217a79f34833f644cfa894d815bbc55c56b7ed43875a5adaf762c81af9e4d51671a37f077e826489086fa6a1c93375b7fcc79a80da857c2b4436f9ba2243edc3621f9f0f3a52b840be6381190e074cdcdfbe7ab3373f0c448d8ec3f8e0ddf63b7740ed934106074e5b8db3ffff9e496cc02ec202af522d114c8d74a500f5c8075ced8b56285fb38d01d5d92538448d9b94c796a16d7d2e60df954053017d48f4435a9222d897fad1332728c3e06c5feee865f715d8b0387bdac5bc2c633a0dbb77b5f19cf124663a25fe35ebd6aea51e2193ba9f0cc0c2307e8e0575e71ea3d76638bbead8ca9c35d3d48f12c88ea12bd393106f491ffe2b53e80ed3b3f67a8cef40fe2b649cf1db2022627978073338b29ae915c8565070a5e4a4ed94dd4cd7b2645d553365a2a9e2723a2cd4ad1d5d7ba633474963fbd70f4b43075ab22247ddf8474a2291bd3c6f43e4ab8786c1657201567968a9388192fdc03bcb299ee647d9fad9fe22c7f83af81e778d98de31a951f84769317f8b4631e3d3c14b038b3e2dddb95313095872de379094b6f86af41a177423f3e6b704c543b9dea779e43891e308df7242dac5b06c81320b4c2e8b6e8e77ec49e053ecd39b76ef223181edfde87f4598bac557d965cfee7b3d84161a193459a23f0ea7d07cf681c740bf1a8c73aeb8a968a29c49c33d62f3f25b3f95edda182216cb14907dd46a4a76c1171dcdb347a178310da2cdf7bd51488eb4b3391c06d302e7f1a58fb622bf6992e8d77743ed437cd10c7b74f263b2fcaf6cab2516e8b7a3a954b16bf4c800a0e2ac34827f05c6f98d7326d54ba7eee5855592734de801df95bcd8e4dcaf2316f2dffbf4aead6eee082a37c5e5e78085e59e351d822448fdbf5af303086c62af5fe5186966d9ddba87fafce3bd1746f2f042d8aea83ecf3e4d9f6c8869e4728a6a8a931951d6ec44a51a85de41b12b845992a3451a47ebb6c05989b95d6f3846c36f68f1df7df3984be1a0d38b05289ef1a0bff097d172aa0752cc8e76b5b6828a61917031940d3f30e480f5b54b1f52e576b13de12bd70a3837ec9cc4aaabf835a5c1b8b67212f359e23d645e30ba395f271e239673701d42f6c9cf3121cb0cc034b6503a307d1d38e627916664c7dd9b26a3767414af73eb5f01f16c01178a62e81895fde174fd777dd3d42473692c8475cca3cb8f03f25d65820a9942227bc4d653bdd7ead9ed0fb81f425cd3e25bd99dc901ccf4fddf83eccf256ab334684859fb8a50f7c6f2d031952fd7b579b02b06185fa2dac5a4c9d34df43e6f398ed0f88a22d149fbfbad9184080fe0a5d7fc6bd10c81fb1f6de792eab1997b5001dc239d7d334d0fd3f1c8680146e63d79e02567b06b00fd7ede8dd58494c618b3cd2f8e6953aaeacb1cd59a6d132dbe1176a4891594358ac43406283ad46cb4f39b7759ba0d536ea1dff8a46ddedff6ca73a43439a5006276e03d8db44380723c175d1f9d793f3e45752c5c99bdbc5f4f22da5deaa9dc7f8bb519632e132da586f8179a422f2d7d521035123f54500362c9f8c5f2be1ff8300217ebb83e7eea3a4392438ffb7cf734f0002379c7ea8ab130881f6fc4bafdc1deb547d5751c3d7534b1050cff0061dedc0f61c1991dbfe3c4f37f0273189b6047919d89e7d8665c6c5f88876569c45317f0b889ac2d44cee4736bd80ae31981a8868650b72307a8a7e8607fb9e0d917882f58c0a92a01459001412fa18c3acf3ef4cb706da9859d5ef88ece8a38cb8579cb61829bdbc908f6a5de36a812e9285a795df44185a818ac19cddafc708a2fdeb9d479ebffe11e964ecc73f1f91a3efb59a1f1cd1716ba39eca603b79898ae58810108b97c1f73ecd75da76eebe935a841aac35f643ee9a0c45a9f8ea70ba060360f186922809afda9458b6e0627b589fcd1d6e9f05839088ba18c74d11352224f7c49e8e8a8496151b5ea036b9a4a2bb9cf549b82f74ae5e6d849a041c826a80646ae4a4ce9c89bd8378911ae845d2dde00cdd2a09812cbed897ce3e80612ee2b65c1fd5104ead229035416696c21b8a9fb41cbcea90995382133b2d4c01949c7c8d324997ee13660fa2d74b7b06d045744b383ed8249af8b9ba227687f1af0c414a325d759a093774821995fdd9558b7bf9fe1c56aaa0180c8af70a40e86c9de816de4f75da4848d164fc60bee71b2c96b7de54bf1cd4233bbffb101cd1bf7636ae8d80a80f6ef91ad0114b517673c2e0595dec22fec937b30a15249a6f61b32aebdf10d85b59e39d9fec5096b3fb68860e3752e261c02575352eedcb7f7ae2e6ab0b6d0cadbdd3cc5569cd747f38faff3cfca6b24cf9670ff3f1931b10f6688538d00fac22a2543d172261fcd7d300b3469dbefc3d1e0361a66a69ef09492401d552dd613621b91e0478cec28182ad9d39440d78b487d15b8fec11dae5c21ec13b33c567fd991b497f5eeb0a6aece81ad4def621eb3a24b7de92de6868c7c7628edc133c1473d1e9e0ebab2d8c6bc9e4dfc8b8c33b6001c0ebd9b6da2f58601316bcd26944f1d6d68c3829a25b70d403f4890fc90059ce50cc020af2376911b9a1497f68191ce83536d8bfbc0fc00c2d3c8925d97efef6e602739d03a81329da09171a7db268271a1e8b43b72017f6936f033a92631cf5c04c66f5f2949f99af25ce3664ccc5acecb554bf91bb351502027c7cd9b04b873408cef2585908480b8bd3bd9df1196e4185e1af2776951015ba2f14fd472ee7fd3502931b02db34f23ad9c6c8ac17b35c1886cde548a916426f755861f1bedcd2e5518a03e5a57a713cc8cf910ecaa330fbc6a5b57da15f140af3623a165c069fe3837a6d74ea5153fe78ad93aba8bd9c48f97b233a46a7d33fb8e69569d34c69b71f6b0d5c6e212603b4d806705ef03701516f79f6b9f81530d2a663039874ea12ba852b37f8ed62353d20fedc67687027177d10c37cde5df1df21a30212d5a257ad60b06b1b01565f9afec0e2b573790098707758338f23d9266dc41ecb74b21228cc2b24be000d71be7914daabee59bcac24dc0ec136508e7a8e5238ef016ce7c5719051316bc48f83258b47aa655846531f69cb1ce8a26878f6bc6728cd7856aa7c1f892ac0fcf4ca0770562acb86e9869947176b6243298dbb2788d18de88a06524c5f2b8fc14ddd82051ec58b313bb2c6093be0a5b76ee27b1b8b75d996228fe1b6ace52698e519a085dc6a991dc144805241759e97f0bd74ebb1ae0a6307b2e8846c5f487d261c1a1cb622f151e286e1ec900a0b5b6a112c8d8e42ba7f23132b553b147b3348f63aa4fc1ee1f448fdc4ef182012c1412b5f0c38011e47030680e6d88adf6c39051c3617d4fbb58e03daec1c35ffe01f185e3a21e4765e53b772a0cfb947a5dfab8fb2b6f4a101eb3ccb279bf8c1f49681877a6ea8fbbb5cc69f5b461f7ad79a0de3a86e21253744a78180505e5fa84db55ca38a3d9068cbe456c77cf4f7f2b982f5a8258f42eb049a629d377fbd2f002e5c6b8d4ceb17eddf782ee6b01b881260f187ed35be423d4a980d82752d923dc9b63250a6fa93ff2d0b201284eb308a2b806c35f9b75f78d2b7584bbdfae0c7f917e8b3c467cf205560832e7667d870b6852002640a23ead497302e83a1b7f37e7e0cdb92f5d6a36c89c7920b7c482439a23b573273b545c9c9a8f79b298527ab30500002bdc578c36b39da69731139eebe0ab4f59e67407e29bb2d805d1e25209a860a643eb3d4f911375b3d5b0395f81fce99111b78b0c330685ac8ce7878860f934a2adeb3bb7067021f885af632b77f", 0x1000}, {&(0x7f00000026c0)="1923d2dad762d8247c6bb7bcb1e6ba44c37ce4a458ed9c52b5bf424b753f59fdb791003c5baefb0b18d0192746137499415514d0c5865b378c2fee794337167ba6a8c412bb87ef1c01a902a0b22977efa1a608aedbea3fee39bc156255fedcb6fe40e61f96d63cfa2753a881e8e89403720e0af5f140820cb9efabcf6a6e137e4b5155b99c77ef90ba91652cde0ef2904d952a3c21f75bbd44ee9475839dd166c330896976c5a737c2ea2a9f552eb031c99545277f758e1d330e9fc8300cbb9a207f0af816acae780164ceadd970b9be59a51a280396", 0xd6}], 0x4, &(0x7f0000002800)=[@hopopts_2292={{0x80, 0x29, 0x36, {0x2e, 0xc, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @pad1, @enc_lim={0x4, 0x1, 0x4c}, @pad1, @ra={0x5, 0x2, 0x2}, @generic={0x0, 0x2a, "0bb12c1e27b080607f2232499b2291c3b766001e1c2952c0afecb791b670d4f3c8bbb6f95180bf917423"}, @ra]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0x1}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x2b, 0xb, '\x00', [@calipso={0x7, 0x50, {0x3, 0x12, 0x7f, 0x101, [0x400, 0x9, 0xfffffffffffffffa, 0x4000000040000000, 0x1, 0x5, 0x4, 0x6, 0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2b, 0x4, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @jumbo]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x20}}], 0x198}}, {{&(0x7f00000029c0)={0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000002d00)=[{&(0x7f0000002a00)="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", 0xfc}, {&(0x7f0000002b00)="f46bc58371e510cefe94a08e9a779a36593c02d7eb78aac97226c3621c74bef970e26bd4dda7b79ffa62c16d22590c7f9ba8b5ef5ea9c16785561d7fa6ce5cc2038a24b06ea8da5c55e5ae0ea91a4dfe88c9132e3bb4faecf1abbec52eeefb8f01c868b3eafb12316450553605a981889ee928632dce12f7145b03f9e319a485323338544a44b38952a58172397dd3e7e6e5590bef4c29dba897ed50460e79d7fe78044a327536f09de640d5a7155f5c9df6b3ffb8da45814c3186b95f609acb1c199b67b0d2357a587ed42f38fd4791e2ab5424cfdb81afe219bab342e6bee23fce", 0xe2}, {&(0x7f0000002c00)="6f1f9f26131f63aa6315c0b9eefc3f94c46b00b5c6ccc8e3cba56668e6f527282cb7d8ebec85f3a80d311ec90836fa7052bbaef80c0c777d111f07c982fc4213a496b2046ae1c1f955a58de1f30a75eda9990e53c6a57240ad38cec93f153d3fe0620d0f599aea7a6a2cf14c8cd4b618bbbe8668e00d169eeb814a7e54fc9c2c36bdb29cd57ce12e6fc2660c46", 0x8d}, {&(0x7f0000002cc0)="5c1666ff", 0x4}], 0x4, &(0x7f0000002d40)=[@rthdr={{0x78, 0x29, 0x39, {0x6, 0xc, 0x2, 0x40, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2e}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast1, @mcast2, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1ff}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x29, 0xc, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x80}, @generic={0xd7, 0x50, "db4a5f80232eac2cc309cb1906789f2cea7727137744cbc06d199e8adff8590deb0741a17c9a84b7c457b74b20eb494e7afc9c1799b33f5b8601152014401dd3cbb92cdbe2ef564bde3364f28502fe9f"}]}}}], 0x110}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002e80)="13b10bab271aff775ad76096b3c6a481588df9b8e349b13dd7f8f254dd426855a092e2b792322907163e8f80828bca1be6f37b52d1bb83a5c56f5695e3ddf65b4c205c110f469c2989bd1a086ea78d3922db87812ce814d6002fd860389856ed693348771bc926bbfb11c8c1ae487325c8bedc96bf628d5286562361ade57029ffabf2275d4e9fde64994f343d2f20c80f0ff17f2428b4610000729d98d54a3e6dfb5dfaec4b96a0e76468e14b99eebf8e4e9d92ee54cce866c6acdf43429ac8b4df5ffb5e165e", 0xc7}, {&(0x7f0000002f80)="d16be961914b2cb1a6c6258ed608d402a5d85787aff671822fc9a1eac156dbe635bbd1432cf810dc523a00cdfa5ac1690552728c3c7cbb7365799a15c4ba7c561d5e7b02763a59f65c5fd0f7f681263df01b4af6ac6363975c6bc370b9d1dcfe0b11b887a57d155a80dff727f79407cc045c48655670814ed97079f9e73a7eb15cdc888cea287a1629930c809857d782c9267fecb8ad40ec5d83c33f8dab890499b92232eefc7a4a2652ed0872bfca4fd76e34eef5abf391fdf1d4fe43ef5f96afbd4b274f9c1a4b37c6de760a5d65cc7a5c4bdc1ba1138e63ed1c515e71139dd5ee7fc7440da47a414978f0a8ad06e6a5", 0xf1}], 0x2, &(0x7f00000030c0)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x33, 0x3, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @jumbo={0xc2, 0x4, 0x7f}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x6, 0x5, '\x00', [@hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0x5}, @hao={0xc9, 0x10, @private0}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x118}}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003200)="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", 0xfb}, {&(0x7f0000003300)="6fc8077adb47f15a9055b8d2b7a6033e73f3a18d3588c0b8c45234eb9cb96cbd02b44af290ff783b37e95511cceb55494bc12bd65c63fa66297d6d26f8bd73a60f2121d91b5328b8783df7667828cab5acf435e59147a48c1e311f536373", 0x5e}, {&(0x7f0000003380)="a898a668b286465963af8c11fea0079de90f3cf9e07dab175502b618bf4f6f8c2978e05dc8949122babb92b31f866afdb3e60a69c8a6d27616e4a654d5bc875729db1ed3cf63dcb1623ba5204075d12ff76740df64845e77f4963ddc42cb1a7d3ccec0dadc46f23090a29556c7208d53cb23e9be5f98efa650b6d0093ba23440108b52351e19ed023fba31cf35658c7d4de632769885a9d76fcc6545aa4301c0474ae982d442a1744d6542fe0726ad8e2654466c3e65947e19760f451c181ab10c9b3454c22aa5887728801f361f164905", 0xd1}, {&(0x7f0000003480)="bfa039a99fe41d12db3433f5c529a50f33a0a611c731d1f88e785c4f8d9e516cbce18b9fdf0b3cd86b6e0bb0730430cf4137f41b307552102a04cba2fa96ad5d4c0e8966af5e57b5623985e03945a53b05489114ebdb33", 0x57}, {&(0x7f0000003500)="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", 0x1000}, {&(0x7f0000004500)="ccdc0dc7a0931c57fb63d7dc10b80430418d7038f4b2e041bb3c011377d6bca5bf329dc3b1c9b619a2cfd55b38e14d6c0da77f2972cb4ca8d674c58da44fcc5511b78405d906545be61e1bf5535629768e3354289ef19bf3", 0x58}, {&(0x7f0000004580)="20338a96477ab7de37c0dd40cae9f4f9801e129bf3918dda6414d4bf96ca9a7658cb56b11723c567c1a08b07ce816f0bb33d52460ca485c283225dc7bc435fcc03bb75b89c1149cc929dbcfc3b31a47f86", 0x51}], 0x7}}, {{&(0x7f0000004680)={0xa, 0x4e23, 0xffffff58, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xa4e}, 0x1c, &(0x7f0000006980)=[{&(0x7f00000046c0)="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", 0x1000}, {&(0x7f00000056c0)="182ea55c32e63a97616ea7e6fee0adf7704b153a9aa1da6d8f7ef52bff0e1e740a55facad7ea", 0x26}, {&(0x7f0000005700)="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", 0x1000}, {&(0x7f0000006700)="f4396f316e57e022590c036d2e76dddefd085ac0b9b7e07f1b01c8e722e1244a81971b718ed3c03326c6b842e146f183decdb1c2e519a205ad99fa0b9ea32ec15a01e471e48799ff5cffe9b7981f2acdbb59c344f89ffdc8954ae71cf4258574030a7e7bfd74df8d6c039d399107840d3dd4141e9f927ddcd967bdaeae4e55c3ff800f8537bf38f972853efeb7eacb4b5ba4242c50dba346c4a513ebbd652a4ea46a7933f14baa62b357800b221b1d", 0xaf}, {&(0x7f00000067c0)="73b3d3e5fb10833120d4a3a887483d24111f23e3b9b6aa7b5fed92abe2f5a06817fa3012c6732a9908bd48f448766524c8094b7943b01b6d6048cc419dbf20ab7f8963516cfd7130804f763f434d2e99fe2b1e3f539ddf925cfd56eba0bea0c4e86d509389e22cd786471dd2bb03763ba257cccc3a1352572802fe6cc9bb9d38b83d622ac477020d152589093f", 0x8d}, {&(0x7f0000006880)="aebfa7530f7220fdc89eefe834a05cb130312f33d8fc", 0x16}, {&(0x7f00000068c0)="27a06b97e6cc442b229d42b2f22f18fc7cc089b3a4e57820141e60816a23071cca24d3b006ca11a94f33534e7efeb678c4f65adb9d387265dc62268ae67617b5eb59f514092b613ead5513130b6194d6e7d71731b7e4c5a1a986bec89382b47aa625d3cfd0daeaa02661dd34feb5aba920ca13b576b5089feaffef9b4147af97a9d568", 0x83}], 0x7, &(0x7f0000006a00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1, r1}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}], 0x40}}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006a40)="796fe010ecd9630ce13da6294e8e5a7d8f69a6e1751cfc0ed35c6a3c04f34fde9b9e1113", 0x24}, {&(0x7f0000006a80)="cba7503ee85418a7fd5d4d1cc7bfc199903b968e3f61596ac388554cb93172b8a3560da73bf65c80dd1b2dee201a0993ceba5f765b349e4f67546deb401c77f1bd81ae15acdecaca2482aa527d2a7b247270d9c078479609ce28e81b1d1921efa1c170a548fb8dd1cd196e8c9f7ae6c1813257dd34ab62abe9fe74ad2be69e55137ef37f9c53daa9eb0234adae493fefbc4283c57c98e19fa2a4142883783a4c170f39d90fac4036e0eeadb74d067757bf46b3eb5b13116a1e70", 0xba}, {&(0x7f0000006b40)="45dc5ee150ec1f871f681929bc00f1efa1dcc3e945f82a9b557229be361a2d5f94b80fb198d8c161aaff17e63447760b5a8e9c625e9d0d9e7c61cd92e3c929a2b0405260db0f262898de5d", 0x4b}, {&(0x7f0000006bc0)="b5b0c9dc13b596fd4364aa5036bf437b539123f615e0fafdcb05921fe9125f49f8e5818b4fa92cc3f5694762381af1798746e549aef156df3b50a74eeaeebb19ca8826f9537d5eaa6da995e7ec075342701833d1acffa362ddf62e461d4a", 0x5e}, {&(0x7f0000006c40)="3fd66e4a3e7ae9a0d8e9848fd24f28369b43053e11bd90a5938aa6fdb55a4131ce29d9fda1026bd67446acfcd5056a182ffcb1b4ab8f0002c047589d3785f37bfba9bb4cc5f78f29d256b44f50d79a7e2184a6c782e4ad208cb08543ae1b6c358acd2ff87b6024e7df932c12af1bb2500a7cd375d9d38d94805e38466a81f06464b4457c0e5e8f26016daeaf175b9e611320eb09de54bad2d1106d966afdce9300075319dd9a4c0105281861226a435ed69f1db746454e66f284346f2a00dd3aadeb08ef573cfc697afa114363813f5ae5bfe49730e7d2ec43f7a1df", 0xdc}, {&(0x7f0000006d40)="5bfd63e258824ec11c4043f72c858dcc2d5507e0c5fbcd9d92c2c23ce54a546f0930d9cd62e89532a13f509809a69fe2220db18f11a04c222597356a61abff3d4850a5d7d4f87034ebd932da0e522245814d461b967f4f1717b53e10d17f7f58e843aa202324854f784a565026c620a010951d995d0d369cd8255f288268be6439f8084628fad9c1e1cbef5b6e4122c8981b282342766fdf", 0x98}, {&(0x7f0000006e00)="3c1814e3c86199496b90b85d980a2d62fedaea7ea973dd9f015d8b48379ed242a38e9dc413ec688b78ab4f913f15e5e27a8c06050c19d9dd653469c9b9d4206e41411e225b3300b26206fc3f70e9bc64aef3a5442d3dce66faba8730fe5e137911f778aaf74ab4745c46f6cef47168a5c434c392ad3a0b3db542349175eab41ea0511be4427df6311a955bf811013d12f8fc29c5a8012d27eead5ce66137345e3aab68ef98c8a39900383d64418b6df96e84532487842e9a54c9", 0xba}], 0x7, &(0x7f0000006f40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x50000}]}}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x2b, 0x1, '\x00', [@ra={0x5, 0x2, 0x20}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0xb8}}, {{&(0x7f0000007000)={0xa, 0x4e23, 0xffff, @private1, 0x7}, 0x1c, &(0x7f0000007100)=[{&(0x7f0000007040)="5f585186ff3560def9a41d99ebc7541b720af58791f466374335700e52fa8ffdb2ccc56a2528a7733a96e708d5e1958db099684d80f15dd07265b0d3283cd98ad3f148f5ab187496a992f214e20918175600ccc2282852170c0b6ba07d3a9ab0a0c582d63c2f319125ad425f5792dd80927a12cd80c3bb5f42191d14e960dba95f0386728223fc06ff55ec351646ea584fdb3145a29d2da7497d8887303120105085820ed83608eb8084e710f2d717ecf4ecc78a54a25596", 0xb8}], 0x1, &(0x7f0000007140)=ANY=[@ANYBLOB="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"/504], 0x1f8}}], 0x8, 0x4) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1bd3, &(0x7f0000000000)={0x0, 0x18de, 0x8, 0x0, 0x302, 0x0, r2}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:32:55 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='xfs\x00', 0x200850, &(0x7f0000000280)='ext4\x00') [ 2457.030197] audit: type=1326 audit(1703709175.167:109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=43086 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29d79d7b19 code=0x0 20:32:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x305f) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:32:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 41) 20:32:55 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x3f00) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2457.366454] FAULT_INJECTION: forcing a failure. [ 2457.366454] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.368246] CPU: 1 PID: 43306 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2457.369303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.370548] Call Trace: [ 2457.370955] dump_stack+0x107/0x167 [ 2457.371511] should_fail.cold+0x5/0xa [ 2457.372088] ? create_object.isra.0+0x3a/0xa20 [ 2457.372787] should_failslab+0x5/0x20 [ 2457.373391] kmem_cache_alloc+0x5b/0x310 [ 2457.374018] create_object.isra.0+0x3a/0xa20 [ 2457.374695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2457.375486] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2457.376278] ? alloc_skb_with_frags+0x92/0x570 [ 2457.377006] __alloc_skb+0xb1/0x5b0 [ 2457.377583] alloc_skb_with_frags+0x92/0x570 [ 2457.378288] sock_alloc_send_pskb+0x7af/0x930 [ 2457.378998] ? sk_alloc+0x350/0x350 [ 2457.379578] ? perf_trace_lock+0xac/0x490 [ 2457.380225] ? SOFTIRQ_verbose+0x10/0x10 [ 2457.380882] __ip_append_data+0x1628/0x3310 [ 2457.381539] ? fib_select_path+0x95d/0x1e90 [ 2457.382201] ? __lockdep_reset_lock+0x180/0x180 [ 2457.383030] ? ip_frag_init+0x350/0x350 [ 2457.383669] ? ip_finish_output+0x330/0x330 [ 2457.384313] ? ip_route_output_key_hash+0x1a4/0x340 [ 2457.385101] ? ipv4_mtu+0x1ed/0x2c0 [ 2457.385654] ip_make_skb+0x22a/0x2a0 [ 2457.386241] ? ip_frag_init+0x350/0x350 [ 2457.386864] ? ip_flush_pending_frames+0x20/0x20 [ 2457.387610] ? lock_downgrade+0x6d0/0x6d0 [ 2457.388263] ? xfrm_lookup_route+0x65/0x210 [ 2457.388956] udp_sendmsg+0x193f/0x2170 [ 2457.389569] ? ip_frag_init+0x350/0x350 [ 2457.390201] ? udp_setsockopt+0xc0/0xc0 [ 2457.390820] ? mark_lock+0xf5/0x2df0 [ 2457.391415] ? mark_lock+0xf5/0x2df0 [ 2457.391982] ? lock_chain_count+0x20/0x20 [ 2457.392633] ? lock_chain_count+0x20/0x20 [ 2457.393269] ? __lockdep_reset_lock+0x180/0x180 [ 2457.394010] ? __lock_acquire+0x1657/0x5b00 [ 2457.394687] udpv6_sendmsg+0x1b4e/0x2af0 [ 2457.395322] ? __lock_acquire+0x1657/0x5b00 [ 2457.396003] ? udp_v6_push_pending_frames+0x360/0x360 [ 2457.396805] ? __lockdep_reset_lock+0x180/0x180 [ 2457.397549] ? __lockdep_reset_lock+0x180/0x180 [ 2457.398288] ? lock_acquire+0x197/0x470 [ 2457.398906] ? find_held_lock+0x2c/0x110 [ 2457.399539] ? __might_fault+0xd3/0x180 [ 2457.400144] ? lock_downgrade+0x6d0/0x6d0 [ 2457.400791] ? sock_has_perm+0x1ea/0x280 [ 2457.401445] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2457.402265] ? __import_iovec+0x458/0x590 [ 2457.402906] ? udp_v6_push_pending_frames+0x360/0x360 [ 2457.403714] inet6_sendmsg+0x105/0x140 [ 2457.404319] ? inet6_compat_ioctl+0x320/0x320 [ 2457.405021] __sock_sendmsg+0xf2/0x190 [ 2457.405626] ____sys_sendmsg+0x334/0x870 [ 2457.406262] ? sock_write_iter+0x3d0/0x3d0 [ 2457.406913] ? do_recvmmsg+0x6d0/0x6d0 [ 2457.407518] ? __lock_acquire+0x1657/0x5b00 [ 2457.408203] ___sys_sendmsg+0xf3/0x170 [ 2457.408884] ? sendmsg_copy_msghdr+0x160/0x160 [ 2457.409653] ? vmacache_find+0x55/0x2a0 [ 2457.410275] ? __lockdep_reset_lock+0x180/0x180 [ 2457.411001] ? lock_acquire+0x197/0x470 [ 2457.411614] ? find_held_lock+0x2c/0x110 [ 2457.412254] ? __might_fault+0xd3/0x180 [ 2457.412879] ? lock_downgrade+0x6d0/0x6d0 [ 2457.413526] ? asm_exc_page_fault+0x1e/0x30 [ 2457.414220] __sys_sendmmsg+0x195/0x470 [ 2457.414852] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2457.415535] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.416356] ? finish_task_switch+0x127/0x5d0 [ 2457.417068] ? __switch_to_asm+0x34/0x60 [ 2457.417701] ? __schedule+0x82c/0x1ea0 [ 2457.418321] ? io_schedule_timeout+0x140/0x140 [ 2457.419035] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2457.419884] ? ksys_write+0x1a9/0x260 [ 2457.420489] __x64_sys_sendmmsg+0x99/0x100 [ 2457.421169] do_syscall_64+0x33/0x40 [ 2457.421750] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.422549] RIP: 0033:0x7f1c4c8a5b19 [ 2457.423129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.425996] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2457.427179] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2457.428264] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2457.429384] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.430493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.431601] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:33:24 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x5505) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:33:24 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:33:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:33:24 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 42) 20:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x80, &(0x7f0000000340)=[0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0], 0xa}, 0x401) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x4}, 0x9) r5 = epoll_create(0x9) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='net/kcm\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x20000001}) r7 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r7, &(0x7f00000000c0)={0x20000300}) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000240)) r8 = fork() r9 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r8, 0x4, 0xffffffffffffffff, r9) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000200)={0x4, 0x3, 0x8, 0x9, 0x7}) io_uring_enter(r1, 0x4eae, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x4, 0x7, 0x7e, 0x0, 0xfffffffffffffff8, 0x401, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp, 0x2040, 0x7fff, 0xffd, 0x0, 0x80000001, 0x1e11, 0xb9, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 20:33:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x80) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESHEX=r0, @ANYRESDEC, @ANYBLOB="a99c76d316149599336120081b4e5def127f6ae72dbce226cad6a9c0564ce5dbdba126b533307616c7bb70c85cfedb03a2cd0271fae7"], 0xfdef) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x3, 0x3, 0x8000008000) 20:33:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000000c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) r3 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1f, 0x0, 0x80, 0x0, 0x0, 0x9, 0x28000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x3}, 0x80, 0x4bd, 0x6, 0x3, 0x7d0e9dee, 0x6, 0x200, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x8) add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$link(0x8, r4, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) statx(r2, &(0x7f0000000300)='./file0\x00', 0x6000, 0x2, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x1, 0x4, 0x9, 0x0, 0x10000, 0x2, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0xb2ee27b58926fed9, @perf_bp={&(0x7f0000000440), 0x8}, 0x5400, 0x1, 0x8, 0x6, 0x5, 0x10000, 0xb65f, 0x0, 0xca, 0x0, 0x3}, 0x0, 0x1, r6, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/ip_vs_stats\x00') perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x5, 0x2, 0x0, 0xb5, 0x0, 0x10001, 0x840, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000540), 0x6}, 0x101, 0x1000, 0x4, 0x3, 0x8, 0xcc, 0xfffd, 0x0, 0xd929, 0x0, 0x4}, 0x0, 0xe, r7, 0x2) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c0119000000000000190000000000000000ed000000000000ed6600170000000000001700080000000008007809140b2a3a080200000100000101015252050181505824016d4100000000416d020000000000000200000000", 0xc7, 0xb800}], 0x0, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp861'}}]}) 20:33:24 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x6a9c, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = socket$netlink(0x10, 0x3, 0x8) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2486.412708] udc-core: couldn't find an available UDC or it's busy [ 2486.414277] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2486.466570] FAULT_INJECTION: forcing a failure. [ 2486.466570] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.469083] CPU: 0 PID: 43717 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2486.470617] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2486.472392] Call Trace: [ 2486.473051] dump_stack+0x107/0x167 [ 2486.473993] should_fail.cold+0x5/0xa [ 2486.474932] ? dst_alloc+0x9e/0x610 [ 2486.475829] should_failslab+0x5/0x20 [ 2486.476707] kmem_cache_alloc+0x5b/0x310 [ 2486.477805] dst_alloc+0x9e/0x610 [ 2486.478768] rt_dst_alloc+0x73/0x440 [ 2486.479720] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2486.481129] ip_route_output_key_hash+0x18d/0x340 [ 2486.482258] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2486.483645] ? mark_lock+0xf5/0x2df0 [ 2486.484517] ? perf_swevent_event+0x491/0x550 [ 2486.485742] ip_route_output_flow+0x23/0x150 [ 2486.486826] ip_tunnel_xmit+0x70e/0x2f50 [ 2486.487902] ? perf_event_switch_output+0x790/0x7d0 [ 2486.489143] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2486.490191] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2486.491796] sit_tunnel_xmit+0xef0/0x2960 [ 2486.492984] ? ipip_rcv+0x4f0/0x4f0 [ 2486.493884] ? skb_crc32c_csum_help+0x80/0x80 [ 2486.494939] ? lock_acquire+0x197/0x470 [ 2486.495865] ? __dev_queue_xmit+0x1c2/0x2710 [ 2486.497052] ? netif_skb_features+0x536/0xa00 [ 2486.498201] dev_hard_start_xmit+0x1cb/0x6f0 [ 2486.499428] __dev_queue_xmit+0x17ec/0x2710 [ 2486.500570] ? find_held_lock+0x2c/0x110 [ 2486.501589] ? netdev_core_pick_tx+0x2f0/0x2f0 20:33:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2486.502725] ? lock_downgrade+0x6d0/0x6d0 [ 2486.503881] ? lock_acquire+0x197/0x470 [ 2486.504809] ? ip_finish_output2+0x220/0x21f0 [ 2486.505970] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2486.507262] neigh_connected_output+0x382/0x4d0 [ 2486.508596] ip_finish_output2+0x6f1/0x21f0 [ 2486.509687] ? nf_hook_slow+0xfc/0x1e0 [ 2486.510661] ? ip_frag_next+0x9e0/0x9e0 [ 2486.511619] ? nf_hook+0x160/0x510 [ 2486.512504] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2486.513776] __ip_finish_output.part.0+0x5f3/0xb50 [ 2486.514967] ? ip_fragment.constprop.0+0x240/0x240 [ 2486.516058] ? nf_hook+0x510/0x510 [ 2486.517145] ip_output+0x2f7/0x600 [ 2486.518130] ip_send_skb+0xdd/0x260 [ 2486.519086] udp_send_skb+0x6da/0x11d0 [ 2486.520239] udp_sendmsg+0x197f/0x2170 [ 2486.521288] ? ip_frag_init+0x350/0x350 [ 2486.522402] ? udp_setsockopt+0xc0/0xc0 [ 2486.523392] ? perf_event_switch_output+0x7d0/0x7d0 [ 2486.524634] ? __lockdep_reset_lock+0x180/0x180 [ 2486.525861] ? mark_lock+0xf5/0x2df0 [ 2486.526752] ? find_held_lock+0x2c/0x110 [ 2486.527835] ? perf_event_output_forward+0x13f/0x2c0 [ 2486.528999] ? lock_downgrade+0x6d0/0x6d0 [ 2486.530434] udpv6_sendmsg+0x1b4e/0x2af0 [ 2486.531433] ? __lock_acquire+0x1657/0x5b00 [ 2486.532642] ? udp_v6_push_pending_frames+0x360/0x360 [ 2486.534085] ? __lockdep_reset_lock+0x180/0x180 [ 2486.535323] ? lock_acquire+0x197/0x470 [ 2486.536245] ? find_held_lock+0x2c/0x110 [ 2486.537331] ? __might_fault+0xd3/0x180 [ 2486.538280] ? lock_downgrade+0x6d0/0x6d0 [ 2486.539239] ? perf_event_switch_output+0x7d0/0x7d0 [ 2486.540347] ? lock_chain_count+0x20/0x20 [ 2486.541349] ? sock_has_perm+0x1ea/0x280 [ 2486.542331] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2486.543915] ? __import_iovec+0x458/0x590 [ 2486.544892] ? udp_v6_push_pending_frames+0x360/0x360 [ 2486.546163] inet6_sendmsg+0x105/0x140 [ 2486.547094] ? inet6_compat_ioctl+0x320/0x320 [ 2486.548124] __sock_sendmsg+0xf2/0x190 [ 2486.549091] ____sys_sendmsg+0x334/0x870 [ 2486.550148] ? sock_write_iter+0x3d0/0x3d0 [ 2486.551109] ? do_recvmmsg+0x6d0/0x6d0 [ 2486.552094] ? __lock_acquire+0x1657/0x5b00 [ 2486.553378] ___sys_sendmsg+0xf3/0x170 [ 2486.554354] ? sendmsg_copy_msghdr+0x160/0x160 [ 2486.555495] ? __lockdep_reset_lock+0x180/0x180 [ 2486.556543] ? trace_hardirqs_on+0x5b/0x180 [ 2486.557692] ? lock_acquire+0x197/0x470 [ 2486.558620] ? find_held_lock+0x2c/0x110 [ 2486.559697] ? __might_fault+0xd3/0x180 [ 2486.560645] ? lock_downgrade+0x6d0/0x6d0 [ 2486.561679] ? io_schedule_timeout+0x140/0x140 [ 2486.563055] __sys_sendmmsg+0x195/0x470 [ 2486.564113] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2486.565128] ? lock_downgrade+0x6d0/0x6d0 [ 2486.566440] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2486.567637] ? wait_for_completion_io+0x270/0x270 [ 2486.568791] ? rcu_read_lock_any_held+0x75/0xa0 [ 2486.569851] ? vfs_write+0x354/0xa70 [ 2486.570800] ? fput_many+0x2f/0x1a0 [ 2486.571698] ? ksys_write+0x1a9/0x260 [ 2486.572611] ? __ia32_sys_read+0xb0/0xb0 [ 2486.573735] __x64_sys_sendmmsg+0x99/0x100 [ 2486.574774] do_syscall_64+0x33/0x40 [ 2486.575656] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2486.576791] RIP: 0033:0x7f1c4c8a5b19 [ 2486.577665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2486.581486] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2486.583182] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2486.584725] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2486.586278] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2486.587827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2486.589388] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:33:24 executing program 5: ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100ec0001000000181d1a", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000100ffffffff2e2f66696c653000"]) r1 = openat(r0, &(0x7f0000000280)='./file0\x00', 0x54983, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000740)='./file0\x00', 0x2, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6ae, 0x0, 0x0, 0x1200000, &(0x7f0000000140)=ANY=[@ANYBLOB='0000000000000000000000000000000,user.incfasure,\x00']) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000200), 0x18) getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getspdinfo={0x14, 0x25, 0x400, 0x70bd29, 0x25dfdbfe, 0x6, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x81) setxattr$incfs_id(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)={'0000000000000000000000000000000', 0x31}, 0x20, 0x0) umount2(0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000240)=0x6) r4 = openat(r2, &(0x7f0000000180)='./file0\x00', 0x82040, 0x81) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x3, 0x9, 0x7, 0x1, 0x0, 0x4c8a, 0x800, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x5}, 0x41004, 0xffffffff, 0x725, 0x4, 0x1, 0x4, 0x39d7, 0x0, 0x6}, 0x0, 0xc, r4, 0xa) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000100)={0xfffffff9, 0x100000000, 0x1, 0xfd5, 0x8, 0xfff}) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 20:33:25 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:33:25 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 43) [ 2487.135514] FAULT_INJECTION: forcing a failure. [ 2487.135514] name failslab, interval 1, probability 0, space 0, times 0 [ 2487.137860] CPU: 1 PID: 44138 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2487.139292] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2487.140990] Call Trace: [ 2487.141552] dump_stack+0x107/0x167 [ 2487.142309] should_fail.cold+0x5/0xa [ 2487.143091] ? create_object.isra.0+0x3a/0xa20 [ 2487.144028] should_failslab+0x5/0x20 [ 2487.144801] kmem_cache_alloc+0x5b/0x310 [ 2487.145658] create_object.isra.0+0x3a/0xa20 [ 2487.146568] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2487.147618] kmem_cache_alloc+0x159/0x310 [ 2487.148477] dst_alloc+0x9e/0x610 [ 2487.149203] rt_dst_alloc+0x73/0x440 [ 2487.150002] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2487.151083] ip_route_output_key_hash+0x18d/0x340 [ 2487.152075] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2487.153226] ? mark_lock+0xf5/0x2df0 [ 2487.153990] ? __lock_acquire+0x1657/0x5b00 [ 2487.154885] ip_route_output_flow+0x23/0x150 [ 2487.155791] ip_tunnel_xmit+0x70e/0x2f50 [ 2487.156627] ? usage_accumulate+0x70/0x110 [ 2487.157500] ? __is_insn_slot_addr+0x94/0x290 [ 2487.158414] ? perf_trace_lock+0xac/0x490 [ 2487.159272] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2487.160233] sit_tunnel_xmit+0xef0/0x2960 [ 2487.161090] ? ipip_rcv+0x4f0/0x4f0 [ 2487.161856] ? skb_crc32c_csum_help+0x80/0x80 [ 2487.162756] ? lock_acquire+0x197/0x470 [ 2487.163555] ? __dev_queue_xmit+0x1c2/0x2710 [ 2487.164457] ? netif_skb_features+0x536/0xa00 [ 2487.165379] dev_hard_start_xmit+0x1cb/0x6f0 [ 2487.166291] __dev_queue_xmit+0x17ec/0x2710 [ 2487.167170] ? find_held_lock+0x2c/0x110 [ 2487.167994] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2487.168925] ? lock_downgrade+0x6d0/0x6d0 [ 2487.169774] ? lock_acquire+0x197/0x470 [ 2487.170579] ? ip_finish_output2+0x220/0x21f0 [ 2487.171494] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2487.172573] neigh_connected_output+0x382/0x4d0 [ 2487.173548] ip_finish_output2+0x6f1/0x21f0 [ 2487.174426] ? nf_hook_slow+0xfc/0x1e0 [ 2487.175213] ? ip_frag_next+0x9e0/0x9e0 [ 2487.176019] ? nf_hook+0x160/0x510 [ 2487.176736] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2487.177786] __ip_finish_output.part.0+0x5f3/0xb50 [ 2487.178772] ? ip_fragment.constprop.0+0x240/0x240 [ 2487.179762] ? nf_hook+0x510/0x510 [ 2487.180506] ip_output+0x2f7/0x600 [ 2487.181243] ip_send_skb+0xdd/0x260 [ 2487.181982] udp_send_skb+0x6da/0x11d0 [ 2487.182779] udp_sendmsg+0x197f/0x2170 [ 2487.183557] ? ip_frag_init+0x350/0x350 [ 2487.184369] ? udp_setsockopt+0xc0/0xc0 [ 2487.185155] ? mark_lock+0xf5/0x2df0 [ 2487.185918] ? lock_chain_count+0x20/0x20 [ 2487.186746] ? mark_lock+0xf5/0x2df0 [ 2487.187496] ? mark_lock+0xf5/0x2df0 [ 2487.188235] ? lock_chain_count+0x20/0x20 [ 2487.189064] ? lock_chain_count+0x20/0x20 [ 2487.189919] ? prep_new_page+0x16d/0x1d0 [ 2487.190732] ? lock_chain_count+0x20/0x20 [ 2487.191579] ? __lock_acquire+0x1657/0x5b00 [ 2487.192452] udpv6_sendmsg+0x1b4e/0x2af0 [ 2487.193285] ? __lock_acquire+0x1657/0x5b00 [ 2487.194170] ? udp_v6_push_pending_frames+0x360/0x360 [ 2487.195194] ? __lockdep_reset_lock+0x180/0x180 [ 2487.196138] ? __lockdep_reset_lock+0x180/0x180 [ 2487.197077] ? lock_acquire+0x197/0x470 [ 2487.197875] ? find_held_lock+0x2c/0x110 [ 2487.198705] ? __might_fault+0xd3/0x180 [ 2487.199501] ? lock_downgrade+0x6d0/0x6d0 [ 2487.200336] ? lock_chain_count+0x20/0x20 [ 2487.201168] ? sock_has_perm+0x1ea/0x280 [ 2487.201985] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2487.203034] ? __import_iovec+0x458/0x590 [ 2487.203854] ? udp_v6_push_pending_frames+0x360/0x360 [ 2487.204865] inet6_sendmsg+0x105/0x140 [ 2487.205650] ? inet6_compat_ioctl+0x320/0x320 [ 2487.206533] __sock_sendmsg+0xf2/0x190 [ 2487.207295] ____sys_sendmsg+0x334/0x870 [ 2487.208101] ? sock_write_iter+0x3d0/0x3d0 [ 2487.208925] ? do_recvmmsg+0x6d0/0x6d0 [ 2487.209704] ? __lock_acquire+0x1657/0x5b00 [ 2487.210581] ___sys_sendmsg+0xf3/0x170 [ 2487.211356] ? sendmsg_copy_msghdr+0x160/0x160 [ 2487.212265] ? __lockdep_reset_lock+0x180/0x180 [ 2487.213181] ? trace_hardirqs_on+0x5b/0x180 [ 2487.214055] ? lock_acquire+0x197/0x470 [ 2487.214846] ? find_held_lock+0x2c/0x110 [ 2487.215653] ? __might_fault+0xd3/0x180 [ 2487.216433] ? lock_downgrade+0x6d0/0x6d0 [ 2487.217267] ? io_schedule_timeout+0x140/0x140 [ 2487.218201] __sys_sendmmsg+0x195/0x470 [ 2487.218998] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2487.219841] ? lock_downgrade+0x6d0/0x6d0 [ 2487.220682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2487.221666] ? wait_for_completion_io+0x270/0x270 [ 2487.222622] ? rcu_read_lock_any_held+0x75/0xa0 [ 2487.223535] ? vfs_write+0x354/0xa70 [ 2487.224278] ? fput_many+0x2f/0x1a0 [ 2487.224988] ? ksys_write+0x1a9/0x260 [ 2487.225714] ? __ia32_sys_read+0xb0/0xb0 [ 2487.226521] __x64_sys_sendmmsg+0x99/0x100 [ 2487.227340] do_syscall_64+0x33/0x40 [ 2487.228068] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2487.229044] RIP: 0033:0x7f1c4c8a5b19 [ 2487.229785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2487.233319] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2487.234809] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2487.236172] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2487.237558] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2487.238927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2487.240290] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:33:25 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x5f30) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:33:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000440)=[{0x0, 0x0, 0x6}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f0000000000000400", 0x1c, 0x40000002100}], 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7573726a7175ada9ea97dba192c3db9aaa2e1c0767a626f2cac33772393509b0ef2fd55af7702e2cb103f89e6bf816d2e55621b30f83c62e83afe232f79e5492477e37eca6a2986719171bca369d4ad1d13f58a34fe7e574a62000071a7c840d27a702d27296b40d38d08acd4459e11c550db77778e3f841202c4cd601c03a1d8fd49274a172586fb7102ab2c58772a6a2ce6e92e993a374e12464db876eb59c35bc27c8210695e3cf1cbb99710c613d280301e81ee509ddc7bc1e28c918b4bde8ee73d8e2487dc1e478e0d69e05c90a9da23dbb134a2a90df3379d3e199155ff50608edc9abc393c49d6a3ff39309525866c07707c74a3844daa9bb00000000000000196ec855720ce1a8da3389ce04fad1dc4faddf59e03c2c69b15955db5480b6a8ed220b707a851e75c01e23d8b429f1f6a520b02e09fed0fb6ce28d933581423493be873b98102ce596a58261cf4db3a7eaf95a519acd374619775be979a183a1d92840f6e3902db5e1df77980092c4dd24d20ad3d1b0d439f780a6bce09b313a7a991055cf8504ca44d4d007a5ff06252730a829773426eba916116b081aef92333865fb68f5b1ef022c3be0fc5fd52eb1a9898344a6212268f37ce0168c340d1769568b74b8369be730b0c2d1141d3dcbbeb374e24917ccf0ead27c60455681868d9eaa3f23fb6de373f9ea02cc3c1cd8defaf02a1efa6c51d5627b7d07b8dd11083e667405072ed7d7efc2528fb1ed78cfea10a702bd192c64f04a1b60913820f14a78364176246cc206b0c160a361c34c8b28f181bc8f98c162c29a8f7a9d9836fd9b769f58b8418b660df8f1cf2cc23efff22e28234176d0380bc0e92949b1b2d4d613c98688e547de28746977c150bcb62e3da88e04085d5d05648df6b66fc8e8d6f7dde0d079950ae094840ebecc32bbda8332271f66fc554af5372074db96bdaab18ded5d06582f9952213106235fce4daafe073b7977fba49169df990cd93031a7bb7850eee717aafc5a1b67616c05c47751f95ca56d4f6dc1bf38d201a57f2fb0adf6939f1d471be6831b03c260593f850bc59de2cf"]) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x6609, 0x0) r2 = signalfd(r1, &(0x7f0000000140)={[0x6]}, 0x8) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file1', [{0x20, '^+['}, {0x20, '/dev/hpet\x00'}, {0x20, '/dev/hpet\x00'}], 0xa, "4afc0357ba9bda5fc8dc520d85dc2930de0c2e6da3d0f299cfb416f50cc30077733b81c0b3157759ffd71e1ef885f04a8153bc2e5a6bcaceb9100a1f230f33454109e486c991bb88ac905e6b2895f3e7228cbc088957e6871d6ee1d0aa4c36c603a5672800ff6c6930634e3fae1bcde7d3fb0abc99c8a38916051ccba1e1676a16b2fbf14c66"}, 0xab) r3 = getpid() faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x80, 0x0) ptrace(0x4208, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(r4, &(0x7f00000001c0)='./file1\x00', 0x0, 0xa8) openat(r4, &(0x7f0000000380)='./file1\x00', 0x100, 0x20) fcntl$setown(0xffffffffffffffff, 0x8, r3) [ 2487.667935] nfs: Unknown parameter '0000000000000000000000000000000' 20:34:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 44) 20:34:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:34:09 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="388a56d65789689f03f5ae30df2e5ae0a7d73f4422f8b9276e5413656ee584b2c250f215571ba13e0527cb495155259ab8ef519a75e709480f4d3f3a5f49b1b357623fb2d4f4e8beeb33f220244e2ae8de82846f409fc6c80aec3990d08bcd5795b31dab2f261f98c7fe0d5db557ce1932c79c7e6527657f47a49e497629e1d36fd34be9420e", @ANYBLOB="275d26f4148e56", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x11) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1, 0xfffffffe, 0x0) 20:34:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="10010000", @ANYRES16=r0, @ANYBLOB="010020c70f8a736d8484a8cfed70e98000001200000000636550d54c0200000000d0ad0300294229b419a6ac5107efff7b831f9e06fe96d10b0211d9ba2d390e1e7727961898755ed3c870991c36e7dfded9edd633af0ee85f67a7e0dbb6f8135cbebe56b5e853d59a5b641db8290d0000e28c658944be330870970e7a87de2fd013d054b633bc71094cace58be77b271d3d84000000000000", @ANYRES32=0x0, @ANYBLOB="81005b00ba38ed850ea58de81c7def760f2cdba1eaa197522f5ac73896570842ce86fc8f2e06a9e50aa78b1637633db8f0f67025a28704bd05f1dc190e8c4be57c892a056ee01b09b8bb6106447aeaaefb1373f88a24c36c3e9d5be9bd7f74c7b22021f0575ed04bb0889016a2f2429bcb0cda4a8cdc90c4ff4fd8e755ac6f058200000065005b00eaf571b34d95ebcea0b75bf150014833ea201392ad088fc7bf782a8f116697bfc5be10efbc0cebac35594f9c89595c65e2a05009f0697d2b574f94943063a01e2f28bb95572c4390c12218b2754460f176f619c3875c081edd621f8c7aafbe87ab195f1e000000000600650008000000"], 0x110}, 0x1, 0x0, 0x0, 0x810}, 0x40001) msgget$private(0x0, 0x8c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1}, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000100)=""/215, &(0x7f0000000200)=0xd7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x9030, 0xd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7, 0x10001, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x2}, 0x1c) 20:34:10 executing program 3: syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_io_uring_setup(0x8, &(0x7f0000000180), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000100001000000000000009600000005000000ff7f000000000000040014"], 0x24}}, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107", 0x9b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[]) io_setup(0x5, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004815}, 0x4000004) openat(r1, &(0x7f00000000c0)='./file2\x00', 0x8040, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f00000001c0)={0x3fc}, 0x0, 0x0, 0x0) 20:34:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x6000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:34:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:34:10 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) syz_io_uring_setup(0x2641, &(0x7f0000000000)={0x0, 0x6de3, 0x10, 0x3, 0x143, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240)=0x4, 0x4) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'raw\x00', 0x0, [0x48000, 0x7fff, 0x629, 0x177, 0x3]}, &(0x7f0000000100)=0x54) [ 2531.883036] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2532.014090] FAULT_INJECTION: forcing a failure. [ 2532.014090] name failslab, interval 1, probability 0, space 0, times 0 [ 2532.017263] CPU: 0 PID: 44455 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2532.018793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2532.020576] Call Trace: [ 2532.021246] dump_stack+0x107/0x167 [ 2532.022194] should_fail.cold+0x5/0xa [ 2532.023068] ? lock_release+0x680/0x680 [ 2532.024028] ? skb_clone+0x14f/0x3d0 [ 2532.024952] should_failslab+0x5/0x20 [ 2532.025855] kmem_cache_alloc+0x5b/0x310 [ 2532.026950] skb_clone+0x14f/0x3d0 [ 2532.027930] dev_queue_xmit_nit+0x3a7/0xb00 [ 2532.028950] ? ipv6_mc_check_mld+0x1110/0x1110 [ 2532.030214] dev_hard_start_xmit+0xab/0x6f0 [ 2532.031202] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2532.032577] __dev_queue_xmit+0x17ec/0x2710 [ 2532.033724] ? find_held_lock+0x2c/0x110 [ 2532.034746] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2532.035907] ? lock_downgrade+0x6d0/0x6d0 [ 2532.036890] ? lock_acquire+0x197/0x470 [ 2532.037823] ? find_held_lock+0x2c/0x110 [ 2532.038916] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2532.040216] ip_finish_output2+0x1514/0x21f0 [ 2532.041432] ? ip_frag_next+0x9e0/0x9e0 [ 2532.042403] ? nf_hook+0x160/0x510 [ 2532.043280] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2532.044540] __ip_finish_output.part.0+0x5f3/0xb50 [ 2532.045744] ? ip_fragment.constprop.0+0x240/0x240 [ 2532.046877] ? nf_hook+0x510/0x510 20:34:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8004) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2532.047775] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2532.049031] ip_output+0x2f7/0x600 [ 2532.050063] ip_local_out+0xb4/0x1a0 [ 2532.051074] iptunnel_xmit+0x591/0x8b0 [ 2532.052278] ip_tunnel_xmit+0x124a/0x2f50 [ 2532.053591] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2532.054841] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2532.056193] ? perf_trace_lock+0xac/0x490 [ 2532.057382] sit_tunnel_xmit+0xef0/0x2960 [ 2532.058502] ? find_held_lock+0x2c/0x110 20:34:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2532.059474] ? ipip_rcv+0x4f0/0x4f0 [ 2532.060438] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2532.061487] ? lock_downgrade+0x6d0/0x6d0 [ 2532.062510] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2532.063779] dev_hard_start_xmit+0x1cb/0x6f0 [ 2532.064989] __dev_queue_xmit+0x17ec/0x2710 [ 2532.066142] ? find_held_lock+0x2c/0x110 [ 2532.067241] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2532.068513] ? lock_downgrade+0x6d0/0x6d0 [ 2532.069592] ? lock_acquire+0x197/0x470 [ 2532.070624] ? ip_finish_output2+0x220/0x21f0 [ 2532.071896] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2532.073332] neigh_connected_output+0x382/0x4d0 [ 2532.074827] ip_finish_output2+0x6f1/0x21f0 [ 2532.076039] ? nf_hook_slow+0xfc/0x1e0 [ 2532.077108] ? ip_frag_next+0x9e0/0x9e0 [ 2532.078189] ? nf_hook+0x160/0x510 [ 2532.079160] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2532.080566] __ip_finish_output.part.0+0x5f3/0xb50 [ 2532.081896] ? ip_fragment.constprop.0+0x240/0x240 [ 2532.083106] ? nf_hook+0x510/0x510 [ 2532.084310] ip_output+0x2f7/0x600 [ 2532.085391] ip_send_skb+0xdd/0x260 [ 2532.086455] udp_send_skb+0x6da/0x11d0 [ 2532.087743] udp_sendmsg+0x197f/0x2170 [ 2532.088875] ? ip_frag_init+0x350/0x350 [ 2532.090131] ? udp_setsockopt+0xc0/0xc0 [ 2532.091215] ? perf_event_switch_output+0x7d0/0x7d0 [ 2532.092564] ? perf_event_output_forward+0x13f/0x2c0 [ 2532.093857] ? lock_downgrade+0x6d0/0x6d0 [ 2532.094988] ? mark_lock+0xf5/0x2df0 [ 2532.095876] ? perf_event_output_forward+0x168/0x2c0 [ 2532.097181] ? perf_prepare_sample+0x1be0/0x1be0 [ 2532.098234] ? lock_downgrade+0x6d0/0x6d0 [ 2532.099293] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2532.100720] udpv6_sendmsg+0x1b4e/0x2af0 [ 2532.101713] ? __lock_acquire+0x1657/0x5b00 [ 2532.103015] ? udp_v6_push_pending_frames+0x360/0x360 [ 2532.104495] ? perf_event_switch_output+0x7d0/0x7d0 [ 2532.105807] ? __lockdep_reset_lock+0x180/0x180 [ 2532.107013] ? perf_event_switch_output+0x7d0/0x7d0 [ 2532.108383] ? lock_acquire+0x197/0x470 [ 2532.109408] ? find_held_lock+0x2c/0x110 [ 2532.110610] ? __might_fault+0xd3/0x180 [ 2532.111659] ? lock_downgrade+0x6d0/0x6d0 [ 2532.112735] ? lock_chain_count+0x20/0x20 [ 2532.113853] ? sock_has_perm+0x1ea/0x280 [ 2532.114937] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2532.116694] ? __import_iovec+0x458/0x590 [ 2532.117785] ? udp_v6_push_pending_frames+0x360/0x360 [ 2532.119184] inet6_sendmsg+0x105/0x140 [ 2532.120212] ? inet6_compat_ioctl+0x320/0x320 [ 2532.121357] __sock_sendmsg+0xf2/0x190 [ 2532.122430] ____sys_sendmsg+0x334/0x870 [ 2532.123581] ? sock_write_iter+0x3d0/0x3d0 [ 2532.124639] ? do_recvmmsg+0x6d0/0x6d0 [ 2532.125795] ? find_held_lock+0x2c/0x110 [ 2532.127115] ___sys_sendmsg+0xf3/0x170 [ 2532.128190] ? sendmsg_copy_msghdr+0x160/0x160 [ 2532.129414] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2532.130742] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2532.131852] ? trace_hardirqs_on+0x5b/0x180 [ 2532.133062] ? finish_task_switch+0x1a4/0x5d0 [ 2532.134184] ? __switch_to+0x572/0xf70 [ 2532.135169] ? __switch_to_asm+0x3a/0x60 [ 2532.136182] ? __switch_to_asm+0x34/0x60 [ 2532.137335] ? __schedule+0x82c/0x1ea0 [ 2532.138588] ? io_schedule_timeout+0x140/0x140 [ 2532.140129] __sys_sendmmsg+0x195/0x470 [ 2532.141308] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2532.142457] ? lock_downgrade+0x6d0/0x6d0 [ 2532.143911] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2532.145248] ? wait_for_completion_io+0x270/0x270 [ 2532.146551] ? rcu_read_lock_any_held+0x75/0xa0 [ 2532.147735] ? vfs_write+0x354/0xa70 [ 2532.148805] ? fput_many+0x2f/0x1a0 [ 2532.149842] ? ksys_write+0x1a9/0x260 [ 2532.150870] ? __ia32_sys_read+0xb0/0xb0 [ 2532.152130] __x64_sys_sendmmsg+0x99/0x100 [ 2532.153300] do_syscall_64+0x33/0x40 [ 2532.154316] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2532.155608] RIP: 0033:0x7f1c4c8a5b19 [ 2532.156584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2532.160946] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2532.162892] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2532.164658] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2532.166433] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2532.168203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2532.170004] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:34:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:34:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2532.321495] udc-core: couldn't find an available UDC or it's busy [ 2532.323106] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:34:10 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="10010000", @ANYRES16=r0, @ANYBLOB="010020c70f8a736d8484a8cfed70e98000001200000000636550d54c0200000000d0ad0300294229b419a6ac5107efff7b831f9e06fe96d10b0211d9ba2d390e1e7727961898755ed3c870991c36e7dfded9edd633af0ee85f67a7e0dbb6f8135cbebe56b5e853d59a5b641db8290d0000e28c658944be330870970e7a87de2fd013d054b633bc71094cace58be77b271d3d84000000000000", @ANYRES32=0x0, @ANYBLOB="81005b00ba38ed850ea58de81c7def760f2cdba1eaa197522f5ac73896570842ce86fc8f2e06a9e50aa78b1637633db8f0f67025a28704bd05f1dc190e8c4be57c892a056ee01b09b8bb6106447aeaaefb1373f88a24c36c3e9d5be9bd7f74c7b22021f0575ed04bb0889016a2f2429bcb0cda4a8cdc90c4ff4fd8e755ac6f058200000065005b00eaf571b34d95ebcea0b75bf150014833ea201392ad088fc7bf782a8f116697bfc5be10efbc0cebac35594f9c89595c65e2a05009f0697d2b574f94943063a01e2f28bb95572c4390c12218b2754460f176f619c3875c081edd621f8c7aafbe87ab195f1e000000000600650008000000"], 0x110}, 0x1, 0x0, 0x0, 0x810}, 0x40001) msgget$private(0x0, 0x8c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000340)={0x0, 0x74, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {{0x7e}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1}, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f0000000100)=""/215, &(0x7f0000000200)=0xd7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x9030, 0xd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7, 0x10001, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x2}, 0x1c) 20:34:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2532.490041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2532.501061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 20:34:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:34:33 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="388a56d65789689f03f5ae30df2e5ae0a7d73f4422f8b9276e5413656ee584b2c250f215571ba13e0527cb495155259ab8ef519a75e709480f4d3f3a5f49b1b357623fb2d4f4e8beeb33f220244e2ae8de82846f409fc6c80aec3990d08bcd5795b31dab2f261f98c7fe0d5db557ce1932c79c7e6527657f47a49e497629e1d36fd34be9420e", @ANYBLOB="275d26f4148e56", @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x11) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/154, 0x9a}], 0x1, 0xfffffffe, 0x0) 20:34:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 45) 20:34:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffc, 0x800}, 0x0, 0x0, 0x0, 0x1, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/diskstats\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000040)=""/4126, 0x101e, 0x2000) write$binfmt_elf64(r1, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x3c, 0xf1, 0xb3, 0x5, 0x4, 0x2, 0x6, 0x0, 0x27, 0x40, 0xc1, 0x7cf, 0x1, 0x38, 0x1, 0x40, 0x3, 0x2}, [{0x60000000, 0x2, 0xe4b, 0x9, 0x3f, 0x9, 0x5, 0x4}, {0x4, 0x10001, 0x10000, 0x4, 0x9, 0x3, 0x2, 0xffffffff}], "e001494448e0eb6954dd253b8ea6f4253019d195a5f34b85fd948143fb2013452bb2521bccf29c595721a245c8c425bed3461a30399a5d02545e152be85afb46fd0e19083407db7a6ba3983f425ea8881d856a9516234b63ea5811cbf9b925f7db8b1ca8cfc85f632124717fb41634814c985e18c6794d5c5ccf7a8063c78d4799210fb42d1607eb006fcfa7c80c7db8f1a470d2dcadd1", ['\x00', '\x00', '\x00', '\x00']}, 0x547) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='\x9c\xfa1naE\x04\x9ak#\xb06\xfb\x15\x05\x05\x12Y:\x99~a\x0f\x97*2\xc2\x10\f\xec\x98\xa0;\xf0a\xdb_fAR5\xdf\x1e46\xc8\x11w\xd1\x80\xbb\xb7\xc1-j\x98\t/\x12-\xbfq\xd5\x82\x86Z\xd6h!T\xb7d\xfa\xc6\x9c\x95\xf5b\x9f\x12n\x1apS\xcb\x01\xd9\xf8\x9b>\xad;\xe9e\xf9\xf5\x00\xb3\xb3j\xc2/8%\xb8A\x10B\xc4\xe9\x05x\xd5K\xf9\xaeD\x8fDmlE\xf1\t\xfb\xf2:K\x9b\xb1:\xfa\x91c\x15\xd6\x0eb\xe4\xb5{\x86\x19\xa8\x1e3\xf0o4x!ZC)~\x94Y\xb4\x9f\xec\x00'/177, &(0x7f0000000140)='\xeb\'&t\xd6\xcc\xfc^\x97<\xed<\x8az\xeeJ\xcd\x87!\xdaF\xc2\xde|;\x9c<\x87\xe1\xcb\xb4\xf3\n=w\xe14x\xca\xf70\xf81\xd4\x9f]\xdb.G\n\xe0\xaa\xf3O=\x8ct\xb3\x18\xdf\x95t\xc7\xd0\xb2\xeew{_h\x93 3\f\xcb\x18\xe7Z\x89\xf9z\xd4\xe1\xb5[\x7f\xc3\xbf~~&\xf8\xbd\x9b\xf3\xe5J\x9d\xb2\x0e\xe0\xdc\x13\x17hj\x04\xc6\x96\\\xef\xa6\xde\xd5\xe6', 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000100)='system_u:object_r:fonts_t:s0\x00', 0x19, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001100)=""/111, 0x6f}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001240)=""/223, 0xdf}], 0x3, 0xffffffff, 0x5c96) 20:34:33 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000000)=""/169) syz_mount_image$msdos(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) 20:34:33 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x4, 0xd5, 0x20, 0x3, 0x0, 0x3, 0x8, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000100)}, 0x100a0, 0x4, 0x7, 0x8, 0x1, 0x0, 0x3000, 0x0, 0x7fffffff}, 0x0, 0x10, r2, 0x1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000080)=0x4, &(0x7f00000000c0)=0x2) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x2000000, [{0x28e6, 0x401}, {0x8, 0x1c000000}]}, 0x14, 0x2) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:34:33 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) [ 2555.358259] FAULT_INJECTION: forcing a failure. [ 2555.358259] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.360591] CPU: 1 PID: 45195 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2555.361979] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.363620] Call Trace: [ 2555.364156] dump_stack+0x107/0x167 [ 2555.364919] should_fail.cold+0x5/0xa [ 2555.365703] ? __alloc_skb+0x6d/0x5b0 [ 2555.366514] should_failslab+0x5/0x20 [ 2555.367292] kmem_cache_alloc_node+0x55/0x330 [ 2555.368211] __alloc_skb+0x6d/0x5b0 [ 2555.368953] alloc_skb_with_frags+0x92/0x570 [ 2555.369860] sock_alloc_send_pskb+0x7af/0x930 [ 2555.370794] ? sk_alloc+0x350/0x350 [ 2555.371542] ? perf_trace_lock+0xac/0x490 [ 2555.372379] ? SOFTIRQ_verbose+0x10/0x10 [ 2555.373214] __ip_append_data+0x1628/0x3310 [ 2555.374103] ? fib_select_path+0x95d/0x1e90 [ 2555.374977] ? __lockdep_reset_lock+0x180/0x180 [ 2555.375915] ? ip_frag_init+0x350/0x350 [ 2555.376732] ? ip_finish_output+0x330/0x330 [ 2555.377605] ? ip_route_output_key_hash+0x1a4/0x340 [ 2555.378630] ? ipv4_mtu+0x1ed/0x2c0 [ 2555.379375] ip_make_skb+0x22a/0x2a0 [ 2555.380129] ? ip_frag_init+0x350/0x350 [ 2555.380942] ? ip_flush_pending_frames+0x20/0x20 [ 2555.381908] ? lock_downgrade+0x6d0/0x6d0 [ 2555.382763] ? xfrm_lookup_route+0x65/0x210 [ 2555.383640] udp_sendmsg+0x193f/0x2170 [ 2555.384436] ? ip_frag_init+0x350/0x350 [ 2555.385251] ? udp_setsockopt+0xc0/0xc0 [ 2555.386060] ? mark_lock+0xf5/0x2df0 [ 2555.386822] ? lock_chain_count+0x20/0x20 [ 2555.387662] ? mark_lock+0xf5/0x2df0 [ 2555.388423] ? mark_lock+0xf5/0x2df0 [ 2555.389177] ? lock_chain_count+0x20/0x20 [ 2555.390014] ? lock_chain_count+0x20/0x20 [ 2555.390874] ? perf_trace_lock+0xac/0x490 [ 2555.391711] ? lock_chain_count+0x20/0x20 [ 2555.392557] ? __lock_acquire+0x1657/0x5b00 [ 2555.393434] udpv6_sendmsg+0x1b4e/0x2af0 20:34:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2555.394270] ? __lock_acquire+0x1657/0x5b00 [ 2555.395293] ? udp_v6_push_pending_frames+0x360/0x360 [ 2555.396334] ? __lockdep_reset_lock+0x180/0x180 [ 2555.397286] ? __lockdep_reset_lock+0x180/0x180 [ 2555.398250] ? lock_acquire+0x197/0x470 [ 2555.399053] ? find_held_lock+0x2c/0x110 [ 2555.399881] ? __might_fault+0xd3/0x180 [ 2555.400684] ? lock_downgrade+0x6d0/0x6d0 [ 2555.401524] ? lock_chain_count+0x20/0x20 [ 2555.402377] ? sock_has_perm+0x1ea/0x280 [ 2555.403199] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2555.404262] ? __import_iovec+0x458/0x590 [ 2555.405099] ? udp_v6_push_pending_frames+0x360/0x360 [ 2555.406160] inet6_sendmsg+0x105/0x140 [ 2555.406946] ? inet6_compat_ioctl+0x320/0x320 [ 2555.407847] __sock_sendmsg+0xf2/0x190 [ 2555.408635] ____sys_sendmsg+0x334/0x870 [ 2555.409458] ? sock_write_iter+0x3d0/0x3d0 [ 2555.410314] ? do_recvmmsg+0x6d0/0x6d0 [ 2555.411101] ? __lock_acquire+0x1657/0x5b00 [ 2555.411986] ___sys_sendmsg+0xf3/0x170 [ 2555.412774] ? sendmsg_copy_msghdr+0x160/0x160 [ 2555.413698] ? __lockdep_reset_lock+0x180/0x180 [ 2555.414637] ? trace_hardirqs_on+0x5b/0x180 [ 2555.415515] ? lock_acquire+0x197/0x470 [ 2555.416315] ? find_held_lock+0x2c/0x110 [ 2555.417140] ? __might_fault+0xd3/0x180 [ 2555.417941] ? lock_downgrade+0x6d0/0x6d0 [ 2555.418797] ? io_schedule_timeout+0x140/0x140 [ 2555.419737] __sys_sendmmsg+0x195/0x470 [ 2555.420544] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2555.421414] ? lock_downgrade+0x6d0/0x6d0 [ 2555.422280] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2555.423258] ? wait_for_completion_io+0x270/0x270 [ 2555.424233] ? rcu_read_lock_any_held+0x75/0xa0 [ 2555.425168] ? vfs_write+0x354/0xa70 [ 2555.425925] ? fput_many+0x2f/0x1a0 [ 2555.426678] ? ksys_write+0x1a9/0x260 [ 2555.427449] ? __ia32_sys_read+0xb0/0xb0 [ 2555.428281] __x64_sys_sendmmsg+0x99/0x100 [ 2555.429139] do_syscall_64+0x33/0x40 [ 2555.429889] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2555.430927] RIP: 0033:0x7f1c4c8a5b19 [ 2555.431679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.435384] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2555.436917] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2555.438373] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2555.439809] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.441245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.442686] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:34:33 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[], 0xfdef) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, r2) fstatfs(r2, &(0x7f00000000c0)=""/200) fallocate(r0, 0x11, 0x0, 0x100000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c) [ 2555.605780] udc-core: couldn't find an available UDC or it's busy [ 2555.607137] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:34:33 executing program 0: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0, 0x8, 0x0) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fo', @ANYRESDEC, @ANYBLOB="2c646f6e745f686173682c6465666366696e65645f752c6d6561737572652c736d61636b66736861743d272c27412c7365636c6162656c2c7053723d3030303030303030303030303030303030303531e1f76566636f6e746578743d757365725f752c61707072616973652c00"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000006000000000000005b1b8e792b00008b00"/37], 0x1c}}, 0x0) [ 2555.675130] SELinux: Context system_u:object_r:fonts_t is not valid (left unmapped). 20:34:33 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x99, 0x1, 0x4, 0x2, 0x0, 0x1ff, 0x2000, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xf022, 0x200}, 0x8010, 0xf69, 0x6, 0x4, 0x61, 0x2, 0x0, 0x0, 0x800, 0x0, 0x10001}, r0, 0x6, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:34:34 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) ftruncate(r1, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) dup2(r2, r1) fcntl$setpipe(r0, 0x407, 0x1b) preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000001e00)=""/4095, 0xfff}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000001140)=""/171, 0xab}, {&(0x7f0000001200)=""/214, 0xd6}, {&(0x7f0000001300)=""/151, 0x97}, {&(0x7f00000013c0)=""/221, 0xdd}], 0x6, 0x101, 0x20000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x100000001) 20:34:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@delsa={0x28, 0x11, 0x400, 0x70bd29, 0x25dfdbfd, {@in=@rand_addr=0x64010102, 0x800004d2, 0x2, 0x5f}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r3 = epoll_create(0x8000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000140)={0x20000001}) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=@getpolicy={0x8c, 0x15, 0x300, 0x70bd29, 0x25dfdbfe, {{@in=@remote, @in=@private=0xa010100, 0x4e23, 0x4, 0x4e20, 0x5, 0x2, 0xa0, 0x0, 0x87, 0x0, r5}, 0x6e6bb1, 0x1}, [@lifetime_val={0x24, 0x9, {0x6, 0x7ff, 0x9, 0x5}}, @XFRMA_IF_ID={0x8}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd26, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x20040004) setpgid(0x0, r2) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) write$binfmt_aout(r6, &(0x7f0000000b00)=ANY=[], 0x742) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) msgrcv(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000009006fe82620f90e524e45f800"/38], 0x26, 0x0, 0x3000) 20:34:34 executing program 3: syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001300)={&(0x7f00000013c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000ffdbdf25010007000600020000003400060004004e24002008000800810000000800050001100000080009007b0000000000d8be66a0d98bdec59caa690ba3dcba2ad17444ff0ab7345dd322d7ef7f96129e3f7a321cd86662ab031a77342f3a7a0f2398403b69986ec9e2340e2614083468f42cdbd2994ad970660b20654989857331e8e8a9cf9cfe8a7c9608c28c71738ed9a94cc8e851318ee93eabe6e5fdc9aa50c5ee4d4a5819ae7842b0ad9028c819b2401da35620299ae41396c8577617655233f3df0afa05b09e76115f5bfeb02716144f4b"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x48051) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) openat(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', 0x52f142, 0xc1) readv(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x8000) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000001180)) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000140)={0x0, 0xffff}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) perf_event_open(&(0x7f0000001280)={0x0, 0x80, 0x0, 0x5, 0x2, 0x3, 0x0, 0x9, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x9}, 0x40140, 0x400, 0x4, 0x2, 0x9, 0x5, 0xfffe, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)) openat$autofs(0xffffffffffffff9c, &(0x7f0000001140), 0x40, 0x0) 20:34:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 46) 20:34:34 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) r2 = dup3(r0, r1, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x200081, 0x47) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) [ 2556.364956] FAULT_INJECTION: forcing a failure. [ 2556.364956] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.367604] CPU: 1 PID: 45829 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2556.368754] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2556.370134] Call Trace: [ 2556.370578] dump_stack+0x107/0x167 [ 2556.371198] should_fail.cold+0x5/0xa [ 2556.371837] ? create_object.isra.0+0x3a/0xa20 [ 2556.372609] should_failslab+0x5/0x20 [ 2556.373245] kmem_cache_alloc+0x5b/0x310 [ 2556.373926] create_object.isra.0+0x3a/0xa20 [ 2556.374664] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2556.375510] kmem_cache_alloc_node+0x169/0x330 [ 2556.376276] __alloc_skb+0x6d/0x5b0 [ 2556.376883] alloc_skb_with_frags+0x92/0x570 [ 2556.377622] sock_alloc_send_pskb+0x7af/0x930 [ 2556.378389] ? sk_alloc+0x350/0x350 [ 2556.378994] ? perf_trace_lock+0xac/0x490 [ 2556.379666] ? SOFTIRQ_verbose+0x10/0x10 [ 2556.380339] __ip_append_data+0x1628/0x3310 [ 2556.381054] ? fib_select_path+0x95d/0x1e90 [ 2556.381759] ? __lockdep_reset_lock+0x180/0x180 [ 2556.382529] ? ip_frag_init+0x350/0x350 [ 2556.383178] ? ip_finish_output+0x330/0x330 [ 2556.383884] ? ip_route_output_key_hash+0x1a4/0x340 [ 2556.384698] ? ipv4_mtu+0x1ed/0x2c0 [ 2556.385294] ip_make_skb+0x22a/0x2a0 [ 2556.385909] ? ip_frag_init+0x350/0x350 [ 2556.386572] ? ip_flush_pending_frames+0x20/0x20 [ 2556.387368] ? lock_downgrade+0x6d0/0x6d0 [ 2556.388048] ? xfrm_lookup_route+0x65/0x210 [ 2556.388756] udp_sendmsg+0x193f/0x2170 [ 2556.389397] ? ip_frag_init+0x350/0x350 [ 2556.390056] ? udp_setsockopt+0xc0/0xc0 [ 2556.390781] ? mark_lock+0xf5/0x2df0 [ 2556.391452] ? lock_chain_count+0x20/0x20 [ 2556.392177] ? mark_lock+0xf5/0x2df0 [ 2556.392790] ? mark_lock+0xf5/0x2df0 [ 2556.393416] ? lock_chain_count+0x20/0x20 [ 2556.394132] ? lock_chain_count+0x20/0x20 [ 2556.394857] ? prep_new_page+0x16d/0x1d0 [ 2556.395569] ? lock_chain_count+0x20/0x20 [ 2556.396304] ? __lock_acquire+0x1657/0x5b00 [ 2556.397048] udpv6_sendmsg+0x1b4e/0x2af0 [ 2556.397766] ? __lock_acquire+0x1657/0x5b00 [ 2556.398551] ? udp_v6_push_pending_frames+0x360/0x360 [ 2556.399454] ? __lockdep_reset_lock+0x180/0x180 [ 2556.400217] ? __lockdep_reset_lock+0x180/0x180 [ 2556.401031] ? lock_acquire+0x197/0x470 [ 2556.401729] ? find_held_lock+0x2c/0x110 [ 2556.402409] ? __might_fault+0xd3/0x180 [ 2556.403083] ? lock_downgrade+0x6d0/0x6d0 [ 2556.403808] ? lock_chain_count+0x20/0x20 [ 2556.404531] ? sock_has_perm+0x1ea/0x280 [ 2556.405222] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2556.406141] ? __import_iovec+0x458/0x590 [ 2556.406866] ? udp_v6_push_pending_frames+0x360/0x360 [ 2556.407777] inet6_sendmsg+0x105/0x140 [ 2556.408451] ? inet6_compat_ioctl+0x320/0x320 [ 2556.409231] __sock_sendmsg+0xf2/0x190 [ 2556.409855] ____sys_sendmsg+0x334/0x870 [ 2556.410569] ? sock_write_iter+0x3d0/0x3d0 [ 2556.411307] ? do_recvmmsg+0x6d0/0x6d0 [ 2556.411977] ? __lock_acquire+0x1657/0x5b00 [ 2556.412743] ___sys_sendmsg+0xf3/0x170 [ 2556.413415] ? sendmsg_copy_msghdr+0x160/0x160 [ 2556.414214] ? __lockdep_reset_lock+0x180/0x180 [ 2556.415021] ? trace_hardirqs_on+0x5b/0x180 [ 2556.415769] ? lock_acquire+0x197/0x470 [ 2556.416455] ? find_held_lock+0x2c/0x110 [ 2556.417162] ? __might_fault+0xd3/0x180 [ 2556.417826] ? lock_downgrade+0x6d0/0x6d0 [ 2556.418553] ? io_schedule_timeout+0x140/0x140 [ 2556.419354] __sys_sendmmsg+0x195/0x470 [ 2556.420038] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2556.420793] ? lock_downgrade+0x6d0/0x6d0 [ 2556.421523] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2556.422314] ? wait_for_completion_io+0x270/0x270 [ 2556.423131] ? rcu_read_lock_any_held+0x75/0xa0 [ 2556.423929] ? vfs_write+0x354/0xa70 [ 2556.424582] ? fput_many+0x2f/0x1a0 [ 2556.425210] ? ksys_write+0x1a9/0x260 [ 2556.425866] ? __ia32_sys_read+0xb0/0xb0 [ 2556.426592] __x64_sys_sendmmsg+0x99/0x100 [ 2556.427325] do_syscall_64+0x33/0x40 [ 2556.427967] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2556.428782] RIP: 0033:0x7f1c4c8a5b19 [ 2556.429408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2556.432582] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2556.433883] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2556.435107] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2556.436322] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2556.437547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2556.438776] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:35:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:35:07 executing program 3: unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000380)) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000640)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff, 0x9}}, './file0\x00'}) syz_io_uring_setup(0x2829, &(0x7f0000000680)={0x0, 0x667c, 0x1, 0x1, 0x237, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000580)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x0, @fd_index=0x4, 0x4, &(0x7f0000000700)=""/137, 0x89, 0xb27d7116323dcaed, 0x1}, 0x10001) io_submit(0x0, 0x4, &(0x7f0000000500)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="3c5737611ccf4d21c3ca050b16d47b2dad78f547f1fa18fc59362c670c6049f53eebf61a0c9d13cbf00efe10a59eea7bcc1c555f4e981e36fa27c8cba1b734ec3478edbfd61541253a4531eb2270bae82a033db0c54a14e8f23f50988e049681f3d5971f63751d1173d9d3c1ee247b9a35e17d0a223fd7da51f6c461a1448041c3f4081ae4a82a8546d007117a3cefede7636712b365b8649f7a38a3d5b02aa8b3", 0xa1, 0x4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x3ff, r0, &(0x7f00000005c0)="d975013d9531923e2a15ad", 0xb, 0x7, 0x0, 0x2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000340)="1291e3f1bd408fadf2e373978f00"/29, 0x1d, 0x1, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x7fff, 0xffffffffffffffff, &(0x7f0000000480)="f730bce8b7e2a3de6cf4629b1bb5923d893856d21ff226df5b4bd58f354685a50c73bd7f3748262d2d848ac0de7fcda903da790064b0cfa002fddcaaeb594587b53c391a9edd33b01e7a4ae91a84cb5cb1a02dbc03b1ce68ef50f2ddd971a09d403cf278c75a5c037ea1c7c851dcbb60481b5e02f4d8ad1b", 0x78, 0x4, 0x0, 0x3}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 20:35:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 47) 20:35:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="bee1540cb4624b672e2f666d6c653008"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x90101, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) openat(r2, &(0x7f0000000180)='./file0\x00', 0x84400, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000580)) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x561001, 0x0) r5 = fsmount(r0, 0x1, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x8) fsmount(r2, 0x1, 0x4) ioctl$FIGETBSZ(r4, 0x2, &(0x7f00000002c0)) stat(&(0x7f0000000540)='./file0\x00', &(0x7f00000004c0)) mount$cgroup(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x2812020, &(0x7f0000000400)=ANY=[@ANYBLOB="6e616d653d2f6465762f736e617073686f74002c6e616d653d68756765746c622c616c6c2c6e6f6e652c6370757365745f76325f6d6f64652c78617474722c6e6f7072656669782c636cdfe7af084ab5f43bf36f6e655f6365746c622c66736e616d653d2f6465762f7a65726f002c736d61636b6673666c6f6f723d2e282b2d5e2c6f626a5f726f6c653d5e282c00c01bb33846a6662412e845bb8386b1254b86bb32f5b5b695499776"]) 20:35:07 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb51d, 0xed5}, 0x980, 0x401, 0xffffffff, 0x8}, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000d7a3c3b33f50fd7fa8e62a67968022d6d244e613da624cd86dfda90143361695c902f8a36b25d494852f93b96f143745881b21976c14af4c7daa5ce1f831313d53c0d4445467d12b6205c6cd3fbb98fb8ca8793bb0c0734254389dade5cd165e43443649ade947cbf6821861caa356b0fdc80aa8206b4e6f8f", @ANYRES32, @ANYBLOB="01000000000000002e2f66696c65302f66696c653000"]) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r5}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000e00", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa689f9108b9e5a3e210d9015b24011d6cc3f97cd895030adcb9295ad"], 0x1c}}, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) sendmsg$AUDIT_USER(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10}, 0x10}}, 0x0) 20:35:07 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:35:07 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = fork() r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r3, 0x4, 0xffffffffffffffff, r4) r5 = fork() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r5, 0x4, 0xffffffffffffffff, r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000080)="7793bc55c14deba84dd72c9c02a6b8ce47da4d9dc5292c0013e982b93a3515fee7f33b0b544a1b4d9663c8c5efdbc576225dbf62f81fdeece4b24f7bf400c9a38045e4f1e3b47450b26eebf49c4b", 0x4e}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="2740c0a9bdc12aed5e66314306056fac73def96b134002b11127af2276c235b7313275744857b464bbee89336442918233460d19ffd1ebf63fbb9e24e991080f324d3ebc6936f342871785a2db8e3556e68f6ad84ddad3a641fd3c66ab3cca180aeb7379295d3a5755b27ffd985225ab6449fb39363888049126cd5925ab1cf47dc44598f6d5295056bfcb59a72e473d09c71a148494ad51f7f1c83d6d521d088853fbe83e35d28a08be3b8b2f1885d9fffe29e1c139586d38119fe0f70892c57275668ec14a0188a1cffaab164305633d4e530278", 0xd5}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f00000022c0)="513ede865c567a4440ddff90c32c4f3009b13157a617bba52eced500d77547328893a83711a6386e8fa8fe769bb3bf364ddb0ebd5471b69c0c351b6f6802463c0b97bdd913fe260b3d26217a01f9e97c039f07ae5029aeedcfde6c215df75cbe3c407edee3d9e8c641b95c93512485943409cef998bca5b99eb0f5724957ab1e51cde2fb32e1b5df7fddec91b65aa08bc4463017289b61e3935d42c2280886580c842a1b7a710132b1037d57c9b422d4819075837f90877f4bb84d9ca8daac", 0xbf}, {&(0x7f0000002380)="79633798e1b9be13792312ed0d6fb5e25b34621f3a3b8c5fe8d2abe962ebe1b45fcf5c41cd657faa564bdedbbcad3df547284bcb6840c63dce5343bf82c477ed5cc37a95900f88be8baa571f350dfb3156fb9d19326c67eed592a663f6ecb39a7bb34e40", 0x64}], 0x6, &(0x7f0000000100)=[@rights={{0x10}}], 0x10, 0x20000800}}, {{&(0x7f0000002480)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002500)="244f5723585ad4435b4e0f1d6b8a9c44fd38adc60d9f149a427216bbbcca5af5ac2150a1178cfeecb75dd2dc529b1fa355ed9a3d2ef8e21a0728bff2208e48ac", 0x40}, {&(0x7f0000004140)="dbe05367b00ac6953e064ee32bd866cbd90fe1987bacf2e973b5011f903a6b9be3a0e5c654ef31248590554f9f505ed7f24591495e3d3c41bca599bfbcb2bffd9dc22e09465810bdf313f9fdda3a8e02705f3e9ff99849c50925532ba3f9216db2b7f960cca283d72fce233b8781ac5794825dd1808b57693786757f75702093ae2dcae1956a89eb8e13a671089b7f898b1f5d0cd133eb4af87179aa0e5568bd21951380677f3924d4bc22bdcee1e68220a8ace954bad15b3124ace9e90fc748fb4e2c0fa86236e13199d6934ffa6a1b60704c69b6783ff7bbb1fe18458a91cabdbef12346fb746e9d01f21be99daa97eb55d6c34cc8c6", 0xf7}, {&(0x7f0000002680)="08372bb2025abe632a1e1bb2c501d2f1469985d21fd3f8d4c9cf6a4f1274e668b53cb309458828d06c9fd5bc2ad0cd4d9dc8604a96feec07267afb5ebe2bbc42350fee5046d12049f0b09a2c20", 0x4d}], 0x3, &(0x7f0000003b80), 0x0, 0x4004001}}, {{&(0x7f0000002780)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000039c0)=[{&(0x7f0000002800)="6ada77d7258f0208482c0a26f17bc360e1be6c998cb1e9465faa9ac2bbb3163473b8907f8dc467b8d60bacb9d7ce9c9d6b324b84612ccd0a5d4fb69cbd56d6ee9125ddac5c31593ccbc21af5eaad2ed91bec765038377be21339d7fb7edc7e19e2203ab725cad4ff84caf7e68e5b8b07353ea0af77c1095ab453b8b115ff47f53a73d3ef641ddab96f6838d66e130b9e91c4cc41dbc7c8404dd57d89886cd55652e8f4ad1f6c0925811ef68f0c8181f20bdfd5c60ab2d61a2d854dae47b72289a259682e7b0fcfe4b70dda0afa7bd1a8fce7e113944a", 0xd6}, {&(0x7f0000003b80)="3179ad02bdbbe93125c250dcd91612dcd6b9bf59c7f795bfc9e7001d40593151386272f45d8348b4af49f2a83b5cecc26865b706f50e5dd662733b6e62daa3d11bbafa3f6f6298e333a7c7e64c63e953dadc8c6a760af2d913302a0c75a568c9b35e202c91f060e543df8b93f1c013fdc0aa00f34adc4bdd39bdc46114f97e90f8a68f89e4e1caa7392ebe2eb7a532ef5d401ebf135205d63edc62cdef694bcd751ec9b27495be680b8ac0e970b9a3e338607671bc", 0xb5}, {&(0x7f00000029c0)="66c68e5930bd92eced0c4ad4dde9fb129ee515c70a4605408527bc2c8868212a7d1374ec08b402168eec2b82ac63addff047e4f0fda4d7740866bf90479e96fc57cd92968f8cbbbd88e8f66d4921d73a9b4e5bca85e23711e3a3c91ad660d2c518ec0d4791da6eef4c065b93c9728b2fc94e4dd37aaaaad7a2722fd032036b2de299e19bc16b01dc9fde6510b0843097d0435103a6cd7527eab151d7727ded9c09f26c634217069b6e9b559ab57c7edfceb36900361685ef236c0cc976e3d910a9434c42fbf0190699782fbadf2147255511e254631c42aa9b1e970a4c45c38914d3ba6f18fe04dc8920fbd2d648c6bd67be692635a740567a2ef6974f1200f1b38fececb67b16f29ad41ecd47aa3960c01322bfb36c885407e2f6f802b704e889ef1e4c42ed593e1781a699aba14b416535383fc10838cd0d747a870db399eb80a0bfa6f957592a2db97bbfd73dd90ad04731b07048fb24f65e570a79e7b39b06dd292292c6300c8f6d2b35ef2db3babac60b7951b75b8ce6dc12dc15bb7e6b059059ffa994d82f2550b9e7f2bca5c5961114f16ba6220eb6aad9e1e258801879e3d89b6d2483a7a197b40f935baf125f5ace457a55f3dd542df51c914a3b48c6cfd1aa596868bd5196606a4cbe98885a9ceb889fe7b2826c517e24c83cf7a999907f452e07ee5d65955e066de529f630dcb906d30251dfb9158b72dcc821d9ee92cbdfcc9d71f4b49a5a8787b0f844d03f23ddadca78d79c9bc769aa9388731d857436b932fc80fb966cdbd9cc5e3e17481dd6f275dcb77e3641b9ecb0788a1dc70227a90cd6adebd626ef1ccc1ba476408a305f9c3b918ba42b386812203fd05ea0626e0235e931413334f374fa52811ba533699706b5334c9ab49d105831ce2eb3142e53cde978125ebe40c29a6fb2ea8056a48109e095e4e1018589b8fd9229a7a47d2664aaf7ad172202b9931c66d4ad5d7ea436674a6ab18b6f6521c8ff6ca16020e84540e3afc1be8e1c7a059614a24b5403400a308166926db7ec7b223c38adf4a0c45261d1612fa9f9d4c7ecea932612a32fd80eb76dd0845a8233e89d3ffc1eda9dc07b0eaf40ee5ba7f08c589202f6518c9560c163d16b61c1a2871d811ecdc7d1124fcc55a68af1b8de8500d9d853fbdc989f93a1b9209d567311d2b836d4f75266d87a081701b26ee04987ee37cfe96350dce16e76021dbdcf34622d40ab768ed665aa7173e3a272e052f21e54cff6573ccb273935ebf85d84419f68e820c3d61e36d9e54556e952bd66066e741d6720da5df3996b72daae1b0f729079aefdac369a11a3b83e5e948844c4d917ec794a5b094eb89009b65599f98ff74024aeb1c5d4769fa1b82320dc8e0ae6f3177b742c1cf58cd77a0d877f95ef134cdf2c33655bea68594e137c828d372da35417ae7bfc3ab3448729114eabc485014a964ad06fc3c6002c336de18db7e3ba5212b7f1ee702a418b2aa36ebf5e02ec6a5e0fdd2bc02baf9004ea1b3e73a62006804a3d63cdf11ee3819a516e044508e04159422dfd9a0e9e4a94864fcbd98b3826d60c7b63ece4df228b5d721466bad540dd18ea3769f526fa618d0e5740da0b244d2b712c131c066b158f66c729d886cc7753d2380313024a3775cc5f765a5dfd7b55557892d1f6cf737084682e1781f3150cb184e3b6378e7e245b9aa2ef15e98e38dac6490bca5e9d64e7e526471a22627c9c3c82ac050409d6b59ec360d82b64e4116f2b3db21054ef0a421f1446e465ed3e7ab4cd9a157c3a691546b8cde80dc94a3cebede307110eab34dbabcab8c1a629135cb6fd1b457822592204a680fd953a214e36664efc6c4e2f1803a297539ba1b02fb95e052f3a8261a957f0ab69405f925399677c7f0c5777209ac1cad2ab0fc5fc9a17b849863b022b58ab0f1968f99ace1f69207d7d238fc8f766d6e7511a2ba4da3f871318b505165c0b61d63dd94e08d557e79ce8ab90760da2dc369df7c7d39d0dbf4a9a8f3fa07cd4636417e674f124b058bd494784964b51b06353cf5d8f948365afbcf772a0fe01e543f1ee1ffae5d3f55db38788da4d66a4bff3e24c392cad3d3ff0570639f63e715e2ea3d6726ea463884a761d86e423ae499abdf7b5812604cebaf579b63c7c67bfc3e1d7e626a748308cadfa8ff4b57a1fa8daedf52a4c779055d3854cc8241513cbf4e1a4666c52b53f081a9946b25745d20cdac20759872a8a7734222f7f17c36f912e87a9c6e685c52a96ad88832310c42ac7eba2ace4fe0c44851a75b16f46cfe6c20984c32906f54bc10475eef6df892bbf9bfa53d6020a3506491a0a1dc7d5c2456d2f05e3f6d276b7f281bb1b3f01fe05fd98d94103db5c51b17c8eec199a6be8e5b71fa810b99fd54780bd2da591158182906e44df0d152010ce7128bcdfb7bc426fb70fc222d05e2d753edffd2e28581521e034836c0bc763e671b4cf3120f6684098c3cda5b781debfc2b5c43166a7e974b8dcd854aaec78e4e29e039e1250c9ac51997452232490383091747047c48d1eb4266d8b2650e9a4de43b2fa6e24f9c088eadc773af9cc67ea8791b007768da96a75296addcb7a7171163c574137177518ae7635cd96496914e40402ea45fb21bf4220efdb704e7b7191ed5a0116b5ceaabdf2aa411f30e52d73166fe2427907a009a2294f6dc6abf5eb8c1aaa7af602484f4350394d0aecb15db96985f1fecb35351d7933200fe22c245b9e94529e6514594e5a527deb7247619729606883fd6f692f4cbbca2ef38fd7959f2ce3a0ecb1ebc2029cdd1876a45879d70b5b9782f6ca287828e7bb39d7141dd77c312d6c097d1d2efc81d505c2a851c7f8f49476ffe35e5ce558fdb22226cdaba558cb9acc76251fd94037ca9545f2d3fca2e54c1101556cc5c422921d7383628f42a9611312daf514019d50489e379546a851a7fdc7da337d74ef0bd949b6358679e5320cf3c09f8864b09e20bbb1fa4ff6b93d79e6686cae83d3c5d0d3a8e5dad06ba36aefcfcee96a6404f59139c848f64001463a13c52f8ee855fa413e0a5086a9e6595548aa43e8b478023bbd98f46d814f8973daba855c7c890375cc4a970d9bc5b1bbfa4710e1a992063de886657ff44b49136692df6df29de28d307dec6aec4727755e7a0ec03f1cea6f60c05fc8def3c3b3f6f709e6f723936c2e3b1c788b9c65ed9c9e301a68765416161bdc7ac907ad0c58797fadfe64f1dc42bcb0deabb31e109cfd322dd8bbdfc8b8e22d28e83adfab833a40e90fa9f25225a98f3e119c5cd42426caf33a61711aa2acbaa4638a95967ee5bc78e70f0418cf588cafe8ea6aca6d92b55b33b2c19d7a1ddc70ee9d0ee5486a8c0049923d235ac44b18a20bd6ee388c903fbb03574443efaa68ee20c9d87bf51ed30e4347a88ba8ec42b7c8eb22b24ebffcf5d2dc8bf24681de30145c83bf2676be5a268f3e93ffd00be299fd00a8a751cec5906e0878b78f932e5a08d2aad5b85f5d1a24f397ea9c1a4e9f093cbea7b110522010f8fd12c065718d50c99eade8d46b350877890b3b55ca27430604304414d2a9804dd6b32d1a44c1d18366d0be3ffc959ab0b5aa6d7bdfde60fb67abf66b1f46c58906a22433db1b1d4d5d57c8602068937468e4c5cd149926a1ae2017595fb3026b29300526c10766844d4c0e852c11768ef11fdde8106c07b2c57b67917daab855dfc74c2025e7cdc92752eab30e56d88e491f75a80abb14340521abc3cbdfd830f656663065b40c2c5afe50b3d1d977daa7d23154c90132a3cd90f6bc2357e17f3ed1503ee9b490c6562fc2af07ce1b92c079c066103c071c22478b265d7be14039e2f58a485c7f666c562a2594956416ed5287fb36994ad7a093401c6353ac5ebce0e1dc1c94d91d02ee3699654d614f024e99694bcbe29974e2969c4d6e70c5107e79bda4549a1dc1898cc09ed61f4d976dc1c9dff67ccbca77b268d203d283361a2a62c729f2c68d4619e90801d4f507f20c117a03907bc76b18087d0bd7f335c7ada3c1d84d1c98b8070f7cf32030a745a991c227f503237d6677fb81288daace99a7f0bd78602c452865f66f86fa1290a5f8d443f869c65a7fc26fed1f917076485ee3e967986f450aba6dbd31fdda869577cdc188305324f18b1543f31a86627795de5e98b1898908decc2770b0d7cb813929547ffd580b8bf561c96c96af9de9ae041e224f87ae48d5b99b9e3b0584fa98951f4ab8f2fd95e629ebdaa70697ba761b0071c5ccbe674e60abfc3707a82298a508b78b6bc1ea2c6c41d95495832cc97da74ea1c0eaa0f1c2dcad04c4e0895b57a25442c4135751510dde97042601f024e7c826a182d60f82f7f76a6dd3357901d065b06e3f576c0919f9d108c7587e9ecbcd2f29b040833d858261ff701d77cb04de524cdccddab8fd40f6e4d560ee5293aa5cd4e2bd630c9531dd381849798550b9e00c23b048acbbf88d9d36c38113f19055c18fbaa02b0262877636445cf8098a16b9879f6a6e6f295a2edfac567f3445d57c61aa1e9d8bd1e539644a8701e6105e2cf01b8688847d507724eca621f61da75043be9a4c3a57b6b52546f46918532771327213b491cb95926cb45f4da24ba5b743b167bfa0c5817a38eb83784ea43f55c37b8aa6412a3b0958e70b4d36ce0dbb2d71f2fb88d49acd56e93c0685c470e94b11fd6ca41de6e6ba6bd2b8d708c198ef38ebe7b624cce98c2237896ebf69bae19f3a622e55b34a4eaf520ddbed679ea4d9bcb96b68fc1fa231a44980644111bf4c8df2ae4a92df782ec2cb6521a0dbd99d6bb0d74ad764a59e40e4ce5f75d3864a8f66df1868f8627a11a278174726250cb94a80b1007faa483d84a36d58c1da9737ab02f6984f23da0634452623cec1961c5d8ea0d0a0d8706e7d75376953e3d9a59fc5187bb4d30b3a457a463ca3545611f50f7e8fe01d1cc0ea1960e401d0062d886bcbc82dfe8329ddd1b1c26d7cecdfd1e58fa51b27e48121d6d29ecaa9cec6aab3bb4ce3f2cdcae210ff2dc95da147b216f102068a911060cd3327184623d3bb681e8437b705ee5b28d54c1f3220ca980bdf226ae15301f1038ffbbf2ed561d7c25d2a64a4023e38fb348c282130ffe55e665c5c6de7555ac466592989d145fe92bffe7f4b6caf4c9822242bb1b10f6a9fb20f7369d4856420a7e5b3332bef798f6f4ffe6595c328adf500f7aa95cd865d4a863b2edb7ce1082886867e9115d24451bac7d828e70851d29608015dd5bc2e64f5096c9aa50a139772ff9c9b4e199d8584a600c6c20228d10c4b1046e53bd0a35093fe4c918bff5a5260549d02cdee9c1cc6a39e2fb27b6e2273bc70312feaf342fe725a7b3268e76a490ce65a4ffa3fbd85c87e63b567ab4f0074c76b527c99f4b12e7aceb0f36f2c1de4e32acb2f676926f231b2077e74846ad6e1700d131ed3a97dab6f06ae50467e9246d55c64a1718e1f41a0a33ca8473f709595029d44d86250287a8cdc3a894fa3acd74110996fb44379358b28d221869b7ccccdd32c8d546988733410090c703caf1db4878699cade3b8c5c6de13fd5eb1f13a59d5b59db209d1f31e716b0e297e4f8fcdc1095d5eb80e958cf70c72a603a4a813b40705cf97c72676d92e456558f508307c0436e372e660a2cb4734c9d084c266375e92a4441ab91619da59295a0adc554389cb30e0fef09a34681786c0de7827eee1cc60fe122d31fd32ffc0bf41c3426824265d8788fc1598bb62bdf2843e9efcbe096f536fcd9edd0ff32d9", 0x1000}], 0x3, 0x0, 0x0, 0x20000085}}, {{&(0x7f0000003a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a80)="a78840b771bdc26b7217baeb09bd9972a0627676db73f00e364049bde927ca2f1a0a8b8c0a03e7f1ea5eee3213", 0x2d}, {&(0x7f0000003ac0)="54d902bf50ea68aa6e3834ec5764445957e39c0a5c283e9007482894aaf07a1ddf2c8fec69a06eaa4df6d503c7bffdde5fd51b65733ed11297ca5662386c02bd40daaebe2899", 0x46}], 0x2, &(0x7f0000004480)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xffffffffffffffff}}}], 0x70, 0x4002}}, {{&(0x7f0000003c40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000003cc0)="f001cd1f217f38a6a6bf3b04096beb166132bac3dba03519e74745de23c5fd282549d13037f2af151ff41aa6e2ba0a3b9b245a926e873ce17ecf6a5c96f85018a440963af9040ac36eb7f4d138260bebb938da549b5f05e2c29c218c4a65391a2adc56e398909813716c1dca3e38eec3e22647badf3ae72b6650515d02620ee234", 0x81}, {&(0x7f0000004000)="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", 0x123}, {&(0x7f0000003e40)="4ad23584fed08478539b65168ba6b551efae515f3b9613ce54d90870731bcb5db1bbf117d605ba395ea1728ecc65837ceb6595ffb9e9ac2a9e705665187e1894c9ac421e3cb6ee853a103fd068fe1a114fc2e23138cfbd8a76a8839bdf137bf56a329a89b9ce27c97ab1ddb719546c43e84105e4b02248afe9c8bc81449f976a94cede3dc95ab41972391f23ffa5d6579bf21220a7c6dfe4dadddbd37c56fae595d844908300a592b2f16e375f1348df1f421e9bcb5219e4429d451ae9eb0db26dc8bd706c68b6d6836a5d30f19e822c2f133a61f1a0932b704d6cb45c365d7065dc0e260c0df38852032da3db234fb8f53f947ea012", 0xf6}, {&(0x7f0000003f40)="707e5a40331b742bfaf76f706d5c100e2f72f34d6bab77d600cb0ffdd3a2812ecbc4fd41e16f97ec3530288c39bab5a49ffab599ead1466c1df958650df5aa8d9c220e22f49e2c852ce686018609ceaad716fd25548322ffb5c2a351f779c926702a2717aedc3ed64cea087a0900f47c", 0x70}], 0x4, &(0x7f00000047c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000040000000160000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB="00000000100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x4000804}}, {{&(0x7f0000004300)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004380)="d03a96dbb0ea82624761aa1a1b4748f2f8b4338883544a4f6811d4d071206f1891a1403a585d0b6f39069b6806995118800cb563f9fc6440a9e91d148c36a2c379950a7ea8a17b9185666b58bf58f71b37658bd44e0298221f80252f6c65b308621d01712b722efba8929dac976af5f01db0410cd6ba8b62a7b053e1a76f936e93294af5f331b074c4936590d1aa4ed6ab03ad3b7112fcab3e43fdf7fc21f7af0c2023811e9a89e4f97bc7a6f5e20fa481ac750a0d07", 0xb6}], 0x1, &(0x7f00000045c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}], 0x50, 0x40}}], 0x6, 0x0) 20:35:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x200000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:35:07 executing program 3: timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f0000000480)) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) getsockname(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0xfffffffffffffe4e) fallocate(r4, 0x22, 0x5a3f, 0x2) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:35:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0ffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2590.039476] FAULT_INJECTION: forcing a failure. [ 2590.039476] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.042231] CPU: 0 PID: 46213 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2590.043767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.045576] Call Trace: [ 2590.046241] dump_stack+0x107/0x167 [ 2590.047210] should_fail.cold+0x5/0xa [ 2590.048137] ? __alloc_skb+0x6d/0x5b0 [ 2590.049079] should_failslab+0x5/0x20 [ 2590.049957] kmem_cache_alloc_node+0x55/0x330 [ 2590.051166] __alloc_skb+0x6d/0x5b0 [ 2590.052161] alloc_skb_with_frags+0x92/0x570 [ 2590.053438] sock_alloc_send_pskb+0x7af/0x930 [ 2590.054793] ? sk_alloc+0x350/0x350 [ 2590.055818] ? perf_trace_lock+0xac/0x490 [ 2590.056786] ? SOFTIRQ_verbose+0x10/0x10 [ 2590.057932] __ip_append_data+0x1628/0x3310 [ 2590.059089] ? fib_select_path+0x95d/0x1e90 [ 2590.060162] ? __lockdep_reset_lock+0x180/0x180 [ 2590.061248] ? ip_frag_init+0x350/0x350 [ 2590.062434] ? ip_finish_output+0x330/0x330 [ 2590.063493] ? ip_route_output_key_hash+0x1a4/0x340 [ 2590.064610] ? ipv4_mtu+0x1ed/0x2c0 [ 2590.065636] ip_make_skb+0x22a/0x2a0 [ 2590.066641] ? ip_frag_init+0x350/0x350 [ 2590.067632] ? ip_flush_pending_frames+0x20/0x20 [ 2590.068906] ? lock_downgrade+0x6d0/0x6d0 [ 2590.069976] ? xfrm_lookup_route+0x65/0x210 [ 2590.071099] udp_sendmsg+0x193f/0x2170 [ 2590.072203] ? ip_frag_init+0x350/0x350 [ 2590.073329] ? udp_setsockopt+0xc0/0xc0 [ 2590.074309] ? perf_event_switch_output+0x7d0/0x7d0 [ 2590.075530] ? perf_event_output_forward+0x13f/0x2c0 [ 2590.076716] ? lock_downgrade+0x6d0/0x6d0 [ 2590.077864] ? mark_lock+0xf5/0x2df0 [ 2590.078783] ? perf_event_output_forward+0x168/0x2c0 [ 2590.080112] ? perf_prepare_sample+0x1be0/0x1be0 [ 2590.081187] ? lock_downgrade+0x6d0/0x6d0 [ 2590.082610] udpv6_sendmsg+0x1b4e/0x2af0 [ 2590.083615] ? __lock_acquire+0x1657/0x5b00 [ 2590.084824] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.086164] ? perf_event_switch_output+0x7d0/0x7d0 [ 2590.087380] ? __lockdep_reset_lock+0x180/0x180 [ 2590.088465] ? perf_event_switch_output+0x7d0/0x7d0 [ 2590.089709] ? lock_acquire+0x197/0x470 [ 2590.090648] ? find_held_lock+0x2c/0x110 [ 2590.091739] ? __might_fault+0xd3/0x180 [ 2590.092687] ? lock_downgrade+0x6d0/0x6d0 [ 2590.093672] ? lock_chain_count+0x20/0x20 [ 2590.094663] ? sock_has_perm+0x1ea/0x280 [ 2590.095658] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2590.097230] ? __import_iovec+0x458/0x590 [ 2590.098217] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.099500] inet6_sendmsg+0x105/0x140 [ 2590.100441] ? inet6_compat_ioctl+0x320/0x320 [ 2590.101478] __sock_sendmsg+0xf2/0x190 [ 2590.102444] ____sys_sendmsg+0x334/0x870 [ 2590.103489] ? sock_write_iter+0x3d0/0x3d0 [ 2590.104464] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.105487] ? find_held_lock+0x2c/0x110 [ 2590.106696] ___sys_sendmsg+0xf3/0x170 [ 2590.107667] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.108776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2590.109965] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.110989] ? trace_hardirqs_on+0x5b/0x180 [ 2590.112018] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2590.113054] ? finish_task_switch+0x126/0x5d0 [ 2590.114062] ? finish_task_switch+0xef/0x5d0 [ 2590.115068] ? __switch_to+0x572/0xf70 [ 2590.115960] ? __switch_to_asm+0x3a/0x60 [ 2590.116895] ? __switch_to_asm+0x34/0x60 [ 2590.117932] ? __schedule+0x82c/0x1ea0 [ 2590.119047] ? io_schedule_timeout+0x140/0x140 [ 2590.120406] __sys_sendmmsg+0x195/0x470 [ 2590.121470] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.122499] ? lock_downgrade+0x6d0/0x6d0 [ 2590.123796] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.124988] ? wait_for_completion_io+0x270/0x270 [ 2590.126149] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.127207] ? vfs_write+0x354/0xa70 [ 2590.128165] ? fput_many+0x2f/0x1a0 [ 2590.129061] ? ksys_write+0x1a9/0x260 [ 2590.129983] ? __ia32_sys_read+0xb0/0xb0 [ 2590.131116] __x64_sys_sendmmsg+0x99/0x100 [ 2590.132162] do_syscall_64+0x33/0x40 [ 2590.133042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2590.134192] RIP: 0033:0x7f1c4c8a5b19 [ 2590.135065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.138945] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.140665] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2590.142227] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.143798] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.145364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.146936] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:35:08 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2590.197651] udc-core: couldn't find an available UDC or it's busy [ 2590.199192] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:35:08 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:35:08 executing program 3: io_submit(0x0, 0x1, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0xff, 0x6, 0x7f, 0x0, 0x7, 0xc0088, 0x751b2fda35ac22b5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4000000000000005, 0x100000000}, 0x0, 0x8, 0x101, 0x3, 0x18000000000000, 0x8, 0x8d, 0x0, 0x33f2, 0x0, 0xffffffffffffffff}, 0x0, 0x8000007, r0, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x400081) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup3(r3, r2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x103082) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000200)) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x274a, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, 0xfffbfffe}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000040)={@private0}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x8010, r7, 0x0) 20:35:08 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 48) [ 2590.749600] FAULT_INJECTION: forcing a failure. [ 2590.749600] name failslab, interval 1, probability 0, space 0, times 0 [ 2590.752050] CPU: 1 PID: 46804 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2590.753454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2590.755171] Call Trace: [ 2590.755715] dump_stack+0x107/0x167 [ 2590.756480] should_fail.cold+0x5/0xa [ 2590.757271] ? create_object.isra.0+0x3a/0xa20 [ 2590.758219] should_failslab+0x5/0x20 [ 2590.759015] kmem_cache_alloc+0x5b/0x310 [ 2590.759854] create_object.isra.0+0x3a/0xa20 [ 2590.760752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2590.761793] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2590.762831] ? alloc_skb_with_frags+0x92/0x570 [ 2590.763764] __alloc_skb+0xb1/0x5b0 [ 2590.764510] alloc_skb_with_frags+0x92/0x570 [ 2590.765420] sock_alloc_send_pskb+0x7af/0x930 [ 2590.766348] ? sk_alloc+0x350/0x350 [ 2590.767119] ? perf_trace_lock+0xac/0x490 [ 2590.767959] ? SOFTIRQ_verbose+0x10/0x10 [ 2590.768798] __ip_append_data+0x1628/0x3310 [ 2590.769685] ? fib_select_path+0x95d/0x1e90 [ 2590.770573] ? __lockdep_reset_lock+0x180/0x180 [ 2590.771518] ? ip_frag_init+0x350/0x350 [ 2590.772340] ? ip_finish_output+0x330/0x330 [ 2590.773216] ? ip_route_output_key_hash+0x1a4/0x340 [ 2590.774222] ? ipv4_mtu+0x1ed/0x2c0 [ 2590.774986] ip_make_skb+0x22a/0x2a0 [ 2590.775745] ? ip_frag_init+0x350/0x350 [ 2590.776555] ? ip_flush_pending_frames+0x20/0x20 [ 2590.777526] ? lock_downgrade+0x6d0/0x6d0 [ 2590.778373] ? xfrm_lookup_route+0x65/0x210 [ 2590.779260] udp_sendmsg+0x193f/0x2170 [ 2590.780063] ? ip_frag_init+0x350/0x350 [ 2590.780881] ? udp_setsockopt+0xc0/0xc0 [ 2590.781684] ? mark_lock+0xf5/0x2df0 [ 2590.782448] ? lock_chain_count+0x20/0x20 [ 2590.783295] ? mark_lock+0xf5/0x2df0 [ 2590.784057] ? mark_lock+0xf5/0x2df0 [ 2590.784812] ? lock_chain_count+0x20/0x20 [ 2590.785651] ? lock_chain_count+0x20/0x20 [ 2590.786519] ? prep_new_page+0x16d/0x1d0 [ 2590.787345] ? lock_chain_count+0x20/0x20 [ 2590.788206] ? __lock_acquire+0x1657/0x5b00 [ 2590.789088] udpv6_sendmsg+0x1b4e/0x2af0 [ 2590.789914] ? __lock_acquire+0x1657/0x5b00 [ 2590.790811] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.791857] ? __lockdep_reset_lock+0x180/0x180 [ 2590.792814] ? __lockdep_reset_lock+0x180/0x180 [ 2590.793767] ? lock_acquire+0x197/0x470 [ 2590.794583] ? find_held_lock+0x2c/0x110 [ 2590.795414] ? __might_fault+0xd3/0x180 [ 2590.796222] ? lock_downgrade+0x6d0/0x6d0 [ 2590.797064] ? lock_chain_count+0x20/0x20 [ 2590.797911] ? sock_has_perm+0x1ea/0x280 [ 2590.798759] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2590.799827] ? __import_iovec+0x458/0x590 [ 2590.800669] ? udp_v6_push_pending_frames+0x360/0x360 [ 2590.801721] inet6_sendmsg+0x105/0x140 [ 2590.802517] ? inet6_compat_ioctl+0x320/0x320 [ 2590.803425] __sock_sendmsg+0xf2/0x190 [ 2590.804218] ____sys_sendmsg+0x334/0x870 [ 2590.805046] ? sock_write_iter+0x3d0/0x3d0 [ 2590.805902] ? do_recvmmsg+0x6d0/0x6d0 [ 2590.806713] ? __lock_acquire+0x1657/0x5b00 [ 2590.807603] ___sys_sendmsg+0xf3/0x170 [ 2590.808395] ? sendmsg_copy_msghdr+0x160/0x160 [ 2590.809327] ? __lockdep_reset_lock+0x180/0x180 [ 2590.810270] ? trace_hardirqs_on+0x5b/0x180 [ 2590.811179] ? lock_acquire+0x197/0x470 [ 2590.811988] ? find_held_lock+0x2c/0x110 [ 2590.812837] ? __might_fault+0xd3/0x180 [ 2590.813650] ? lock_downgrade+0x6d0/0x6d0 [ 2590.814525] ? io_schedule_timeout+0x140/0x140 [ 2590.815472] __sys_sendmmsg+0x195/0x470 [ 2590.816304] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2590.817180] ? lock_downgrade+0x6d0/0x6d0 [ 2590.818057] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2590.819046] ? wait_for_completion_io+0x270/0x270 [ 2590.820051] ? rcu_read_lock_any_held+0x75/0xa0 [ 2590.821002] ? vfs_write+0x354/0xa70 [ 2590.821760] ? fput_many+0x2f/0x1a0 [ 2590.822523] ? ksys_write+0x1a9/0x260 [ 2590.823311] ? __ia32_sys_read+0xb0/0xb0 [ 2590.824152] __x64_sys_sendmmsg+0x99/0x100 [ 2590.825026] do_syscall_64+0x33/0x40 [ 2590.825817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2590.826900] RIP: 0033:0x7f1c4c8a5b19 [ 2590.827660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2590.831400] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2590.832948] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2590.834394] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2590.835845] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2590.837288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2590.838739] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:35:09 executing program 3: ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000780), &(0x7f0000000940), 0x2, 0x2) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r3, 0xa}) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000400000000102030405060708090a0b0c0d0e0f101112131415161718191a1bc4451e1f2021222324a8b4a17b2526e7c5383b3a3b3c3d3e3f400000"], 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000600)={'fscrypt:', @desc3}, &(0x7f00000008c0)={0x0, "6f1a72b7d9cc8467b3e15e9f65490dee8693d723cb4e93eef1a40e2466ed8fd2a823ee7d7ca850b8b9622f03dbf629f0c386eda7b64c009d0812bd35a4f5e827", 0x24}, 0x48, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x10100) preadv(r4, &(0x7f0000000880)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/9, 0x9}, {&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f00000007c0)=""/150, 0x96}], 0x4, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:35:09 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) signalfd(r0, &(0x7f0000000000)={[0x101]}, 0x8) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x800) 20:35:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:35:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) [ 2591.175320] udc-core: couldn't find an available UDC or it's busy [ 2591.176703] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:35:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 49) 20:35:32 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0xa) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:35:32 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), 0x0, 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:35:32 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000d4f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000076a34e3f63e54dbc8955dd45888f6106010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x800}, {&(0x7f0000000040)="eda30c56ffa00c4c0e4100000068ea14c1f4655fcd478db8533108a2ba9052d40716b2", 0x23, 0x2100}], 0x0, &(0x7f0000014100)=ANY=[@ANYBLOB="01"]) 20:35:32 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:35:32 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x185142, 0x182) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000140)=""/77, 0xfffffdcd}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000380)=""/168, 0xa8}], 0x5, 0x6, 0xfffffffe) fallocate(r2, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x3) r3 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) dup(r1) r4 = dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x4cd41, 0x84) ioctl$FICLONE(r5, 0x40049409, r4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) sendfile(r0, r6, 0x0, 0x100000001) 20:35:32 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0000008d60ccddc073134ba9a1b4791e987cbec17aefa550ab219351b25a30ebd3ed5d89122b1a4c4a6fa88c85c86eda9e84c7e80000000000000000000000000000f6f95138c527fc0dfa6d8005f39145c708000000073e3d95bc3cc05ff8f33d47f6f77a8c065b5f6c3c299a355a0c2299dd50cc669c3ebf8d7cbfd73ffbf3d8f36a200d87f9a57178699eee95837463b696572b0000000000d5fc3f38c99d2c603972c48d26dd4ab9e2c89c121381365c00ec69bab8f2963eca1f148b463f55d76611ea783ef3", @ANYRES16], 0x2c}}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x1000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, 0x0, 0x0) syncfs(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x8, 0x0, 0x8000) write$9p(r2, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syncfs(r4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r3) 20:35:32 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x3000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2614.307796] FAULT_INJECTION: forcing a failure. [ 2614.307796] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.310213] CPU: 1 PID: 47094 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2614.311634] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.313310] Call Trace: [ 2614.313859] dump_stack+0x107/0x167 [ 2614.314616] should_fail.cold+0x5/0xa [ 2614.315436] ? dst_alloc+0x9e/0x610 [ 2614.316197] should_failslab+0x5/0x20 [ 2614.316973] kmem_cache_alloc+0x5b/0x310 [ 2614.317838] dst_alloc+0x9e/0x610 [ 2614.318601] rt_dst_alloc+0x73/0x440 [ 2614.319386] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2614.320508] ip_route_output_key_hash+0x18d/0x340 [ 2614.321512] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2614.322653] ? mark_lock+0xf5/0x2df0 [ 2614.323444] ? __lock_acquire+0x1657/0x5b00 [ 2614.324350] ip_route_output_flow+0x23/0x150 [ 2614.325267] ip_tunnel_xmit+0x70e/0x2f50 [ 2614.326066] ? usage_accumulate+0x70/0x110 [ 2614.326920] ? __is_insn_slot_addr+0x94/0x290 [ 2614.327804] ? perf_trace_lock+0xac/0x490 [ 2614.328629] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2614.329600] sit_tunnel_xmit+0xef0/0x2960 [ 2614.330478] ? ipip_rcv+0x4f0/0x4f0 [ 2614.331215] ? skb_crc32c_csum_help+0x80/0x80 [ 2614.332141] ? lock_acquire+0x197/0x470 [ 2614.332965] ? __dev_queue_xmit+0x1c2/0x2710 [ 2614.333885] ? netif_skb_features+0x536/0xa00 [ 2614.334813] dev_hard_start_xmit+0x1cb/0x6f0 [ 2614.335697] __dev_queue_xmit+0x17ec/0x2710 [ 2614.336586] ? find_held_lock+0x2c/0x110 [ 2614.337436] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2614.338373] ? lock_downgrade+0x6d0/0x6d0 [ 2614.339245] ? lock_acquire+0x197/0x470 [ 2614.340063] ? ip_finish_output2+0x220/0x21f0 [ 2614.340960] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2614.342031] neigh_connected_output+0x382/0x4d0 [ 2614.343016] ip_finish_output2+0x6f1/0x21f0 [ 2614.343908] ? nf_hook_slow+0xfc/0x1e0 [ 2614.344708] ? ip_frag_next+0x9e0/0x9e0 [ 2614.345512] ? nf_hook+0x160/0x510 [ 2614.346218] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2614.347248] __ip_finish_output.part.0+0x5f3/0xb50 [ 2614.348258] ? ip_fragment.constprop.0+0x240/0x240 [ 2614.349250] ? nf_hook+0x510/0x510 [ 2614.349966] ip_output+0x2f7/0x600 [ 2614.350687] ip_send_skb+0xdd/0x260 [ 2614.351447] udp_send_skb+0x6da/0x11d0 [ 2614.352259] udp_sendmsg+0x197f/0x2170 [ 2614.353067] ? ip_frag_init+0x350/0x350 [ 2614.353893] ? udp_setsockopt+0xc0/0xc0 [ 2614.354699] ? mark_lock+0xf5/0x2df0 [ 2614.355476] ? lock_chain_count+0x20/0x20 [ 2614.356331] ? mark_lock+0xf5/0x2df0 [ 2614.357103] ? mark_lock+0xf5/0x2df0 [ 2614.357860] ? lock_chain_count+0x20/0x20 [ 2614.358702] ? lock_chain_count+0x20/0x20 [ 2614.359571] ? prep_new_page+0x16d/0x1d0 [ 2614.360409] ? lock_chain_count+0x20/0x20 [ 2614.361274] ? __lock_acquire+0x1657/0x5b00 [ 2614.362170] udpv6_sendmsg+0x1b4e/0x2af0 [ 2614.363018] ? __lock_acquire+0x1657/0x5b00 [ 2614.363931] ? udp_v6_push_pending_frames+0x360/0x360 [ 2614.364993] ? __lockdep_reset_lock+0x180/0x180 [ 2614.365957] ? __lockdep_reset_lock+0x180/0x180 [ 2614.366929] ? lock_acquire+0x197/0x470 [ 2614.367742] ? find_held_lock+0x2c/0x110 [ 2614.368586] ? __might_fault+0xd3/0x180 [ 2614.369402] ? lock_downgrade+0x6d0/0x6d0 [ 2614.370252] ? lock_chain_count+0x20/0x20 [ 2614.371118] ? sock_has_perm+0x1ea/0x280 [ 2614.371952] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2614.373031] ? __import_iovec+0x458/0x590 [ 2614.373882] ? udp_v6_push_pending_frames+0x360/0x360 [ 2614.374950] inet6_sendmsg+0x105/0x140 [ 2614.375750] ? inet6_compat_ioctl+0x320/0x320 [ 2614.376671] __sock_sendmsg+0xf2/0x190 [ 2614.377468] ____sys_sendmsg+0x334/0x870 [ 2614.378309] ? sock_write_iter+0x3d0/0x3d0 [ 2614.379189] ? do_recvmmsg+0x6d0/0x6d0 [ 2614.379993] ? __lock_acquire+0x1657/0x5b00 [ 2614.380895] ___sys_sendmsg+0xf3/0x170 [ 2614.381699] ? sendmsg_copy_msghdr+0x160/0x160 [ 2614.382638] ? __lockdep_reset_lock+0x180/0x180 [ 2614.383594] ? trace_hardirqs_on+0x5b/0x180 [ 2614.384497] ? lock_acquire+0x197/0x470 [ 2614.385310] ? find_held_lock+0x2c/0x110 [ 2614.386150] ? __might_fault+0xd3/0x180 [ 2614.386977] ? lock_downgrade+0x6d0/0x6d0 [ 2614.387828] ? io_schedule_timeout+0x140/0x140 [ 2614.388788] __sys_sendmmsg+0x195/0x470 [ 2614.389608] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2614.390501] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.391581] ? finish_task_switch+0x127/0x5d0 [ 2614.392499] ? __switch_to_asm+0x34/0x60 [ 2614.393328] ? __schedule+0x82c/0x1ea0 [ 2614.394142] ? io_schedule_timeout+0x140/0x140 [ 2614.395103] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2614.396213] ? ksys_write+0x1a9/0x260 [ 2614.397006] __x64_sys_sendmmsg+0x99/0x100 [ 2614.397875] do_syscall_64+0x33/0x40 [ 2614.398637] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2614.399685] RIP: 0033:0x7f1c4c8a5b19 [ 2614.400449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2614.404194] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2614.405743] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2614.407192] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2614.408629] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2614.410076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2614.411529] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2614.510651] udc-core: couldn't find an available UDC or it's busy [ 2614.512413] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:35:32 executing program 5: fdatasync(0xffffffffffffffff) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) fallocate(r1, 0x2c, 0x5, 0x12) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x1, &(0x7f0000000440)=[{&(0x7f0000000140)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000df97e800771df4655f000000000000000001000000000000000b0000000001", 0x5f, 0x400}], 0x0, &(0x7f00000000c0)=ANY=[]) mount(&(0x7f0000000080)=@filename='./file0/file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='ubifs\x00', 0x20012, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r4 = fork() r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r4, 0x4, 0xffffffffffffffff, r5) kcmp(r0, r3, 0x6, r5, r2) 20:35:32 executing program 2: syz_open_dev$hiddev(&(0x7f0000000000), 0x1000, 0x129101) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) ioctl$int_in(r0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:35:32 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:35:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 50) 20:35:33 executing program 0: unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x248803, 0x0) mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x86) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r2, &(0x7f0000000240)=""/83, 0x53, 0x200000048) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xffffffff810013a0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100000}, 0x0, 0x0, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200600, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="001085c5eb0600000000000000631211f8f2117277a1ecba3c9400"/72]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000480)}, {&(0x7f00000004c0)=""/170, 0xaa}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/29, 0x1d}], 0x4, 0x20, 0x1000) close(r2) clone3(&(0x7f00000008c0)={0x3040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000380)=""/172, 0xac}, {&(0x7f0000000440)=""/38, 0x26}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000740)=""/123, 0x7b}, {&(0x7f00000007c0)=""/122, 0x7a}], 0x8) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 2614.915526] FAULT_INJECTION: forcing a failure. [ 2614.915526] name failslab, interval 1, probability 0, space 0, times 0 [ 2614.917750] CPU: 1 PID: 47452 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2614.919148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2614.920738] Call Trace: [ 2614.921270] dump_stack+0x107/0x167 [ 2614.922016] should_fail.cold+0x5/0xa [ 2614.922775] ? create_object.isra.0+0x3a/0xa20 [ 2614.923676] should_failslab+0x5/0x20 [ 2614.924395] kmem_cache_alloc+0x5b/0x310 [ 2614.925195] create_object.isra.0+0x3a/0xa20 [ 2614.926044] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2614.927025] kmem_cache_alloc+0x159/0x310 [ 2614.927826] dst_alloc+0x9e/0x610 [ 2614.928523] rt_dst_alloc+0x73/0x440 [ 2614.929244] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2614.930392] ip_route_output_key_hash+0x18d/0x340 [ 2614.931359] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2614.932420] ? mark_lock+0xf5/0x2df0 [ 2614.933133] ? __lock_acquire+0x1657/0x5b00 [ 2614.933961] ip_route_output_flow+0x23/0x150 [ 2614.934824] ip_tunnel_xmit+0x70e/0x2f50 [ 2614.935680] ? usage_accumulate+0x70/0x110 [ 2614.936490] ? __is_insn_slot_addr+0x94/0x290 [ 2614.937446] ? perf_trace_lock+0xac/0x490 [ 2614.938388] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2614.939296] sit_tunnel_xmit+0xef0/0x2960 [ 2614.940109] ? ipip_rcv+0x4f0/0x4f0 [ 2614.940799] ? skb_crc32c_csum_help+0x80/0x80 [ 2614.941648] ? lock_acquire+0x197/0x470 [ 2614.942437] ? __dev_queue_xmit+0x1c2/0x2710 [ 2614.943295] ? netif_skb_features+0x536/0xa00 [ 2614.944140] dev_hard_start_xmit+0x1cb/0x6f0 [ 2614.944990] __dev_queue_xmit+0x17ec/0x2710 [ 2614.945823] ? find_held_lock+0x2c/0x110 [ 2614.946591] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2614.947464] ? lock_downgrade+0x6d0/0x6d0 [ 2614.948251] ? lock_acquire+0x197/0x470 [ 2614.949003] ? ip_finish_output2+0x220/0x21f0 [ 2614.949863] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2614.950871] neigh_connected_output+0x382/0x4d0 [ 2614.951771] ip_finish_output2+0x6f1/0x21f0 [ 2614.952622] ? nf_hook_slow+0xfc/0x1e0 [ 2614.953437] ? ip_frag_next+0x9e0/0x9e0 [ 2614.954188] ? nf_hook+0x160/0x510 [ 2614.954886] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2614.955855] __ip_finish_output.part.0+0x5f3/0xb50 [ 2614.956787] ? ip_fragment.constprop.0+0x240/0x240 [ 2614.957706] ? nf_hook+0x510/0x510 [ 2614.958393] ip_output+0x2f7/0x600 [ 2614.959074] ip_send_skb+0xdd/0x260 [ 2614.959774] udp_send_skb+0x6da/0x11d0 [ 2614.960523] udp_sendmsg+0x197f/0x2170 [ 2614.961365] ? ip_frag_init+0x350/0x350 [ 2614.962126] ? udp_setsockopt+0xc0/0xc0 [ 2614.963006] ? lock_chain_count+0x20/0x20 [ 2614.963805] ? mark_lock+0xf5/0x2df0 [ 2614.964612] ? mark_lock+0xf5/0x2df0 [ 2614.965412] ? lock_chain_count+0x20/0x20 [ 2614.966217] ? ip_build_and_send_pkt+0x93b/0xdd0 [ 2614.967129] ? mark_lock+0xf5/0x2df0 [ 2614.967830] udpv6_sendmsg+0x1b4e/0x2af0 [ 2614.968594] ? __lock_acquire+0x1657/0x5b00 [ 2614.969418] ? udp_v6_push_pending_frames+0x360/0x360 [ 2614.970375] ? __lockdep_reset_lock+0x180/0x180 [ 2614.971279] ? __lockdep_reset_lock+0x180/0x180 [ 2614.972154] ? lock_acquire+0x197/0x470 [ 2614.972899] ? find_held_lock+0x2c/0x110 [ 2614.973660] ? __might_fault+0xd3/0x180 [ 2614.974407] ? lock_downgrade+0x6d0/0x6d0 [ 2614.975216] ? lock_chain_count+0x20/0x20 [ 2614.975993] ? sock_has_perm+0x1ea/0x280 [ 2614.976765] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2614.977767] ? __import_iovec+0x458/0x590 [ 2614.978549] ? udp_v6_push_pending_frames+0x360/0x360 [ 2614.979679] inet6_sendmsg+0x105/0x140 [ 2614.980421] ? inet6_compat_ioctl+0x320/0x320 [ 2614.981283] __sock_sendmsg+0xf2/0x190 [ 2614.982048] ____sys_sendmsg+0x334/0x870 [ 2614.982858] ? sock_write_iter+0x3d0/0x3d0 [ 2614.983658] ? do_recvmmsg+0x6d0/0x6d0 [ 2614.984382] ? find_held_lock+0x2c/0x110 [ 2614.985195] ___sys_sendmsg+0xf3/0x170 [ 2614.985981] ? sendmsg_copy_msghdr+0x160/0x160 [ 2614.986976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2614.988080] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2614.988906] ? trace_hardirqs_on+0x5b/0x180 [ 2614.989721] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2614.990552] ? finish_task_switch+0x126/0x5d0 [ 2614.991403] ? finish_task_switch+0xef/0x5d0 [ 2614.992227] ? __switch_to+0x572/0xf70 [ 2614.992949] ? __switch_to_asm+0x3a/0x60 [ 2614.993683] ? __switch_to_asm+0x34/0x60 [ 2614.994434] ? __schedule+0x82c/0x1ea0 [ 2614.995172] ? io_schedule_timeout+0x140/0x140 [ 2614.996036] __sys_sendmmsg+0x195/0x470 [ 2614.996776] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2614.997573] ? lock_downgrade+0x6d0/0x6d0 [ 2614.998361] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2614.999309] ? wait_for_completion_io+0x270/0x270 [ 2615.000258] ? rcu_read_lock_any_held+0x75/0xa0 [ 2615.001111] ? vfs_write+0x354/0xa70 [ 2615.001853] ? fput_many+0x2f/0x1a0 [ 2615.002553] ? ksys_write+0x1a9/0x260 [ 2615.003237] ? __ia32_sys_read+0xb0/0xb0 [ 2615.004001] __x64_sys_sendmmsg+0x99/0x100 [ 2615.004768] do_syscall_64+0x33/0x40 [ 2615.005551] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2615.006545] RIP: 0033:0x7f1c4c8a5b19 [ 2615.007349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2615.010804] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2615.012215] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2615.013528] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2615.014849] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2615.016136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2615.017440] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:35:33 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:35:33 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64, @ANYRES64=r1]) r2 = signalfd4(r0, &(0x7f0000000080)={[0x46ff]}, 0x8, 0x80000) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @local}, {0x6, @remote}, 0x20, {0x2, 0x4e22, @remote}, 'vxcan1\x00'}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) fcntl$notify(r0, 0x402, 0x80000045) shutdown(r1, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x5, 0x9, &(0x7f0000000a80)=[{&(0x7f00000004c0)="7f88b2fd9bbe958ae16a68031a6142cc6f802c8a671eac4c025d8d453deb94b32b5e16889326c1df37aef7e730f4cf5001cb8bf41bc79082cf80cc675e4a3d9128dca13a417379981efc22e5239abc34ad5f1abae2202fd6f5c3325138827f26df58f143dbd3adeb22a92e81d7ef3cf996902c6463c2f68415c9789c78b0fb0a7fd566d700f96885d0f4efc783d57e8ce95b6ed92e571f04fabcc260108038c0a5c2f51da996aba19a34e7fa1d01", 0xae, 0x64}, {&(0x7f0000000580)="d7d05d8eaa1e21738573ea39b22a074cf650a26021568d6782fbb3ca061ea678e426e2edfa94a8203c3a248164ca391d13227019b8d22654c220c294c333f724eb82f21d8cf465f74d69d9d684ad7b665058c86fbbdf467b94c26572a6a301370df7d697a41c7eb7a35485520337e8fda0650fe3806f1886560001efe4cdcca7663de52ed45e6dfe45c1e5c10e3626fbaa6257eef2d6bf13395da65d9876", 0x9e, 0x9}, {&(0x7f0000000640)="5410247ca218c2ad63193405cce6427a9ff847909f6a3f3fbb6b4ed3dbb6f8e6b40a523e81897c2bd5acd318734604b82ef776b8e2eee3bd9636d172687327013c9eed04debc9e3d10d97cd8fc38c1f462fd159e4f9dcd9704", 0x59, 0x7fffffff}, {&(0x7f00000006c0)="55a27b1d787ac7f8abb8ea7bc2f356260a5689c8d8b771c825a491a17f7a89", 0x1f, 0x4}, {&(0x7f0000000700)="d0cff360ee14413c9064b7a4ff0f86c443704b8b942bbd0adaa23a4d2da716d56be898a002a0158a527838e7878388303873961d51ff05f2d93bd42d927543137a426e9629ccd5356daf589e4c491e2861fb2fc43ac45029fadd7ccea4cf9afa4d870ddf39e0a778630b20c7c4553aa2ef16309ebb50f79dcead6e92c110a4f8570c16de84f49c86ba97dd94fccfa22acc106636635a2c806633ac72eeb5f3d3667d4b8682d2", 0xa6, 0x579eac00}, {&(0x7f00000007c0)="662ea29840ad62026c889f958429253010cfef6e8b594a9cf9d39b63f976815d3faf719c2e8af977e224f4f741e1a96ab12a939273e570657c19eb33a782db3cbd7cc18162173aa35230892bef9fd9b0da4df5998168035008798e3c76c4c3fdefd4ed1cb07452bcc9245d66f42d305bee12e5c07b25da0b9542fd82127b763909c069fe914a33abc6fdacd1c035b2388569e6c0b1215b7f40bed0e05c7c62baf227947817c66add8eec92c3ceade8617f0f5134547d234f4fa09d913893cdf172728fd1576d9bdd5b598aa19bdae81d556689662b0cd6e4494231f734b647fa8e1a0eb41c98b905723b31194ed3da12c9b1", 0xf2, 0x4}, {&(0x7f00000008c0)="8aad73de9ac19f0de4896cb1a7fb97d9c81c3acb1ab4bdee1091f98633842215a5e646f21ca0b12d2a5b88dae5ae5ac17575b326a6da9b91447c58dea82af2be72c35f36809d15b98505498b5a997ab8ba9a75afd3588810d5f007861b46311a0a13780fac360f824cb669c083a4a23e0d574bdbb3d49d79c7d026dea5d74fd16874fa348c316eccd7574959f165fa6138bd1afb8d436ee4c2aae4c084a15ab51c8674aa78a67a5e2afb88402cab482521c7ba75034c32ad5315a8ba5357ce9533eca24992f058ac0ba37df25e57c58a9cce44a70efeb68a12752fe6e2bf141642e00d29cb135cb473b8896c", 0xec, 0x3}, {&(0x7f00000009c0), 0x0, 0x4}, {&(0x7f0000000a00)="da895106685d11877a387735d5428eec909770d47915bb2e7c0ed9e748adec1d6a13290b07b7a08d71756d0acbee8ccce1f124013190a867f7eaeb73adc80bae4f24619f", 0x44, 0x10001}], 0x840, &(0x7f00000020c0)={[{@grpquota}, {@minixdf}, {@bsdgroups}, {@journal_async_commit}, {@i_version}], [{@subj_user={'subj_user', 0x3d, 'vxcan1\x00'}}, {@subj_type={'subj_type', 0x3d, 'vxcan1\x00'}}, {@measure}, {@context={'context', 0x3d, 'root'}}, {@appraise_type}, {@fowner_gt}, {@euid_gt}, {@fowner_lt}]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f00000003c0)) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)={0x800005, 0x0, 0x8000, 0x0, 0xfffffffb}) recvmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x1, 0x120, &(0x7f0000000340)={0x77359400}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x509940, 0x11) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000200)=0x4, &(0x7f0000000380)=0x1) connect$inet(r5, &(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10) unshare(0x48020200) 20:35:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 20:35:33 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) finit_module(r1, &(0x7f0000000000)='dirsync\x00', 0x6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fcntl$dupfd(r2, 0x406, r0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r3 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='dirsync\x00', 0x0, 0x0) 20:35:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x4000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:35:54 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x5000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:35:54 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:35:54 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0x400, 0xc9, 0x1, 0x611}, {0x216a, 0x17, 0x2, 0x5}, {0x9, 0x1, 0x6, 0x6}, {0x7f, 0x8f, 0x4, 0x5}, {0xb07, 0x2, 0x3, 0x8d58}]}) fcntl$setsig(r0, 0xa, 0x34) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x103000, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:kmsg_device_t:s0\x00', 0x23, 0x1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0x0, 0x0) 20:35:54 executing program 0: r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0xa673}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x2dc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000140)=ANY=[], 0x10) r6 = fork() r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r6, 0x4, 0xffffffffffffffff, r7) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r7, &(0x7f00000001c0)={0x2004}) sendfile(r4, r5, 0x0, 0x20d315) io_uring_enter(r5, 0x5477, 0x8c23, 0x2, &(0x7f0000000180)={[0x6]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 20:35:54 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 20:35:54 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r1) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x1, 0x90, 0x0, 0x0, 0x8, 0xa000, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x4d28, 0x100000001, 0x3ff, 0x4, 0x10000, 0x4, 0x5, 0x0, 0x8, 0x0, 0x9}, 0x0, 0x1, r3, 0xa) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:35:54 executing program 5: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x8) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000004c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f61636c2c005a81b1dd12d0807dfe5a5bcb7103ed5ed702465e46d76aaa1c32962611a6cb70e84ebc3ad8881be76ec82a36994c7f2ce5e391a6ff597494a371f4db85255310"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000280)) [ 2636.558463] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2636.572040] FAT-fs (loop6): unable to read boot sector 20:35:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 51) [ 2636.606416] udc-core: couldn't find an available UDC or it's busy [ 2636.607798] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2636.632444] FAULT_INJECTION: forcing a failure. [ 2636.632444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2636.634911] CPU: 1 PID: 47963 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2636.636333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2636.638008] Call Trace: [ 2636.638554] dump_stack+0x107/0x167 [ 2636.639313] should_fail.cold+0x5/0xa [ 2636.640107] _copy_from_user+0x2e/0x1b0 [ 2636.640923] __copy_msghdr_from_user+0x91/0x4b0 [ 2636.641869] ? __ia32_sys_shutdown+0x80/0x80 [ 2636.642770] ? perf_trace_lock+0xac/0x490 [ 2636.643618] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2636.644678] sendmsg_copy_msghdr+0xa1/0x160 [ 2636.645562] ? do_recvmmsg+0x6d0/0x6d0 [ 2636.646360] ? find_held_lock+0x2c/0x110 [ 2636.647235] ___sys_sendmsg+0xc6/0x170 [ 2636.648024] ? sendmsg_copy_msghdr+0x160/0x160 [ 2636.648949] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2636.650012] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2636.650914] ? trace_hardirqs_on+0x5b/0x180 [ 2636.651806] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2636.652720] ? finish_task_switch+0x126/0x5d0 [ 2636.653634] ? finish_task_switch+0xef/0x5d0 [ 2636.654544] ? __switch_to+0x572/0xf70 [ 2636.655343] ? __switch_to_asm+0x3a/0x60 [ 2636.656155] ? __switch_to_asm+0x34/0x60 [ 2636.656978] ? __schedule+0x82c/0x1ea0 [ 2636.657780] ? io_schedule_timeout+0x140/0x140 [ 2636.658725] __sys_sendmmsg+0x195/0x470 [ 2636.659545] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2636.660418] ? lock_downgrade+0x6d0/0x6d0 [ 2636.661273] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2636.662250] ? wait_for_completion_io+0x270/0x270 [ 2636.663234] ? rcu_read_lock_any_held+0x75/0xa0 [ 2636.664170] ? vfs_write+0x354/0xa70 [ 2636.664929] ? fput_many+0x2f/0x1a0 [ 2636.665666] ? ksys_write+0x1a9/0x260 [ 2636.666458] ? __ia32_sys_read+0xb0/0xb0 [ 2636.667336] __x64_sys_sendmmsg+0x99/0x100 [ 2636.668201] do_syscall_64+0x33/0x40 [ 2636.668958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2636.670000] RIP: 0033:0x7f1c4c8a5b19 [ 2636.670754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2636.674494] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2636.676040] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2636.677477] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2636.678910] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2636.680368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2636.681807] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:35:54 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) 20:35:55 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x1274, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280), 0x2) r3 = dup2(r1, r1) r4 = syz_io_uring_complete(0x0) r5 = io_uring_setup(0x1b33, &(0x7f00000003c0)={0x0, 0xc7e7, 0x20, 0x3, 0x175, 0x0, r2}) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000480)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000440)=ANY=[@ANYBLOB="010099000100800018000000", @ANYRES32=r5, @ANYBLOB="01000000000000002e2f66696c653000"]) write$binfmt_elf64(r3, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7f, 0x2, 0x6, 0x0, 0xea5, 0x2, 0x3e, 0x1800, 0x3bd, 0x40, 0x31e, 0x6, 0x201, 0x38, 0x1, 0x1f32, 0x1, 0x100}, [{0x0, 0x3, 0x5, 0xff, 0xa0, 0xdd7, 0x1000000003, 0xffff}], "5563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b", ['\x00', '\x00', '\x00']}, 0x3b4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4a6c80) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') clone3(&(0x7f0000000200)={0x451a6100, &(0x7f00000000c0), 0x0, &(0x7f0000000100), {0x16}, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) [ 2636.940869] audit: type=1326 audit(1703709355.093:110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47955 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de157eb19 code=0x7ffc0000 [ 2636.949344] audit: type=1326 audit(1703709355.102:111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=47955 comm="syz-executor.5" exe="/syz-executor.5" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8de157eb19 code=0x7ffc0000 20:35:55 executing program 5: fcntl$addseals(0xffffffffffffffff, 0x409, 0xe) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file1', [{0x20, '/dev/urandom\x00'}, {0x20, 'trusted.overlay.nlink\x00'}, {0x20, 'U+'}, {0x20, '\\#\'-'}, {0x20, '/dev/urandom\x00'}, {0x20, 'U+'}, {0x20, '/dev/urandom\x00'}, {}], 0xa, "e3345e86d17e5809e7a4a76d8275c9ddcb1cf0274e18368fd055e207fb5bbf13ff73761e8a6693be8b62f1db9f9db2b7a15d4fdf0cb1a2fc2db5b2d555d705"}, 0x97) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x1}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDGETENTCNT(r1, 0x40085203, &(0x7f0000000100)) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), &(0x7f0000000040)={'U+'}, 0x16, 0x2) 20:35:55 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) 20:35:55 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:35:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0xf0ff1f00000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0xffff}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x1000, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100001000000000000000000000000000500000024386a562b500000000c00008008000d00ac141400"], 0x28}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = syz_open_dev$mouse(&(0x7f0000000400), 0x7fffffff, 0x2d0401) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x95}, 0x40000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) fadvise64(r0, 0x6, 0x5, 0x4) r4 = openat2(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x800, 0x1b9}, 0x18) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000240)=0x7100, 0x4) pread64(r3, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="0000abe02400030021206cda3b5e5672b89aeddb2a535fbd0706006dff0043a9d7cceb232fb81bf74ebdd05b7677", 0x2e}, {&(0x7f0000000680)="7fd41c04550300020000000000000000010046e92ed2616f72657d044129471d4fd47924fd0900e09e0068deec02", 0x2e}], 0x2) [ 2637.549613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2637.683270] udc-core: couldn't find an available UDC or it's busy [ 2637.685313] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:36:18 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:36:18 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/225, 0xe1, 0x9) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) epoll_create(0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') openat$cgroup_type(r3, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:36:18 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x6000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:36:18 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x109e}, r1, 0xb, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000010000001800000093d51820ceebf51db2a3c97cb3f506620375963edd2db09e9bc8cf901e1b25892477005d2808eeefcd6bd4a6183cfb9fb702f0410ca924cea9e086d9aefddef17b518b2809a076dabec50b41ed46159f68b53810780eadbd6dcc42c402bb477d4c0e08fc8edb24cb14b2f640ecdc3ed1d6f1abd2dede579dafe2eabc1ff2daa7ec8a8ec45fe5b92c4d43d5a24d6771fe0ab1c9e69f0e03a5d0f737370cc742f83a503559", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c653000"]) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x3, 0x80, 0x80, 0x5, 0x98, 0x4, 0x0, 0x7f, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x35, 0x1, @perf_bp={&(0x7f00000001c0), 0x3}, 0x3, 0x1, 0x7, 0x0, 0x1000, 0x7, 0xff, 0x0, 0x20, 0x0, 0x1000}, r3, 0x5, r3, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000740)='-*(!\'\t]&.\x8d\x81\xb77\x86!\xc4\x11\x7f\'-+--\x06`') mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x81b03000) r5 = eventfd2(0xffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {r0}}, './file0\x00'}) setxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x30001, 0x30) 20:36:18 executing program 5: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, 0x0, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/timers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r1) syz_io_uring_setup(0x3a75, &(0x7f0000000540)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) 20:36:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 52) 20:36:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 1) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:36:18 executing program 0: clock_gettime(0x0, &(0x7f00000003c0)={0x0}) setitimer(0x2, &(0x7f0000000400)={{r0}}, &(0x7f0000000480)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001f0020002cbd0000000000000001000004d20a0061002d245ec72ab9e0ba00000000000000000300"/56], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000600)=@updsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in6=@private0, {}, {0x7ffffffe}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}, @extra_flags={0x8, 0x18, 0x101}, @etimer_thresh={0x8, 0xc, 0x7db}, @lastused={0xc}]}, 0x164}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="425b52ee81368fcbc5ba1c2285c55336e616917a96d4720a0a9add5c971dbdc94c4560931e89a14e8f9447b2b4ae73f0f94058ec45d6ef7242dd345c0ddd2ba5f4f908db0aae86c3391a0091737b41f03b8a4259372118576143ad9f0ce7abbf1aefd60c20211ddbf3e3540a3b412e005fa59afb877794f5b6a6a68b", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250b000000080001007063690011000200303030303a30303a31302e300000000008000b000100696d0000000f0002006e6574646576736d6d30000008000b0080000000080001007063690011000200303030303a30303a31302e300000000008000b00aeffffff"], 0x84}}, 0x24000091) creat(0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x46e0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000100)) [ 2660.187395] FAULT_INJECTION: forcing a failure. [ 2660.187395] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.189743] CPU: 1 PID: 48702 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2660.191162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.192866] Call Trace: [ 2660.193414] dump_stack+0x107/0x167 [ 2660.194168] should_fail.cold+0x5/0xa [ 2660.194952] ? __alloc_skb+0x6d/0x5b0 [ 2660.195747] should_failslab+0x5/0x20 [ 2660.196531] kmem_cache_alloc_node+0x55/0x330 [ 2660.197459] __alloc_skb+0x6d/0x5b0 [ 2660.198213] alloc_skb_with_frags+0x92/0x570 [ 2660.199132] sock_alloc_send_pskb+0x7af/0x930 [ 2660.200084] ? sk_alloc+0x350/0x350 [ 2660.200838] ? perf_trace_lock+0xac/0x490 [ 2660.201684] ? SOFTIRQ_verbose+0x10/0x10 [ 2660.202526] __ip_append_data+0x1628/0x3310 [ 2660.203427] ? fib_select_path+0x95d/0x1e90 [ 2660.204311] ? __lockdep_reset_lock+0x180/0x180 [ 2660.205259] ? ip_frag_init+0x350/0x350 [ 2660.206087] ? ip_finish_output+0x330/0x330 [ 2660.206968] ? ip_route_output_key_hash+0x1a4/0x340 [ 2660.207991] ? ipv4_mtu+0x1ed/0x2c0 [ 2660.208745] ip_make_skb+0x22a/0x2a0 [ 2660.209503] ? ip_frag_init+0x350/0x350 [ 2660.210312] ? ip_flush_pending_frames+0x20/0x20 [ 2660.211273] ? lock_downgrade+0x6d0/0x6d0 [ 2660.212147] ? xfrm_lookup_route+0x65/0x210 [ 2660.213027] udp_sendmsg+0x193f/0x2170 [ 2660.213821] ? ip_frag_init+0x350/0x350 [ 2660.214627] ? udp_setsockopt+0xc0/0xc0 [ 2660.215457] ? mark_lock+0xf5/0x2df0 [ 2660.216212] ? mark_lock+0xf5/0x2df0 [ 2660.216963] ? lock_chain_count+0x20/0x20 [ 2660.217800] ? lock_chain_count+0x20/0x20 [ 2660.218646] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.219714] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2660.220798] ? trace_hardirqs_on+0x5b/0x180 [ 2660.221668] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2660.222778] udpv6_sendmsg+0x1b4e/0x2af0 [ 2660.223625] ? __lock_acquire+0x1657/0x5b00 [ 2660.224525] ? udp_v6_push_pending_frames+0x360/0x360 [ 2660.225564] ? __lockdep_reset_lock+0x180/0x180 [ 2660.226513] ? __lockdep_reset_lock+0x180/0x180 [ 2660.227476] ? lock_acquire+0x197/0x470 [ 2660.228271] ? find_held_lock+0x2c/0x110 [ 2660.229107] ? __might_fault+0xd3/0x180 [ 2660.229897] ? lock_downgrade+0x6d0/0x6d0 [ 2660.230762] ? lock_chain_count+0x20/0x20 [ 2660.231613] ? sock_has_perm+0x1ea/0x280 [ 2660.232446] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2660.233501] ? __import_iovec+0x458/0x590 [ 2660.234338] ? udp_v6_push_pending_frames+0x360/0x360 [ 2660.235383] inet6_sendmsg+0x105/0x140 [ 2660.236170] ? inet6_compat_ioctl+0x320/0x320 [ 2660.237082] __sock_sendmsg+0xf2/0x190 [ 2660.237886] ____sys_sendmsg+0x334/0x870 [ 2660.238724] ? sock_write_iter+0x3d0/0x3d0 [ 2660.239597] ? do_recvmmsg+0x6d0/0x6d0 [ 2660.240399] ? __lock_acquire+0x1657/0x5b00 [ 2660.241296] ___sys_sendmsg+0xf3/0x170 [ 2660.242095] ? sendmsg_copy_msghdr+0x160/0x160 [ 2660.243031] ? __lockdep_reset_lock+0x180/0x180 [ 2660.243987] ? trace_hardirqs_on+0x5b/0x180 [ 2660.244875] ? lock_acquire+0x197/0x470 [ 2660.245689] ? find_held_lock+0x2c/0x110 [ 2660.246523] ? __might_fault+0xd3/0x180 [ 2660.247357] ? lock_downgrade+0x6d0/0x6d0 [ 2660.248212] ? io_schedule_timeout+0x140/0x140 [ 2660.249168] __sys_sendmmsg+0x195/0x470 [ 2660.249988] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2660.250873] ? lock_downgrade+0x6d0/0x6d0 [ 2660.251752] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2660.252747] ? wait_for_completion_io+0x270/0x270 [ 2660.253733] ? rcu_read_lock_any_held+0x75/0xa0 [ 2660.254689] ? vfs_write+0x354/0xa70 [ 2660.255465] ? fput_many+0x2f/0x1a0 [ 2660.256216] ? ksys_write+0x1a9/0x260 [ 2660.256995] ? __ia32_sys_read+0xb0/0xb0 [ 2660.257843] __x64_sys_sendmmsg+0x99/0x100 [ 2660.258709] do_syscall_64+0x33/0x40 [ 2660.259483] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2660.260568] RIP: 0033:0x7f1c4c8a5b19 [ 2660.261332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.265176] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2660.266729] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2660.268194] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2660.269650] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2660.271102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2660.272577] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:36:18 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000333e178500000000010000"], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x4000) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x2, 0x70bd28, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40004}, 0x802) [ 2660.498644] udc-core: couldn't find an available UDC or it's busy [ 2660.500343] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2660.525510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=49026 comm=syz-executor.0 [ 2660.623684] FAULT_INJECTION: forcing a failure. [ 2660.623684] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.626025] CPU: 1 PID: 48901 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2660.627447] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.629132] Call Trace: [ 2660.629682] dump_stack+0x107/0x167 [ 2660.630441] should_fail.cold+0x5/0xa [ 2660.631229] ? loop_add+0x4e/0x8b0 [ 2660.631975] should_failslab+0x5/0x20 [ 2660.632760] kmem_cache_alloc_trace+0x55/0x320 [ 2660.633704] loop_add+0x4e/0x8b0 [ 2660.634412] loop_control_ioctl+0x170/0x480 [ 2660.635297] ? loop_lookup+0x1d0/0x1d0 [ 2660.636141] ? selinux_file_ioctl+0xb6/0x270 [ 2660.637038] ? loop_lookup+0x1d0/0x1d0 [ 2660.637842] __x64_sys_ioctl+0x19a/0x210 [ 2660.638670] do_syscall_64+0x33/0x40 [ 2660.639451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2660.640485] RIP: 0033:0x7fe76d773b19 [ 2660.641246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.644996] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2660.646527] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2660.647997] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2660.649453] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2660.650907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2660.652396] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:36:18 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 53) [ 2660.798747] FAULT_INJECTION: forcing a failure. [ 2660.798747] name failslab, interval 1, probability 0, space 0, times 0 [ 2660.801047] CPU: 1 PID: 49156 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2660.802358] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2660.803943] Call Trace: [ 2660.804450] dump_stack+0x107/0x167 [ 2660.805187] should_fail.cold+0x5/0xa [ 2660.805923] ? create_object.isra.0+0x3a/0xa20 [ 2660.806846] ? create_object.isra.0+0x3a/0xa20 [ 2660.807797] should_failslab+0x5/0x20 [ 2660.808567] kmem_cache_alloc+0x5b/0x310 [ 2660.809386] create_object.isra.0+0x3a/0xa20 [ 2660.810284] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2660.811308] kmem_cache_alloc_node+0x169/0x330 [ 2660.812250] __alloc_skb+0x6d/0x5b0 [ 2660.812992] alloc_skb_with_frags+0x92/0x570 [ 2660.813882] sock_alloc_send_pskb+0x7af/0x930 [ 2660.814824] ? sk_alloc+0x350/0x350 [ 2660.815575] ? perf_trace_lock+0xac/0x490 [ 2660.816411] ? SOFTIRQ_verbose+0x10/0x10 [ 2660.817214] __ip_append_data+0x1628/0x3310 [ 2660.818055] ? fib_select_path+0x95d/0x1e90 [ 2660.818894] ? __lockdep_reset_lock+0x180/0x180 [ 2660.819812] ? ip_frag_init+0x350/0x350 [ 2660.820637] ? ip_finish_output+0x330/0x330 [ 2660.821475] ? ip_route_output_key_hash+0x1a4/0x340 [ 2660.822436] ? ipv4_mtu+0x1ed/0x2c0 [ 2660.823143] ip_make_skb+0x22a/0x2a0 [ 2660.823891] ? ip_frag_init+0x350/0x350 [ 2660.824656] ? ip_flush_pending_frames+0x20/0x20 [ 2660.825608] ? lock_downgrade+0x6d0/0x6d0 [ 2660.826411] ? xfrm_lookup_route+0x65/0x210 [ 2660.827246] udp_sendmsg+0x193f/0x2170 [ 2660.828054] ? ip_frag_init+0x350/0x350 [ 2660.828827] ? udp_setsockopt+0xc0/0xc0 [ 2660.829632] ? mark_lock+0xf5/0x2df0 [ 2660.830351] ? mark_lock+0xf5/0x2df0 [ 2660.831087] ? lock_chain_count+0x20/0x20 [ 2660.831892] ? lock_chain_count+0x20/0x20 [ 2660.832695] ? __lockdep_reset_lock+0x180/0x180 [ 2660.833608] ? __lock_acquire+0x1657/0x5b00 [ 2660.834444] udpv6_sendmsg+0x1b4e/0x2af0 [ 2660.835228] ? __lock_acquire+0x1657/0x5b00 [ 2660.836076] ? udp_v6_push_pending_frames+0x360/0x360 [ 2660.837068] ? __lockdep_reset_lock+0x180/0x180 [ 2660.837971] ? __lockdep_reset_lock+0x180/0x180 [ 2660.838872] ? lock_acquire+0x197/0x470 [ 2660.839683] ? find_held_lock+0x2c/0x110 [ 2660.840467] ? __might_fault+0xd3/0x180 [ 2660.841250] ? lock_downgrade+0x6d0/0x6d0 [ 2660.842044] ? lock_chain_count+0x20/0x20 [ 2660.842868] ? sock_has_perm+0x1ea/0x280 [ 2660.843657] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2660.844668] ? __import_iovec+0x458/0x590 [ 2660.845462] ? udp_v6_push_pending_frames+0x360/0x360 [ 2660.846445] inet6_sendmsg+0x105/0x140 [ 2660.847191] ? inet6_compat_ioctl+0x320/0x320 [ 2660.848063] __sock_sendmsg+0xf2/0x190 [ 2660.848805] ____sys_sendmsg+0x334/0x870 [ 2660.849580] ? sock_write_iter+0x3d0/0x3d0 [ 2660.850384] ? do_recvmmsg+0x6d0/0x6d0 [ 2660.851132] ? find_held_lock+0x2c/0x110 [ 2660.851965] ___sys_sendmsg+0xf3/0x170 [ 2660.852709] ? sendmsg_copy_msghdr+0x160/0x160 [ 2660.853617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2660.854617] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2660.855512] ? trace_hardirqs_on+0x5b/0x180 [ 2660.856337] ? finish_task_switch+0x1a4/0x5d0 [ 2660.857228] ? __switch_to+0x572/0xf70 [ 2660.857968] ? __switch_to_asm+0x3a/0x60 [ 2660.858779] ? __switch_to_asm+0x34/0x60 [ 2660.859575] ? __schedule+0x82c/0x1ea0 [ 2660.860348] ? io_schedule_timeout+0x140/0x140 [ 2660.861234] __sys_sendmmsg+0x195/0x470 [ 2660.862003] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2660.862824] ? lock_downgrade+0x6d0/0x6d0 [ 2660.863640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2660.864601] ? wait_for_completion_io+0x270/0x270 [ 2660.865522] ? rcu_read_lock_any_held+0x75/0xa0 [ 2660.866405] ? vfs_write+0x354/0xa70 [ 2660.867109] ? fput_many+0x2f/0x1a0 [ 2660.867817] ? ksys_write+0x1a9/0x260 [ 2660.868542] ? __ia32_sys_read+0xb0/0xb0 [ 2660.869315] __x64_sys_sendmmsg+0x99/0x100 [ 2660.870118] do_syscall_64+0x33/0x40 [ 2660.870818] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2660.871804] RIP: 0033:0x7f1c4c8a5b19 [ 2660.872516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2660.875991] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2660.877446] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2660.878794] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2660.880226] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2660.881563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2660.883013] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:36:19 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000440)={0x0, 0x2b, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="010200000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="14000400677265746170300000000000000000000800050004000000050053000100"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x6196463cfc0938a0}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xfff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x68}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="08002abd7000fbdbdf250f00000008000300b2cbec222fe206e05043acdfa860dead67fb93ebfc06c739c6f1", @ANYRES32=r4, @ANYBLOB="04004600e8005a80ac0001800d000100121b011b0936042416000000210001000224040b6c02011b3605126c04611205093609026c1b0216000c36091b0000001b00010024040c24360b48da0b48240b056c09489409036036480b0005000100480000002b000200353e46124b100019134a0b3925510140310a2049173c151a13372a2f4b1750554b0003091d274f000d0001000418180b014802180b0000001400030020000300000000001f00fcff090006003800028023000100020218121848046c1b3630090404306c020712040624600c0503306018360900050004000200000005000400000000000600960008000000"], 0x110}}, 0x81) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file2\x00']) syz_emit_ethernet(0x7a, &(0x7f0000000800)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @val={@val={0x9100, 0x7, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x3c, 0xda, 0x1, 0x0, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x400}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@remote, 0x2}, {@empty, 0x7}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) clone3(&(0x7f0000000200)={0x44004100, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:36:19 executing program 5: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/225, 0xe1, 0x9) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) epoll_create(0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') openat$cgroup_type(r3, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:36:19 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 2) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2661.025576] FAULT_INJECTION: forcing a failure. [ 2661.025576] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.027830] CPU: 1 PID: 49179 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2661.029032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.030484] Call Trace: [ 2661.030952] dump_stack+0x107/0x167 [ 2661.031601] should_fail.cold+0x5/0xa [ 2661.032269] ? create_object.isra.0+0x3a/0xa20 [ 2661.033079] should_failslab+0x5/0x20 [ 2661.033744] kmem_cache_alloc+0x5b/0x310 [ 2661.034471] create_object.isra.0+0x3a/0xa20 [ 2661.035274] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2661.036181] kmem_cache_alloc_trace+0x151/0x320 [ 2661.036993] loop_add+0x4e/0x8b0 [ 2661.037593] loop_control_ioctl+0x170/0x480 [ 2661.038321] ? loop_lookup+0x1d0/0x1d0 [ 2661.039010] ? selinux_file_ioctl+0xb6/0x270 [ 2661.039767] ? loop_lookup+0x1d0/0x1d0 [ 2661.040459] __x64_sys_ioctl+0x19a/0x210 [ 2661.041159] do_syscall_64+0x33/0x40 [ 2661.041822] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2661.042697] RIP: 0033:0x7fe76d773b19 [ 2661.043377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.046788] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2661.048141] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2661.049446] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2661.050684] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2661.051956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2661.053277] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:36:19 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) signalfd(r2, &(0x7f0000000000)={[0x2]}, 0x8) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r3) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:36:19 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 54) 20:36:19 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x7000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2661.628875] FAULT_INJECTION: forcing a failure. [ 2661.628875] name failslab, interval 1, probability 0, space 0, times 0 [ 2661.631416] CPU: 0 PID: 49351 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2661.632847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2661.634518] Call Trace: [ 2661.635154] dump_stack+0x107/0x167 [ 2661.636068] should_fail.cold+0x5/0xa [ 2661.637022] should_failslab+0x5/0x20 [ 2661.637862] __kmalloc_node_track_caller+0x74/0x3b0 [ 2661.638905] ? alloc_skb_with_frags+0x92/0x570 [ 2661.640002] __alloc_skb+0xb1/0x5b0 [ 2661.640894] alloc_skb_with_frags+0x92/0x570 [ 2661.642045] sock_alloc_send_pskb+0x7af/0x930 [ 2661.643248] ? sk_alloc+0x350/0x350 [ 2661.644185] ? perf_trace_lock+0xac/0x490 [ 2661.645045] ? SOFTIRQ_verbose+0x10/0x10 [ 2661.646066] __ip_append_data+0x1628/0x3310 [ 2661.647095] ? fib_select_path+0x95d/0x1e90 [ 2661.648061] ? __lockdep_reset_lock+0x180/0x180 [ 2661.649036] ? ip_frag_init+0x350/0x350 [ 2661.650100] ? ip_finish_output+0x330/0x330 [ 2661.651073] ? ip_route_output_key_hash+0x1a4/0x340 [ 2661.652136] ? ipv4_mtu+0x1ed/0x2c0 [ 2661.653091] ip_make_skb+0x22a/0x2a0 [ 2661.653995] ? ip_frag_init+0x350/0x350 [ 2661.654903] ? ip_flush_pending_frames+0x20/0x20 [ 2661.656074] ? lock_downgrade+0x6d0/0x6d0 [ 2661.657054] ? xfrm_lookup_route+0x65/0x210 [ 2661.658060] udp_sendmsg+0x193f/0x2170 [ 2661.659048] ? ip_frag_init+0x350/0x350 [ 2661.660082] ? udp_setsockopt+0xc0/0xc0 [ 2661.660972] ? perf_event_switch_output+0x7d0/0x7d0 [ 2661.662067] ? perf_event_output_forward+0x13f/0x2c0 [ 2661.663125] ? lock_downgrade+0x6d0/0x6d0 [ 2661.664137] ? mark_lock+0xf5/0x2df0 [ 2661.664947] ? perf_event_output_forward+0x168/0x2c0 [ 2661.666131] ? perf_prepare_sample+0x1be0/0x1be0 [ 2661.667086] ? lock_downgrade+0x6d0/0x6d0 [ 2661.668111] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2661.669388] udpv6_sendmsg+0x1b4e/0x2af0 [ 2661.670303] ? __lock_acquire+0x1657/0x5b00 [ 2661.671412] ? udp_v6_push_pending_frames+0x360/0x360 [ 2661.672619] ? perf_event_switch_output+0x7d0/0x7d0 [ 2661.673696] ? __lockdep_reset_lock+0x180/0x180 [ 2661.674683] ? perf_event_switch_output+0x7d0/0x7d0 [ 2661.675826] ? lock_acquire+0x197/0x470 [ 2661.676654] ? find_held_lock+0x2c/0x110 [ 2661.677606] ? __might_fault+0xd3/0x180 [ 2661.678466] ? lock_downgrade+0x6d0/0x6d0 [ 2661.679339] ? lock_chain_count+0x20/0x20 [ 2661.680268] ? sock_has_perm+0x1ea/0x280 [ 2661.681153] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2661.682561] ? __import_iovec+0x458/0x590 [ 2661.683455] ? udp_v6_push_pending_frames+0x360/0x360 [ 2661.684598] inet6_sendmsg+0x105/0x140 [ 2661.685447] ? inet6_compat_ioctl+0x320/0x320 [ 2661.686370] __sock_sendmsg+0xf2/0x190 [ 2661.687225] ____sys_sendmsg+0x334/0x870 [ 2661.688174] ? sock_write_iter+0x3d0/0x3d0 [ 2661.689084] ? do_recvmmsg+0x6d0/0x6d0 [ 2661.690002] ? find_held_lock+0x2c/0x110 [ 2661.691060] ___sys_sendmsg+0xf3/0x170 [ 2661.691936] ? sendmsg_copy_msghdr+0x160/0x160 [ 2661.692934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2661.694016] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2661.694911] ? trace_hardirqs_on+0x5b/0x180 [ 2661.695851] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2661.696771] ? finish_task_switch+0x126/0x5d0 [ 2661.697666] ? finish_task_switch+0xef/0x5d0 [ 2661.698549] ? __switch_to+0x572/0xf70 [ 2661.699344] ? __switch_to_asm+0x3a/0x60 [ 2661.700176] ? __switch_to_asm+0x34/0x60 [ 2661.701091] ? __schedule+0x82c/0x1ea0 [ 2661.702055] ? io_schedule_timeout+0x140/0x140 [ 2661.703254] __sys_sendmmsg+0x195/0x470 [ 2661.704198] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2661.705100] ? lock_downgrade+0x6d0/0x6d0 [ 2661.706252] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2661.707328] ? wait_for_completion_io+0x270/0x270 [ 2661.708361] ? rcu_read_lock_any_held+0x75/0xa0 [ 2661.709310] ? vfs_write+0x354/0xa70 [ 2661.710160] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2661.711253] ? ksys_write+0x1a9/0x260 [ 2661.712072] ? __ia32_sys_read+0xb0/0xb0 [ 2661.713058] __x64_sys_sendmmsg+0x99/0x100 [ 2661.713983] do_syscall_64+0x33/0x40 [ 2661.714777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2661.715805] RIP: 0033:0x7f1c4c8a5b19 [ 2661.716560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2661.719980] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2661.721478] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2661.722840] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2661.724226] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2661.725597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2661.726953] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:36:41 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x5, 0x69, 0x3, 0x62, 0x0, 0x47c1, 0x2f424, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x63, 0x1, @perf_config_ext={0xffffffff}, 0x80, 0x800, 0x280000, 0x1, 0x3, 0xfffffffe, 0x8, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r0, 0x8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) move_pages(0x0, 0x4, &(0x7f0000000080)=[&(0x7f0000fed000/0x10000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000eb8000/0x2000)=nil], &(0x7f00000000c0)=[0x6, 0x10001, 0xb42], &(0x7f0000000100)=[0x0], 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:36:41 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r0 = getpgrp(0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x0, 0x3, 0x1c, 0x19, "77c6ae7b809d08981c6c33ab68fc781f0b2cd4c8f00f89a26586693db871962d6119b0a5d807ea00d2a959d7e654ef9590fa26f4710807225b0b085525081159", "64ff88957ce34328111b8a3a24448f70b36bc53ab2eb69ff962d8cdffb43e8a3", [0x0, 0xd8]}) waitid(0x2, r0, &(0x7f0000000080), 0x6000000d, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) mmap$usbmon(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000001, 0x40010, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e00210e000000f4000000c863000100000079fd0000205e5c000800000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) 20:36:41 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:36:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 55) 20:36:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8040000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:36:41 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000000c0)={0x1, 0x0, 0x80000000}) openat(r1, &(0x7f0000000140)='./file0\x00', 0x109200, 0x10e) openat$incfs(r0, 0x0, 0x220001, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x31b) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x162, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x100000000, 0x1}, 0x0, 0x0, 0x2000, 0x5, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000880)=""/4096, 0x1000) 20:36:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 3) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:36:41 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="27dd034374a80e3318d3f9345d1135e5c6d9", @ANYRESDEC=0x0, @ANYBLOB="145c8f8b38f7865837aa2bb5909686fdaf1d7a7ba8d1cd7818fe3d12e354446728d1f4a565c79069c8cdf182b84eab4c4db9d736ed0644a1a45902c42a66ea76885a7eb79445de0b4baa2ce8bcd709e615320b7455597fe19a68bf6f328592a015113d4ce96994b1c9966862772a9868cc7584f589f0783a6f72a29f6abd9c09efa6df5fb2b0b1b83efe8e85954bb171c100"/158, @ANYRES32=0x0], 0xfdef) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fallocate(r0, 0x3, 0x0, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xfdef) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x105142, 0x0) fallocate(r1, 0x3, 0x0, 0x8000) [ 2683.328172] udc-core: couldn't find an available UDC or it's busy [ 2683.329521] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:36:41 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x18c6, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x54, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:36:41 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x30) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x2) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) creat(&(0x7f00000000c0)='./file0\x00', 0x108) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/drivers\x00', 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) [ 2683.605443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2683.610040] FAULT_INJECTION: forcing a failure. [ 2683.610040] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.612800] CPU: 1 PID: 49592 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2683.614187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2683.615899] Call Trace: [ 2683.616439] dump_stack+0x107/0x167 [ 2683.617184] should_fail.cold+0x5/0xa [ 2683.617962] ? blk_mq_realloc_tag_set_tags.part.0+0x7e/0x1a0 [ 2683.619108] ? blk_mq_realloc_tag_set_tags.part.0+0x7e/0x1a0 [ 2683.620293] should_failslab+0x5/0x20 [ 2683.621056] __kmalloc_node+0x76/0x420 [ 2683.621867] blk_mq_realloc_tag_set_tags.part.0+0x7e/0x1a0 [ 2683.622986] blk_mq_alloc_tag_set+0x60e/0xe70 [ 2683.623913] ? kasan_unpoison_shadow+0x33/0x50 [ 2683.624836] loop_add+0x26d/0x8b0 [ 2683.625557] loop_control_ioctl+0x170/0x480 [ 2683.626415] ? loop_lookup+0x1d0/0x1d0 [ 2683.627216] ? selinux_file_ioctl+0xb6/0x270 [ 2683.628116] ? loop_lookup+0x1d0/0x1d0 [ 2683.628917] __x64_sys_ioctl+0x19a/0x210 [ 2683.629739] do_syscall_64+0x33/0x40 [ 2683.630501] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2683.631519] RIP: 0033:0x7fe76d773b19 [ 2683.632290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2683.635944] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2683.637500] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2683.638957] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2683.640428] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2683.641883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2683.643336] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:36:41 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xc000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:36:41 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 4) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:36:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) r1 = syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x8013, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x80) r7 = fork() r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r7, 0x4, 0xffffffffffffffff, r8) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x48000, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r8, 0x2402, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000080)={0x1, 'veth0_to_bond\x00'}) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:36:42 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(0xffffffffffffffff, r1) fsetxattr$security_selinux(r1, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:audisp_var_run_t:s0\x00', 0x26, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000001900)=[{0x0, 0x0, 0x7fff}]) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000a40)) syz_read_part_table(0xffffffffffffffe0, 0x0, 0x0) r2 = dup2(r1, r1) r3 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x6, 0x3, 0x1, 0x0, 0x0, 0x7f, 0x240, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0x100000000}, 0x200, 0x9, 0x5, 0x0, 0xde6, 0x5, 0x2, 0x0, 0xfffffffd, 0x0, 0x100}, 0xffffffffffffffff, 0x9, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r3, {0xfffffff7}}, './file0\x00'}) syz_read_part_table(0x24, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="052ecef1a6c6d44fe98cd014d65e2baf053b990c79339885bdba34b1d05bba0338c7a82c3dd902c7ee8867a304227204a5581206ef37954e86ebdb108ea8543a879ef41dd382a92fee4edb63c6d439b59c824dd4540db62c77c9", 0x5a, 0x2}, {&(0x7f00000001c0)="b9bcd5cbf0ff70abdf9b1ca10f12166c925e855e6beb81960ff28d9a96b83769b16a5a7945bfbf07a847fd4d1214b2c130c7b08042c892d0f9d5c7c58813daca0b08614eb1b52c601506b9c2591f0aacc7229a157856ba67e3c9e23e7216b1baf6cf2e10ff8329c83d9ace3c2f0dfc5918e547f21747a89468d6314724731e86e7a2cece079854d3bf46fa8b4b5b5d3c7923c1801455298af1cc0c0de4a813dc0daf2c64a915d4bfc00db84cfa6103b39876ed3c311ad6f727feb82eda", 0xbd, 0x5}, {&(0x7f0000000000)="05595127fadfb8d5d88e7dcb", 0xc, 0x6}]) r4 = openat$cgroup_ro(r2, &(0x7f0000000640)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000680)) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) write$binfmt_elf64(r2, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x2, 0x2a, 0xfffffffffffffffe, 0x3, 0x3e, 0x2, 0xcf, 0x40, 0x1b1, 0x81, 0x7, 0x38, 0x2, 0x3, 0x7fff, 0x400}, [{0x3, 0xffffffff, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1ff}, {0x6474e551, 0x1, 0xd8c5, 0x5, 0x1, 0x1ff, 0x4, 0x8000000000000000}], "e90e2e11cc146e400ca76e501f178374a19ffc11ee6ae763b40aabb4a4893d9d26af4d1dfd00c7e9a6b369e35e7e09afef721d764f52549e23adb4a2e066df0e2aa1d5a536115862e8abb3803fbfad010228b36c1acff90a292b29b8b506ea91bbde69e0a023120e48eb85f82549e91cff16f8d2e15e0f9259cab8df69e1a09678ddd6e1425393326b3815c1401bcff4b3608582d8d7d36d2537fa8ba20a1228489e2d9c16b7afc75286776bb2448a25ef202f16fc40c0211bcd5be6fd81312aecf4fc91574f8125d64b6335", ['\x00', '\x00']}, 0x37c) syz_read_part_table(0xffffffffffffff01, 0x4, &(0x7f0000000400)=[{&(0x7f00000000c0)="d06c5101b2fcbb236b54876ab95553b0d92b3ed44690b2bc6c66c0b10ef88748ad2d7bc86e50a9a8844f9dfb2ed49b5d3b30293bce", 0x35, 0x100000001}, {&(0x7f0000000100)="a728440327a3a107a2aa71450fb81319", 0x10, 0x9}, {&(0x7f0000000280)="9eaaecb69efed2eb196056b247e3a37d1cd52a59bbcadc4d377716178252c16dcc2d8360d35fe55df0756ee01ed0f58b78844d9a285f38e7d1a6e729d6722baae6bae6a16aabc882dbbbe6c6dbfa6ab885823d246733af1f293365bb6df1b35bb0fb02b983163b54621686a3ecbdb168d16c21d2ed73429f2699b94cd7", 0x7d, 0x4}, {&(0x7f0000000380)="60fd5deaddfea445108778b7e6cc1f7b592fe7600deea86bca31fbe71f19f2e8f24b964e8f9961ea0ef2f5f838ba0a52c8b8883873ba7c079dc9011445f6e65d8dcc0e8b50ebf71d24df3d97e6fd80385b0158", 0x53, 0x7ff}]) [ 2683.949657] FAULT_INJECTION: forcing a failure. [ 2683.949657] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.951984] CPU: 1 PID: 49689 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2683.953379] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2683.955060] Call Trace: [ 2683.955597] dump_stack+0x107/0x167 [ 2683.956351] should_fail.cold+0x5/0xa [ 2683.957121] ? create_object.isra.0+0x3a/0xa20 [ 2683.958042] should_failslab+0x5/0x20 [ 2683.958802] kmem_cache_alloc+0x5b/0x310 [ 2683.959597] create_object.isra.0+0x3a/0xa20 [ 2683.960474] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2683.961453] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2683.962430] ? alloc_skb_with_frags+0x92/0x570 [ 2683.963310] __alloc_skb+0xb1/0x5b0 [ 2683.964050] alloc_skb_with_frags+0x92/0x570 [ 2683.964914] sock_alloc_send_pskb+0x7af/0x930 [ 2683.965797] ? sk_alloc+0x350/0x350 [ 2683.966517] ? perf_trace_lock+0xac/0x490 [ 2683.967323] ? SOFTIRQ_verbose+0x10/0x10 [ 2683.968129] __ip_append_data+0x1628/0x3310 [ 2683.968967] ? fib_select_path+0x95d/0x1e90 [ 2683.969832] ? __lockdep_reset_lock+0x180/0x180 [ 2683.970772] ? ip_frag_init+0x350/0x350 [ 2683.971562] ? ip_finish_output+0x330/0x330 [ 2683.972410] ? ip_route_output_key_hash+0x1a4/0x340 [ 2683.973368] ? ipv4_mtu+0x1ed/0x2c0 [ 2683.974082] ip_make_skb+0x22a/0x2a0 [ 2683.974803] ? ip_frag_init+0x350/0x350 [ 2683.975583] ? ip_flush_pending_frames+0x20/0x20 [ 2683.976514] ? lock_downgrade+0x6d0/0x6d0 [ 2683.977329] ? xfrm_lookup_route+0x65/0x210 [ 2683.978168] udp_sendmsg+0x193f/0x2170 [ 2683.978935] ? ip_frag_init+0x350/0x350 [ 2683.979728] ? udp_setsockopt+0xc0/0xc0 [ 2683.980509] ? perf_event_output_forward+0x13f/0x2c0 [ 2683.981484] ? lock_downgrade+0x6d0/0x6d0 [ 2683.982289] ? mark_lock+0xf5/0x2df0 [ 2683.983024] ? perf_prepare_sample+0x1be0/0x1be0 [ 2683.983950] ? lock_downgrade+0x6d0/0x6d0 [ 2683.984762] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2683.985735] udpv6_sendmsg+0x1b4e/0x2af0 [ 2683.986530] ? __lock_acquire+0x1657/0x5b00 [ 2683.987369] ? udp_v6_push_pending_frames+0x360/0x360 [ 2683.988374] ? __lockdep_reset_lock+0x180/0x180 [ 2683.989260] ? perf_event_switch_output+0x7d0/0x7d0 [ 2683.990214] ? lock_acquire+0x197/0x470 [ 2683.990974] ? find_held_lock+0x2c/0x110 [ 2683.991778] ? __might_fault+0xd3/0x180 [ 2683.992540] ? lock_downgrade+0x6d0/0x6d0 [ 2683.993336] ? lock_chain_count+0x20/0x20 [ 2683.994132] ? sock_has_perm+0x1ea/0x280 [ 2683.994923] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2683.995938] ? __import_iovec+0x458/0x590 [ 2683.996737] ? udp_v6_push_pending_frames+0x360/0x360 [ 2683.997724] inet6_sendmsg+0x105/0x140 [ 2683.998473] ? inet6_compat_ioctl+0x320/0x320 [ 2683.999327] __sock_sendmsg+0xf2/0x190 [ 2684.000098] ____sys_sendmsg+0x334/0x870 [ 2684.000878] ? sock_write_iter+0x3d0/0x3d0 [ 2684.001687] ? do_recvmmsg+0x6d0/0x6d0 [ 2684.002435] ? __lock_acquire+0x1657/0x5b00 [ 2684.003275] ___sys_sendmsg+0xf3/0x170 [ 2684.004029] ? sendmsg_copy_msghdr+0x160/0x160 [ 2684.004910] ? __lockdep_reset_lock+0x180/0x180 [ 2684.005797] ? trace_hardirqs_on+0x5b/0x180 [ 2684.006629] ? lock_acquire+0x197/0x470 [ 2684.007387] ? find_held_lock+0x2c/0x110 [ 2684.008185] ? __might_fault+0xd3/0x180 [ 2684.008945] ? lock_downgrade+0x6d0/0x6d0 [ 2684.009746] ? io_schedule_timeout+0x140/0x140 [ 2684.010636] __sys_sendmmsg+0x195/0x470 [ 2684.011412] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2684.012262] ? lock_downgrade+0x6d0/0x6d0 [ 2684.013069] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2684.013988] ? wait_for_completion_io+0x270/0x270 [ 2684.014902] ? rcu_read_lock_any_held+0x75/0xa0 [ 2684.015791] ? vfs_write+0x354/0xa70 [ 2684.016504] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2684.017523] ? ksys_write+0x1a9/0x260 [ 2684.018244] ? __ia32_sys_read+0xb0/0xb0 [ 2684.019023] __x64_sys_sendmmsg+0x99/0x100 [ 2684.019837] do_syscall_64+0x33/0x40 [ 2684.020542] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.021508] RIP: 0033:0x7f1c4c8a5b19 [ 2684.022214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.025687] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2684.027125] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2684.028481] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2684.029829] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.031176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2684.032544] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2684.068878] audit: type=1400 audit(1703709402.221:112): avc: denied { relabelto } for pid=49899 comm="syz-executor.3" name="RAW" dev="sockfs" ino=39227 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:audisp_runtime_t:s0 tclass=rawip_socket permissive=1 20:36:42 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xee, 0x7, 0x1, 0x0, 0x0, 0x1000000000, 0x30, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xdf7f0fe773cef8b4, 0x9, 0x4, 0x2, 0x1, 0x0, 0x882, 0x0, 0x7fff, 0x0, 0x8}, r1, 0xa, 0xffffffffffffffff, 0x5) 20:36:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x10000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:36:42 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index, 0xac, {}, 0x1, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4004, @fd_index=0x6, 0xa23, &(0x7f0000000140)=""/110, 0x6e, 0x1f}, 0x1000) r4 = fork() r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r4, 0x4, 0xffffffffffffffff, r5) ioctl$BTRFS_IOC_FS_INFO(r5, 0x8400941f, &(0x7f0000000500)) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2684.500946] FAULT_INJECTION: forcing a failure. [ 2684.500946] name failslab, interval 1, probability 0, space 0, times 0 [ 2684.503416] CPU: 1 PID: 50165 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2684.504573] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2684.505947] Call Trace: [ 2684.506444] dump_stack+0x107/0x167 [ 2684.507120] should_fail.cold+0x5/0xa [ 2684.507835] ? create_object.isra.0+0x3a/0xa20 [ 2684.508701] should_failslab+0x5/0x20 [ 2684.509416] kmem_cache_alloc+0x5b/0x310 [ 2684.510185] create_object.isra.0+0x3a/0xa20 [ 2684.510996] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2684.511920] __kmalloc_node+0x1ae/0x420 [ 2684.512679] blk_mq_realloc_tag_set_tags.part.0+0x7e/0x1a0 [ 2684.513701] blk_mq_alloc_tag_set+0x60e/0xe70 [ 2684.514444] ? kasan_unpoison_shadow+0x33/0x50 [ 2684.515270] loop_add+0x26d/0x8b0 [ 2684.515915] loop_control_ioctl+0x170/0x480 [ 2684.516714] ? loop_lookup+0x1d0/0x1d0 [ 2684.517445] ? selinux_file_ioctl+0xb6/0x270 [ 2684.518257] ? loop_lookup+0x1d0/0x1d0 [ 2684.519005] __x64_sys_ioctl+0x19a/0x210 [ 2684.519780] do_syscall_64+0x33/0x40 [ 2684.520456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2684.521383] RIP: 0033:0x7fe76d773b19 [ 2684.522047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2684.525340] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2684.526689] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2684.527943] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2684.529190] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2684.530464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2684.531755] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:36:42 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x12000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:37:11 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:37:11 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0\x00', 0x74) close_range(r0, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x130) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000040)={0x0, 0x80}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="32308b01c02e59eb82c91df70b9890b07d8f7eb36a311da012ce0208cef8cd21b289a2a70fad5c246548a833e4515a87b3749156ec5ef5cec8195c38e4effc3b896d117687f25db7020de31f9ea35042a8ab62fe057cdabf870cb9a3d18b866334eba573607f5ed567ff0643750e5dbbee6e03f4e5686dfa768c1b9b57bc76", @ANYRES16=r5, @ANYBLOB="00042bbd7000fbdbdf255200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000005a0000000400cf00050089007f0000000a00060008021100000100000500890007000000050088000b000000"], 0x50}, 0x1, 0x0, 0x0, 0x82}, 0x8000) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="36a8790d429b3e713ffc", @ANYRES16=r5, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0b1e14e088a40000"], 0x24}}, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000240)) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x110, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x42}, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22e0fefe48287a8b54961eef28cd63984784a277344e0bbd"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e77e6bdc142534743eb5c58cf128aee5d598496c90fb800d"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x110}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x0) r6 = openat(r1, &(0x7f00000001c0)='./file1\x00', 0x0, 0x8) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0x8) 20:37:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 56) 20:37:11 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x12010000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:37:11 executing program 5: io_submit(0x0, 0x2, &(0x7f0000001680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000040)="200000008000000006", 0x9}], 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='oom_adj\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='1', 0x1}], 0x6) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0x40000000}) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f00000004c0)={0x672a, 0x4}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000340)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0xa3, &(0x7f00000005c0)=""/163}, &(0x7f0000000040)="4feb7dc9066b", 0x0, 0x0, 0x0, 0x4, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x400081) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000480)={0x0, 0x2, 0xffffffffffffffff, 0xffffffff, 0x80000}) r7 = dup3(r6, r5, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000000c0)) r8 = syz_io_uring_setup(0x6e3a, &(0x7f00000002c0)={0x0, 0xf6aa, 0x0, 0x0, 0x292, 0x0, r7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f00000003c0)=[0xffffffffffffffff], 0x1) 20:37:11 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:37:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 5) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:37:11 executing program 0: r0 = epoll_create(0x8000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x20000001}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x51a6, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)}, 0x0) pipe(&(0x7f00000014c0)) syz_io_uring_setup(0x7, &(0x7f0000000180), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2713.153593] FAULT_INJECTION: forcing a failure. [ 2713.153593] name failslab, interval 1, probability 0, space 0, times 0 [ 2713.155928] CPU: 1 PID: 50656 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2713.157325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2713.158970] Call Trace: [ 2713.159504] dump_stack+0x107/0x167 [ 2713.160251] should_fail.cold+0x5/0xa [ 2713.161025] ? dst_alloc+0x9e/0x610 [ 2713.161761] should_failslab+0x5/0x20 [ 2713.162527] kmem_cache_alloc+0x5b/0x310 [ 2713.163347] dst_alloc+0x9e/0x610 [ 2713.164078] rt_dst_alloc+0x73/0x440 [ 2713.164836] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2713.165893] ip_route_output_key_hash+0x18d/0x340 [ 2713.166853] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2713.167976] ? mark_lock+0xf5/0x2df0 [ 2713.168732] ? __lock_acquire+0x1657/0x5b00 [ 2713.169601] ip_route_output_flow+0x23/0x150 [ 2713.170482] ip_tunnel_xmit+0x70e/0x2f50 [ 2713.170842] udc-core: couldn't find an available UDC or it's busy [ 2713.171294] ? usage_accumulate+0x70/0x110 [ 2713.171319] ? __is_insn_slot_addr+0x94/0x290 [ 2713.171338] ? perf_trace_lock+0xac/0x490 [ 2713.171358] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2713.171414] sit_tunnel_xmit+0xef0/0x2960 [ 2713.171448] ? ipip_rcv+0x4f0/0x4f0 [ 2713.172940] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2713.173630] ? skb_crc32c_csum_help+0x80/0x80 [ 2713.173653] ? lock_acquire+0x197/0x470 [ 2713.175261] FAULT_INJECTION: forcing a failure. [ 2713.175261] name failslab, interval 1, probability 0, space 0, times 0 [ 2713.175395] ? __dev_queue_xmit+0x1c2/0x2710 [ 2713.175431] ? netif_skb_features+0x536/0xa00 [ 2713.184881] dev_hard_start_xmit+0x1cb/0x6f0 [ 2713.185798] __dev_queue_xmit+0x17ec/0x2710 [ 2713.186680] ? find_held_lock+0x2c/0x110 [ 2713.187513] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2713.188457] ? lock_downgrade+0x6d0/0x6d0 [ 2713.189293] ? lock_acquire+0x197/0x470 [ 2713.190101] ? ip_finish_output2+0x220/0x21f0 [ 2713.191019] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2713.192108] neigh_connected_output+0x382/0x4d0 [ 2713.193064] ip_finish_output2+0x6f1/0x21f0 [ 2713.193945] ? nf_hook_slow+0xfc/0x1e0 [ 2713.194738] ? ip_frag_next+0x9e0/0x9e0 [ 2713.195540] ? nf_hook+0x160/0x510 [ 2713.196293] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2713.197324] __ip_finish_output.part.0+0x5f3/0xb50 [ 2713.198325] ? ip_fragment.constprop.0+0x240/0x240 [ 2713.199309] ? nf_hook+0x510/0x510 [ 2713.200052] ip_output+0x2f7/0x600 [ 2713.200782] ip_send_skb+0xdd/0x260 [ 2713.201526] udp_send_skb+0x6da/0x11d0 [ 2713.202336] udp_sendmsg+0x197f/0x2170 [ 2713.203131] ? ip_frag_init+0x350/0x350 [ 2713.203949] ? udp_setsockopt+0xc0/0xc0 [ 2713.204770] ? mark_lock+0xf5/0x2df0 [ 2713.205540] ? lock_chain_count+0x20/0x20 [ 2713.206377] ? mark_lock+0xf5/0x2df0 [ 2713.207158] ? mark_lock+0xf5/0x2df0 [ 2713.207910] ? lock_chain_count+0x20/0x20 [ 2713.208769] ? lock_chain_count+0x20/0x20 [ 2713.209622] ? prep_new_page+0x16d/0x1d0 [ 2713.210443] ? lock_chain_count+0x20/0x20 [ 2713.211304] ? __lock_acquire+0x1657/0x5b00 [ 2713.212204] udpv6_sendmsg+0x1b4e/0x2af0 [ 2713.213026] ? __lock_acquire+0x1657/0x5b00 [ 2713.213914] ? udp_v6_push_pending_frames+0x360/0x360 [ 2713.214953] ? __lockdep_reset_lock+0x180/0x180 [ 2713.215911] ? __lockdep_reset_lock+0x180/0x180 [ 2713.216899] ? lock_acquire+0x197/0x470 [ 2713.217729] ? find_held_lock+0x2c/0x110 [ 2713.218580] ? __might_fault+0xd3/0x180 [ 2713.219397] ? lock_downgrade+0x6d0/0x6d0 [ 2713.220271] ? sock_has_perm+0x1ea/0x280 [ 2713.221115] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2713.222204] ? __import_iovec+0x458/0x590 [ 2713.223054] ? udp_v6_push_pending_frames+0x360/0x360 [ 2713.224148] inet6_sendmsg+0x105/0x140 [ 2713.224956] ? inet6_compat_ioctl+0x320/0x320 [ 2713.225859] __sock_sendmsg+0xf2/0x190 [ 2713.226647] ____sys_sendmsg+0x334/0x870 [ 2713.227478] ? sock_write_iter+0x3d0/0x3d0 [ 2713.228338] ? do_recvmmsg+0x6d0/0x6d0 [ 2713.229130] ? __lock_acquire+0x1657/0x5b00 [ 2713.230027] ___sys_sendmsg+0xf3/0x170 [ 2713.230818] ? sendmsg_copy_msghdr+0x160/0x160 [ 2713.231734] ? vmacache_find+0x55/0x2a0 [ 2713.232558] ? __lockdep_reset_lock+0x180/0x180 [ 2713.233515] ? lock_acquire+0x197/0x470 [ 2713.234318] ? find_held_lock+0x2c/0x110 [ 2713.235150] ? __might_fault+0xd3/0x180 [ 2713.235957] ? lock_downgrade+0x6d0/0x6d0 [ 2713.236803] ? asm_exc_page_fault+0x1e/0x30 [ 2713.237704] __sys_sendmmsg+0x195/0x470 [ 2713.238520] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2713.239392] ? lock_downgrade+0x6d0/0x6d0 [ 2713.240270] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2713.241253] ? wait_for_completion_io+0x270/0x270 [ 2713.242243] ? rcu_read_lock_any_held+0x75/0xa0 [ 2713.243195] ? vfs_write+0x354/0xa70 [ 2713.243955] ? fput_many+0x2f/0x1a0 [ 2713.244709] ? ksys_write+0x1a9/0x260 [ 2713.245480] ? __ia32_sys_read+0xb0/0xb0 [ 2713.246318] __x64_sys_sendmmsg+0x99/0x100 [ 2713.247178] do_syscall_64+0x33/0x40 [ 2713.247930] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2713.248979] RIP: 0033:0x7f1c4c8a5b19 [ 2713.249750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2713.253474] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2713.255014] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2713.256466] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2713.257904] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2713.259343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2713.260810] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2713.262309] CPU: 0 PID: 50597 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2713.263830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2713.265617] Call Trace: [ 2713.266274] dump_stack+0x107/0x167 [ 2713.267222] should_fail.cold+0x5/0xa [ 2713.268101] ? blk_mq_alloc_tag_set+0x400/0xe70 [ 2713.269181] ? blk_mq_alloc_tag_set+0x400/0xe70 [ 2713.270281] should_failslab+0x5/0x20 [ 2713.271153] __kmalloc_node+0x76/0x420 [ 2713.272265] blk_mq_alloc_tag_set+0x400/0xe70 [ 2713.273577] loop_add+0x26d/0x8b0 [ 2713.274517] loop_control_ioctl+0x170/0x480 [ 2713.275535] ? loop_lookup+0x1d0/0x1d0 [ 2713.276539] ? selinux_file_ioctl+0xb6/0x270 [ 2713.277660] ? loop_lookup+0x1d0/0x1d0 [ 2713.278639] __x64_sys_ioctl+0x19a/0x210 [ 2713.279685] do_syscall_64+0x33/0x40 [ 2713.280568] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2713.281729] RIP: 0033:0x7fe76d773b19 [ 2713.282598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2713.286445] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2713.288152] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2713.289694] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2713.291266] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2713.292823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2713.294353] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:37:11 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0x0) pidfd_open(r2, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220000001000100060000000700000001000080"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) unshare(0x48020200) 20:37:11 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80800) perf_event_open(0x0, 0xffffffffffffffff, 0x800000000000, r0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4501, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x400000, 0x12345}, 0x1) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd, 0x40001, 0x0, 0x0, 0x0, 0x1, {0x0, r1}}, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="072456cbacdefc4b3beda4a3586c5951af019513e401528112b505a8795c5ad4af20331c9370ba94aa0128ae11b3e58f3e3f50565d0a05e3e5bd7a64bb95b7edda2c12713efce8855e416fb60c64df1f63ae1024f87a85d31e49a919e037cd967ac7710cf2f2b7643b1dc3ed04412a1142e921f5e5fbe1f20397d4045de609b343ecc2097d6e4a87f43479787a975dc269482d49ef71b2d3c9931fb92011edf78633c1f09e840508a461f3a696b1ebfe4b9a00cb207135a87b4567bbd29ad8e545d807fb03", 0x800, 0x0, 0x1, {0x1, r1}}, 0x3) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) signalfd4(r0, &(0x7f00000000c0)={[0x7]}, 0x8, 0x80000) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:37:11 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x9}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:37:11 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 6) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:37:11 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x121341, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(r1, 0x800, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r4) r5 = fork() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r5, 0x4, 0xffffffffffffffff, r6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000031c0)={0x0, 0x0}, &(0x7f0000003200)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001380)="2a3f47e532463f9e0ae57a5f0a916ada4dcfdaede522a412dd646d580469bfaaebcee4387cebf4f9ce2d64909759ad1c2c54a8af5aaa1655574c48134f2cb53e8f3b07e5cb9a3c512f86591b354ff2e57b973bf0bd47b11a3ddf2f1d801de0f30538f0caf4e9042a36712dba25fd7727203db6ea078de58133871929c402d2540d7935365f9b3cc049", 0x89}, {&(0x7f0000001440)="e94cd0", 0x3}, {&(0x7f0000001480)="1f3e88c9c1d79b17b1b2303feaba7bf904e0f166fd9dc909b89da4e04bd5cec01e6e01842a8102b8f04a44addf6292e689b3029390016da85f9a0fb35b27453b07a81f4adc57f8f6dd42e54f3eee70299350f10d83c5c238516bb9ede3d0d2ffc702cd3b11996c6def5ba6b344f1a2a08e780f898e70a56243fedb0b1565dabdf6e534019518ae2fe787401b158b92b888ba1b183674c70e2c5ceae48d8897d12962f28cfa1537d498dd856db15ac42127ed2f768c0c4d9a410e0e81e56d038eccc76527fce34404827e40aad63c02e188147cabf9b66738f332bec80c328c324a68c821b2e2301429e1cf2048ccd1876fe675", 0xf3}, {&(0x7f0000001580)="db1e09e346bb0d6be4bef6c4b513066dddeaccb5", 0x14}, {&(0x7f00000015c0)="c92b33a5a8e02fd96e33bf7dfa5b63233c1503ac797147535b92", 0x1a}], 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="1c0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88, 0x48084}}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001880)="ebcdaf5445d9cbaf1220320e9005a6d51ec3af5e1154c7861bb084e84fd85155f2b8c4aa4866ab1dfc24499194bb3f91aefeef4ebaabd60d7c01a79478", 0x3d}, {&(0x7f00000018c0)="272e291316479d4ec6895836069cdc812a1fcd0e146dfc9febab3857b82f054f2796a152ac2482ede60dc9f635460fcea403f91bd5b73540189dc9c0cbe0eb78ad134a27a22a99bc75d9b4e60f7098acded97fb5dc56f9fab836798b1413ac3bbebc73b1710d5a9dcf4ebe83901d6bfe04989057a523b3ba592070b5b477f25f3703a3991e53ece160fe9d5870ecaccc", 0x90}, {&(0x7f0000001980)="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", 0xfb}, {&(0x7f0000001a80)="6d7adf100c3c38cf7af6bbff8c1f46261c1a987b99b7c78548e3f236e0c0afc97250b29bdcd5165cd53231a03f25b09daaf5e3f8e263e50f1f198ae6015413a163d4504fc44883ef748d60ad41caaf", 0x4f}, {&(0x7f0000001b00)="64606f89447b059534ea633ae4756ccbbc457d7a915ac4e94f04be4705700cb5e4379ab543c21a2c119479dcd68c343a0f4b24d1d28c4bbd7dd1d94a4426e52a563e76ccd2ff9d4bcdbce13ff57625b48d96e126a09cd054cd8e199eca7f3353b8f3d89df4523a6099941a759dc049", 0x6f}, {&(0x7f0000001b80)="419b216822f03e308192231e0c2368107b857a0b106d589fb5eebfdd07bdfadb4e9fde66d5975d269cb6f2b66f9cad06559a5c6631931f81ea3d98a33908c2f7e37899bc8f4d7bbda10a0a5a99941d0aaac9b2118360052b9839fe20a5d2f6ee75946ffeffd4f805e21c7f6c3d23c1bff579a4641b59c34e0c3d2a482e019b06ab9dbc0680d5cd01d9608c1645fcf3a43ba6a8818dccfe4d590d70c2a1c055f5a8b68c8ffbd5dff7b0dd417cc46806f5dfe74be1125069", 0xb7}, {&(0x7f0000001c40)="5f75d2234236d051bf3bd75ea3292db299ee18a31cd033bca0a9fff9767f5836aea73243a9986282656fcd9d8715f940f509d0bca03ec46a08f8e6ac17c85d65929dd31152adfa241b3dbec1fbbde6a6f5da1911b6710017faae9e44414b89dbc8f92f71ce85d05af0b748c6a8c2766864145848d89a603aeb4be48b5fa5fe63269b26fdc92dfe838c2b6b0a6e0470ac963ec045724f9c4af3f682755c7db991ed1aac627253bf2c81e963853971c05672ae051323f7e13031afa3f66a5fd002eac96d1ef66e354ee2414f56333242ab7d1635", 0xd3}], 0x7, &(0x7f00000020c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xa8, 0x80}}, {{&(0x7f0000002180)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002200)="17ddde17ce0f8a578e075f85d0bba25e13381f55ca1a0137915c77dac7a5b1ac2f0388d2bf673c1ca36ec565dd12c0810d5f49f3e1bbd2e8de289ca0dbba9eeb92f4073582cf0aec651a509b97a440a5a605d93bfc1a1147ac9f846e182b86cacd1ae5e977a192bcab95b22173097b517378ecc2cfb45424a55b8571e6e3ceb9c93212ec7faf8dcac7fedc5b975f2c4f680f", 0x92}, {&(0x7f00000022c0)="3adfab484037ba956bb39ce04adb5dbc0dd0f7fcad5265904e02c34be66212aac22114db4ec5c9138fe8d9daaa27f4161281f95f1f1161f47da8d113b13fc284d8b62ae175c3c4d51e9165b9ae20de6aa325f2238492090ebebafd6ea347c5a170134a0d76262a0722c234a524b4ba45371d9fd5", 0x74}, {&(0x7f0000002340)="a06d15aa8153523d9e40f8459862e4eccf78e036b6e3a23e265830b39912bb0c38ca69ba76e564d7305a8eeb0544dd6c513dbdaddc61e38cfa8e6c53a8254a5adb69b097490c9d9115602faf4821175797fe6d1165cd8173d0b583faf897ca9a8c3ae56f3f6134445cdf93344b6c016a7be4a5b86e39c376e62e600309f2b1e32d577e073ad1511946d1666add393078adc18e8ca1ef70eef29123a06aeb3e7d69a5fa8d7fca2291cdcd95a6fe79831d653e84525fbb94d28f1b0c8ecb9d66c0f2bbe2ff181099a9", 0xc8}, {&(0x7f0000002440)}, {&(0x7f0000002480)="b68f8192aa796d0ee90cd56c8150623a692acabac77b8416fa8f4e858840e7b532a7313252c6e6a153f81f221f4b5a34982811a88ff370d6b2c68ca768fcf0eb09e1fd579fe0723073f87a4a59f31a3c62945c17b7a8d4a6618b8fcc78e17e8ae05cac6e6de2dabb9d132ea5256ac87ee719fa0cc4a9b8f19eb000478ac484f10e225330fbc77527236ba0a0b8beb6a8a7e812395d804984234b8dd1ed14567072913f3ee71573c734f3ab98fb36a210d2df7d3c66b317b82da432b9173f2ba592", 0xc1}, {&(0x7f0000002580)="4210fb4207d3e951becb852dd5c81cee6635917a2b6d0803d8cf3fee5a57a9f06fc7a765b49a335f89403cb19bf727e190f7ca4b7d6387e440b1ea500f4ca3c175ab322bfd185970cfc8853c1c4eeeade21288576a5e47b418ca9199f4fe957d56a7c66074b69d1e7d85ee391ac2f534f59eac49b3fdba4036fb991ffdacb8f9826a9d98cbc9d80da1c81b014dfe5fa529b292b1f2f8d030753b69dd0038b3ee7c7057f585cb2fb4be9b651093ef1a666cdb8522813e8441f033e0efa9ef3cbc4069cd6cace3e81de75fa355", 0xcc}], 0x6, &(0x7f0000002740)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r3, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}], 0x80, 0x48040}}, {{&(0x7f00000027c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002840)="0111d2296234e63e63aa42ff1e15baa7b07314bdd3d16b7148520e2db9833751c92604cdb4b537acc22c1adb06a67954240f1f50288221bcc19d893d3983fc1ec2f270fc8d91fb84f98b083b12b257c412192b9aee4e16dda74ade26e4ee30440f708045e2913acf6331c942316070e8ea24ec9b2bc417948bc170d904cb8680d295be94cd3b8c383f543dc73a538996db5a830be1ff28742291b3853b866daf273328047098226bd5d7702450732e808d719ed537f7116e9b0e0f0b2359e07694910523", 0xc4}, {&(0x7f0000002940)="3c6ab503437481402df68595bf80d3e5d1d6bbf49cb548ba9816ea786318138711591913effdaffeb130532ae381e66adea5ae57d61543a7cf68ab4cc152d4299cf2777dcc165d1d605d84765b27ed75af680ad57aa917128030f4ebad2edc37aceede5f4e9bb691cc03d7c373b9369e59ca54a70a82ebebe099469d27f366c79139d4d682fb68dccded6e06aa961f98b383da5cf49281ad2628ae22023ffb9c97958d6ec2d968d4f44301852eb65200192d98d179ae2de76c46b7de8a241c43f4fd302ba412d14ef27832f7a9d9a4240fa97d6381cdf17111b4e105422403fe2bd982e6829c85a14d4f23ca5916", 0xee}, {&(0x7f0000002a40)="028354515adb3d5ae9eb32e82d6936a213a1cd9edddd2e130dc461a8ce0c9c2d2fbfc0d7a9b4e850db8edcdb69bcd1a510f7b717e29520f32be3fbc3a937a1fb356a9d2b6e64b5c193e61bbc1ab272cfbda1782bf640c1747e65c966ae28946a667e88b76d52316a2f5bdf44a61efd6c5ab800ed974267f8448f268f6d21640c223f9e6441064acbd968a5f2830862a465a72fc859f551b419d82d288aaa27708370994b2b932cdedfbf9768df7d5dfc5ec5d97a094d295d993c6bf6d3ab6de5eaa4bb274510ba9d1a48ce3a", 0xcc}, {&(0x7f0000002b40)="c3454873d82027820b7b6607060d45d80591876e64270ef011e5e82e843ad4281e9bb2b9753324b6832ae07cf3903be1a575b8a8cb71ccc9b0becf68adeb512b00fecbc585b2cac4287fd5865eac44fdc263847ad169645e01a9cc582fe35a44dc826c87fa2a334bc4aa5f99bddb9130f336c37df29d5045482753e86c5bcba376d2a58fed9e9de5433332bb53b42c200dddccac9c84d6b65606848913e29c65fe2069c2fd39ae8028efc51a60188cefd4284e55b63552db7de2bdf23fa2f532be26352f9b133fb87a1e044c27d8ede60752bd7d440c00c5ba5f65997ffcb3461ae7013cafa849f48a62551bbf56542dc506333f83921ccd5a5285e999d20b", 0xff}, {&(0x7f0000002c40)="49f357ded7ddbd75ddbb87718247ca17ed53f6c40b071c52198efa6dd4d711da680a69cd04dcdd7feb93c5a4d388abf8f7a64bf7e04ade324ce2bcef2dd27633e47a813445c00db144fe1f00ec6a5998cf4474b399360adf5d5faa7af038fbf28e288da3b856d633a07632d4086aee59e5ed54ec9c4400a5afa1bec1dabc0a751d451a783e9e956bf1acffc8f898a5fa26f7e9c9dcf8ce2e661be9bcebce34aeab6b8a7ab3eac41a682c571f7fca94bee0416bb121fe5cb6cba0841cea3100ccdf65384c", 0xc4}], 0x5, &(0x7f0000002e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x5000}}, {{&(0x7f0000002e40)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000003100)=[{&(0x7f0000002ec0)="781457ba37187a9c62ad355d28a2b7261bcf3f8fd326ad7146b6aceb16c020f47f4119a594455a8274b335fdfae2bb9c1754734302d0e671d272af99213ee41b9d42b6675d12bc1bef0cc092efe3db567f7ee20dffafb0a20ba8659b35a5b271e7636cf052f5ca8360f3509b93c93cbf6224b006fd2705a0135b2178a3206ee122a332f9a27f32c21de8b6e641ef5c65d49f9850f4f89670c0aca9b48d0477a4b4c4c72dbaad31b9297cd4eed8b59390739810b1635b4c0145db6c9ffde5a9bb50897c164ddd68c349d20388929f6d59494adc671abbc30db9b1003be50c347e1c8d7593fb579b7055", 0xe9}, {&(0x7f0000002fc0)="3a257cc8a93caee50d8f3e175b6df2588302a2e800a3b34ecd27e9d6d3be5729a177f7d0dbb8b74dedf53eafcbfec07415a3c1bb7343a82c76db796bee8ac2adb1d020868eff3dccecaf", 0x4a}, {&(0x7f0000003040)="245c7ff1844510b8d6aac771c8d61ab05604cc667b9069043715c1c0b9d6050e46ea9870ac59b91207ef6555cac69ef5016c70a251f8cb00e2d041c764d0328dcac155787049275328c9848fa920fd465f5202c28252bbc4de935fcb18b3173d9f1dfca74fa0a163f39f84bb4e9166b5345f43eb98e4d4035e3fb766b59fc0e1b61f8d45afe83406a56d191c51b532ef99c708e3fe8b595d0e4a56d357538508634a4226270a5f064813d5ffbfb5e905a37adc34b43a9b99054961622f06", 0xbe}], 0x3, &(0x7f0000003240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r3, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, 0xee01}}}], 0x78, 0x8000}}], 0x5, 0x40000) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/237, 0xed}, {&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3) fstatfs(0xffffffffffffffff, &(0x7f0000000000)=""/46) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000002c0)={'ipvs\x00'}, 0x0) sendfile(r1, r3, 0x0, 0x100000001) sendmsg$NFT_MSG_GETRULE(r1, 0x0, 0x40800) 20:37:12 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 57) 20:37:12 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x18000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:37:12 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x2000000, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x2010, r0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2714.252026] FAULT_INJECTION: forcing a failure. [ 2714.252026] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.254378] CPU: 0 PID: 51205 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2714.255389] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.256637] Call Trace: [ 2714.257071] dump_stack+0x107/0x167 [ 2714.257677] should_fail.cold+0x5/0xa [ 2714.258287] ? create_object.isra.0+0x3a/0xa20 [ 2714.258989] should_failslab+0x5/0x20 [ 2714.259555] kmem_cache_alloc+0x5b/0x310 [ 2714.260258] create_object.isra.0+0x3a/0xa20 [ 2714.260910] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2714.261723] __kmalloc_node+0x1ae/0x420 [ 2714.262429] blk_mq_alloc_tag_set+0x400/0xe70 [ 2714.263259] loop_add+0x26d/0x8b0 [ 2714.263881] loop_control_ioctl+0x170/0x480 [ 2714.264541] ? loop_lookup+0x1d0/0x1d0 [ 2714.265184] ? selinux_file_ioctl+0xb6/0x270 [ 2714.265943] ? loop_lookup+0x1d0/0x1d0 [ 2714.266586] __x64_sys_ioctl+0x19a/0x210 [ 2714.267266] do_syscall_64+0x33/0x40 [ 2714.267850] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2714.268638] RIP: 0033:0x7fe76d773b19 [ 2714.269212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.271745] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2714.272903] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2714.273910] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2714.274920] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.275920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2714.276946] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 [ 2714.401370] FAULT_INJECTION: forcing a failure. [ 2714.401370] name failslab, interval 1, probability 0, space 0, times 0 [ 2714.403133] CPU: 1 PID: 51226 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2714.404194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2714.405468] Call Trace: [ 2714.405880] dump_stack+0x107/0x167 [ 2714.406453] should_fail.cold+0x5/0xa [ 2714.407026] ? create_object.isra.0+0x3a/0xa20 [ 2714.407725] should_failslab+0x5/0x20 [ 2714.408307] kmem_cache_alloc+0x5b/0x310 [ 2714.408934] create_object.isra.0+0x3a/0xa20 [ 2714.409589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2714.410359] kmem_cache_alloc+0x159/0x310 [ 2714.410995] dst_alloc+0x9e/0x610 [ 2714.411528] rt_dst_alloc+0x73/0x440 [ 2714.412109] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2714.412921] ip_route_output_key_hash+0x18d/0x340 [ 2714.413669] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2714.414492] ? mark_lock+0xf5/0x2df0 [ 2714.415049] ? __lock_acquire+0x1657/0x5b00 [ 2714.415687] ip_route_output_flow+0x23/0x150 [ 2714.416355] ip_tunnel_xmit+0x70e/0x2f50 [ 2714.416956] ? usage_accumulate+0x70/0x110 [ 2714.417584] ? __is_insn_slot_addr+0x94/0x290 [ 2714.418238] ? perf_trace_lock+0xac/0x490 [ 2714.418848] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2714.419557] sit_tunnel_xmit+0xef0/0x2960 [ 2714.420197] ? ipip_rcv+0x4f0/0x4f0 [ 2714.420734] ? skb_crc32c_csum_help+0x80/0x80 [ 2714.421392] ? lock_acquire+0x197/0x470 [ 2714.421975] ? __dev_queue_xmit+0x1c2/0x2710 [ 2714.422630] ? netif_skb_features+0x536/0xa00 [ 2714.423291] dev_hard_start_xmit+0x1cb/0x6f0 [ 2714.423960] __dev_queue_xmit+0x17ec/0x2710 [ 2714.424614] ? find_held_lock+0x2c/0x110 [ 2714.425221] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2714.425916] ? lock_downgrade+0x6d0/0x6d0 [ 2714.426525] ? lock_acquire+0x197/0x470 [ 2714.427106] ? ip_finish_output2+0x220/0x21f0 [ 2714.427782] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2714.428573] neigh_connected_output+0x382/0x4d0 [ 2714.429287] ip_finish_output2+0x6f1/0x21f0 [ 2714.429928] ? nf_hook_slow+0xfc/0x1e0 [ 2714.430500] ? ip_frag_next+0x9e0/0x9e0 [ 2714.431080] ? nf_hook+0x160/0x510 [ 2714.431613] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2714.432383] __ip_finish_output.part.0+0x5f3/0xb50 [ 2714.433106] ? ip_fragment.constprop.0+0x240/0x240 [ 2714.433835] ? nf_hook+0x510/0x510 [ 2714.434367] ip_output+0x2f7/0x600 [ 2714.434895] ip_send_skb+0xdd/0x260 [ 2714.435426] udp_send_skb+0x6da/0x11d0 [ 2714.436012] udp_sendmsg+0x197f/0x2170 [ 2714.436605] ? ip_frag_init+0x350/0x350 [ 2714.437192] ? udp_setsockopt+0xc0/0xc0 [ 2714.437781] ? mark_lock+0xf5/0x2df0 [ 2714.438343] ? lock_chain_count+0x20/0x20 [ 2714.438964] ? mark_lock+0xf5/0x2df0 [ 2714.439515] ? mark_lock+0xf5/0x2df0 [ 2714.440083] ? lock_chain_count+0x20/0x20 [ 2714.440695] ? lock_chain_count+0x20/0x20 [ 2714.441332] ? prep_new_page+0x16d/0x1d0 [ 2714.441922] ? lock_chain_count+0x20/0x20 [ 2714.442543] ? lock_chain_count+0x20/0x20 [ 2714.443160] ? __lock_acquire+0x1657/0x5b00 [ 2714.443808] udpv6_sendmsg+0x1b4e/0x2af0 [ 2714.444429] ? __lock_acquire+0x1657/0x5b00 [ 2714.445083] ? udp_v6_push_pending_frames+0x360/0x360 [ 2714.445827] ? __lockdep_reset_lock+0x180/0x180 [ 2714.446524] ? __lockdep_reset_lock+0x180/0x180 [ 2714.447216] ? lock_acquire+0x197/0x470 [ 2714.447806] ? find_held_lock+0x2c/0x110 [ 2714.448409] ? __might_fault+0xd3/0x180 [ 2714.449003] ? lock_downgrade+0x6d0/0x6d0 [ 2714.449623] ? sock_has_perm+0x1ea/0x280 [ 2714.450227] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2714.450997] ? __import_iovec+0x458/0x590 [ 2714.451614] ? udp_v6_push_pending_frames+0x360/0x360 [ 2714.452390] inet6_sendmsg+0x105/0x140 [ 2714.452953] ? inet6_compat_ioctl+0x320/0x320 [ 2714.453602] __sock_sendmsg+0xf2/0x190 [ 2714.454182] ____sys_sendmsg+0x334/0x870 [ 2714.454778] ? sock_write_iter+0x3d0/0x3d0 [ 2714.455398] ? do_recvmmsg+0x6d0/0x6d0 [ 2714.455973] ? __lock_acquire+0x1657/0x5b00 [ 2714.456634] ___sys_sendmsg+0xf3/0x170 [ 2714.457195] ? sendmsg_copy_msghdr+0x160/0x160 [ 2714.457843] ? vmacache_find+0x55/0x2a0 [ 2714.458415] ? __lockdep_reset_lock+0x180/0x180 [ 2714.459091] ? lock_acquire+0x197/0x470 [ 2714.459660] ? find_held_lock+0x2c/0x110 [ 2714.460257] ? __might_fault+0xd3/0x180 [ 2714.460828] ? lock_downgrade+0x6d0/0x6d0 [ 2714.461427] ? asm_exc_page_fault+0x1e/0x30 [ 2714.462062] __sys_sendmmsg+0x195/0x470 [ 2714.462640] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2714.463270] ? lock_downgrade+0x6d0/0x6d0 [ 2714.463893] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2714.464602] ? wait_for_completion_io+0x270/0x270 [ 2714.465298] ? rcu_read_lock_any_held+0x75/0xa0 [ 2714.465963] ? vfs_write+0x354/0xa70 [ 2714.466500] ? fput_many+0x2f/0x1a0 [ 2714.467028] ? ksys_write+0x1a9/0x260 [ 2714.467575] ? __ia32_sys_read+0xb0/0xb0 [ 2714.468183] __x64_sys_sendmmsg+0x99/0x100 [ 2714.468805] do_syscall_64+0x33/0x40 [ 2714.469342] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2714.470072] RIP: 0033:0x7f1c4c8a5b19 [ 2714.470599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2714.473233] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2714.474311] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2714.475315] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2714.476335] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2714.477346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2714.478354] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:37:33 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:37:33 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd27, 0x25dfdbff, 0x7fff, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000008a698fb3653fa003000800"]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x4) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000854, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)="62a27196834f47426dc8a853c13b26abdca2b9e6fcf211431676ca6582e0097e3c0482748db573a3819e25664db9affd0f61144c08ce4455b7d82fa3c5430b4730175c329a19e2f3de0e16403251a30bad0e8876c49e062a253b259570021b17b770e4fc7f20dce17663c46bb9504f3cb86968c26811911fcb19331510861b888906b315e1f7f7892459061407eff4da0b7222961d15f414e5fe5c7c19b4884a2c9eae41108b772cd0a14fedbef7b29641e1af136dd6d6", 0xb7}, {&(0x7f0000000500)="6536bf68c6f737cfa9724cb7ba5e82b5bf91d0276aa9f6f92ef222dcc8e5b1901be5f2dd4eec8779474b7b5ae4afb5e391fe9fff5236d57fa5dba347abcee50de93c034ee38374617c6e9c359adb8d4c7451a42292b9099e347a88cb790b0044497038e030c032bf478f5fe009715eebac7d0ce0ae38261e159d5653d9eaa79209cec9127652ee9b83119f2e3a8bd261c0de85e4a2c48259dfe699d495c433ad68be492fdecf9b0ac44120db88c82a6c247b9c29e20122e1", 0xb8}, {&(0x7f0000000440)='e', 0x1}, {&(0x7f0000000600)}, {&(0x7f00000005c0)="dca5e78125dc8b8ec68cd38e7a802a840e0cd63af61edd5d9e715494f106b0d6788de84357691da1c3ffd05b912a692192b24dc94284d2d8aabb4f2753b4d45e561082e47cf2028ed5a5054a80204a01f7bb6b0cc1b5a6d71a2c195f4878d9e0d6fe9fdd48ac4bbf8b796d0077f87f2e4038ed6167ac49819a23cf0366080e80c24133de", 0x84}, {0x0}], 0x6}}], 0x1, 0x8000) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10000}}, './file0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x6) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 20:37:33 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x1f, 0x7, 0x9, 0x9, 0x0, 0x355f, 0x100, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x8022, 0x2, 0x8, 0x6, 0x5, 0x3f, 0x3, 0x0, 0x8000}, 0xffffffffffffffff, 0x10, r1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="06000000000071f2ffff667a6c65ffff"]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000040)) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:37:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 58) 20:37:33 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) openat(r3, &(0x7f0000000340)='./file0\x00', 0x50000, 0x1) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000080)={0xa, 0x4e24, 0x60000, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 20:37:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x21030000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:37:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x107142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = epoll_create(0x8000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x20000001}) setsockopt$inet6_tcp_int(r6, 0x6, 0xc, &(0x7f0000000180)=0x400, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) listen(r8, 0x4) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, &(0x7f0000000040)=0x80, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x0, 0x800, 0x1}, 0x438e) 20:37:33 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 7) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2735.392488] FAULT_INJECTION: forcing a failure. [ 2735.392488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2735.395409] CPU: 0 PID: 51341 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2735.396940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.398734] Call Trace: [ 2735.399399] dump_stack+0x107/0x167 [ 2735.400363] should_fail.cold+0x5/0xa [ 2735.401391] _copy_from_user+0x2e/0x1b0 [ 2735.402423] __copy_msghdr_from_user+0x91/0x4b0 [ 2735.403528] ? __ia32_sys_shutdown+0x80/0x80 [ 2735.404785] ? perf_trace_lock+0xac/0x490 [ 2735.405781] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2735.406558] FAULT_INJECTION: forcing a failure. [ 2735.406558] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.407067] sendmsg_copy_msghdr+0xa1/0x160 [ 2735.410184] ? do_recvmmsg+0x6d0/0x6d0 [ 2735.411216] ? find_held_lock+0x2c/0x110 [ 2735.412433] ___sys_sendmsg+0xc6/0x170 [ 2735.413416] ? sendmsg_copy_msghdr+0x160/0x160 [ 2735.414532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2735.415727] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2735.416761] ? trace_hardirqs_on+0x5b/0x180 [ 2735.417843] ? finish_task_switch+0x1a4/0x5d0 [ 2735.418861] ? __switch_to+0x572/0xf70 [ 2735.419762] ? __switch_to_asm+0x3a/0x60 [ 2735.420709] ? __switch_to_asm+0x34/0x60 [ 2735.421742] ? __schedule+0x82c/0x1ea0 [ 2735.422835] ? io_schedule_timeout+0x140/0x140 [ 2735.424186] __sys_sendmmsg+0x195/0x470 [ 2735.425244] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2735.426257] ? lock_downgrade+0x6d0/0x6d0 [ 2735.427550] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2735.428735] ? wait_for_completion_io+0x270/0x270 [ 2735.429878] ? rcu_read_lock_any_held+0x75/0xa0 [ 2735.430909] ? vfs_write+0x354/0xa70 [ 2735.431851] ? fput_many+0x2f/0x1a0 [ 2735.432753] ? ksys_write+0x1a9/0x260 [ 2735.433662] ? __ia32_sys_read+0xb0/0xb0 [ 2735.434754] __x64_sys_sendmmsg+0x99/0x100 [ 2735.435779] do_syscall_64+0x33/0x40 [ 2735.436657] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2735.437814] RIP: 0033:0x7f1c4c8a5b19 [ 2735.438671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.442555] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2735.444367] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2735.445912] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2735.447458] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.449052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.450606] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2735.452613] CPU: 1 PID: 51346 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2735.454000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.455633] Call Trace: [ 2735.456202] dump_stack+0x107/0x167 [ 2735.456990] should_fail.cold+0x5/0xa [ 2735.457748] ? blk_mq_init_tags+0x6f/0x3d0 [ 2735.458592] should_failslab+0x5/0x20 [ 2735.459348] kmem_cache_alloc_node_trace+0x59/0x340 [ 2735.460349] blk_mq_init_tags+0x6f/0x3d0 [ 2735.461164] blk_mq_alloc_rq_map+0x59/0x1e0 [ 2735.462031] __blk_mq_alloc_map_and_request+0xe0/0x410 [ 2735.463085] blk_mq_alloc_tag_set+0x764/0xe70 [ 2735.463991] loop_add+0x26d/0x8b0 [ 2735.464696] loop_control_ioctl+0x170/0x480 [ 2735.465547] ? loop_lookup+0x1d0/0x1d0 [ 2735.466324] ? selinux_file_ioctl+0xb6/0x270 [ 2735.467200] ? loop_lookup+0x1d0/0x1d0 [ 2735.467977] __x64_sys_ioctl+0x19a/0x210 [ 2735.468807] do_syscall_64+0x33/0x40 [ 2735.469547] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2735.470558] RIP: 0033:0x7fe76d773b19 [ 2735.471295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.474972] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2735.476533] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2735.477943] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2735.479349] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.480765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2735.482171] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:37:33 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x24000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:37:33 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1420c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) dup(0xffffffffffffffff) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000140)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/class/drm', 0x0, 0x2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000001c0)=@nl=@unspec}, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD, 0x10000009) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x4000010, 0xffffffffffffffff, 0x8000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_open_dev$rtc(&(0x7f00000000c0), 0x100000001, 0x40) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xe72, 0xffffffff7fffffff) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4080, 0x100) [ 2735.699464] udc-core: couldn't find an available UDC or it's busy [ 2735.700899] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2735.704855] blk-mq: reduced tag depth (128 -> 64) 20:37:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 59) 20:37:33 executing program 0: syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3, 0x6, 0x0, {0x0, 0x0, r3}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd, 0xa821, &(0x7f0000000000)=""/190, 0xbe, 0x1, 0x1}, 0x4) 20:37:34 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x3f000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2736.024881] cgroup: fork rejected by pids controller in /syz2 [ 2736.400753] FAULT_INJECTION: forcing a failure. [ 2736.400753] name failslab, interval 1, probability 0, space 0, times 0 [ 2736.402518] CPU: 0 PID: 52169 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2736.403463] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2736.404598] Call Trace: [ 2736.405015] dump_stack+0x107/0x167 [ 2736.405619] should_fail.cold+0x5/0xa [ 2736.406175] ? __alloc_skb+0x6d/0x5b0 [ 2736.406752] ? __alloc_skb+0x6d/0x5b0 [ 2736.407342] should_failslab+0x5/0x20 [ 2736.407896] kmem_cache_alloc_node+0x55/0x330 [ 2736.408647] __alloc_skb+0x6d/0x5b0 [ 2736.409267] alloc_skb_with_frags+0x92/0x570 [ 2736.410057] sock_alloc_send_pskb+0x7af/0x930 [ 2736.410913] ? sk_alloc+0x350/0x350 [ 2736.411578] ? perf_trace_lock+0xac/0x490 [ 2736.412217] ? SOFTIRQ_verbose+0x10/0x10 [ 2736.412969] __ip_append_data+0x1628/0x3310 [ 2736.413727] ? fib_select_path+0x95d/0x1e90 [ 2736.414436] ? __lockdep_reset_lock+0x180/0x180 [ 2736.415168] ? ip_frag_init+0x350/0x350 [ 2736.415950] ? ip_finish_output+0x330/0x330 [ 2736.416661] ? ip_route_output_key_hash+0x1a4/0x340 [ 2736.417414] ? ipv4_mtu+0x1ed/0x2c0 [ 2736.418110] ip_make_skb+0x22a/0x2a0 [ 2736.418757] ? ip_frag_init+0x350/0x350 [ 2736.419425] ? ip_flush_pending_frames+0x20/0x20 [ 2736.420255] ? lock_downgrade+0x6d0/0x6d0 [ 2736.420997] ? xfrm_lookup_route+0x65/0x210 [ 2736.421733] udp_sendmsg+0x193f/0x2170 [ 2736.422464] ? ip_frag_init+0x350/0x350 [ 2736.423206] ? udp_setsockopt+0xc0/0xc0 [ 2736.423870] ? perf_event_switch_output+0x7d0/0x7d0 [ 2736.424695] ? perf_event_output_forward+0x13f/0x2c0 [ 2736.425501] ? lock_downgrade+0x6d0/0x6d0 [ 2736.426252] ? mark_lock+0xf5/0x2df0 [ 2736.426872] ? perf_event_output_forward+0x168/0x2c0 [ 2736.427775] ? perf_prepare_sample+0x1be0/0x1be0 [ 2736.428523] ? lock_downgrade+0x6d0/0x6d0 [ 2736.429259] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2736.430242] udpv6_sendmsg+0x1b4e/0x2af0 [ 2736.430933] ? __lock_acquire+0x1657/0x5b00 [ 2736.431765] ? udp_v6_push_pending_frames+0x360/0x360 [ 2736.432703] ? perf_event_switch_output+0x7d0/0x7d0 [ 2736.433517] ? __lockdep_reset_lock+0x180/0x180 [ 2736.434261] ? perf_event_switch_output+0x7d0/0x7d0 [ 2736.435121] ? lock_acquire+0x197/0x470 [ 2736.435753] ? find_held_lock+0x2c/0x110 [ 2736.436502] ? __might_fault+0xd3/0x180 [ 2736.437146] ? lock_downgrade+0x6d0/0x6d0 [ 2736.437820] ? lock_chain_count+0x20/0x20 [ 2736.438493] ? sock_has_perm+0x1ea/0x280 [ 2736.439177] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2736.440242] ? __import_iovec+0x458/0x590 [ 2736.440934] ? udp_v6_push_pending_frames+0x360/0x360 [ 2736.441796] inet6_sendmsg+0x105/0x140 [ 2736.442440] ? inet6_compat_ioctl+0x320/0x320 [ 2736.443146] __sock_sendmsg+0xf2/0x190 [ 2736.443806] ____sys_sendmsg+0x334/0x870 [ 2736.444530] ? sock_write_iter+0x3d0/0x3d0 [ 2736.445186] ? do_recvmmsg+0x6d0/0x6d0 [ 2736.445881] ? find_held_lock+0x2c/0x110 [ 2736.446678] ___sys_sendmsg+0xf3/0x170 [ 2736.447340] ? sendmsg_copy_msghdr+0x160/0x160 [ 2736.448091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2736.448912] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2736.449614] ? trace_hardirqs_on+0x5b/0x180 [ 2736.450323] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2736.451025] ? finish_task_switch+0x126/0x5d0 [ 2736.451717] ? finish_task_switch+0xef/0x5d0 [ 2736.452413] ? __switch_to+0x572/0xf70 [ 2736.453014] ? __switch_to_asm+0x3a/0x60 [ 2736.453644] ? __switch_to_asm+0x34/0x60 [ 2736.454348] ? __schedule+0x82c/0x1ea0 [ 2736.455094] ? io_schedule_timeout+0x140/0x140 [ 2736.456003] __sys_sendmmsg+0x195/0x470 [ 2736.456730] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2736.457421] ? lock_downgrade+0x6d0/0x6d0 [ 2736.458298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2736.459103] ? wait_for_completion_io+0x270/0x270 [ 2736.459890] ? rcu_read_lock_any_held+0x75/0xa0 [ 2736.460622] ? vfs_write+0x354/0xa70 [ 2736.461267] ? fput_many+0x2f/0x1a0 [ 2736.461865] ? ksys_write+0x1a9/0x260 [ 2736.462485] ? __ia32_sys_read+0xb0/0xb0 [ 2736.463232] __x64_sys_sendmmsg+0x99/0x100 [ 2736.463929] do_syscall_64+0x33/0x40 [ 2736.464532] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2736.465304] RIP: 0033:0x7f1c4c8a5b19 [ 2736.465880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2736.468488] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2736.469629] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2736.470670] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2736.471703] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2736.472760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2736.473827] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:38:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0xfffffffffffffcb9, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000005f40)={0x1f, 0x7}, 0xe) 20:38:03 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000000)=[r4], 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:38:03 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:38:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x55050000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:38:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x2000000000}, 0x40000, 0x4, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r1, 0x6801, 0x0) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x40, 0x18, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000080)='./file0/../file0\x00', 0x6, 0x0, 0x0, 0x100000, &(0x7f0000000240)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) unshare(0x48020200) r5 = fork() r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r5, 0x4, 0xffffffffffffffff, r6) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x0, r4, 0x8ea, 0x0, 0x7, 0x2}) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.nlink\x00', &(0x7f0000000380)=""/74, 0x4a) 20:38:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 60) 20:38:03 executing program 3: setgroups(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000001c0)={0x0, 0x0, 0xd0d}) fstat(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r1}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="02000000010005000000000002000600", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="e2a76e05", @ANYRES32=0x0, @ANYBLOB="040002000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=0xee00, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000400000000002000060000000000"], 0x64, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000600)={0x1}) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r3}}, './file0\x00'}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x5000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f00000001c0)={0x0, 0x0, 0xd0d}) fstat(r5, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001640)={{0x1, 0x1, 0x18, r4, {0x0, r6}}, './file0\x00'}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x5}, [{0x2, 0x6}, {}, {0x2, 0x4}], {0x4, 0x2}, [{0x8, 0x5, r3}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0x3, r6}, {0x8, 0x2, 0xee00}, {}], {0x10, 0x4}, {0x20, 0x6}}, 0x6c, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getgroups(0x8, &(0x7f0000000140)=[0xee00, 0xee01, r1, 0xee01, r3, r7, 0x0, r8]) socket$inet_icmp(0x2, 0x2, 0x1) 20:38:03 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 8) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2765.424019] udc-core: couldn't find an available UDC or it's busy [ 2765.425706] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:38:03 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x5f300000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2765.701667] FAULT_INJECTION: forcing a failure. [ 2765.701667] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.704478] CPU: 0 PID: 52571 Comm: syz-executor.4 Not tainted 5.10.205 #1 [ 2765.706164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.707966] Call Trace: [ 2765.708643] dump_stack+0x107/0x167 [ 2765.709599] should_fail.cold+0x5/0xa [ 2765.710549] ? create_object.isra.0+0x3a/0xa20 [ 2765.711667] should_failslab+0x5/0x20 [ 2765.712552] kmem_cache_alloc+0x5b/0x310 [ 2765.713707] create_object.isra.0+0x3a/0xa20 [ 2765.714714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.715999] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2765.717346] blk_mq_init_tags+0x6f/0x3d0 [ 2765.718424] blk_mq_alloc_rq_map+0x59/0x1e0 [ 2765.719541] __blk_mq_alloc_map_and_request+0xe0/0x410 [ 2765.720916] blk_mq_alloc_tag_set+0x764/0xe70 [ 2765.722280] loop_add+0x26d/0x8b0 [ 2765.723269] loop_control_ioctl+0x170/0x480 [ 2765.724301] ? loop_lookup+0x1d0/0x1d0 [ 2765.725339] ? selinux_file_ioctl+0xb6/0x270 [ 2765.726508] ? loop_lookup+0x1d0/0x1d0 [ 2765.727521] __x64_sys_ioctl+0x19a/0x210 [ 2765.728606] do_syscall_64+0x33/0x40 [ 2765.729521] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2765.730676] RIP: 0033:0x7fe76d773b19 [ 2765.731567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.735442] RSP: 002b:00007fe76ace9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2765.737206] RAX: ffffffffffffffda RBX: 00007fe76d886f60 RCX: 00007fe76d773b19 [ 2765.738777] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000005 [ 2765.740362] RBP: 00007fe76ace91d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.741939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2765.743519] R13: 00007ffd706efa2f R14: 00007fe76ace9300 R15: 0000000000022000 20:38:03 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="0535769f", 0x4}], 0x1) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x100, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, r2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000018, 0x110, r2, 0xd2032000) [ 2765.832018] FAULT_INJECTION: forcing a failure. [ 2765.832018] name failslab, interval 1, probability 0, space 0, times 0 [ 2765.834815] CPU: 0 PID: 52728 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2765.836408] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2765.838209] Call Trace: [ 2765.838871] dump_stack+0x107/0x167 [ 2765.839804] should_fail.cold+0x5/0xa [ 2765.840766] ? create_object.isra.0+0x3a/0xa20 [ 2765.841864] should_failslab+0x5/0x20 [ 2765.842745] kmem_cache_alloc+0x5b/0x310 [ 2765.843829] create_object.isra.0+0x3a/0xa20 [ 2765.844851] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2765.846099] kmem_cache_alloc_node+0x169/0x330 [ 2765.847280] __alloc_skb+0x6d/0x5b0 [ 2765.848256] alloc_skb_with_frags+0x92/0x570 [ 2765.849506] sock_alloc_send_pskb+0x7af/0x930 [ 2765.850814] ? sk_alloc+0x350/0x350 [ 2765.851819] ? perf_trace_lock+0xac/0x490 [ 2765.852785] ? SOFTIRQ_verbose+0x10/0x10 [ 2765.853912] __ip_append_data+0x1628/0x3310 [ 2765.855050] ? fib_select_path+0x95d/0x1e90 [ 2765.856095] ? __lockdep_reset_lock+0x180/0x180 [ 2765.857193] ? ip_frag_init+0x350/0x350 [ 2765.858352] ? ip_finish_output+0x330/0x330 [ 2765.859373] ? ip_route_output_key_hash+0x1a4/0x340 [ 2765.860486] ? ipv4_mtu+0x1ed/0x2c0 [ 2765.861504] ip_make_skb+0x22a/0x2a0 [ 2765.862462] ? ip_frag_init+0x350/0x350 [ 2765.863435] ? ip_flush_pending_frames+0x20/0x20 [ 2765.864707] ? lock_downgrade+0x6d0/0x6d0 [ 2765.865775] ? xfrm_lookup_route+0x65/0x210 [ 2765.866874] udp_sendmsg+0x193f/0x2170 [ 2765.867960] ? ip_frag_init+0x350/0x350 [ 2765.869090] ? udp_setsockopt+0xc0/0xc0 [ 2765.870079] ? perf_event_switch_output+0x7d0/0x7d0 [ 2765.871286] ? perf_event_output_forward+0x13f/0x2c0 [ 2765.872450] ? lock_downgrade+0x6d0/0x6d0 [ 2765.873561] ? mark_lock+0xf5/0x2df0 [ 2765.874464] ? perf_event_output_forward+0x168/0x2c0 [ 2765.875788] ? perf_prepare_sample+0x1be0/0x1be0 [ 2765.876858] ? lock_downgrade+0x6d0/0x6d0 [ 2765.877921] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2765.879336] udpv6_sendmsg+0x1b4e/0x2af0 [ 2765.880331] ? __lock_acquire+0x1657/0x5b00 [ 2765.881523] ? udp_v6_push_pending_frames+0x360/0x360 [ 2765.882848] ? perf_event_switch_output+0x7d0/0x7d0 [ 2765.884027] ? __lockdep_reset_lock+0x180/0x180 [ 2765.885107] ? perf_event_switch_output+0x7d0/0x7d0 [ 2765.886329] ? lock_acquire+0x197/0x470 [ 2765.887249] ? find_held_lock+0x2c/0x110 [ 2765.888317] ? __might_fault+0xd3/0x180 [ 2765.889287] ? lock_downgrade+0x6d0/0x6d0 [ 2765.890267] ? lock_chain_count+0x20/0x20 [ 2765.891238] ? sock_has_perm+0x1ea/0x280 [ 2765.892199] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2765.893746] ? __import_iovec+0x458/0x590 [ 2765.894701] ? udp_v6_push_pending_frames+0x360/0x360 [ 2765.895963] inet6_sendmsg+0x105/0x140 [ 2765.896881] ? inet6_compat_ioctl+0x320/0x320 [ 2765.897891] __sock_sendmsg+0xf2/0x190 [ 2765.898824] ____sys_sendmsg+0x334/0x870 [ 2765.899875] ? sock_write_iter+0x3d0/0x3d0 [ 2765.900832] ? do_recvmmsg+0x6d0/0x6d0 [ 2765.901889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2765.903057] ? asm_common_interrupt+0x1e/0x40 [ 2765.904044] ? trace_hardirqs_on+0x5b/0x180 [ 2765.905156] ___sys_sendmsg+0xf3/0x170 [ 2765.906106] ? sendmsg_copy_msghdr+0x160/0x160 [ 2765.907175] ? _raw_spin_unlock_irq+0x1f/0x30 20:38:04 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x802, 0x0, 0x400000000000000}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x521882, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c0000000100000003000000030000000220000001000100060000000700000001000080"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) dup(0xffffffffffffffff) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000002c0)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) unshare(0x48020200) [ 2765.908189] ? _raw_spin_unlock_irq+0x27/0x30 [ 2765.909424] ? _raw_spin_unlock_irq+0x1f/0x30 20:38:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) (fail_nth: 9) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2765.910442] ? finish_task_switch+0x126/0x5d0 [ 2765.911485] ? finish_task_switch+0xef/0x5d0 [ 2765.912489] ? __switch_to+0x572/0xf70 [ 2765.913381] ? __switch_to_asm+0x3a/0x60 [ 2765.914309] ? __switch_to_asm+0x34/0x60 [ 2765.915336] ? __schedule+0x82c/0x1ea0 [ 2765.916429] ? io_schedule_timeout+0x140/0x140 [ 2765.917879] __sys_sendmmsg+0x195/0x470 [ 2765.918946] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2765.919956] ? lock_downgrade+0x6d0/0x6d0 [ 2765.921314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2765.922517] ? wait_for_completion_io+0x270/0x270 [ 2765.923678] ? rcu_read_lock_any_held+0x75/0xa0 [ 2765.924730] ? vfs_write+0x354/0xa70 [ 2765.925685] ? fput_many+0x2f/0x1a0 [ 2765.926583] ? ksys_write+0x1a9/0x260 [ 2765.927492] ? __ia32_sys_read+0xb0/0xb0 [ 2765.928599] __x64_sys_sendmmsg+0x99/0x100 [ 2765.929662] do_syscall_64+0x33/0x40 [ 2765.930530] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2765.931672] RIP: 0033:0x7f1c4c8a5b19 [ 2765.932525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2765.936445] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2765.938167] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2765.939746] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2765.941305] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2765.942854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2765.944396] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:38:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:38:04 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x2064c0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:38:04 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x2, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:38:04 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 61) [ 2766.334948] FAULT_INJECTION: forcing a failure. [ 2766.334948] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.337315] CPU: 1 PID: 52819 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2766.338613] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2766.340152] Call Trace: [ 2766.340666] dump_stack+0x107/0x167 [ 2766.341353] should_fail.cold+0x5/0xa [ 2766.342089] should_failslab+0x5/0x20 [ 2766.342801] __kmalloc_node_track_caller+0x74/0x3b0 [ 2766.343710] ? alloc_skb_with_frags+0x92/0x570 [ 2766.344572] __alloc_skb+0xb1/0x5b0 [ 2766.345265] alloc_skb_with_frags+0x92/0x570 [ 2766.346082] sock_alloc_send_pskb+0x7af/0x930 [ 2766.346911] ? sk_alloc+0x350/0x350 [ 2766.347588] ? perf_trace_lock+0xac/0x490 [ 2766.348348] ? SOFTIRQ_verbose+0x10/0x10 [ 2766.349136] __ip_append_data+0x1628/0x3310 [ 2766.349935] ? fib_select_path+0x95d/0x1e90 [ 2766.350723] ? __lockdep_reset_lock+0x180/0x180 [ 2766.351573] ? ip_frag_init+0x350/0x350 [ 2766.352315] ? ip_finish_output+0x330/0x330 [ 2766.353128] ? ip_route_output_key_hash+0x1a4/0x340 [ 2766.354025] ? ipv4_mtu+0x1ed/0x2c0 [ 2766.354687] ip_make_skb+0x22a/0x2a0 [ 2766.355361] ? ip_frag_init+0x350/0x350 [ 2766.356091] ? ip_flush_pending_frames+0x20/0x20 [ 2766.356966] ? lock_downgrade+0x6d0/0x6d0 [ 2766.357720] ? xfrm_lookup_route+0x65/0x210 [ 2766.358504] udp_sendmsg+0x193f/0x2170 [ 2766.359226] ? ip_frag_init+0x350/0x350 [ 2766.359965] ? udp_setsockopt+0xc0/0xc0 [ 2766.360693] ? mark_lock+0xf5/0x2df0 [ 2766.361361] ? mark_lock+0xf5/0x2df0 [ 2766.362027] ? lock_chain_count+0x20/0x20 [ 2766.362764] ? lock_chain_count+0x20/0x20 [ 2766.363533] ? __lockdep_reset_lock+0x180/0x180 [ 2766.364378] ? __lock_acquire+0x1657/0x5b00 [ 2766.365189] udpv6_sendmsg+0x1b4e/0x2af0 [ 2766.365915] ? __lock_acquire+0x1657/0x5b00 [ 2766.366725] ? udp_v6_push_pending_frames+0x360/0x360 [ 2766.367668] ? __lockdep_reset_lock+0x180/0x180 [ 2766.368523] ? __lockdep_reset_lock+0x180/0x180 [ 2766.369375] ? lock_acquire+0x197/0x470 [ 2766.370098] ? find_held_lock+0x2c/0x110 [ 2766.370827] ? __might_fault+0xd3/0x180 [ 2766.371540] ? lock_downgrade+0x6d0/0x6d0 [ 2766.372308] ? sock_has_perm+0x1ea/0x280 [ 2766.373060] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2766.373999] ? __import_iovec+0x458/0x590 [ 2766.374740] ? udp_v6_push_pending_frames+0x360/0x360 [ 2766.375676] inet6_sendmsg+0x105/0x140 [ 2766.376386] ? inet6_compat_ioctl+0x320/0x320 [ 2766.377202] __sock_sendmsg+0xf2/0x190 [ 2766.377899] ____sys_sendmsg+0x334/0x870 [ 2766.378641] ? sock_write_iter+0x3d0/0x3d0 [ 2766.379392] ? do_recvmmsg+0x6d0/0x6d0 [ 2766.380090] ? __lock_acquire+0x1657/0x5b00 [ 2766.380880] ___sys_sendmsg+0xf3/0x170 [ 2766.381578] ? sendmsg_copy_msghdr+0x160/0x160 [ 2766.382389] ? vmacache_find+0x55/0x2a0 [ 2766.383101] ? __lockdep_reset_lock+0x180/0x180 [ 2766.383929] ? lock_acquire+0x197/0x470 [ 2766.384646] ? find_held_lock+0x2c/0x110 [ 2766.385388] ? __might_fault+0xd3/0x180 [ 2766.386090] ? lock_downgrade+0x6d0/0x6d0 [ 2766.386834] ? asm_exc_page_fault+0x1e/0x30 [ 2766.387629] __sys_sendmmsg+0x195/0x470 [ 2766.388350] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2766.389139] ? lock_downgrade+0x6d0/0x6d0 [ 2766.389914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2766.390790] ? wait_for_completion_io+0x270/0x270 [ 2766.391628] ? rcu_read_lock_any_held+0x75/0xa0 [ 2766.392467] ? vfs_write+0x354/0xa70 [ 2766.393167] ? fput_many+0x2f/0x1a0 [ 2766.393834] ? ksys_write+0x1a9/0x260 [ 2766.394531] ? __ia32_sys_read+0xb0/0xb0 [ 2766.395283] __x64_sys_sendmmsg+0x99/0x100 [ 2766.396045] do_syscall_64+0x33/0x40 [ 2766.396735] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2766.397665] RIP: 0033:0x7f1c4c8a5b19 [ 2766.398352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2766.401841] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2766.403174] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2766.404483] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2766.405745] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2766.406981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2766.408227] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:39:06 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b47, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:39:06 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x60000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:06 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:39:06 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000740)) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/219, 0xdb}], 0x5) r1 = signalfd(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @mcast1}}, 0x0) syz_io_uring_setup(0x248b, &(0x7f00000000c0)={0x0, 0x5b7, 0x2, 0x1, 0x1f9, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000180), 0x4, 0x8000) syz_io_uring_submit(r2, r5, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, r6}, 0xfff) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r7, &(0x7f0000000000), 0x1b4000) 20:39:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 62) 20:39:06 executing program 5: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = epoll_create(0x8000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x20000001}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001000008fd1a000003ec7f173652aa057546b92698b9a1d67c6054ad77d7fd9a5814ed9c4c7f1c74d40ed41d0348c41f33bb9f7a5429c31302cd36daa0864d91af210b914f76c2f3fc8dcae6702d014e86bf2f5011dcb9d98d005253d45cfd258df7f237641e1dbdaf774c8509e9ee04daf00461c7d621bd27a1ed411bcb20c3eb01dc614cfed3bcfb40842d8252c52c379ad8e03ad39158dad87e1627f604baab9ec8ccabe61af04dd1fc99d2954a16", @ANYRES32=r1, @ANYBLOB="991cef050000000500000055fbf7ff7f"]) r4 = socket$inet(0x2, 0xa, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x80000001, 0x103881) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000740)={{}, "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"}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'veth0_to_hsr\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x40146, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) dup3(r4, r0, 0x0) [ 2828.810742] FAULT_INJECTION: forcing a failure. [ 2828.810742] name failslab, interval 1, probability 0, space 0, times 0 [ 2828.813245] CPU: 1 PID: 53121 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2828.814752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2828.816544] Call Trace: [ 2828.817111] dump_stack+0x107/0x167 [ 2828.817925] should_fail.cold+0x5/0xa [ 2828.818738] ? create_object.isra.0+0x3a/0xa20 [ 2828.819705] should_failslab+0x5/0x20 [ 2828.820513] kmem_cache_alloc+0x5b/0x310 [ 2828.821381] create_object.isra.0+0x3a/0xa20 [ 2828.822325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2828.823409] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2828.824483] ? alloc_skb_with_frags+0x92/0x570 [ 2828.825467] __alloc_skb+0xb1/0x5b0 [ 2828.826248] alloc_skb_with_frags+0x92/0x570 [ 2828.827200] sock_alloc_send_pskb+0x7af/0x930 [ 2828.828166] ? sk_alloc+0x350/0x350 [ 2828.828947] ? perf_trace_lock+0xac/0x490 [ 2828.829846] ? SOFTIRQ_verbose+0x10/0x10 [ 2828.830714] __ip_append_data+0x1628/0x3310 [ 2828.831637] ? fib_select_path+0x95d/0x1e90 [ 2828.832552] ? __lockdep_reset_lock+0x180/0x180 [ 2828.833543] ? ip_frag_init+0x350/0x350 [ 2828.834403] ? ip_finish_output+0x330/0x330 [ 2828.835318] ? ip_route_output_key_hash+0x1a4/0x340 [ 2828.836368] ? ipv4_mtu+0x1ed/0x2c0 [ 2828.837148] ip_make_skb+0x22a/0x2a0 [ 2828.837956] ? ip_frag_init+0x350/0x350 [ 2828.838799] ? ip_flush_pending_frames+0x20/0x20 [ 2828.839814] ? lock_downgrade+0x6d0/0x6d0 [ 2828.840699] ? xfrm_lookup_route+0x65/0x210 [ 2828.841639] udp_sendmsg+0x193f/0x2170 [ 2828.842473] ? ip_frag_init+0x350/0x350 [ 2828.843330] ? udp_setsockopt+0xc0/0xc0 [ 2828.844186] ? mark_lock+0xf5/0x2df0 [ 2828.844978] ? mark_lock+0xf5/0x2df0 [ 2828.845820] ? lock_chain_count+0x20/0x20 [ 2828.846697] ? lock_chain_count+0x20/0x20 [ 2828.847582] ? __lockdep_reset_lock+0x180/0x180 [ 2828.848586] ? __lock_acquire+0x1657/0x5b00 [ 2828.849520] udpv6_sendmsg+0x1b4e/0x2af0 [ 2828.850385] ? __lock_acquire+0x1657/0x5b00 [ 2828.851311] ? udp_v6_push_pending_frames+0x360/0x360 [ 2828.852400] ? __lockdep_reset_lock+0x180/0x180 [ 2828.853421] ? __lockdep_reset_lock+0x180/0x180 [ 2828.854421] ? lock_acquire+0x197/0x470 [ 2828.855263] ? find_held_lock+0x2c/0x110 [ 2828.856136] ? __might_fault+0xd3/0x180 [ 2828.856979] ? lock_downgrade+0x6d0/0x6d0 [ 2828.857865] ? lock_chain_count+0x20/0x20 [ 2828.858752] ? sock_has_perm+0x1ea/0x280 [ 2828.859624] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2828.860745] ? __import_iovec+0x458/0x590 [ 2828.861642] ? udp_v6_push_pending_frames+0x360/0x360 [ 2828.862742] inet6_sendmsg+0x105/0x140 [ 2828.863572] ? inet6_compat_ioctl+0x320/0x320 [ 2828.864527] __sock_sendmsg+0xf2/0x190 [ 2828.865360] ____sys_sendmsg+0x334/0x870 [ 2828.866247] ? sock_write_iter+0x3d0/0x3d0 [ 2828.867143] ? do_recvmmsg+0x6d0/0x6d0 [ 2828.867973] ? __lock_acquire+0x1657/0x5b00 [ 2828.868906] ___sys_sendmsg+0xf3/0x170 [ 2828.869744] ? sendmsg_copy_msghdr+0x160/0x160 [ 2828.870725] ? __lockdep_reset_lock+0x180/0x180 [ 2828.871711] ? trace_hardirqs_on+0x5b/0x180 [ 2828.872637] ? lock_acquire+0x197/0x470 [ 2828.873487] ? find_held_lock+0x2c/0x110 [ 2828.874358] ? __might_fault+0xd3/0x180 [ 2828.875208] ? lock_downgrade+0x6d0/0x6d0 [ 2828.876095] ? io_schedule_timeout+0x140/0x140 [ 2828.877086] __sys_sendmmsg+0x195/0x470 [ 2828.877960] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2828.878884] ? lock_downgrade+0x6d0/0x6d0 [ 2828.879789] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2828.880820] ? wait_for_completion_io+0x270/0x270 [ 2828.881856] ? rcu_read_lock_any_held+0x75/0xa0 [ 2828.882838] ? vfs_write+0x354/0xa70 [ 2828.883632] ? fput_many+0x2f/0x1a0 [ 2828.884403] ? ksys_write+0x1a9/0x260 [ 2828.885212] ? __ia32_sys_read+0xb0/0xb0 [ 2828.886104] __x64_sys_sendmmsg+0x99/0x100 [ 2828.887009] do_syscall_64+0x33/0x40 [ 2828.887799] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2828.888890] RIP: 0033:0x7f1c4c8a5b19 [ 2828.889697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2828.893619] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2828.895237] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2828.896746] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2828.898262] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2828.899770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2828.901276] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2828.934533] udc-core: couldn't find an available UDC or it's busy [ 2828.935441] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:39:06 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf2, 0x4, 0x40, 0x81, 0x0, 0xd6d7, 0xe2465, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x13a8, 0x5, 0x520, 0x0, 0xfff, 0x1c, 0x642, 0x0, 0xfffffff7, 0x0, 0x101}, 0x0, 0xffffffffffffffff, r1, 0x3) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:39:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}, {&(0x7f0000000dc0)="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", 0xac8, 0x393}], 0x0, &(0x7f0000000240)=ANY=[]) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10002, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffffff, 0x0, 0x111000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) symlinkat(&(0x7f0000000240)='./file1\x00', r2, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xf9, 0x0, 0x1, 0xe7, 0x0, 0xffffffffffffff80, 0x38, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f00000002c0), 0x1}, 0x402, 0xff, 0x3, 0x4, 0x20, 0x80000000, 0x6, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x145003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) write$P9_RLOCK(r2, &(0x7f0000000180)={0x8, 0x35, 0x2, 0x3}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) lseek(r0, 0x0, 0x0) 20:39:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x80040000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:07 executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="5e8079513601937c26d135c5f63159b4ddd3f3d3251fbd8e82de88a9c53595c9366b48212c36602d7c2f85f2920ebbc2a1f2093dd5e3b74c914868c81fd429654e225a0687cd0ca118029dfd5ce2fe150a9a984f9a88cdea7ae868abdc83dcf8286d907db0983f79b3f346a130eb50d48abcab6a22dae45345c320879ee11ab5642851df060ceb699ebe00bec8176878b2b39ace2ff38815fef78aa4f679790521aef7ee85a665818cee7c3bf8c232792c7200eeaecb5e875dfa2cd74aac0f37b07eaae7815c710fc1b42aaeb9f46ffe9b6864427bc4feee8a", 0xd9}, {&(0x7f0000000400)="12a54f8f45fe06e894ae31ea31a50b50362e9cc6ecd8204ea19214f32b137d2180ae912af2e09ed33303f67ffebb33abe899f8a7dd542326b71cf43d446dc3f6ac46bda4defba24c9036f82e84aad1758e75525d7282865e428130fcfbd64ead73a63d03390edb5e5fe2244b65b47f087294d1022807516a23c267ae4dcd8be59f8304ccd8a97f942271222089d28a91d1844b0aa6199057b744063eccfc6ccc5fd5d108395fcdc0af15df67688cea1041a772302044714e4e6b4a797c698703c46579797aa52b0359180a9180cc4c90e4656e01d3b46c724254705d5c7612d295f46f1aff2f243c774610be16b416c43c5913b4b66dcfb4fb7ce323f12feab51aa003049b012f4324e0223f92560adcabdc7f105094552b691c458b622ecae81afd15556e602344baad7b43a6d425b75a61d706e93b1a1b7ccd74a0d2317c4e4cd74010e8cf3265c8ce8bc8d437e117e9af221bfe3add4f5412cc02fa2c93174614f639d43efecabbc7459940f43448ab72e5e4db7b6ee080a7f0d2c369bebf47e96e2f82a158886cb73f8d8083938216f937e29fcc7da4b3e0ffa5fe127c4fc6664e8275ef3abd8d1872826d51effeda1b9873fa439da3a4666270afd1550ae46b0cc1537b4bf81c5a0c637b1967e3e6c27b841312f5c58b2702857ae8782913c15e976e63321d0b81ce2351a21743bde6c9f9d6aa9946165b995682363cb4a5570e77dc084dd6c0e7e681e1f1eeb2cc8219b5b835cf5e37acf621361dfb015624e1a1bf4882dbd2cf9dd279de6ac2aa4c7641c86e4fd1101835d93ed3ac70646a98878594229b77eedd3655fde03542bcd5dc784c12ad2ac6bd169c3418f3bc393f671a052272fd85fdfda8067dca45e2dbe312f58c9f5cd0ba71acbd15b4f63d9cd7c47a4ea2e47727ef8ef614a7593f904b84a5c710a460f483fb44793fc9d39e15de42190edbab0f844fcf870ac519c4c005fb4d7c3ebd156e58bcfe62a5171fd181d5a2fc85c9b1c8252fd9c79eb66d35c8a5e56ebb83095a3007fe0767eb8f532e93a71736ad478c58047a49ae5fcb05b0ffbbea6111c09a1fbd6e76198eee0359a46b485cf6c302e26d467e5c18882ebc4e569b410b6162eb69f5b21846fc935ae3382976423e76ee83addf67c525b4562cbac430422cf9488bb000b71a667671ecaac61720d74b8e5498e8c9771e4ef455481e185b11cf6540b3fbd646c070dda790368e4d064f6ca711c3cf3c4a8ffc70318c8e4310602c72ee97c85a384a44353a464cd8136146d2757015ce448612de95cb6f5918fa200a44617e9a4f781bb60b90de3028c9bbdc5b63eeebee9c4fbb926d21a7ae0ab0e3e6ce1fbb5399fe03c50943845755628c04a9d48afcfa4cf0b623a4769c7431e4ef20b00ce6efd7202d5126fb118addc38a15009ecd2f1fab385af83652459ed45441affce240f4ebbc4802d4942eeb0ebc4891b102e947f7470faebe6673d338772be968d9dbaa074772f64e6edd7c534cdc7493cb10a64fa9c35079c7b85f66adc1a0c55c94188849c546fe657d9c60ce6ee780133d200a32c122b1765a82ca093e3fd8eefb57422b0905feddf3c053f27f7eeffb78a6ad06c7e3846e3d6c68a867e8b0de09d87e4b035b2c15893e973598e33f9c00b893064a5e82b25135f243d9daad55c91b357a0db94d8f6df70140871d5376c8c42d6435569c46c5fdd3cf189c2d5309a2722e90f21ea556102dad2cb1fa9f658f8ba222d9fef503137841fbe77162c1749b929a9acc652a6b458b495f41576b959e31d1b21a7f0cce560354e89eb4ab7138b9140607baa21526df195a73bde73b4267fa061743eceaea706260b08384beeaf4cdd960878ca2acff15e2579ea180907602f5ffa89fe57b5ab3c703e6f9a34d67e07198051fbdd9af5b216bcb0d93d372abd70699843b0bd7e8fcd5836de28b538eb7e6b359c7c9486556c707ab4aaddd6d146661c95cb5060bc67a83565bded77d0a21fb5cc11947102c0e65343592427b4587255e15ef97ecb249b50dec635a1e6b36cd40a5cddb0c51f9fc4a1f63539368cb1cf5adaafc16ceddc454705564f2835debb36c0e979f55e6bd4f79d3ffbcd3037fd1c9fec47686e945e39ac9d2effaed5f3bd688e957c92bf875a00a6602f3b2c68634b0a609e3afba7221a02e1002dbe43ae92abaf23fd73b046704a6dbbbb4116a85fcf4fed5ae0dbceb014cab7f5d6da579ee9445ed5dabcf74750d984375d5b87092cdb021c94775c2aee29cfd078a85626f905b52943306a5dca85f16c4dda4f4111a5e5803abc0f84f1c747f6b348592f8546899ffbeca65299b014d1e5987913ef532ce2fa3b1b29120d3bb8244dd1ca9927b9e918a2aa605a228f6d2da5ac26fdae7d689a27dbd7e58887aaa05c2bee45d7e6cc686d6181f257dd0e190500bae0b1ae53ff5538c4a6c589245bfdd49a02a7a05c9556b02761d4777f19a571b1576805034f096cdc4d75ae9e98dbd68fe97a8b623eafe76a1143171ad3e942e1962c3051ff513ab1a17204f8320bd877438c45d5a777fa085d685ac49a0e10db843572092e0de77959598fa600b22983328a5f974149c478e2325a97561801ebbea7bb74f1e206a060fa764a9a040fefbdb2df27934dc14f48094b77c1358dc66c379f90740a43f5ef0ae67d066f3cad32b75d215ebe702604a228cc2581e6f035ab5191c837db459f77462d4abfc339154d8896cd12441289415d364212958775d597f858b2e770de514c0fcf1983371cafc53a197365130292f8f132f41cd95cc5a54f03468626baedd63843b571a541462e2ecea3f016ab881bff30e1b924fabf0f58920b149d9f32769724e5c716325a38eb569252910401ce20f47a2ac00ea49f16c30d661d1c07f673fede4620926b3bc01691476feae7feb6c78cd68848b06a121aee7d4047759e297fc0cf0a558983edee25ab17652699c7932d4205da9af8f3e57af661a7e1e1309b138090712b4a6afc5be2ad109035a2b30d4f0a504bfdcacec557d4304826f9bb6fc8397590350350ba7a9e53aab63793becefbfd20024dfd1d6e94f0bc980f968d20d03494712c5ecf7f2c2f23bea378d1b8e004176a1d0e194d223c4911d5dea8498e9d2b0eeb28b300a206dfbd89da1e6aa4ed023ffff618f856da4a99bc399c23921fe665913bb9992fe6dfbfbbc0bcc960f86e292859d9dd0213e740403d02bc524cb49827fb3c6b6ec01eaf943cd11cb4c4bfb2d313326a48199bac7e8d106870a7f5710784248f6874e9161f790f9936e240bf3b155f65fe35740c5aa49c16d92ff90cff68db05ef14cef4b7def18226725a8cc2e74af1e88d13b5229369ad2b70560d2793cce517a4bf0cb519edf516bca17d39cc270d942f159867be9b84928696119542b8dda54c8b0cb0f7dc4b5c6ee79953113833d3e7e340c6f9bd41f1865cb75387b19640c75b53fe179868df87f009730e657fe026a57e48a778c17692e34efd6adf58852b87c0e30b6c6eb5c62ccb72e57cb8ffacfd4cc3f916cbad5c3a339eae764efd090316cf3e208c693d61883dc9070f38a72cfd0a6b83f5deae7104e64aadfc5643712d8252c29a2227e4ace0dad2bd39b00c1e7ebdc018396489e9cc4678556cdb128cef6299f9b5464d34744e1a5b4a464b1159c4faa4da7d006f7def1576017651633d4c6dc101983f41af0a7d7895218b56199d9617b470ab35e36539dc05ea5b34a9acce39abd01f7cc03509e9f12fab32fb93600e8781e87193cb0396f87c2dcc5ff48513cd42e0b83c73cff9152adab48c81c6d690d5f2c57778bc5f990a81aad3e44bb32c9c7f40acce7e134e32a88bef019828ea0ac25b05cee11290806c582155f68321c290ae0dc2c2a388cd42717c52d395d445fb301c3d600b1c9a6334d082b802b8cd6e7820ac1d0b3fa99102ad4c5f00c0fdae8dd70d48332e5c55d075dc246409f6089e030f87d028af6546fc2aac51274d26cfc5a3db84b4097d95f89d1864f53b9489dfe53edf2fb774dec67b963c099babde703de74a3219f606d2169e5bad489628c957bc1789e8b691a04ff8b01db620673cdb65ec38b3d11f92faba4aec64237e5915cf81f5a196c9c1ca053ed1a1411700f4b4626eda35cabc0b2c96e0c8412396f320f1dc6c887870fc0b6e43b65fe0111789bf1de41f92838e03fd48eb62c5acc27aa4dcbcbfb44e4d9167337299a6d479b395c80d3f6d95dd06bee59b880c272cdc7531a618c406bcda8909c7e425f0b69077e013da037948ae3004bbdf5e41446133f2ffdb3a2e8dc4a9991584b20fe2426dc29b0d9f2a45b53e88b107219c4c8d3859c3caae87eead9b06ed3505f8e2680cfba0605852689952274408a9b5425cdb31a156318f0f58b5b13f7f233856343bd832de340cf707ff797b23e9a7873d1fe16f170072661c7d0a1e4d8c736744126b0b0638f472ea1ae7f26311321f889f9c44d25fcd5302e3af665dffb4d16b3c5d082e763c6bb3ca851ed5b5651b400ea8a9eb9f8fa6a00703f137cf02ac7932782ddfb5c4debd1d0672f7feea9e802ed0994a39302995c86df421462ae69e809f37f169510c774d4742ff69dbee63a4b573302af0f5db9e40de0d2bc72ac3c4f15f7278b88bd097dbfa7010a9b0bfb5a2cac85685402f4f05f78156d70d940a3e84aabf1e6a40e146085631808e0580907b16ec90c27eaf495b1c0ce07d5f1db8c61bebf47e71cf5d979b42d8cb85f0da4e21ecab25fe7d98127414d7155d6965a4e626b4371211732fb7afdf555173d579457b706bf7d8fd18090ae6efba6b7c373f8cec96da167312bc508bfb377cc1d042026390c401681ec238b51da44ca909dacaece5b8082f43f03de4f3a09af3d1e6f4f1c297cd5630fd55f35c657218aeb0cdb62e024d4faa29f116cec4032b2ecf7005bd9ecad326da34da407ac8d2a1b8ed33ea64723c91627a6bfa68942235f1b333664b58ee8869f05e9040c27efb3dfc361d9ccc6681f1a42ef82c903179d7e364c3fa145e2bda8138237fcd99b25d5bd4893d683a78bd2e2951b270b6fe38e8fcbfd17463dfbf3aab3413dd9dcfd8bcb99781643ac1573339ccf280b3d19a22a8df077b8731cd8bf969337604b441ab355955f3397770c5693849506940df04b478e0ab2707e1b78221b3240ee3086fc135aa8089f449a5477428143f36e5b77b8a31d103a828a532e408332d3228a46b0cf2eb5570b8777b11f8d5fdff3b59da35ab79379e672884292f88cdc205e3ebf9c201487a1a94dd206c46d12faf2323c29b1c6b8d269d686ad13f0e3167b3e2efd876cd36481c5462e0170da4f1863036ce13e88a91274bd726c5ac50ac3e1ee720c077c44dcf1b9e9ee97c6a8acda2e614a0bd9e410440982a94ce013f9cc221d0f087562ac52fb8424066e3fb8d757a51ab6c5bced804b7d251a8a86799f573fd18b763498b190ee8c940cdfad9b29535c23247ed2e6dfd91e3e0364a52ae7976d365f752674cb91ed630dd0ad6eb54986bfabade57d2fd3287d513fffd7ef56a26b37d39723597b253af15cfa9324fd4e3eba6012a129681e0da4b22ea35ed599f789efaf170c8e4e2814f1ed3ca697a8b0dd9858f8cc88b5e8ad415ff90fc472e98ef3e467dd59d04f2034d865fe3d2bf2951750184878be88e00bc8bc9fde90e2f17ddb2889fd7930f5033db54b6f130858f6f0d3a08af8910d87fde7bf84efd57d8c8762afc722a978345ae00b6b486f1651a311b7100b7882d2840eba533644ad79f6", 0x1000}, {&(0x7f0000000140)="b55c38d81354a60fca427618af5159a7124f21fc12f67e9fc8e3cced62ac27d5bf487aa5b9af030dcdb911153981b59d157c48eca30e74f519c5423ec0c269a9dc35db819bf16a88dc", 0x49}], 0x3}, 0x8001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000014c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x5c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000001500)={0xa, 0x4e21, 0xba5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000003980)=[{&(0x7f0000001540)="5f16632f85533d87a822101449feee07f26ba434db25f4c6d170be00f2a95283ca4512f5bd48d54ebd0e7a91feb1a15a84", 0x31}, {&(0x7f0000001580)="d9c942bae69b1c4292e938fedbf8be71691eda7e2609a6921314ffdc0e39f12b61e1e41851e7695d6579261573888f9077c0cb72c452000cee833bd67ad798a7fc6a1a9d5a8c59c575ed0c671fbfa5dfe089f4757cfd2a85aeb5ffcdc681a84a8c1b7a3b55e90ee5002c49d0953079d7606325dfe156f9b577ba1493dd98b735443e40bcf0842d2a01036cd83a2aa7169719e5bc3466b361a65ca057f223c5f77432a23c7157a81f14e862d9e7eed6055e293b31a59fc84f0b6cf23ed979a3742f9baf6961b16536d39497cb7e80", 0xce}, {&(0x7f0000003a80)="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", 0x1004}, {&(0x7f0000002680)="186f376a3b5e54378ba57d7b003e4e89be3921183b651dca7aeef274e3963870305e9af2d3", 0x25}, {&(0x7f00000050c0)="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", 0x105c}, {&(0x7f00000036c0)="1eda9e9d2ae3f8b732925b9e2e1925140afd4e2eeaa9e4524ebcba6f4eb6046e3e8f59bb777ce330c53e49e6595caaffe8178b75b1a6d745a14fbb6963ca9de5ac3eba662501a467c4aff041343f81dda90440cbf0f8fd92813dacb9012a22e6595997ec6192ab8c8399026040d33ea13c8617780a8e02e7d4aa0e17d0c7b2b91ce27844d82d4467ac31d97800045b27003dc471908aa089d890a6a79d8ca9cb4d1146a547002079112420066a34921c98a56359283a5c318c6755a2ae5cb32dbcd767563fe8dc47a23d8ff2a139", 0xce}, {&(0x7f00000037c0)="762cddc3576a7987dbfdd4cd71612d08cba647c246f0fe33b91332e5292e73d150f4728ff6a09f92d2b334a737414d8878344f4c894c107e0f8810b881afb4b2877f050151ce6da26c1c07f95733a83d81be6ea5b7025455aef086e3a193c349ff9791172f27eae8d4183614b3db79e6bc23c5b9173da2dab727f9a0fd5485fa1b3f3a20aa3b650753a8402cffe9208fbb56bbe6", 0x94}, {&(0x7f0000001680)="4ee5802170b92c3f00000000000000b851370900000040a584f08c33ce3ebbb48f3c823962000000", 0x28}, {&(0x7f00000038c0)="0830c30c27aa3edfbbf83080496e8a7577683bfccd11cc63153261e28f3bb3acd3420e076e16a6ee4fb25d769ce5b9113efb404d0dd9675a92c60c452347f302675ae81a6ee69c907a5ffaca984c9a76dea7b820a02a55ec94ae71f2c8ead705e2cf25cf63ab231fbd4e43149a7d54a918f22aab2f32f50f0a50e6127b34c65ce9abfd8c66ce1a5fa85f950b227249576e97c7b4ef16c75c20abc57c73aee3f15633b4cb77ffd2d8489945aa70f72eacca3df2c85c088837b3", 0xb9}], 0x9}, 0x4080) pipe(&(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000005080)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005040)={&(0x7f0000004fc0)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="04002abd7000ffdbdf257c0000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff0000"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x90) 20:39:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 63) 20:39:07 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4b49, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 2829.387572] FAULT_INJECTION: forcing a failure. [ 2829.387572] name failslab, interval 1, probability 0, space 0, times 0 [ 2829.389953] CPU: 1 PID: 53507 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2829.391347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2829.393045] Call Trace: [ 2829.393603] dump_stack+0x107/0x167 [ 2829.394359] should_fail.cold+0x5/0xa [ 2829.395155] ? dst_alloc+0x9e/0x610 [ 2829.395912] should_failslab+0x5/0x20 [ 2829.396701] kmem_cache_alloc+0x5b/0x310 [ 2829.397561] dst_alloc+0x9e/0x610 [ 2829.398277] rt_dst_alloc+0x73/0x440 [ 2829.399034] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2829.400114] ip_route_output_key_hash+0x18d/0x340 [ 2829.401102] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2829.402231] ? mark_lock+0xf5/0x2df0 [ 2829.402991] ? __lock_acquire+0x1657/0x5b00 [ 2829.403878] ip_route_output_flow+0x23/0x150 [ 2829.404772] ip_tunnel_xmit+0x70e/0x2f50 [ 2829.405614] ? usage_accumulate+0x70/0x110 [ 2829.406495] ? __is_insn_slot_addr+0x94/0x290 [ 2829.407408] ? perf_trace_lock+0xac/0x490 [ 2829.408276] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2829.409239] sit_tunnel_xmit+0xef0/0x2960 [ 2829.410125] ? ipip_rcv+0x4f0/0x4f0 [ 2829.410868] ? skb_crc32c_csum_help+0x80/0x80 [ 2829.411794] ? lock_acquire+0x197/0x470 [ 2829.412605] ? __dev_queue_xmit+0x1c2/0x2710 [ 2829.413546] ? netif_skb_features+0x536/0xa00 [ 2829.414462] dev_hard_start_xmit+0x1cb/0x6f0 [ 2829.415376] __dev_queue_xmit+0x17ec/0x2710 [ 2829.416266] ? find_held_lock+0x2c/0x110 [ 2829.417093] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2829.418038] ? lock_downgrade+0x6d0/0x6d0 [ 2829.418878] ? lock_acquire+0x197/0x470 [ 2829.419682] ? ip_finish_output2+0x220/0x21f0 [ 2829.420595] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2829.421675] neigh_connected_output+0x382/0x4d0 [ 2829.422630] ip_finish_output2+0x6f1/0x21f0 [ 2829.423510] ? nf_hook_slow+0xfc/0x1e0 [ 2829.424302] ? ip_frag_next+0x9e0/0x9e0 [ 2829.425106] ? nf_hook+0x160/0x510 [ 2829.425853] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2829.426893] __ip_finish_output.part.0+0x5f3/0xb50 [ 2829.427891] ? ip_fragment.constprop.0+0x240/0x240 [ 2829.428886] ? nf_hook+0x510/0x510 [ 2829.429633] ip_output+0x2f7/0x600 [ 2829.430357] ip_send_skb+0xdd/0x260 [ 2829.431098] udp_send_skb+0x6da/0x11d0 [ 2829.431903] udp_sendmsg+0x197f/0x2170 [ 2829.432694] ? ip_frag_init+0x350/0x350 [ 2829.433529] ? udp_setsockopt+0xc0/0xc0 [ 2829.434327] ? mark_lock+0xf5/0x2df0 [ 2829.435099] ? lock_chain_count+0x20/0x20 [ 2829.435939] ? mark_lock+0xf5/0x2df0 [ 2829.436705] ? mark_lock+0xf5/0x2df0 [ 2829.437462] ? lock_chain_count+0x20/0x20 [ 2829.438300] ? lock_chain_count+0x20/0x20 [ 2829.439148] ? prep_new_page+0x16d/0x1d0 [ 2829.439966] ? lock_chain_count+0x20/0x20 [ 2829.440819] ? __lock_acquire+0x1657/0x5b00 [ 2829.441713] udpv6_sendmsg+0x1b4e/0x2af0 [ 2829.442543] ? __lock_acquire+0x1657/0x5b00 [ 2829.443429] ? udp_v6_push_pending_frames+0x360/0x360 [ 2829.444463] ? __lockdep_reset_lock+0x180/0x180 [ 2829.445427] ? __lockdep_reset_lock+0x180/0x180 [ 2829.446373] ? lock_acquire+0x197/0x470 [ 2829.447170] ? find_held_lock+0x2c/0x110 [ 2829.447995] ? __might_fault+0xd3/0x180 [ 2829.448797] ? lock_downgrade+0x6d0/0x6d0 [ 2829.449644] ? lock_chain_count+0x20/0x20 [ 2829.450484] ? sock_has_perm+0x1ea/0x280 [ 2829.451313] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2829.452389] ? __import_iovec+0x458/0x590 [ 2829.453226] ? udp_v6_push_pending_frames+0x360/0x360 [ 2829.454307] inet6_sendmsg+0x105/0x140 [ 2829.455105] ? inet6_compat_ioctl+0x320/0x320 [ 2829.456014] __sock_sendmsg+0xf2/0x190 [ 2829.456803] ____sys_sendmsg+0x334/0x870 [ 2829.457655] ? sock_write_iter+0x3d0/0x3d0 [ 2829.458508] ? do_recvmmsg+0x6d0/0x6d0 [ 2829.459308] ? find_held_lock+0x2c/0x110 [ 2829.460140] ___sys_sendmsg+0xf3/0x170 [ 2829.460927] ? sendmsg_copy_msghdr+0x160/0x160 [ 2829.461864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2829.462940] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2829.463844] ? trace_hardirqs_on+0x5b/0x180 [ 2829.464721] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2829.465629] ? finish_task_switch+0x126/0x5d0 [ 2829.466552] ? finish_task_switch+0xef/0x5d0 [ 2829.467441] ? __switch_to+0x572/0xf70 [ 2829.468252] ? __switch_to_asm+0x3a/0x60 [ 2829.469065] ? __switch_to_asm+0x34/0x60 [ 2829.469914] ? __schedule+0x82c/0x1ea0 [ 2829.470712] ? io_schedule_timeout+0x140/0x140 [ 2829.471676] __sys_sendmmsg+0x195/0x470 [ 2829.472488] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2829.473389] ? lock_downgrade+0x6d0/0x6d0 [ 2829.474268] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2829.475254] ? wait_for_completion_io+0x270/0x270 [ 2829.476229] ? rcu_read_lock_any_held+0x75/0xa0 [ 2829.477188] ? vfs_write+0x354/0xa70 [ 2829.477959] ? fput_many+0x2f/0x1a0 [ 2829.478695] ? ksys_write+0x1a9/0x260 [ 2829.479463] ? __ia32_sys_read+0xb0/0xb0 [ 2829.480299] __x64_sys_sendmmsg+0x99/0x100 [ 2829.481152] do_syscall_64+0x33/0x40 [ 2829.481953] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2829.482995] RIP: 0033:0x7f1c4c8a5b19 [ 2829.483750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2829.487479] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2829.489024] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2829.490474] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2829.491913] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2829.493348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2829.494792] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:39:07 executing program 0: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x12300, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000180), 0x7}, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x200, 0x8) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x3, 0x6, 0xf, 0x9, 0x0, 0x101, 0x80b86372b0288e0c, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x10000, 0xb0c}, 0x8902, 0x4, 0x0, 0x2, 0x5, 0xe306, 0x7, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000030003d01000000000000000000000000080001"], 0x1c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x26, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0xbc, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xbac2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x18}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x24044890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1548, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6f}}}}, [@NL80211_ATTR_CSA_IES={0x1520, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x3, 0x6, 0x3d3, 0x7]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x104c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "706c7f6930992b26bea5341496f1137426ffc05e7c775f16ccee6c99a1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x1c, 0x2, "78193a3a5847e49e8473369a2a2b6ce47d06f254ed007921"}]}, @NL80211_ATTR_BEACON_HEAD={0x4b6, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @initial, {0xf, 0x5}}, @ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x7fffffff, @random=0x3f, 0x88, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0xc, 0x1}, {0x1, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0x1}, {0x16}, {0x2}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x0, 0x81, 0x1, 0x6}}, [{0xdd, 0x59, "ccea4839bccbcc0647b16418be9e0b92cac082439385b1751bc621ba309d25b5f8e4e35f6254f69c1251f277ce719a1565b5c5de5ea10704241fd107117388d59bf3e7e47135ca31e0ae1a93fd3f638e74aa8c34670ded9838"}, {0xdd, 0x1a, "ae3328a9ced6b2c4c16f0d0e5acb5c4b816ea1800381472b2434"}, {0xdd, 0x96, "391aa9570880cf573156a34a657f0246466eb1e856db6b33e24808f618cf68ec38eb97426d87fbc002c22ba5cada0f797804fbf362c040179737ec66eac0404519bc55a699affb61d6ad8334df8defff4427e12696278503bec0f41362deceef84e02cbf5947554f672425abbb05d0fbd618d567eb64411fe9de34e549d569b4d3091f586d497c4ccd5bae093ea7229dc19ca4b45072"}, {0xdd, 0xa6, "8a5c3c23f9368ba9f99853ef8784582114a37b46293ebb0d619a55cd419eb28e3ca724308383c40d4a4c0ea18a122e9ff01e25433f8c785abafc337e5705dc8e47d4e5eb5739ffab0ee4fd1b950e90579a702a87117aa70e4f31383d7311a143a0b8977c38912ad1b6c21dffdf2165e10344088f0e9127aa06cbedbef24210c698331b8ad975e41f85602ee00b80acd622047c6d783ab4b644a2c8eb3eeb4583fd19f1dbd98d"}, {0xdd, 0x81, "b3a473e46f445c1188509b2a3a130802beedcc20dd861e7e12337a3410de7a315928459da6ba4b22aed43d65c96b3c7d9e5667826b5b4cb8df3eddb78697572e2491f9c70140ebe04738d058626c11f2d9f4d5e8f8cc2fe00fdd000d712ac9f040e660f61bbbe3673251793b211b5ad7f315478980f8af37a023e6f98b5f78e8f3"}, {0xdd, 0x47, "c25f1b7213dea14bc3d73565e7e8107daab0f4b67866f55abc2d48b3efd414e724f025c704a0b2f29eea63c3cd8308ad5fcf139b2df5dcfc2c41c9c980cf5df26bf584a3020c8e"}, {0xdd, 0xc9, "1c498533b81445d72bbf62e6109433b1f8b2183f75948e35f8aa0969e6bbb923feb2839f926f802a380b8a116906b07bc132f3d6f0940dc1f747be88ffea3359dab74e2146f4e8f18c8836bcab22a2732db25ac66e9b780fdcc1c877b37d7b564d2b19b004b0d188035419c6a3a6510157d3c00cdd63436d1d775da919ec31fe9b522287523adf9877d74631f8119e7b28669873a3d04ace7ab214ee6af00db652aa17d60ee5fad97bd77a9430482ba6fb87974c5c9cd8e71cd5e25c28b6f461784e50df8b4116ac3d"}, {0xdd, 0x52, "b30bff97e154be55318cc9780ba2c0b60e17f87dc9ec684047dc3f607a81042799e97e48e4fb17bd0a8c0680e3b616741e1ab83aa2641f4e10fba5fa322cc7329011de582d695826beca42e4c749e5a5259d"}, {0xdd, 0x55, "f5e596967b701c7dcc8ff5c01fba6531e3b09e34a000d7c4a9361222e4adbfcaf36a314901355162b0df3bc19115050f9cd54d01675ac9f4d190c5ca3d494c7af99f18b8b0ac3ea70fdd525028619adcad5afabc84"}, {0xdd, 0x75, "07d0863fdd5a0746fa9bab4bc8a8c66b37693983a6699dcb4ff6966cc27e3baaff28e15c3224a67ee65465938156684c8de68f237bce87e8abd35c74b4a045fc2aacb8faf9b367239adeffcfc7f8249ffc13bf14af4e4c909de049a78d81018c858728b416771089ba48933d2959f9581a80c0c480"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x2, 0x5, 0x8000]}]}]}, 0x1548}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000800) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="8d00000000000000000000000000006f"]) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) [ 2829.657504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 20:39:07 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8cffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:07 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="73686f6f72746e616d653d77696e6e742c6e6f6e756d746169a7e680edad1390b1bcc65bbd584f596c3d302c726f6469722c0000000000000000000000000000000026e6903e304004b1592336f6db8036e980f8e6cc0016d456b3b5e2290d31a7e17a9a600fed12dda5ce149a5578fa5d75c02dd345b7"]) 20:39:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 64) 20:39:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet(0xa, 0x3, 0xff) r2 = dup(r1) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000180), 0x4) r3 = dup(r2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180), 0x4) r4 = open$dir(0x0, 0x1, 0x0) io_submit(0x0, 0x2, &(0x7f0000000180)=[&(0x7f0000000200)={0x0, 0x0, 0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001e00)={{}, 0x0, 0xa, @unused=[0x3, 0x8, 0x4, 0xb4], @name="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"}) r5 = socket$inet(0x2, 0x0, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x5, 0x5, 0x1, {0x0, 0x0, r5}}, 0x0) openat(r3, &(0x7f00000000c0)='./file1\x00', 0x842, 0x2e) syz_io_uring_complete(0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x18800, 0x0) openat(r6, &(0x7f0000000140)='./file1\x00', 0x8302, 0x40) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000180), 0x4) dup(0xffffffffffffffff) dup3(0xffffffffffffffff, r0, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:39:49 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xa1ffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:49 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) [ 2871.600430] FAULT_INJECTION: forcing a failure. [ 2871.600430] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.602768] CPU: 1 PID: 54064 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2871.604157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2871.605810] Call Trace: [ 2871.606358] dump_stack+0x107/0x167 [ 2871.607098] should_fail.cold+0x5/0xa [ 2871.607872] ? create_object.isra.0+0x3a/0xa20 [ 2871.608792] should_failslab+0x5/0x20 [ 2871.609557] kmem_cache_alloc+0x5b/0x310 [ 2871.610396] create_object.isra.0+0x3a/0xa20 [ 2871.611273] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2871.612288] kmem_cache_alloc+0x159/0x310 [ 2871.613122] dst_alloc+0x9e/0x610 [ 2871.613829] rt_dst_alloc+0x73/0x440 [ 2871.614590] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2871.615647] ip_route_output_key_hash+0x18d/0x340 [ 2871.616605] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2871.617708] ? mark_lock+0xf5/0x2df0 [ 2871.618456] ? __lock_acquire+0x1657/0x5b00 [ 2871.619323] ip_route_output_flow+0x23/0x150 [ 2871.620206] ip_tunnel_xmit+0x70e/0x2f50 [ 2871.621016] ? usage_accumulate+0x70/0x110 [ 2871.621862] ? __is_insn_slot_addr+0x94/0x290 [ 2871.622775] ? perf_trace_lock+0xac/0x490 [ 2871.623601] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2871.624543] sit_tunnel_xmit+0xef0/0x2960 [ 2871.625380] ? ipip_rcv+0x4f0/0x4f0 [ 2871.626118] ? skb_crc32c_csum_help+0x80/0x80 [ 2871.627009] ? lock_acquire+0x197/0x470 [ 2871.627802] ? __dev_queue_xmit+0x1c2/0x2710 [ 2871.628689] ? netif_skb_features+0x536/0xa00 [ 2871.629594] dev_hard_start_xmit+0x1cb/0x6f0 [ 2871.630502] __dev_queue_xmit+0x17ec/0x2710 [ 2871.631368] ? find_held_lock+0x2c/0x110 [ 2871.632181] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2871.633093] ? lock_downgrade+0x6d0/0x6d0 [ 2871.633915] ? lock_acquire+0x197/0x470 [ 2871.634720] ? ip_finish_output2+0x220/0x21f0 [ 2871.635619] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2871.636665] neigh_connected_output+0x382/0x4d0 [ 2871.637606] ip_finish_output2+0x6f1/0x21f0 [ 2871.638492] ? nf_hook_slow+0xfc/0x1e0 [ 2871.639267] ? ip_frag_next+0x9e0/0x9e0 [ 2871.640058] ? nf_hook+0x160/0x510 [ 2871.640770] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2871.641785] __ip_finish_output.part.0+0x5f3/0xb50 [ 2871.642776] ? ip_fragment.constprop.0+0x240/0x240 [ 2871.643746] ? nf_hook+0x510/0x510 [ 2871.644472] ip_output+0x2f7/0x600 [ 2871.645187] ip_send_skb+0xdd/0x260 [ 2871.645932] udp_send_skb+0x6da/0x11d0 [ 2871.646729] udp_sendmsg+0x197f/0x2170 [ 2871.647513] ? ip_frag_init+0x350/0x350 [ 2871.648318] ? udp_setsockopt+0xc0/0xc0 [ 2871.649129] ? mark_lock+0xf5/0x2df0 [ 2871.649881] ? mark_lock+0xf5/0x2df0 [ 2871.650642] ? lock_chain_count+0x20/0x20 [ 2871.651465] ? lock_chain_count+0x20/0x20 [ 2871.652301] ? __lockdep_reset_lock+0x180/0x180 [ 2871.653245] ? __lock_acquire+0x1657/0x5b00 [ 2871.654121] udpv6_sendmsg+0x1b4e/0x2af0 [ 2871.654935] ? __lock_acquire+0x1657/0x5b00 [ 2871.655805] ? udp_v6_push_pending_frames+0x360/0x360 [ 2871.656826] ? __lockdep_reset_lock+0x180/0x180 [ 2871.657767] ? __lockdep_reset_lock+0x180/0x180 [ 2871.658713] ? lock_acquire+0x197/0x470 [ 2871.659505] ? find_held_lock+0x2c/0x110 [ 2871.660321] ? __might_fault+0xd3/0x180 [ 2871.661116] ? lock_downgrade+0x6d0/0x6d0 [ 2871.661958] ? lock_chain_count+0x20/0x20 [ 2871.662791] ? sock_has_perm+0x1ea/0x280 [ 2871.663606] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2871.664662] ? __import_iovec+0x458/0x590 [ 2871.665487] ? udp_v6_push_pending_frames+0x360/0x360 [ 2871.666531] inet6_sendmsg+0x105/0x140 [ 2871.667307] ? inet6_compat_ioctl+0x320/0x320 [ 2871.668195] __sock_sendmsg+0xf2/0x190 [ 2871.668971] ____sys_sendmsg+0x334/0x870 [ 2871.669783] ? sock_write_iter+0x3d0/0x3d0 [ 2871.670633] ? do_recvmmsg+0x6d0/0x6d0 [ 2871.671413] ? __lock_acquire+0x1657/0x5b00 [ 2871.672288] ___sys_sendmsg+0xf3/0x170 [ 2871.673067] ? sendmsg_copy_msghdr+0x160/0x160 [ 2871.673998] ? __lockdep_reset_lock+0x180/0x180 [ 2871.674919] ? trace_hardirqs_on+0x5b/0x180 [ 2871.675787] ? lock_acquire+0x197/0x470 [ 2871.676582] ? find_held_lock+0x2c/0x110 [ 2871.677397] ? __might_fault+0xd3/0x180 [ 2871.678201] ? lock_downgrade+0x6d0/0x6d0 [ 2871.679027] ? io_schedule_timeout+0x140/0x140 [ 2871.679750] udc-core: couldn't find an available UDC or it's busy [ 2871.680000] __sys_sendmmsg+0x195/0x470 [ 2871.681462] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2871.682106] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2871.682130] ? lock_downgrade+0x6d0/0x6d0 [ 2871.685192] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2871.686177] ? wait_for_completion_io+0x270/0x270 [ 2871.687142] ? rcu_read_lock_any_held+0x75/0xa0 [ 2871.688065] ? vfs_write+0x354/0xa70 [ 2871.688812] ? fput_many+0x2f/0x1a0 [ 2871.689594] ? ksys_write+0x1a9/0x260 [ 2871.690368] ? __ia32_sys_read+0xb0/0xb0 [ 2871.691187] __x64_sys_sendmmsg+0x99/0x100 [ 2871.692035] do_syscall_64+0x33/0x40 [ 2871.692777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2871.693796] RIP: 0033:0x7f1c4c8a5b19 [ 2871.694556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2871.698212] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2871.699734] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2871.701154] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2871.702587] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.704003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.705425] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:39:49 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = inotify_init() ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{0x0, 0xffc00000000, 0x1, 0x0, 0x155b7ac0, 0x3ff, 0x6, 0x1000, 0x6, 0x400, 0x4, 0x5, 0x5, 0x5}, 0x18, [0x0, 0x0, 0x0]}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:39:49 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c81, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:39:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x202400, 0x20) ftruncate(r0, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r2, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xff, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000056b00)={{0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x3, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r7, r6, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {0x0, r8}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r7}], 0x80, "5fabd34a60e47f"}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r10, r4, 0x0, 0x9bbb) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r10, 0x40049366, &(0x7f0000000000)=0x2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) 20:39:49 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x754b00000) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@nl=@proc, 0x80, 0x0, 0x0, 0x0, 0x30}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) 20:39:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xe4ffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:50 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:39:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf6ffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:50 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r1 = epoll_create(0x8000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/igmp6\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x20000001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x1000}}, './file0\x00'}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x40880, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:39:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001440)={0x0, 0xfffffffffffffffc, 0xb3, 0x3f, @scatter={0x6, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/67, 0x43}, {&(0x7f0000000080)=""/111, 0x6f}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000001180)=""/178, 0xb2}, {&(0x7f0000001240)=""/125, 0x7d}]}, &(0x7f0000001340)="63298e0f697bb33e03de19adbc9953e9045ae102c7e0ffdd60b0086d2472a6ab9ab208c651746ec8a1441b8d29be11f92b28ebde847b8a18f451cfb715d219bab8e18eabe0b389cfc535c332c26f65b0f410b995146999c5bda37bac20f4e09d664e2672c95d1964d6ad0218e21be0b6c9be057c271e3c268b0025206fbdb79ce3061f1ab01dae09fe542a69f86d4f42411b022cf34112b4652776008dc4db3d4c5d048a8c8f4be9ea544fb50b77890cd689d5", &(0x7f0000001e00)=""/4096, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000001400)}) r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r1, r0, 0x0) 20:39:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfbffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:39:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 65) 20:39:50 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfeffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2872.754487] FAULT_INJECTION: forcing a failure. [ 2872.754487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2872.756326] CPU: 1 PID: 54910 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2872.757295] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.758467] Call Trace: [ 2872.758839] dump_stack+0x107/0x167 [ 2872.759349] should_fail.cold+0x5/0xa [ 2872.759890] _copy_from_user+0x2e/0x1b0 [ 2872.760447] __copy_msghdr_from_user+0x91/0x4b0 [ 2872.761092] ? __ia32_sys_shutdown+0x80/0x80 [ 2872.761717] ? udp_v6_push_pending_frames+0x360/0x360 [ 2872.762451] ? inet6_sendmsg+0xbd/0x140 [ 2872.763003] ? inet6_compat_ioctl+0x320/0x320 [ 2872.763632] ? __sock_sendmsg+0x55/0x190 [ 2872.764194] sendmsg_copy_msghdr+0xa1/0x160 [ 2872.764787] ? do_recvmmsg+0x6d0/0x6d0 [ 2872.765319] ? __lock_acquire+0x1657/0x5b00 [ 2872.765914] ___sys_sendmsg+0xc6/0x170 [ 2872.766464] ? sendmsg_copy_msghdr+0x160/0x160 [ 2872.767095] ? __lockdep_reset_lock+0x180/0x180 [ 2872.767732] ? trace_hardirqs_on+0x5b/0x180 [ 2872.768323] ? lock_acquire+0x197/0x470 [ 2872.768864] ? find_held_lock+0x2c/0x110 [ 2872.769423] ? __might_fault+0xd3/0x180 [ 2872.769980] ? lock_downgrade+0x6d0/0x6d0 [ 2872.770550] ? io_schedule_timeout+0x140/0x140 [ 2872.771186] __sys_sendmmsg+0x195/0x470 [ 2872.771738] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2872.772333] ? lock_downgrade+0x6d0/0x6d0 [ 2872.772919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2872.773584] ? wait_for_completion_io+0x270/0x270 [ 2872.774263] ? rcu_read_lock_any_held+0x75/0xa0 [ 2872.774916] ? vfs_write+0x354/0xa70 [ 2872.775439] ? fput_many+0x2f/0x1a0 [ 2872.775946] ? ksys_write+0x1a9/0x260 [ 2872.776475] ? __ia32_sys_read+0xb0/0xb0 [ 2872.777047] __x64_sys_sendmmsg+0x99/0x100 [ 2872.777634] do_syscall_64+0x33/0x40 [ 2872.778157] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2872.778851] RIP: 0033:0x7f1c4c8a5b19 [ 2872.779360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2872.781851] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2872.782893] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2872.783860] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2872.784806] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2872.785788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2872.786766] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:39:51 executing program 5: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x3, &(0x7f0000000180)=[{&(0x7f0000000100)="430eb775e85bc1a90c4e4b59dd", 0xd, 0x2}, {&(0x7f0000001e00)="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", 0x1004, 0x5}, {&(0x7f0000001240)="62de4584d35435426d38cd37563b2357e6b17982e2719a078be0a5f17a59ebb8826e9717205f4571e80f440e2f5748b656be1543391c1c241cddbe8ef6b9c45bd2c952c6292dbd80ce055b1bc60aeb6e5427c23cc1810861d345278e499ed4bbae8a216e5c785894849570a29f675572173df3b49534f4bc96905e5649d9c8df5da18163c529ed417232f77134d975f473ea86ca7f285c62fb8d74549f60f5b3f9b0dc086eed78920e0493267dfbbf72bf7f4ea365065381b9b489cc68fe09", 0xbf, 0xe74}], 0x44060, &(0x7f0000000140)=ANY=[@ANYRES32=r3]) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x4000204) 20:39:51 executing program 3: getxattr(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x3e77, 0x3f74, 0x3, &(0x7f0000000180)={[0x785a59ed]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x2000, @fd, 0x7, &(0x7f00000010c0)=""/223, 0xdf, 0x20, 0x1}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x62) syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0xfffffffe, 0xa7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r2, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x401}) 20:39:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 66) [ 2873.161325] FAULT_INJECTION: forcing a failure. [ 2873.161325] name failslab, interval 1, probability 0, space 0, times 0 [ 2873.162633] CPU: 1 PID: 55211 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2873.163399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2873.164318] Call Trace: [ 2873.164595] dump_stack+0x107/0x167 [ 2873.165011] should_fail.cold+0x5/0xa [ 2873.165445] ? __alloc_skb+0x6d/0x5b0 [ 2873.165882] should_failslab+0x5/0x20 [ 2873.166315] kmem_cache_alloc_node+0x55/0x330 [ 2873.166828] __alloc_skb+0x6d/0x5b0 [ 2873.167238] alloc_skb_with_frags+0x92/0x570 [ 2873.167739] sock_alloc_send_pskb+0x7af/0x930 [ 2873.168247] ? sk_alloc+0x350/0x350 [ 2873.168666] ? perf_trace_lock+0xac/0x490 [ 2873.169129] ? SOFTIRQ_verbose+0x10/0x10 [ 2873.169582] __ip_append_data+0x1628/0x3310 [ 2873.170079] ? fib_select_path+0x95d/0x1e90 [ 2873.170554] ? __lockdep_reset_lock+0x180/0x180 [ 2873.171073] ? ip_frag_init+0x350/0x350 [ 2873.171521] ? ip_finish_output+0x330/0x330 [ 2873.171994] ? ip_route_output_key_hash+0x1a4/0x340 [ 2873.172541] ? ipv4_mtu+0x1ed/0x2c0 [ 2873.172942] ip_make_skb+0x22a/0x2a0 [ 2873.173355] ? ip_frag_init+0x350/0x350 [ 2873.173799] ? ip_flush_pending_frames+0x20/0x20 [ 2873.174336] ? lock_downgrade+0x6d0/0x6d0 [ 2873.174799] ? xfrm_lookup_route+0x65/0x210 [ 2873.175284] udp_sendmsg+0x193f/0x2170 [ 2873.175724] ? ip_frag_init+0x350/0x350 [ 2873.176170] ? udp_setsockopt+0xc0/0xc0 [ 2873.176610] ? mark_lock+0xf5/0x2df0 [ 2873.177024] ? lock_chain_count+0x20/0x20 [ 2873.177484] ? mark_lock+0xf5/0x2df0 [ 2873.177893] ? mark_lock+0xf5/0x2df0 [ 2873.178331] ? lock_chain_count+0x20/0x20 [ 2873.178787] ? lock_chain_count+0x20/0x20 [ 2873.179255] ? prep_new_page+0x16d/0x1d0 [ 2873.179703] ? lock_chain_count+0x20/0x20 [ 2873.180167] ? __lock_acquire+0x1657/0x5b00 [ 2873.180644] udpv6_sendmsg+0x1b4e/0x2af0 [ 2873.181095] ? __lock_acquire+0x1657/0x5b00 [ 2873.181586] ? udp_v6_push_pending_frames+0x360/0x360 [ 2873.182164] ? __lockdep_reset_lock+0x180/0x180 [ 2873.182695] ? __lockdep_reset_lock+0x180/0x180 [ 2873.183213] ? lock_acquire+0x197/0x470 [ 2873.183654] ? find_held_lock+0x2c/0x110 [ 2873.184120] ? __might_fault+0xd3/0x180 [ 2873.184562] ? lock_downgrade+0x6d0/0x6d0 [ 2873.185019] ? lock_chain_count+0x20/0x20 [ 2873.185479] ? sock_has_perm+0x1ea/0x280 [ 2873.185927] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2873.186521] ? __import_iovec+0x458/0x590 [ 2873.186972] ? udp_v6_push_pending_frames+0x360/0x360 [ 2873.187533] inet6_sendmsg+0x105/0x140 [ 2873.187959] ? inet6_compat_ioctl+0x320/0x320 [ 2873.188449] __sock_sendmsg+0xf2/0x190 [ 2873.188835] ____sys_sendmsg+0x334/0x870 [ 2873.189291] ? sock_write_iter+0x3d0/0x3d0 [ 2873.189711] ? do_recvmmsg+0x6d0/0x6d0 [ 2873.190152] ? __lock_acquire+0x1657/0x5b00 [ 2873.190626] ___sys_sendmsg+0xf3/0x170 [ 2873.191050] ? sendmsg_copy_msghdr+0x160/0x160 [ 2873.191532] ? __lockdep_reset_lock+0x180/0x180 [ 2873.192024] ? trace_hardirqs_on+0x5b/0x180 [ 2873.192499] ? lock_acquire+0x197/0x470 [ 2873.192932] ? find_held_lock+0x2c/0x110 [ 2873.193381] ? __might_fault+0xd3/0x180 [ 2873.193814] ? lock_downgrade+0x6d0/0x6d0 [ 2873.194275] ? io_schedule_timeout+0x140/0x140 [ 2873.194784] __sys_sendmmsg+0x195/0x470 [ 2873.195229] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2873.195700] ? lock_downgrade+0x6d0/0x6d0 [ 2873.196162] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2873.196693] ? wait_for_completion_io+0x270/0x270 [ 2873.197221] ? rcu_read_lock_any_held+0x75/0xa0 [ 2873.197730] ? vfs_write+0x354/0xa70 [ 2873.198152] ? fput_many+0x2f/0x1a0 [ 2873.198549] ? ksys_write+0x1a9/0x260 [ 2873.198964] ? __ia32_sys_read+0xb0/0xb0 [ 2873.199410] __x64_sys_sendmmsg+0x99/0x100 [ 2873.199872] do_syscall_64+0x33/0x40 [ 2873.200276] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2873.200837] RIP: 0033:0x7f1c4c8a5b19 [ 2873.201244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2873.203246] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2873.204077] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2873.204862] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2873.205643] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2873.206436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2873.207217] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:40:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfffff000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:40:16 executing program 5: creat(&(0x7f0000000100)='./file1\x00', 0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x9, 0x204, 0x402}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0/file0\x00', 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0x1ff, 0x9, 0x52}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0xffffffff, 0x512041) r3 = syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000380)='./file1\x00', 0x1, 0x4, &(0x7f0000000600)=[{&(0x7f00000003c0)="d14fdf378fa32df3", 0x8, 0x7dd}, {&(0x7f0000000400)="f3763ebd9c51aca63ea490a20cbe2e2712a033e7ac74953d13f722955f632254eb48b685bdec9301876e7db2693711d9be328b0494159df36897564f37eacb6606952851756b0129a97d9cec0d33", 0x4e, 0xffffffff00000000}, {&(0x7f0000000480)="557f45169dd53eb3a45d2dc0dbe6ca3d090f33856b2efd58e474cb648720c7c47463b22a590095d484259324b5eda2df856f0a33385832f1ec8bd01a4688e74878d7d3c7ce061a26f85d7640722cf4b0a63ce88e83899466e9ab851527895ac60a47932535c12abb730face68a8aa10420369810d32d8ac2ce6ec0da04b3ea83af089f6074f0e25a8b", 0x89, 0x2}, {&(0x7f0000000540)="6d2827c7b64070cc07245d62c19aa0c119d37293fe63ae5fb4d38505b628ea920a3f4bb6d0cd043b65029d3e18969b768212ab0da31643bd07f283bb6f0aa09eb39b9d10d66cb5c81f5cd141f27b1fc0688d67589b3cebff1ab624163706f80ae933148b77b98fd10aaec6e8cefa9dfa87d6c9fa355f87ac2b67cee22b28bce25040972d15ed82a18a7664d87158f7556dd780558c5b8f9a3eb7a924c9027091e9d3ae718d2065", 0xa7, 0x7}], 0x820000, &(0x7f0000000740)=ANY=[@ANYBLOB='uid>', @ANYRESDEC=0x0, @ANYBLOB="2c7065726d69745f646972656374696f2c6f626a5f726f6c653d002c6d6561587572652c666f776e65723e1938bba43c1b313fc1538a96a2d52e2587c167bc0b0a9108cb4e10ae4314eef02c8993628b5a3b7ac164747934b51abb2e3375040d252c480a36e55b0624605f80375af8f33f7450b6316a1f8bfb1a8aa789cf5d9b0974", @ANYRESDEC, @ANYBLOB=',measure,\x00']) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000700)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000002c0)=ANY=[@ANYBLOB="dec40435055d563240e91cbe2ec52bf52c3a9b19a717eb2bd800010000000000004086ca41ac9ff07767a3f450872989000000000000000000", @ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00\x00\t\x00\x00\x00file0/file0/file0\x00']) shutdown(r1, 0x1) 20:40:16 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c82, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:40:16 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:40:16 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fork() ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x8, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x80, 0x6, 0x7, 0x6, 0x0, 0x1, 0x1000, 0x7, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0x3, 0x1000000000000000}, 0x4, 0x80, 0x200, 0x9, 0x0, 0x5, 0x29, 0x0, 0x3, 0x0, 0x1}, r1, 0xf, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) 20:40:16 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 67) 20:40:16 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:40:16 executing program 0: write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x43c2, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, r1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @local}, 0xc) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4) ioctl$CDROM_SELECT_SPEED(r2, 0x127f, 0x0) sendto$inet(r2, &(0x7f00000000c0)="25cbcf2584228da8e406eef1bd842fe0f6fe62756a7a201f7d0736abed3dc638791cabeaae32df190bfbac1367f54a07ff7ff95699f52c779329e74b8943a4b1c8a75e23ef8f3fac938af0cab4950576b8adf03d9ee6a166d5c015a35fb708d99935dbc4643f01210ae95959f8ab0705c597d01102d5f5bc7cd10369a4d0e22c5ecaad19e404d2416f3dd980867812afa40ce63256a355cce21d759c266ed971957bebfe74f1f924de9b8d677cf10da8863d7d5f83b6b3c10be766451cfd08cfc985bcb279f658e7", 0xc8, 0x2048891, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYRES32]) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x4, 0xc0, 0xb1, 0xff, 0x0, 0x7, 0x8054, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp, 0x0, 0xfff, 0x2, 0x4, 0x4, 0x0, 0x7, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x3, r4, 0xa) fallocate(r4, 0x0, 0x0, 0x8000) ftruncate(r4, 0x5) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r6 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x1, 0x2c, 0xf7, 0xdd, 0x0, 0xf70, 0x60901, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={&(0x7f0000000280), 0xc}, 0x9708, 0x0, 0x4, 0x9, 0x5, 0xffff7fff, 0x1, 0x0, 0x1, 0x0, 0x5}, r4, 0x5, r5, 0xba5934c8fe0de2b2) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000400)={0x9a6, 0xc08, 0x6, 0xd, 0x7d6}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'macvtap0\x00'}) [ 2898.420520] udc-core: couldn't find an available UDC or it's busy [ 2898.422054] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2898.439695] FAULT_INJECTION: forcing a failure. [ 2898.439695] name failslab, interval 1, probability 0, space 0, times 0 [ 2898.442035] CPU: 1 PID: 55469 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2898.443430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2898.445079] Call Trace: [ 2898.445615] dump_stack+0x107/0x167 [ 2898.446363] should_fail.cold+0x5/0xa [ 2898.447134] ? create_object.isra.0+0x3a/0xa20 [ 2898.448059] should_failslab+0x5/0x20 [ 2898.448825] kmem_cache_alloc+0x5b/0x310 [ 2898.449646] create_object.isra.0+0x3a/0xa20 [ 2898.450553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2898.451569] kmem_cache_alloc_node+0x169/0x330 [ 2898.452488] __alloc_skb+0x6d/0x5b0 [ 2898.453225] alloc_skb_with_frags+0x92/0x570 [ 2898.454119] sock_alloc_send_pskb+0x7af/0x930 [ 2898.455040] ? sk_alloc+0x350/0x350 [ 2898.455777] ? perf_trace_lock+0xac/0x490 [ 2898.456603] ? SOFTIRQ_verbose+0x10/0x10 [ 2898.457425] __ip_append_data+0x1628/0x3310 [ 2898.458312] ? fib_select_path+0x95d/0x1e90 [ 2898.459178] ? __lockdep_reset_lock+0x180/0x180 [ 2898.460104] ? ip_frag_init+0x350/0x350 [ 2898.460915] ? ip_finish_output+0x330/0x330 [ 2898.461779] ? ip_route_output_key_hash+0x1a4/0x340 [ 2898.462781] ? ipv4_mtu+0x1ed/0x2c0 [ 2898.463516] ip_make_skb+0x22a/0x2a0 [ 2898.464266] ? ip_frag_init+0x350/0x350 [ 2898.465062] ? ip_flush_pending_frames+0x20/0x20 [ 2898.466018] ? lock_downgrade+0x6d0/0x6d0 [ 2898.466987] ? xfrm_lookup_route+0x65/0x210 [ 2898.467860] udp_sendmsg+0x193f/0x2170 [ 2898.468653] ? ip_frag_init+0x350/0x350 [ 2898.469463] ? udp_setsockopt+0xc0/0xc0 [ 2898.470264] ? mark_lock+0xf5/0x2df0 [ 2898.471025] ? lock_chain_count+0x20/0x20 [ 2898.471854] ? mark_lock+0xf5/0x2df0 [ 2898.472608] ? mark_lock+0xf5/0x2df0 [ 2898.473352] ? lock_chain_count+0x20/0x20 [ 2898.474179] ? lock_chain_count+0x20/0x20 [ 2898.475024] ? perf_trace_lock+0xac/0x490 [ 2898.475850] ? lock_chain_count+0x20/0x20 [ 2898.476691] ? __lock_acquire+0x1657/0x5b00 [ 2898.477558] udpv6_sendmsg+0x1b4e/0x2af0 [ 2898.478389] ? __lock_acquire+0x1657/0x5b00 [ 2898.479266] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.480294] ? __lockdep_reset_lock+0x180/0x180 [ 2898.481241] ? __lockdep_reset_lock+0x180/0x180 [ 2898.482181] ? lock_acquire+0x197/0x470 [ 2898.482982] ? find_held_lock+0x2c/0x110 [ 2898.483799] ? __might_fault+0xd3/0x180 [ 2898.484593] ? lock_downgrade+0x6d0/0x6d0 [ 2898.485422] ? lock_chain_count+0x20/0x20 [ 2898.486269] ? sock_has_perm+0x1ea/0x280 [ 2898.487085] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2898.488138] ? __import_iovec+0x458/0x590 [ 2898.488968] ? udp_v6_push_pending_frames+0x360/0x360 [ 2898.490000] inet6_sendmsg+0x105/0x140 [ 2898.490787] ? inet6_compat_ioctl+0x320/0x320 [ 2898.491681] __sock_sendmsg+0xf2/0x190 [ 2898.492461] ____sys_sendmsg+0x334/0x870 [ 2898.493277] ? sock_write_iter+0x3d0/0x3d0 [ 2898.494118] ? do_recvmmsg+0x6d0/0x6d0 [ 2898.494910] ? find_held_lock+0x2c/0x110 [ 2898.495736] ___sys_sendmsg+0xf3/0x170 [ 2898.496517] ? sendmsg_copy_msghdr+0x160/0x160 [ 2898.497427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2898.498486] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2898.499374] ? trace_hardirqs_on+0x5b/0x180 [ 2898.500236] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2898.501126] ? finish_task_switch+0x126/0x5d0 [ 2898.502012] ? finish_task_switch+0xef/0x5d0 [ 2898.502893] ? __switch_to+0x572/0xf70 [ 2898.503668] ? __switch_to_asm+0x3a/0x60 [ 2898.504479] ? __switch_to_asm+0x34/0x60 [ 2898.505294] ? __schedule+0x82c/0x1ea0 [ 2898.506081] ? io_schedule_timeout+0x140/0x140 [ 2898.507022] __sys_sendmmsg+0x195/0x470 [ 2898.507823] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2898.508684] ? lock_downgrade+0x6d0/0x6d0 [ 2898.509536] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2898.510513] ? wait_for_completion_io+0x270/0x270 [ 2898.511485] ? rcu_read_lock_any_held+0x75/0xa0 [ 2898.512416] ? vfs_write+0x354/0xa70 [ 2898.513163] ? fput_many+0x2f/0x1a0 [ 2898.513891] ? ksys_write+0x1a9/0x260 [ 2898.514671] ? __ia32_sys_read+0xb0/0xb0 [ 2898.515495] __x64_sys_sendmmsg+0x99/0x100 [ 2898.516343] do_syscall_64+0x33/0x40 [ 2898.517083] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2898.518108] RIP: 0033:0x7f1c4c8a5b19 [ 2898.518865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2898.522528] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2898.524043] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2898.525463] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2898.526897] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2898.528318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2898.529739] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:40:16 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xffffff7f) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:40:17 executing program 5: r0 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xf, {@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x44}}, 0x0) clock_gettime(0x0, &(0x7f0000000f00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000e00)=[{{&(0x7f0000000100)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/236, 0xec}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)=""/124, 0x7c}, {&(0x7f0000000580)=""/115, 0x73}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/2, 0x2}, {&(0x7f0000000640)=""/3, 0x3}], 0xa, &(0x7f0000000740)=""/54, 0x36}}, {{&(0x7f0000000780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/175, 0xaf}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/71, 0x47}], 0x3, &(0x7f0000000a40)=""/156, 0x9c}, 0x66}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/154, 0x9a}], 0x1, &(0x7f0000000c00)=""/176, 0xb0}, 0x7ff}, {{&(0x7f0000000cc0)=@isdn, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d40)=""/41, 0x29}, {&(0x7f0000000d80)=""/51, 0x33}, {&(0x7f0000002d00)=""/4096, 0x1000}], 0x3}, 0xffffffaf}], 0x4, 0x100, &(0x7f0000000f40)={r4, r5+10000000}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 20:40:17 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r1, 0x800448d4, &(0x7f0000000080)) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x8000}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000000)='veth1_to_team\x00', 0xaa8, 0xff, 0x1}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000280)={[0x4]}, 0x8) socket$netlink(0x10, 0x3, 0x0) 20:40:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() sync() 20:40:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) write$P9_RREADLINK(r1, &(0x7f00000002c0)=ANY=[], 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) fallocate(r1, 0x3, 0x900500, 0x30000000000) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000300}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=@getae={0x258, 0x1f, 0x800, 0x70bd26, 0x25dfdbff, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4d4, 0x2, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x5, 0x3503}, [@tfcpad={0x8, 0x16, 0x10001}, @coaddr={0x14, 0xe, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e23, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @tmpl={0x104, 0x5, [{{@in=@rand_addr=0x64010100, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x3506, 0x1, 0x1, 0x2, 0x6, 0x5, 0x1}, {{@in=@loopback, 0x4d4, 0x32}, 0x2, @in=@private=0xa010101, 0x0, 0x2, 0x2, 0x8, 0x1ff, 0xffffffff, 0x2}, {{@in=@local, 0x4d3, 0x33}, 0x2, @in=@multicast2, 0x3507, 0x1, 0x0, 0x7, 0x6, 0xbde2, 0x70}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x4, 0x3, 0xd9, 0x5, 0x7, 0xcab9}]}, @XFRMA_IF_ID={0x8}, @replay_val={0x10, 0xa, {0x70bd2b, 0x70bd27, 0x4526a3bf}}, @replay_thresh={0x8, 0xb, 0xef6}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1f}, @policy={0xac, 0x7, {{@in6=@mcast1, @in=@multicast2, 0x4e23, 0x3, 0x4e21, 0x4, 0xa, 0x20, 0x0, 0x2, 0x0, r3}, {0x6, 0x81, 0x3, 0x2, 0x7ff, 0x8, 0x4, 0x3}, {0x7, 0x0, 0xfffffffffffffc00}, 0x9, 0x0, 0x2, 0x0, 0x1, 0x3}}]}, 0x258}, 0x1, 0x0, 0x0, 0x24040000}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000002580)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000000c0)={r6, 0x5, 0x20}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="03000000", @ANYRESDEC=r6, @ANYBLOB='700000000000000000002P']) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004af00)={0x4, [], 0x0, "e6a2e51d013042"}) signalfd4(r0, &(0x7f00000000c0)={[0x9]}, 0x8, 0x80800) 20:40:17 executing program 3: memfd_create(&(0x7f0000000340)='\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000580)={{r3}, "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"}) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) io_uring_enter(r4, 0x5c33, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0) 20:40:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 68) 20:40:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x541b, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:40:17 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2899.619390] FAULT_INJECTION: forcing a failure. [ 2899.619390] name failslab, interval 1, probability 0, space 0, times 0 [ 2899.620990] CPU: 1 PID: 56334 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2899.621874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2899.623100] Call Trace: [ 2899.623444] dump_stack+0x107/0x167 [ 2899.624012] should_fail.cold+0x5/0xa [ 2899.624503] should_failslab+0x5/0x20 [ 2899.624982] __kmalloc_node_track_caller+0x74/0x3b0 [ 2899.625608] ? alloc_skb_with_frags+0x92/0x570 [ 2899.626189] __alloc_skb+0xb1/0x5b0 [ 2899.626660] alloc_skb_with_frags+0x92/0x570 [ 2899.627244] sock_alloc_send_pskb+0x7af/0x930 [ 2899.627821] ? sk_alloc+0x350/0x350 [ 2899.628292] ? perf_trace_lock+0xac/0x490 [ 2899.628840] ? SOFTIRQ_verbose+0x10/0x10 [ 2899.629361] __ip_append_data+0x1628/0x3310 [ 2899.629914] ? fib_select_path+0x95d/0x1e90 [ 2899.630466] ? __lockdep_reset_lock+0x180/0x180 [ 2899.631054] ? ip_frag_init+0x350/0x350 [ 2899.631574] ? ip_finish_output+0x330/0x330 [ 2899.632119] ? ip_route_output_key_hash+0x1a4/0x340 [ 2899.632748] ? ipv4_mtu+0x1ed/0x2c0 [ 2899.633212] ip_make_skb+0x22a/0x2a0 [ 2899.633680] ? ip_frag_init+0x350/0x350 [ 2899.634213] ? ip_flush_pending_frames+0x20/0x20 [ 2899.634837] ? lock_downgrade+0x6d0/0x6d0 [ 2899.635370] ? xfrm_lookup_route+0x65/0x210 [ 2899.635916] udp_sendmsg+0x193f/0x2170 [ 2899.636419] ? ip_frag_init+0x350/0x350 [ 2899.636923] ? udp_setsockopt+0xc0/0xc0 [ 2899.637416] ? mark_lock+0xf5/0x2df0 [ 2899.637920] ? lock_chain_count+0x20/0x20 [ 2899.638450] ? mark_lock+0xf5/0x2df0 [ 2899.638920] ? mark_lock+0xf5/0x2df0 [ 2899.639384] ? lock_chain_count+0x20/0x20 [ 2899.639905] ? lock_chain_count+0x20/0x20 [ 2899.640426] ? prep_new_page+0x16d/0x1d0 [ 2899.640934] ? lock_chain_count+0x20/0x20 [ 2899.641462] ? __lock_acquire+0x1657/0x5b00 [ 2899.642008] udpv6_sendmsg+0x1b4e/0x2af0 [ 2899.642557] ? __lock_acquire+0x1657/0x5b00 [ 2899.643103] ? udp_v6_push_pending_frames+0x360/0x360 [ 2899.643753] ? __lockdep_reset_lock+0x180/0x180 [ 2899.644356] ? __lockdep_reset_lock+0x180/0x180 [ 2899.644939] ? lock_acquire+0x197/0x470 [ 2899.645442] ? find_held_lock+0x2c/0x110 [ 2899.645963] ? __might_fault+0xd3/0x180 [ 2899.646511] ? lock_downgrade+0x6d0/0x6d0 [ 2899.647028] ? lock_chain_count+0x20/0x20 [ 2899.647565] ? sock_has_perm+0x1ea/0x280 [ 2899.648108] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2899.648808] ? __import_iovec+0x458/0x590 [ 2899.649337] ? udp_v6_push_pending_frames+0x360/0x360 [ 2899.649982] inet6_sendmsg+0x105/0x140 [ 2899.650477] ? inet6_compat_ioctl+0x320/0x320 [ 2899.651040] __sock_sendmsg+0xf2/0x190 [ 2899.651553] ____sys_sendmsg+0x334/0x870 [ 2899.652092] ? sock_write_iter+0x3d0/0x3d0 [ 2899.652647] ? do_recvmmsg+0x6d0/0x6d0 [ 2899.653157] ? __lock_acquire+0x1657/0x5b00 [ 2899.653742] ___sys_sendmsg+0xf3/0x170 [ 2899.654256] ? sendmsg_copy_msghdr+0x160/0x160 [ 2899.654881] ? __lockdep_reset_lock+0x180/0x180 [ 2899.655489] ? trace_hardirqs_on+0x5b/0x180 [ 2899.656065] ? lock_acquire+0x197/0x470 [ 2899.656590] ? find_held_lock+0x2c/0x110 [ 2899.657130] ? __might_fault+0xd3/0x180 [ 2899.657653] ? lock_downgrade+0x6d0/0x6d0 [ 2899.658201] ? io_schedule_timeout+0x140/0x140 [ 2899.658811] __sys_sendmmsg+0x195/0x470 [ 2899.659342] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2899.659927] ? lock_downgrade+0x6d0/0x6d0 [ 2899.660484] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2899.661105] ? wait_for_completion_io+0x270/0x270 [ 2899.661737] ? rcu_read_lock_any_held+0x75/0xa0 [ 2899.662357] ? vfs_write+0x354/0xa70 [ 2899.662844] ? fput_many+0x2f/0x1a0 [ 2899.663327] ? ksys_write+0x1a9/0x260 [ 2899.663827] ? __ia32_sys_read+0xb0/0xb0 [ 2899.664372] __x64_sys_sendmmsg+0x99/0x100 [ 2899.664928] do_syscall_64+0x33/0x40 [ 2899.665412] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2899.666080] RIP: 0033:0x7f1c4c8a5b19 [ 2899.666582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2899.668965] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2899.669961] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2899.670910] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2899.671861] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2899.672822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2899.673733] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:40:39 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:40:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0xcda) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0xfffffeff, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="90f7259a43f42918f619b1b0a80d05bbcaf6d8ff9486b0663c9ecdb633fb7964f35c0753ea652670122f7085b87bdd91ee0097ed0033f800f741acabf7b7ad3bdcb6fe88fc3e1a86ee14a782d9339fdd70b59b35c85c92c474cc679917102b6df158dc95ad2715305238d8ca0e0e17f17fb9a93550fa3758709d7ea0c0fb5fe6800868d5bb0ae362bc3f504bd8d5a9bd0ceb0ac066dbbe86247073784e6ba857b7ff178b531d", 0xa6}, {&(0x7f00000002c0)="be70993c1b7966c86c5f107d723aa2f7b13c063dc8a1f9226f408f4425aa1b4440e8912a4e54ce589fb8fa23cdcb56394e5d3c8e14b8ea1082d22bf900e15155d03f2acca253085a1bcd77328a57140afe4e9abc83739e7b2483ae5c52b5247cc4e81f447356d656b7e681bb28a7842a16d71fb3ba023e8ed501df07abe9e330286199ff2e30e702017771f7b9bdc90e469f389d89665616c2130fbb35a79032fb72a27cdeaba1343a4aefa70dc07efcdefe335caeca3cab4afa08aa53a8749f48cd0e193df8", 0xc6}, {&(0x7f00000003c0)="f972eca977e3c1358ada5f473adaa7cd674e76c792792c8801cb5fab49e14bceeea6e44c007c6fe6ba06f526adf479e0e316c1a3dc7399095cf08b6fbfa00f4960435a9edf488368f7f93fd585522f4ea3426949ccf2a191acb2690d3c13d1c026709e8ca920ac198512c571d484f7c93e86fa39ffa4f3db88872220b2e7ecefed5a1819c04e5e48fa035ba217e59c0e687e1d68708fbad26ef54022784dfad258ca243a334f6ec94b7dd9488982d71a34e71ba0e27bc1bb1ecc5ad1e06d731972e9efe6c8dc3ff6aa70e7a9761bd45da98691762b9bdab3cb273df0ba2e30da", 0xe0}, {&(0x7f0000000580)="2f166d729d6b3b73b0843c985ad58ee3d025b797ad8fa74161699532844a8f8f5bb9e5126cff010993a2ec3fd333e4d712198a1331bb43563cd929da3ebb67816fc78abad834f8820ce725984a56ebe4fed3ee911769933995031eaa1416ab735368503f00a27300b6ddb0f8ecdf0e6b70ce31805b32050757c7040cd884f33ca1a23d8f1f326caec9f4", 0x8a}, {&(0x7f0000000040)="95e27b81ee665ffd645ee76f2fe1700289a461b9bf23156754d6f2ca7769e6047a4178d40e860dcfe2361fd408df51fb1ee6f1570b6740f6d9ab", 0x3a}], 0x5, &(0x7f0000000700)=[@rthdr={{0x98, 0x29, 0x39, {0x34, 0x10, 0x1, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @remote, @empty, @mcast2, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x98}, 0x40000000) recvfrom$inet6(r0, &(0x7f00000007c0)=""/143, 0x8f, 0x43, &(0x7f0000000640)={0xa, 0x4e20, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) 20:40:39 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x2, 0x4, @local, 0x10000}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) io_uring_enter(r0, 0x57f3, 0x9352, 0x0, &(0x7f0000000040)={[0xd0]}, 0x8) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:40:39 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5421, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:40:39 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000001100)=ANY=[@ANYBLOB="01000003001800000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 20:40:39 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x7fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e23, 0xfffffff8, @dev, 0x84}}, 0x0, 0x0, 0x41, 0x0, "1051078c010000dac842e1bf018e1f20fe9c4557840fdeda1d3d07f909e1f8af2a212bb5a9b8c81c1461d600895f29e19e933a66e6f7ed55abd1f153b123b0d9ac97801e0ebf139118971485f60ed303"}, 0xd8) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000380)=ANY=[@ANYBLOB="0682621da13c0c84f82a9010eb34010000000100000018000000", @ANYRES32=r2, @ANYBLOB="ffffff7fd30000002e2f66696c653100"]) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\x00', 0x0, r0) sendfile(r2, r1, 0x0, 0x9bbb) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x0, 0x0, &(0x7f0000000100)) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8000, &(0x7f0000000180)=0x401, 0x8, 0x1) stat(&(0x7f0000001cc0)='.\x00', 0x0) setresuid(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2e09cf0266696c653000"]) 20:40:39 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xffffff8c) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:40:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 69) [ 2921.598919] FAULT_INJECTION: forcing a failure. [ 2921.598919] name failslab, interval 1, probability 0, space 0, times 0 [ 2921.601288] CPU: 1 PID: 56496 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2921.602703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2921.604374] Call Trace: [ 2921.604920] dump_stack+0x107/0x167 [ 2921.605666] should_fail.cold+0x5/0xa [ 2921.606441] ? create_object.isra.0+0x3a/0xa20 [ 2921.607389] should_failslab+0x5/0x20 [ 2921.608156] kmem_cache_alloc+0x5b/0x310 [ 2921.608978] create_object.isra.0+0x3a/0xa20 [ 2921.609863] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2921.610898] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2921.611918] ? alloc_skb_with_frags+0x92/0x570 [ 2921.612846] __alloc_skb+0xb1/0x5b0 [ 2921.613587] alloc_skb_with_frags+0x92/0x570 [ 2921.614491] sock_alloc_send_pskb+0x7af/0x930 [ 2921.615426] ? sk_alloc+0x350/0x350 [ 2921.616171] ? perf_trace_lock+0xac/0x490 [ 2921.617031] ? SOFTIRQ_verbose+0x10/0x10 [ 2921.617862] __ip_append_data+0x1628/0x3310 [ 2921.618786] ? fib_select_path+0x95d/0x1e90 [ 2921.619659] ? __lockdep_reset_lock+0x180/0x180 [ 2921.620603] ? ip_frag_init+0x350/0x350 [ 2921.621424] ? ip_finish_output+0x330/0x330 [ 2921.622302] ? ip_route_output_key_hash+0x1a4/0x340 [ 2921.623319] ? ipv4_mtu+0x1ed/0x2c0 [ 2921.624072] ip_make_skb+0x22a/0x2a0 [ 2921.624840] ? ip_frag_init+0x350/0x350 [ 2921.625656] ? ip_flush_pending_frames+0x20/0x20 [ 2921.626649] ? lock_downgrade+0x6d0/0x6d0 [ 2921.627514] ? xfrm_lookup_route+0x65/0x210 [ 2921.628397] udp_sendmsg+0x193f/0x2170 [ 2921.629202] ? ip_frag_init+0x350/0x350 [ 2921.630020] ? udp_setsockopt+0xc0/0xc0 [ 2921.630857] ? mark_lock+0xf5/0x2df0 [ 2921.631632] ? lock_chain_count+0x20/0x20 [ 2921.632475] ? mark_lock+0xf5/0x2df0 [ 2921.633236] ? mark_lock+0xf5/0x2df0 [ 2921.633998] ? lock_chain_count+0x20/0x20 [ 2921.634844] ? lock_chain_count+0x20/0x20 [ 2921.635703] ? prep_new_page+0x16d/0x1d0 [ 2921.636534] ? lock_chain_count+0x20/0x20 [ 2921.637399] ? __lock_acquire+0x1657/0x5b00 [ 2921.638288] udpv6_sendmsg+0x1b4e/0x2af0 [ 2921.639154] ? __lock_acquire+0x1657/0x5b00 [ 2921.640046] ? udp_v6_push_pending_frames+0x360/0x360 [ 2921.641113] ? __lockdep_reset_lock+0x180/0x180 [ 2921.642080] ? __lockdep_reset_lock+0x180/0x180 [ 2921.643049] ? lock_acquire+0x197/0x470 [ 2921.643856] ? find_held_lock+0x2c/0x110 [ 2921.644709] ? __might_fault+0xd3/0x180 [ 2921.645539] ? lock_downgrade+0x6d0/0x6d0 [ 2921.646394] ? lock_chain_count+0x20/0x20 [ 2921.647250] ? sock_has_perm+0x1ea/0x280 [ 2921.648089] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2921.649173] ? __import_iovec+0x458/0x590 [ 2921.650029] ? udp_v6_push_pending_frames+0x360/0x360 [ 2921.651089] inet6_sendmsg+0x105/0x140 [ 2921.651880] ? inet6_compat_ioctl+0x320/0x320 [ 2921.652788] __sock_sendmsg+0xf2/0x190 [ 2921.653583] ____sys_sendmsg+0x334/0x870 [ 2921.654414] ? sock_write_iter+0x3d0/0x3d0 [ 2921.655285] ? do_recvmmsg+0x6d0/0x6d0 [ 2921.656085] ? find_held_lock+0x2c/0x110 [ 2921.656917] ___sys_sendmsg+0xf3/0x170 [ 2921.657709] ? sendmsg_copy_msghdr+0x160/0x160 [ 2921.658690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2921.659751] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2921.660661] ? trace_hardirqs_on+0x5b/0x180 [ 2921.661541] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2921.662459] ? finish_task_switch+0x126/0x5d0 [ 2921.663388] ? finish_task_switch+0xef/0x5d0 [ 2921.664281] ? __switch_to+0x572/0xf70 [ 2921.665072] ? __switch_to_asm+0x3a/0x60 [ 2921.665894] ? __switch_to_asm+0x34/0x60 [ 2921.666732] ? __schedule+0x82c/0x1ea0 [ 2921.667531] ? io_schedule_timeout+0x140/0x140 [ 2921.668466] __sys_sendmmsg+0x195/0x470 [ 2921.669275] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2921.670145] ? lock_downgrade+0x6d0/0x6d0 [ 2921.671015] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2921.671994] ? wait_for_completion_io+0x270/0x270 [ 2921.672967] ? rcu_read_lock_any_held+0x75/0xa0 [ 2921.673896] ? vfs_write+0x354/0xa70 [ 2921.674658] ? fput_many+0x2f/0x1a0 [ 2921.675405] ? ksys_write+0x1a9/0x260 [ 2921.676172] ? __ia32_sys_read+0xb0/0xb0 [ 2921.676997] __x64_sys_sendmmsg+0x99/0x100 [ 2921.677857] do_syscall_64+0x33/0x40 [ 2921.678622] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2921.679656] RIP: 0033:0x7f1c4c8a5b19 [ 2921.680405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2921.684112] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2921.685644] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2921.687094] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2921.688527] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2921.689965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2921.691429] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 [ 2921.757841] udc-core: couldn't find an available UDC or it's busy [ 2921.759187] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:40:40 executing program 3: perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = dup2(r2, 0xffffffffffffffff) creat(&(0x7f0000000100)='./file0\x00', 0x4a) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, 0x19, 0x100, 0x70bd25, 0x25dfdbfb, {0x1e}, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r5 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, 0x40, 0xc21, 0x0, 0x1, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x92, 0x0, 0x0, @ipv6=@remote}]}, 0x30}}, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x31, 0x1f, 0x4, 0x80, 0x0, 0xffffffff, 0x11, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x80000000, 0x2}, 0x10, 0x2, 0x6, 0x8, 0x4, 0xfffffffe, 0x7428, 0x0, 0x0, 0x0, 0x7fff}, r6, 0x2, r5, 0x2) io_setup(0xf7, &(0x7f0000000000)=0x0) pread64(r0, &(0x7f0000000240)=""/95, 0x5f, 0xc) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1c5, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f00000001c0)) r8 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) io_submit(r7, 0x3, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) 20:40:40 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) move_pages(0x0, 0xa, &(0x7f0000000000)=[&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000000080)=[0x8, 0x4, 0x1f, 0x75edb669, 0x0, 0x1], &(0x7f0000000100), 0xa) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:40:40 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xffffffa1) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:40:40 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)={0x80000001, 0x3f, 0x4, 0x7, 0x5, 0x401}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200", 0x5b, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0x2, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) [ 2922.356258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=56781 comm=syz-executor.3 [ 2922.414261] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2922.416159] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2922.417586] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2922.418911] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2922.420386] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 8 prio class 0 [ 2922.422233] Buffer I/O error on dev sr0, logical block 0, async page read [ 2922.423646] Buffer I/O error on dev sr0, logical block 1, async page read [ 2922.425167] Buffer I/O error on dev sr0, logical block 2, async page read [ 2922.426625] Buffer I/O error on dev sr0, logical block 3, async page read [ 2922.428168] Buffer I/O error on dev sr0, logical block 4, async page read [ 2922.429611] Buffer I/O error on dev sr0, logical block 5, async page read [ 2922.431152] Buffer I/O error on dev sr0, logical block 6, async page read [ 2922.432579] Buffer I/O error on dev sr0, logical block 7, async page read 20:40:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 70) [ 2922.594810] FAULT_INJECTION: forcing a failure. [ 2922.594810] name failslab, interval 1, probability 0, space 0, times 0 [ 2922.596710] CPU: 1 PID: 57077 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2922.597848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2922.599217] Call Trace: [ 2922.599680] dump_stack+0x107/0x167 [ 2922.600330] should_fail.cold+0x5/0xa [ 2922.601008] ? dst_alloc+0x9e/0x610 [ 2922.601653] should_failslab+0x5/0x20 [ 2922.602318] kmem_cache_alloc+0x5b/0x310 [ 2922.603072] dst_alloc+0x9e/0x610 [ 2922.603688] rt_dst_alloc+0x73/0x440 [ 2922.604343] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2922.605229] ip_route_output_key_hash+0x18d/0x340 [ 2922.606073] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2922.607001] ? mark_lock+0xf5/0x2df0 [ 2922.607634] ? __lock_acquire+0x1657/0x5b00 [ 2922.608360] ip_route_output_flow+0x23/0x150 [ 2922.609139] ip_tunnel_xmit+0x70e/0x2f50 [ 2922.609822] ? usage_accumulate+0x70/0x110 [ 2922.610575] ? __is_insn_slot_addr+0x94/0x290 [ 2922.611354] ? perf_trace_lock+0xac/0x490 [ 2922.612080] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2922.612912] sit_tunnel_xmit+0xef0/0x2960 [ 2922.613641] ? ipip_rcv+0x4f0/0x4f0 [ 2922.614291] ? skb_crc32c_csum_help+0x80/0x80 [ 2922.615077] ? lock_acquire+0x197/0x470 [ 2922.615759] ? __dev_queue_xmit+0x1c2/0x2710 [ 2922.616501] ? netif_skb_features+0x536/0xa00 [ 2922.617252] dev_hard_start_xmit+0x1cb/0x6f0 [ 2922.617999] __dev_queue_xmit+0x17ec/0x2710 [ 2922.618734] ? find_held_lock+0x2c/0x110 [ 2922.619421] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2922.620197] ? lock_downgrade+0x6d0/0x6d0 [ 2922.620895] ? lock_acquire+0x197/0x470 [ 2922.621554] ? ip_finish_output2+0x220/0x21f0 [ 2922.622318] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2922.623235] neigh_connected_output+0x382/0x4d0 [ 2922.624035] ip_finish_output2+0x6f1/0x21f0 [ 2922.624754] ? nf_hook_slow+0xfc/0x1e0 [ 2922.625437] ? ip_frag_next+0x9e0/0x9e0 [ 2922.626099] ? nf_hook+0x160/0x510 [ 2922.626717] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2922.627606] __ip_finish_output.part.0+0x5f3/0xb50 [ 2922.628428] ? ip_fragment.constprop.0+0x240/0x240 [ 2922.629273] ? nf_hook+0x510/0x510 [ 2922.629902] ip_output+0x2f7/0x600 [ 2922.630536] ip_send_skb+0xdd/0x260 [ 2922.631179] udp_send_skb+0x6da/0x11d0 [ 2922.631878] udp_sendmsg+0x197f/0x2170 [ 2922.632563] ? ip_frag_init+0x350/0x350 [ 2922.633223] ? udp_setsockopt+0xc0/0xc0 [ 2922.633898] ? mark_lock+0xf5/0x2df0 [ 2922.634530] ? mark_lock+0xf5/0x2df0 [ 2922.635160] ? lock_chain_count+0x20/0x20 [ 2922.635834] ? lock_chain_count+0x20/0x20 [ 2922.636539] ? __lockdep_reset_lock+0x180/0x180 [ 2922.637325] ? __lock_acquire+0x1657/0x5b00 [ 2922.638037] udpv6_sendmsg+0x1b4e/0x2af0 [ 2922.638717] ? __lock_acquire+0x1657/0x5b00 [ 2922.639445] ? udp_v6_push_pending_frames+0x360/0x360 [ 2922.640307] ? __lockdep_reset_lock+0x180/0x180 [ 2922.641080] ? __lockdep_reset_lock+0x180/0x180 [ 2922.641858] ? lock_acquire+0x197/0x470 [ 2922.642505] ? find_held_lock+0x2c/0x110 [ 2922.643192] ? __might_fault+0xd3/0x180 [ 2922.643855] ? lock_downgrade+0x6d0/0x6d0 [ 2922.644566] ? lock_chain_count+0x20/0x20 [ 2922.645282] ? sock_has_perm+0x1ea/0x280 [ 2922.645988] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2922.646916] ? __import_iovec+0x458/0x590 [ 2922.647646] ? udp_v6_push_pending_frames+0x360/0x360 [ 2922.648543] inet6_sendmsg+0x105/0x140 [ 2922.649174] ? inet6_compat_ioctl+0x320/0x320 [ 2922.649935] __sock_sendmsg+0xf2/0x190 [ 2922.650634] ____sys_sendmsg+0x334/0x870 [ 2922.651340] ? sock_write_iter+0x3d0/0x3d0 [ 2922.652060] ? do_recvmmsg+0x6d0/0x6d0 [ 2922.652735] ? find_held_lock+0x2c/0x110 [ 2922.653458] ___sys_sendmsg+0xf3/0x170 [ 2922.654133] ? sendmsg_copy_msghdr+0x160/0x160 [ 2922.654922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2922.655831] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2922.656598] ? trace_hardirqs_on+0x5b/0x180 [ 2922.657309] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2922.658066] ? finish_task_switch+0x126/0x5d0 [ 2922.658793] ? finish_task_switch+0xef/0x5d0 [ 2922.659546] ? __switch_to+0x572/0xf70 [ 2922.660168] ? __switch_to_asm+0x3a/0x60 [ 2922.660852] ? __switch_to_asm+0x34/0x60 [ 2922.661501] ? __schedule+0x82c/0x1ea0 [ 2922.662187] ? io_schedule_timeout+0x140/0x140 [ 2922.662953] __sys_sendmmsg+0x195/0x470 [ 2922.663642] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2922.664373] ? lock_downgrade+0x6d0/0x6d0 [ 2922.665114] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2922.665957] ? wait_for_completion_io+0x270/0x270 [ 2922.666805] ? rcu_read_lock_any_held+0x75/0xa0 [ 2922.667616] ? vfs_write+0x354/0xa70 [ 2922.668264] ? fput_many+0x2f/0x1a0 [ 2922.668899] ? ksys_write+0x1a9/0x260 [ 2922.669557] ? __ia32_sys_read+0xb0/0xb0 [ 2922.670261] __x64_sys_sendmmsg+0x99/0x100 [ 2922.670958] do_syscall_64+0x33/0x40 [ 2922.671599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2922.672478] RIP: 0033:0x7f1c4c8a5b19 [ 2922.673112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2922.676252] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2922.677547] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2922.678764] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2922.679961] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2922.681170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2922.682378] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:09 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5450, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:41:09 executing program 0: statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsn(0x0, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r0, r1, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x303242, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xbdc6, 0x0, 0xfffffffc}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fork() r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r4, 0x4, 0xffffffffffffffff, r5) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000080)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) [ 2951.038732] udc-core: couldn't find an available UDC or it's busy [ 2951.040147] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2951.047730] FAULT_INJECTION: forcing a failure. [ 2951.047730] name failslab, interval 1, probability 0, space 0, times 0 [ 2951.050004] CPU: 1 PID: 57102 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2951.051424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.053127] Call Trace: [ 2951.053668] dump_stack+0x107/0x167 [ 2951.054418] should_fail.cold+0x5/0xa [ 2951.055225] ? create_object.isra.0+0x3a/0xa20 [ 2951.056152] should_failslab+0x5/0x20 [ 2951.056926] kmem_cache_alloc+0x5b/0x310 [ 2951.057770] create_object.isra.0+0x3a/0xa20 [ 2951.058673] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2951.059727] kmem_cache_alloc+0x159/0x310 [ 2951.060582] dst_alloc+0x9e/0x610 [ 2951.061296] rt_dst_alloc+0x73/0x440 [ 2951.062056] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2951.063171] ip_route_output_key_hash+0x18d/0x340 [ 2951.064169] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2951.065318] ? mark_lock+0xf5/0x2df0 [ 2951.066203] ? __lock_acquire+0x1657/0x5b00 [ 2951.067136] ip_route_output_flow+0x23/0x150 [ 2951.068162] ip_tunnel_xmit+0x70e/0x2f50 20:41:09 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x11002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/237, 0xed}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/166, 0xa6}], 0x6, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x40010061) move_pages(r1, 0xa, &(0x7f0000000740)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000007c0)=[0x10000, 0x7, 0x4], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:41:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xffffffe4) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:09 executing program 3: unlinkat(0xffffffffffffffff, 0x0, 0x0) setxattr(0x0, &(0x7f0000000200)=@known='trusted.overlay.nlink\x00', &(0x7f0000000240)='devpts\x00', 0x7, 0x2) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='devpts\x00', 0x21c2049, &(0x7f0000000140)='\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, r2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1f, 0x5, 0xfb, 0xb0, 0x0, 0x40, 0xe5100, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xafc, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x3, 0x5, 0x9, 0x0, 0x3, 0x4, 0x3, 0x0, 0x101, 0x0, 0x1}, 0xffffffffffffffff, 0x2, r2, 0x3) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000d40)=""/244, 0x7ffff000}], 0x1, 0x0, 0x0) 20:41:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 71) 20:41:09 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:41:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fcntl$setstatus(r0, 0x4, 0x0) pipe(&(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x46c00) write(r2, &(0x7f0000000000)="e7", 0x1) splice(r1, 0x0, r0, 0x0, 0xfdef, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x400, 0xffffffffffffff01}) [ 2951.069013] ? usage_accumulate+0x70/0x110 [ 2951.069974] ? __is_insn_slot_addr+0x94/0x290 [ 2951.070910] ? perf_trace_lock+0xac/0x490 [ 2951.071762] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2951.072735] sit_tunnel_xmit+0xef0/0x2960 [ 2951.073595] ? ipip_rcv+0x4f0/0x4f0 [ 2951.074347] ? skb_crc32c_csum_help+0x80/0x80 [ 2951.075285] ? lock_acquire+0x197/0x470 [ 2951.076098] ? __dev_queue_xmit+0x1c2/0x2710 [ 2951.077016] ? netif_skb_features+0x536/0xa00 [ 2951.077940] dev_hard_start_xmit+0x1cb/0x6f0 [ 2951.078854] __dev_queue_xmit+0x17ec/0x2710 [ 2951.079755] ? find_held_lock+0x2c/0x110 [ 2951.080587] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2951.081536] ? lock_downgrade+0x6d0/0x6d0 [ 2951.082382] ? lock_acquire+0x197/0x470 [ 2951.083197] ? ip_finish_output2+0x220/0x21f0 [ 2951.084118] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2951.085194] neigh_connected_output+0x382/0x4d0 [ 2951.086160] ip_finish_output2+0x6f1/0x21f0 [ 2951.087070] ? nf_hook_slow+0xfc/0x1e0 [ 2951.087870] ? ip_frag_next+0x9e0/0x9e0 [ 2951.088682] ? nf_hook+0x160/0x510 [ 2951.089415] ? __ip_finish_output.part.0+0xb50/0xb50 [ 2951.090458] __ip_finish_output.part.0+0x5f3/0xb50 [ 2951.091468] ? ip_fragment.constprop.0+0x240/0x240 [ 2951.092466] ? nf_hook+0x510/0x510 [ 2951.093207] ip_output+0x2f7/0x600 [ 2951.093943] ip_send_skb+0xdd/0x260 [ 2951.094696] udp_send_skb+0x6da/0x11d0 [ 2951.095530] udp_sendmsg+0x197f/0x2170 [ 2951.096333] ? ip_frag_init+0x350/0x350 [ 2951.097160] ? udp_setsockopt+0xc0/0xc0 [ 2951.097977] ? lock_chain_count+0x20/0x20 [ 2951.098836] ? mark_lock+0xf5/0x2df0 [ 2951.099610] ? mark_lock+0xf5/0x2df0 [ 2951.100384] ? lock_chain_count+0x20/0x20 [ 2951.101261] ? ip_build_and_send_pkt+0x93b/0xdd0 [ 2951.102245] ? mark_lock+0xf5/0x2df0 [ 2951.103029] udpv6_sendmsg+0x1b4e/0x2af0 [ 2951.103872] ? __lock_acquire+0x1657/0x5b00 [ 2951.104773] ? udp_v6_push_pending_frames+0x360/0x360 [ 2951.105828] ? __lockdep_reset_lock+0x180/0x180 [ 2951.106801] ? __lockdep_reset_lock+0x180/0x180 [ 2951.107785] ? lock_acquire+0x197/0x470 [ 2951.108594] ? find_held_lock+0x2c/0x110 [ 2951.109439] ? __might_fault+0xd3/0x180 [ 2951.110254] ? lock_downgrade+0x6d0/0x6d0 [ 2951.111111] ? lock_chain_count+0x20/0x20 [ 2951.111962] ? sock_has_perm+0x1ea/0x280 [ 2951.112796] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2951.113876] ? __import_iovec+0x458/0x590 [ 2951.114725] ? udp_v6_push_pending_frames+0x360/0x360 [ 2951.115791] inet6_sendmsg+0x105/0x140 [ 2951.116590] ? inet6_compat_ioctl+0x320/0x320 [ 2951.117522] __sock_sendmsg+0xf2/0x190 [ 2951.118322] ____sys_sendmsg+0x334/0x870 [ 2951.119177] ? sock_write_iter+0x3d0/0x3d0 [ 2951.120037] ? do_recvmmsg+0x6d0/0x6d0 [ 2951.120838] ? find_held_lock+0x2c/0x110 [ 2951.121682] ___sys_sendmsg+0xf3/0x170 [ 2951.122480] ? sendmsg_copy_msghdr+0x160/0x160 [ 2951.123427] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2951.124496] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2951.125412] ? trace_hardirqs_on+0x5b/0x180 [ 2951.126297] ? _raw_spin_unlock_irq+0x1f/0x30 [ 2951.127233] ? finish_task_switch+0x126/0x5d0 [ 2951.128146] ? finish_task_switch+0xef/0x5d0 [ 2951.129043] ? __switch_to+0x572/0xf70 [ 2951.129839] ? __switch_to_asm+0x3a/0x60 [ 2951.130666] ? __switch_to_asm+0x34/0x60 [ 2951.131513] ? __schedule+0x82c/0x1ea0 [ 2951.132329] ? io_schedule_timeout+0x140/0x140 [ 2951.133285] __sys_sendmmsg+0x195/0x470 [ 2951.134114] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2951.135016] ? lock_downgrade+0x6d0/0x6d0 [ 2951.135890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2951.136892] ? wait_for_completion_io+0x270/0x270 [ 2951.137882] ? rcu_read_lock_any_held+0x75/0xa0 [ 2951.138827] ? vfs_write+0x354/0xa70 [ 2951.139601] ? fput_many+0x2f/0x1a0 [ 2951.140349] ? ksys_write+0x1a9/0x260 [ 2951.141128] ? __ia32_sys_read+0xb0/0xb0 [ 2951.141966] __x64_sys_sendmmsg+0x99/0x100 [ 2951.142867] do_syscall_64+0x33/0x40 [ 2951.143643] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2951.144688] RIP: 0033:0x7f1c4c8a5b19 [ 2951.145460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2951.149237] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2951.150796] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2951.152260] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2951.153709] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2951.155165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2951.156612] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:09 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfffffff6) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:09 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x20) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:41:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 72) [ 2951.969821] FAULT_INJECTION: forcing a failure. [ 2951.969821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2951.972200] CPU: 1 PID: 57622 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2951.973547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2951.975171] Call Trace: [ 2951.975703] dump_stack+0x107/0x167 [ 2951.976448] should_fail.cold+0x5/0xa [ 2951.977208] _copy_from_user+0x2e/0x1b0 [ 2951.977996] __copy_msghdr_from_user+0x91/0x4b0 [ 2951.978936] ? __ia32_sys_shutdown+0x80/0x80 [ 2951.979828] ? udp_v6_push_pending_frames+0x360/0x360 [ 2951.980817] ? inet6_sendmsg+0xbd/0x140 [ 2951.981579] ? inet6_compat_ioctl+0x320/0x320 [ 2951.982432] ? __sock_sendmsg+0x55/0x190 [ 2951.983223] sendmsg_copy_msghdr+0xa1/0x160 [ 2951.984049] ? do_recvmmsg+0x6d0/0x6d0 [ 2951.984785] ? __lock_acquire+0x1657/0x5b00 [ 2951.985615] ___sys_sendmsg+0xc6/0x170 [ 2951.986352] ? sendmsg_copy_msghdr+0x160/0x160 [ 2951.987232] ? __lockdep_reset_lock+0x180/0x180 [ 2951.988114] ? trace_hardirqs_on+0x5b/0x180 [ 2951.988942] ? lock_acquire+0x197/0x470 [ 2951.989692] ? find_held_lock+0x2c/0x110 [ 2951.990465] ? __might_fault+0xd3/0x180 [ 2951.991240] ? lock_downgrade+0x6d0/0x6d0 [ 2951.992025] ? io_schedule_timeout+0x140/0x140 [ 2951.992906] __sys_sendmmsg+0x195/0x470 [ 2951.993665] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2951.994480] ? lock_downgrade+0x6d0/0x6d0 [ 2951.995289] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2951.996219] ? wait_for_completion_io+0x270/0x270 [ 2951.997170] ? rcu_read_lock_any_held+0x75/0xa0 [ 2951.998059] ? vfs_write+0x354/0xa70 [ 2951.998790] ? fput_many+0x2f/0x1a0 [ 2951.999513] ? ksys_write+0x1a9/0x260 [ 2952.000266] ? __ia32_sys_read+0xb0/0xb0 [ 2952.001066] __x64_sys_sendmmsg+0x99/0x100 [ 2952.001912] do_syscall_64+0x33/0x40 [ 2952.002643] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2952.003647] RIP: 0033:0x7f1c4c8a5b19 [ 2952.004372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.007832] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2952.009259] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2952.010603] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2952.011929] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.013244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.014548] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfffffffb) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 73) 20:41:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xfffffffe) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:10 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x5, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000030c0)='net/udp6\x00') preadv(r2, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x0, 0x0) [ 2952.344842] FAULT_INJECTION: forcing a failure. [ 2952.344842] name failslab, interval 1, probability 0, space 0, times 0 20:41:10 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x180) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x17e}) [ 2952.354797] CPU: 0 PID: 57842 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2952.356330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.358077] Call Trace: [ 2952.358733] dump_stack+0x107/0x167 [ 2952.359666] should_fail.cold+0x5/0xa [ 2952.360592] ? __alloc_skb+0x6d/0x5b0 [ 2952.361505] should_failslab+0x5/0x20 [ 2952.362381] kmem_cache_alloc_node+0x55/0x330 [ 2952.363548] __alloc_skb+0x6d/0x5b0 [ 2952.364526] alloc_skb_with_frags+0x92/0x570 [ 2952.365759] sock_alloc_send_pskb+0x7af/0x930 [ 2952.367075] ? sk_alloc+0x350/0x350 [ 2952.368065] ? perf_trace_lock+0xac/0x490 [ 2952.369013] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.370112] __ip_append_data+0x1628/0x3310 [ 2952.371241] ? fib_select_path+0x95d/0x1e90 [ 2952.372275] ? __lockdep_reset_lock+0x180/0x180 [ 2952.373331] ? ip_frag_init+0x350/0x350 [ 2952.374469] ? ip_finish_output+0x330/0x330 [ 2952.375500] ? ip_route_output_key_hash+0x1a4/0x340 [ 2952.376593] ? ipv4_mtu+0x1ed/0x2c0 [ 2952.377607] ip_make_skb+0x22a/0x2a0 [ 2952.378561] ? ip_frag_init+0x350/0x350 [ 2952.379543] ? ip_flush_pending_frames+0x20/0x20 [ 2952.380786] ? lock_downgrade+0x6d0/0x6d0 [ 2952.381847] ? xfrm_lookup_route+0x65/0x210 [ 2952.382957] udp_sendmsg+0x193f/0x2170 [ 2952.384030] ? ip_frag_init+0x350/0x350 [ 2952.385123] ? udp_setsockopt+0xc0/0xc0 [ 2952.386089] ? perf_event_switch_output+0x7d0/0x7d0 [ 2952.387299] ? __lockdep_reset_lock+0x180/0x180 [ 2952.388494] ? mark_lock+0xf5/0x2df0 [ 2952.389507] ? find_held_lock+0x2c/0x110 [ 2952.390693] ? perf_event_output_forward+0x13f/0x2c0 [ 2952.392022] ? lock_downgrade+0x6d0/0x6d0 [ 2952.393209] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2952.394773] udpv6_sendmsg+0x1b4e/0x2af0 [ 2952.395914] ? __lock_acquire+0x1657/0x5b00 [ 2952.397228] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.398791] ? __lockdep_reset_lock+0x180/0x180 [ 2952.400163] ? lock_acquire+0x197/0x470 [ 2952.401205] ? find_held_lock+0x2c/0x110 [ 2952.402250] ? __might_fault+0xd3/0x180 [ 2952.403177] ? lock_downgrade+0x6d0/0x6d0 [ 2952.404090] ? perf_event_switch_output+0x7d0/0x7d0 [ 2952.405162] ? lock_chain_count+0x20/0x20 [ 2952.406116] ? sock_has_perm+0x1ea/0x280 [ 2952.407065] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2952.408548] ? __import_iovec+0x458/0x590 [ 2952.409497] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.410694] inet6_sendmsg+0x105/0x140 [ 2952.411608] ? inet6_compat_ioctl+0x320/0x320 [ 2952.412600] __sock_sendmsg+0xf2/0x190 [ 2952.413520] ____sys_sendmsg+0x334/0x870 [ 2952.414507] ? sock_write_iter+0x3d0/0x3d0 [ 2952.415436] ? do_recvmmsg+0x6d0/0x6d0 [ 2952.416357] ? __lock_acquire+0x1657/0x5b00 [ 2952.417556] ___sys_sendmsg+0xf3/0x170 [ 2952.418457] ? sendmsg_copy_msghdr+0x160/0x160 [ 2952.419533] ? __lockdep_reset_lock+0x180/0x180 [ 2952.420523] ? trace_hardirqs_on+0x5b/0x180 [ 2952.421599] ? lock_acquire+0x197/0x470 [ 2952.422463] ? find_held_lock+0x2c/0x110 [ 2952.423487] ? __might_fault+0xd3/0x180 [ 2952.424378] ? lock_downgrade+0x6d0/0x6d0 [ 2952.425336] ? io_schedule_timeout+0x140/0x140 [ 2952.426612] __sys_sendmmsg+0x195/0x470 [ 2952.427612] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2952.428629] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2952.429862] ? finish_task_switch+0x127/0x5d0 [ 2952.430863] ? __switch_to_asm+0x34/0x60 [ 2952.431860] ? __schedule+0x82c/0x1ea0 [ 2952.432887] ? io_schedule_timeout+0x140/0x140 [ 2952.433914] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 2952.435110] ? ksys_write+0x1a9/0x260 [ 2952.436142] __x64_sys_sendmmsg+0x99/0x100 [ 2952.437093] do_syscall_64+0x33/0x40 [ 2952.437902] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2952.438961] RIP: 0033:0x7f1c4c8a5b19 [ 2952.439754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.443266] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2952.444812] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2952.446219] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2952.447634] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.449041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.450454] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:10 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5451, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:41:10 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) signalfd(r1, &(0x7f0000000000)={[0x2]}, 0x8) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) 20:41:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x1000000000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:10 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = syz_io_uring_setup(0x2bd9, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000140)=""/204, 0xcc}, 0x0) r5 = fsmount(r0, 0x1, 0x1) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @mcast1, 0x6}, 0x1c) io_uring_enter(r2, 0x5c33, 0x0, 0x0, 0x0, 0x0) 20:41:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x8000000000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:10 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 74) [ 2952.680530] FAULT_INJECTION: forcing a failure. [ 2952.680530] name failslab, interval 1, probability 0, space 0, times 0 [ 2952.681940] CPU: 1 PID: 58437 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2952.682706] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2952.683628] Call Trace: [ 2952.683931] dump_stack+0x107/0x167 [ 2952.684343] should_fail.cold+0x5/0xa [ 2952.684771] ? create_object.isra.0+0x3a/0xa20 [ 2952.685295] should_failslab+0x5/0x20 [ 2952.685738] kmem_cache_alloc+0x5b/0x310 [ 2952.686215] create_object.isra.0+0x3a/0xa20 [ 2952.686731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2952.687339] kmem_cache_alloc_node+0x169/0x330 [ 2952.687882] __alloc_skb+0x6d/0x5b0 [ 2952.688308] alloc_skb_with_frags+0x92/0x570 [ 2952.688828] sock_alloc_send_pskb+0x7af/0x930 [ 2952.689357] ? sk_alloc+0x350/0x350 [ 2952.689751] ? perf_trace_lock+0xac/0x490 [ 2952.690227] ? SOFTIRQ_verbose+0x10/0x10 [ 2952.690710] __ip_append_data+0x1628/0x3310 [ 2952.691228] ? fib_select_path+0x95d/0x1e90 [ 2952.691728] ? __lockdep_reset_lock+0x180/0x180 [ 2952.692268] ? ip_frag_init+0x350/0x350 [ 2952.692738] ? ip_finish_output+0x330/0x330 [ 2952.693245] ? ip_route_output_key_hash+0x1a4/0x340 [ 2952.693823] ? ipv4_mtu+0x1ed/0x2c0 [ 2952.694256] ip_make_skb+0x22a/0x2a0 [ 2952.694685] ? ip_frag_init+0x350/0x350 [ 2952.695153] ? ip_flush_pending_frames+0x20/0x20 [ 2952.695708] ? lock_downgrade+0x6d0/0x6d0 [ 2952.696198] ? xfrm_lookup_route+0x65/0x210 [ 2952.696706] udp_sendmsg+0x193f/0x2170 [ 2952.697163] ? ip_frag_init+0x350/0x350 [ 2952.697635] ? udp_setsockopt+0xc0/0xc0 [ 2952.698104] ? mark_lock+0xf5/0x2df0 [ 2952.698535] ? mark_lock+0xf5/0x2df0 [ 2952.698976] ? lock_chain_count+0x20/0x20 [ 2952.699412] ? lock_chain_count+0x20/0x20 [ 2952.699899] ? __lockdep_reset_lock+0x180/0x180 [ 2952.700451] ? __lock_acquire+0x1657/0x5b00 [ 2952.700957] udpv6_sendmsg+0x1b4e/0x2af0 [ 2952.701434] ? __lock_acquire+0x1657/0x5b00 [ 2952.701937] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.702527] ? __lockdep_reset_lock+0x180/0x180 [ 2952.703081] ? __lockdep_reset_lock+0x180/0x180 [ 2952.703628] ? lock_acquire+0x197/0x470 [ 2952.704088] ? find_held_lock+0x2c/0x110 [ 2952.704565] ? __might_fault+0xd3/0x180 [ 2952.705024] ? lock_downgrade+0x6d0/0x6d0 [ 2952.705507] ? lock_chain_count+0x20/0x20 [ 2952.705990] ? sock_has_perm+0x1ea/0x280 [ 2952.706469] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2952.707089] ? __import_iovec+0x458/0x590 [ 2952.707565] ? udp_v6_push_pending_frames+0x360/0x360 [ 2952.708162] inet6_sendmsg+0x105/0x140 [ 2952.708612] ? inet6_compat_ioctl+0x320/0x320 [ 2952.709126] __sock_sendmsg+0xf2/0x190 [ 2952.709576] ____sys_sendmsg+0x334/0x870 [ 2952.710052] ? sock_write_iter+0x3d0/0x3d0 [ 2952.710531] ? do_recvmmsg+0x6d0/0x6d0 [ 2952.710977] ? __lock_acquire+0x1657/0x5b00 [ 2952.711475] ___sys_sendmsg+0xf3/0x170 [ 2952.711921] ? sendmsg_copy_msghdr+0x160/0x160 [ 2952.712422] ? __lockdep_reset_lock+0x180/0x180 [ 2952.712940] ? trace_hardirqs_on+0x5b/0x180 [ 2952.713423] ? lock_acquire+0x197/0x470 [ 2952.713863] ? find_held_lock+0x2c/0x110 [ 2952.714329] ? __might_fault+0xd3/0x180 [ 2952.714776] ? lock_downgrade+0x6d0/0x6d0 [ 2952.715264] ? io_schedule_timeout+0x140/0x140 [ 2952.715788] __sys_sendmmsg+0x195/0x470 [ 2952.716245] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2952.716740] ? lock_downgrade+0x6d0/0x6d0 [ 2952.717228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2952.717778] ? wait_for_completion_io+0x270/0x270 [ 2952.718334] ? rcu_read_lock_any_held+0x75/0xa0 [ 2952.718848] ? vfs_write+0x354/0xa70 [ 2952.719295] ? fput_many+0x2f/0x1a0 [ 2952.719710] ? ksys_write+0x1a9/0x260 [ 2952.720143] ? __ia32_sys_read+0xb0/0xb0 [ 2952.720609] __x64_sys_sendmmsg+0x99/0x100 [ 2952.721095] do_syscall_64+0x33/0x40 [ 2952.721520] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2952.722098] RIP: 0033:0x7f1c4c8a5b19 [ 2952.722519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2952.724642] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2952.725517] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2952.726326] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2952.727131] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2952.727942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2952.728731] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:10 executing program 3: stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x3, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66f32e66617400028020000400000004f8", 0x16}, {0x0, 0x0, 0x4000}], 0x4850, &(0x7f0000000080)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) 20:41:11 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 75) 20:41:11 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:41:11 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000008, 0x110, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r1, 0x0, 0x0, 0x7286, 0x3}, 0x8001) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xa) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) 20:41:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f00000000c0)=0x1, 0x4) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @long}, 0x14) sendmmsg$sock(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01000000000000000000020000000c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, @phonet={0x23, 0x7, 0x7, 0x3}, @xdp={0x2c, 0x8, r4, 0x10}, @nfc={0x27, 0x0, 0x0, 0x5}, 0x1819, 0x0, 0x0, 0x0, 0x1, 0x0, 0x54c25869, 0x5, 0x3ff}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xe0, 0x532, 0x39, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7800, 0x3, 0x3}}) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1320, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x10c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "8d8f01d3cf54557f450bb798bf846fc1f91d1970d45f418b5ed3fec04e17e2149b52ffaf269f129ca852ad3325b4800863a307f5d8ec9c6905db3132ee63370493602bbfe0758c814261ee50b0e0adc6e64b1c43c5b703acb6971b66cc72e87208eef935992d48e731ce7655b8e1c024b9f46062caef924ed203db3526fcde4a035598374a27315643f32d3d6230b05bc51a1a8e8fb8357e8665d06868d318ee8740d74e33e0d8ac"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_MODES={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x71, 0x5, "894e19cdbb17b1505be6f6c871ac58547b9820bacfec749c47353d5b02e719333284c67be3ac7929c66dad6b7f1970b6f43ac18db861c74470960693367c4143e18f7c4d90f51fb428f9251bb8dc793e9d5c32ee4f1274caf20a6c66ebd68fe5d380208a4b6d0a0f97fbae353a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2800000}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20004000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(^-({\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xac, 0x5, "7a7ddf14752aaaf867749437efd58a0b862311e2e98f2ae902ed39749016afb887f3ea1cd8f530b61ad019638ae324f8642962e89b9ea22b5985777319210690becff569f8ac0aad72efc503e6267d623348fac95d43d8d06b572a8ba335e1f0cf1f9eec24de1b842e2fe85a890e9a0989642873f506c1a607cf62f39350fa79c07a72aa99193dafd26f773c71abda3f5a8716dc06d5616bfbda972b4f71f45dd29d73283624655e"}]}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x1320}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic='\x00\x00\x00\x00\x00\x00']}]}, 0x20}}, 0x0) 20:41:11 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000040)={0xffffff90, 0x1}) [ 2952.990225] udc-core: couldn't find an available UDC or it's busy [ 2952.991395] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2953.079446] FAULT_INJECTION: forcing a failure. [ 2953.079446] name failslab, interval 1, probability 0, space 0, times 0 [ 2953.080695] CPU: 1 PID: 58961 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2953.081427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2953.082318] Call Trace: [ 2953.082600] dump_stack+0x107/0x167 [ 2953.083010] should_fail.cold+0x5/0xa [ 2953.083419] ? create_object.isra.0+0x3a/0xa20 [ 2953.083911] should_failslab+0x5/0x20 [ 2953.084327] kmem_cache_alloc+0x5b/0x310 [ 2953.084765] create_object.isra.0+0x3a/0xa20 [ 2953.085339] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2953.085883] kmem_cache_alloc_node+0x169/0x330 [ 2953.086369] __alloc_skb+0x6d/0x5b0 [ 2953.086773] alloc_skb_with_frags+0x92/0x570 [ 2953.087271] sock_alloc_send_pskb+0x7af/0x930 [ 2953.087772] ? sk_alloc+0x350/0x350 [ 2953.088244] ? perf_trace_lock+0xac/0x490 [ 2953.088755] ? SOFTIRQ_verbose+0x10/0x10 [ 2953.089250] __ip_append_data+0x1628/0x3310 [ 2953.089723] ? fib_select_path+0x95d/0x1e90 [ 2953.090183] ? __lockdep_reset_lock+0x180/0x180 [ 2953.090682] ? ip_frag_init+0x350/0x350 [ 2953.091122] ? ip_finish_output+0x330/0x330 [ 2953.091575] ? ip_route_output_key_hash+0x1a4/0x340 [ 2953.092108] ? ipv4_mtu+0x1ed/0x2c0 [ 2953.092498] ip_make_skb+0x22a/0x2a0 [ 2953.092890] ? ip_frag_init+0x350/0x350 [ 2953.093315] ? ip_flush_pending_frames+0x20/0x20 [ 2953.093815] ? lock_downgrade+0x6d0/0x6d0 [ 2953.094260] ? xfrm_lookup_route+0x65/0x210 [ 2953.094720] udp_sendmsg+0x193f/0x2170 [ 2953.095144] ? ip_frag_init+0x350/0x350 [ 2953.095566] ? udp_setsockopt+0xc0/0xc0 [ 2953.095992] ? mark_lock+0xf5/0x2df0 [ 2953.096393] ? lock_chain_count+0x20/0x20 [ 2953.096835] ? mark_lock+0xf5/0x2df0 [ 2953.097229] ? mark_lock+0xf5/0x2df0 [ 2953.097625] ? lock_chain_count+0x20/0x20 [ 2953.098065] ? lock_chain_count+0x20/0x20 [ 2953.098515] ? prep_new_page+0x16d/0x1d0 [ 2953.098956] ? lock_chain_count+0x20/0x20 [ 2953.099394] ? lock_chain_count+0x20/0x20 [ 2953.099921] ? __lock_acquire+0x1657/0x5b00 [ 2953.100389] udpv6_sendmsg+0x1b4e/0x2af0 [ 2953.100827] ? __lock_acquire+0x1657/0x5b00 [ 2953.101290] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.101837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2953.102402] ? __lockdep_reset_lock+0x180/0x180 [ 2953.102910] ? lock_acquire+0x197/0x470 [ 2953.103336] ? find_held_lock+0x2c/0x110 [ 2953.103782] ? __might_fault+0xd3/0x180 [ 2953.104210] ? lock_downgrade+0x6d0/0x6d0 [ 2953.104661] ? sock_has_perm+0x1ea/0x280 [ 2953.105107] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2953.105664] ? __import_iovec+0x458/0x590 [ 2953.106117] ? udp_v6_push_pending_frames+0x360/0x360 [ 2953.106668] inet6_sendmsg+0x105/0x140 [ 2953.107095] ? inet6_compat_ioctl+0x320/0x320 [ 2953.107567] __sock_sendmsg+0xf2/0x190 [ 2953.107987] ____sys_sendmsg+0x334/0x870 [ 2953.108426] ? sock_write_iter+0x3d0/0x3d0 [ 2953.108880] ? do_recvmmsg+0x6d0/0x6d0 [ 2953.109299] ? __lock_acquire+0x1657/0x5b00 [ 2953.109769] ___sys_sendmsg+0xf3/0x170 [ 2953.110190] ? sendmsg_copy_msghdr+0x160/0x160 [ 2953.110678] ? vmacache_find+0x55/0x2a0 [ 2953.111118] ? __lockdep_reset_lock+0x180/0x180 [ 2953.111622] ? lock_acquire+0x197/0x470 [ 2953.112049] ? find_held_lock+0x2c/0x110 [ 2953.112486] ? __might_fault+0xd3/0x180 [ 2953.112918] ? lock_downgrade+0x6d0/0x6d0 [ 2953.113463] ? asm_exc_page_fault+0x1e/0x30 [ 2953.113930] __sys_sendmmsg+0x195/0x470 [ 2953.114422] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2953.114950] ? lock_downgrade+0x6d0/0x6d0 [ 2953.115458] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2953.115975] ? wait_for_completion_io+0x270/0x270 [ 2953.116492] ? rcu_read_lock_any_held+0x75/0xa0 [ 2953.116988] ? vfs_write+0x354/0xa70 [ 2953.117389] ? fput_many+0x2f/0x1a0 [ 2953.117855] ? ksys_write+0x1a9/0x260 [ 2953.118266] ? __ia32_sys_read+0xb0/0xb0 [ 2953.118699] __x64_sys_sendmmsg+0x99/0x100 [ 2953.119169] do_syscall_64+0x33/0x40 [ 2953.119566] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2953.120120] RIP: 0033:0x7f1c4c8a5b19 [ 2953.120518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2953.122491] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2953.123315] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2953.124082] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2953.124849] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2953.125619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2953.126389] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:43 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:41:43 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() setpriority(0x0, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x34, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x15, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f83265549b"]}]}, 0x34}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000001380)) readv(r2, &(0x7f0000000600), 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc00) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="f78d89d7facb805dadcbbff07a447983fb7f286a5ef2af958bbf7df801c99172e3671d737e4d020deeff99a90e8e9a95d43018f36d8aa8ef74e1001658a1b6049c38265bb615002d6a9991a568d3e361ac8ffb67b95fb30383d5736f4e2c49e42283de80e951180f4229c55269af698878d15c166871a912dd5fc1628f7c9f02d330646ca6bf919a4f73905fbc36ce89fa8e2724afb807bb479db09e25c297ae3ed8945d665e702f2a1152cd856ebf66c9b2856d1a1bf7f75f21dc81e53d1d3a7b8bdaf00b57d6618fda2cd026db8b60842b4f51d98b63e7fa67cf95c3f2393c1c04d70c94ddd7", @ANYRES32]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000005c0), 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25040000004404004e24000014000300000000000000000000000000000000000c0007003000000004000000080005000400000008000b000038007380060002004e2100000800090000000000080006f54f00000014000100e000000900090000001c00038008000300000000000800010001000000080001000200000008e30400200000004c000280080006000300000005000d00010000000800050005001c283171ff89dec201000800070086000000080009007c000000080004000900000006000f0002000078e000"/227], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x44) 20:41:43 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5452, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:41:43 executing program 2: r0 = fork() r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r0, 0x4, 0xffffffffffffffff, r1) r2 = fork() r3 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0xfd, 0x40, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x8000000000000, 0x3, 0x8, 0x0, 0x0, 0xffff, 0x0, 0x2f, 0x0, 0xffffffffffffffff}, 0x0, 0xf, r1, 0x0) kcmp(0x0, r2, 0x4, 0xffffffffffffffff, r3) ioctl$int_in(r1, 0x5452, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x50f4, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 2985.850623] FAULT_INJECTION: forcing a failure. [ 2985.850623] name failslab, interval 1, probability 0, space 0, times 0 [ 2985.852980] CPU: 1 PID: 59077 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 2985.854412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2985.856089] Call Trace: [ 2985.856642] dump_stack+0x107/0x167 [ 2985.857398] should_fail.cold+0x5/0xa [ 2985.858177] ? create_object.isra.0+0x3a/0xa20 [ 2985.859120] should_failslab+0x5/0x20 [ 2985.859897] kmem_cache_alloc+0x5b/0x310 [ 2985.860743] create_object.isra.0+0x3a/0xa20 [ 2985.861631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2985.862671] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2985.863726] ? alloc_skb_with_frags+0x92/0x570 [ 2985.864661] __alloc_skb+0xb1/0x5b0 [ 2985.865408] alloc_skb_with_frags+0x92/0x570 [ 2985.866324] sock_alloc_send_pskb+0x7af/0x930 [ 2985.867254] ? sk_alloc+0x350/0x350 [ 2985.868018] ? perf_trace_lock+0xac/0x490 [ 2985.868862] ? SOFTIRQ_verbose+0x10/0x10 [ 2985.869703] __ip_append_data+0x1628/0x3310 [ 2985.870592] ? fib_select_path+0x95d/0x1e90 [ 2985.871481] ? __lockdep_reset_lock+0x180/0x180 [ 2985.872426] ? ip_frag_init+0x350/0x350 [ 2985.873248] ? ip_finish_output+0x330/0x330 [ 2985.874132] ? ip_route_output_key_hash+0x1a4/0x340 [ 2985.875140] ? ipv4_mtu+0x1ed/0x2c0 [ 2985.875938] ip_make_skb+0x22a/0x2a0 [ 2985.876709] ? ip_frag_init+0x350/0x350 [ 2985.877519] ? ip_flush_pending_frames+0x20/0x20 [ 2985.878531] ? lock_downgrade+0x6d0/0x6d0 [ 2985.879385] ? xfrm_lookup_route+0x65/0x210 [ 2985.880269] udp_sendmsg+0x193f/0x2170 [ 2985.881071] ? ip_frag_init+0x350/0x350 [ 2985.881892] ? udp_setsockopt+0xc0/0xc0 20:41:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x2e142, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x80000001, 0x212801) r2 = syz_io_uring_setup(0x23, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r3 = eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000140)=r3, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000007000000000000000800000000000000000000000000000000000000000000000000000000000000190c000000800000000000000000000000000043820000000000000000000000010000000000000006000000000000001800008000"/128]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x44a02, 0x0, 0x0, 0x7, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [], 0xd}, 0xb) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000240)='.log\x00', 0x20001, 0x100) r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x100, 0x8002) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 20:41:43 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x20000000000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:41:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 76) [ 2985.882700] ? mark_lock+0xf5/0x2df0 [ 2985.883586] ? lock_chain_count+0x20/0x20 [ 2985.884429] ? mark_lock+0xf5/0x2df0 [ 2985.885196] ? mark_lock+0xf5/0x2df0 [ 2985.885943] ? lock_chain_count+0x20/0x20 [ 2985.886757] ? lock_chain_count+0x20/0x20 [ 2985.887617] ? prep_new_page+0x16d/0x1d0 [ 2985.888431] ? lock_chain_count+0x20/0x20 [ 2985.889298] ? __lock_acquire+0x1657/0x5b00 [ 2985.890161] udpv6_sendmsg+0x1b4e/0x2af0 [ 2985.891003] ? __lock_acquire+0x1657/0x5b00 [ 2985.891910] ? udp_v6_push_pending_frames+0x360/0x360 [ 2985.892963] ? __lockdep_reset_lock+0x180/0x180 [ 2985.893896] ? __lockdep_reset_lock+0x180/0x180 [ 2985.894844] ? lock_acquire+0x197/0x470 [ 2985.895651] ? find_held_lock+0x2c/0x110 [ 2985.896486] ? __might_fault+0xd3/0x180 [ 2985.897282] ? lock_downgrade+0x6d0/0x6d0 [ 2985.898122] ? lock_chain_count+0x20/0x20 [ 2985.898952] ? sock_has_perm+0x1ea/0x280 [ 2985.899804] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2985.900888] ? __import_iovec+0x458/0x590 [ 2985.901726] ? udp_v6_push_pending_frames+0x360/0x360 [ 2985.902762] inet6_sendmsg+0x105/0x140 [ 2985.903579] ? inet6_compat_ioctl+0x320/0x320 [ 2985.904469] __sock_sendmsg+0xf2/0x190 [ 2985.905264] ____sys_sendmsg+0x334/0x870 [ 2985.906066] ? sock_write_iter+0x3d0/0x3d0 [ 2985.907024] ? do_recvmmsg+0x6d0/0x6d0 20:41:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/84, 0x54}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000001c0)=""/139, 0x8b}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/208, 0xd0}], 0x6}}, {{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/28, 0x1c}, {&(0x7f0000001600)=""/123, 0x7b}, {&(0x7f0000001680)=""/3, 0x3}, {&(0x7f00000016c0)=""/78, 0x4e}, {0xffffffffffffffff}, {&(0x7f0000001740)=""/136, 0x88}, {&(0x7f0000001800)=""/19, 0x13}], 0x7, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/14, 0xe}, {&(0x7f0000001940)=""/57, 0x39}, {&(0x7f0000001980)=""/208, 0xd0}], 0x3, &(0x7f0000001ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/87, 0x57}], 0x2, &(0x7f0000002c40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002c80), 0x6e, &(0x7f0000003380)=[{&(0x7f0000002d00)=""/134, 0x86}, {&(0x7f0000002dc0)=""/154, 0x9a}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/29, 0x1d}, {&(0x7f0000002fc0)=""/58, 0x3a}, {&(0x7f0000003000)=""/194, 0xc2}, {&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/124, 0x7c}, {&(0x7f0000003280)=""/225, 0xe1}], 0x9, &(0x7f0000003440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003500)=@abs, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003580)=""/189, 0xbd}, {&(0x7f0000003640)=""/212, 0xd4}], 0x2, &(0x7f0000003780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f0000003840)=""/36, 0x24}, {&(0x7f0000003880)=""/111, 0x6f}], 0x2, &(0x7f0000003940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003a80)=""/135, 0x87}, {&(0x7f0000003b40)=""/182, 0xb6}, {&(0x7f0000003c00)=""/6, 0x6}, {&(0x7f0000003c40)=""/175, 0xaf}, {&(0x7f0000003d00)=""/80, 0x50}], 0x5, &(0x7f0000003e00)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000003e40)=""/131, 0x83}, {&(0x7f0000003f00)=""/246, 0xf6}, {&(0x7f0000004000)=""/26, 0x1a}, {&(0x7f0000004040)=""/166, 0xa6}, {&(0x7f0000004100)=""/20, 0x14}, {&(0x7f0000004140)=""/222, 0xde}, {&(0x7f0000004240)=""/219, 0xdb}, {&(0x7f0000004340)=""/4096, 0x1000}], 0x8, &(0x7f00000053c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x9, 0x0, &(0x7f0000005680)={0x0, 0x989680}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000005900)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000058c0)={&(0x7f0000005700)=ANY=[@ANYBLOB="c00100001b0010002dbd7000fddbdf2500000000000000000000ffff7f0000017f0000010000000000000000000000004e2400034e2000000a00002030000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0700000000000000ff0000000000000007000000000000000101000000000000040000000000000704000000000000000700000000000000060000000000000000040000000000000300000000000000a2090000000000007e072a59000000004be0000000000000010002030000000080000000000000000c000f00060000000000000005001900ff00000008001f00", @ANYRES32=0x0, @ANYBLOB="14000e00ffffffff0000000000000000000000001c000400feff4e244e200000e00000020000000000000000000000000a00100001000000000000009c00110000000000000000000000ffff7f00000100000000000000000000000000000000ac14142e0000000000000000000000000000000000000000000000000000000032030000073500000a000200ac1414bb00000000000000000000000000000000000000000000ffffffffffffac1414aa000000000000000000000000fe8000000000000000000000000000aa6c02000007350000000002000a0010000100000000000000"], 0x1c0}, 0x1, 0x0, 0x0, 0x4004080}, 0x4040) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005940)=ANY=[@ANYBLOB="b8000000130001000000000000000000ffffffff000000000000000000000000ff02000000000000000000000000000100000000000000000a00400000000000888f4de34e8452d5f8e3c1f2f86be76929e03eccc585c9aeb3cc88c3b0d12f73a83a52d372be57912bb11eaf009577c24040f184d01b0d1319cbf09b4e7605c2c45c495661f97eaa594c7d1a766eb995527b89cad4e2f80b825e0b8439399612cf4f4d702f878dedb74de374ae90fdf5d346d3f75658f16ec924246ff8e52e499129bede46d2a756e122250f43ab5b2f967253a1bbf33c68954ee1cc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) [ 2985.907827] ? __lock_acquire+0x1657/0x5b00 [ 2985.908822] ___sys_sendmsg+0xf3/0x170 [ 2985.909627] ? sendmsg_copy_msghdr+0x160/0x160 [ 2985.910553] ? __lockdep_reset_lock+0x180/0x180 [ 2985.911496] ? trace_hardirqs_on+0x5b/0x180 [ 2985.912364] ? lock_acquire+0x197/0x470 [ 2985.913165] ? find_held_lock+0x2c/0x110 [ 2985.913980] ? __might_fault+0xd3/0x180 [ 2985.914795] ? lock_downgrade+0x6d0/0x6d0 [ 2985.915648] ? io_schedule_timeout+0x140/0x140 [ 2985.916602] __sys_sendmmsg+0x195/0x470 [ 2985.917403] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 2985.918289] ? lock_downgrade+0x6d0/0x6d0 [ 2985.919131] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2985.920111] ? wait_for_completion_io+0x270/0x270 [ 2985.921083] ? rcu_read_lock_any_held+0x75/0xa0 [ 2985.922033] ? vfs_write+0x354/0xa70 [ 2985.922788] ? fput_many+0x2f/0x1a0 [ 2985.923837] ? ksys_write+0x1a9/0x260 [ 2985.924592] ? __ia32_sys_read+0xb0/0xb0 [ 2985.925445] __x64_sys_sendmmsg+0x99/0x100 [ 2985.926292] do_syscall_64+0x33/0x40 [ 2985.927060] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2985.928087] RIP: 0033:0x7f1c4c8a5b19 [ 2985.928857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2985.932467] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2985.934004] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 2985.935426] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 2985.936894] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2985.938358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2985.939774] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:41:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0ffffffffffff) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2986.110928] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2986.118149] udc-core: couldn't find an available UDC or it's busy [ 2986.119776] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 20:41:44 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x100000000000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:42:17 executing program 7: syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x110100, 0x41) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{0x0}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x24000, 0x98) setxattr$incfs_id(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff) r3 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x20000001}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0xd5d, 0x4c8940) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) 20:42:17 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x200000000000000) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 20:42:17 executing program 5: r0 = inotify_init1(0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) write(r1, &(0x7f00000000c0)="fa16d5", 0x3) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) 20:42:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x14, r3, 0x609, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xff}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r1, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x30}}, 0x0) 20:42:17 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x5460, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:42:17 executing program 0: openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) ftruncate(0xffffffffffffffff, 0xffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x62) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f0000000240)=""/103, 0x67}, {0x0}, {&(0x7f0000000380)=""/168, 0xa8}], 0x5, 0x6, 0xfffffffe) fallocate(r2, 0x0, 0x0, 0x8800000) lseek(r1, 0x0, 0x3) r3 = openat(r0, 0x0, 0x105342, 0xac) r4 = dup2(r3, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x101}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(r5, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40800, 0x84) ioctl$FICLONE(r5, 0x40049409, r4) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) sendfile(r0, r6, 0x0, 0x100000001) 20:42:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 77) 20:42:17 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x54, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fork() r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40}, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kcmp(0x0, r1, 0x4, 0xffffffffffffffff, r2) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="041f09e70d08d0c002f43754b9aa862894e6deeb6d9abbd3a6c3b16cc580a9ebc2a66f2bdb9263f30cff80558ec175df7924139cf0241b9963898acb3a1e2d347718479105eb5a070651e8d8cd03f86b"], 0x2, 0x3) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005880), 0x0, 0x0) [ 3019.631452] FAULT_INJECTION: forcing a failure. [ 3019.631452] name failslab, interval 1, probability 0, space 0, times 0 [ 3019.633775] CPU: 1 PID: 59803 Comm: syz-executor.1 Not tainted 5.10.205 #1 [ 3019.635233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3019.636941] Call Trace: [ 3019.637478] dump_stack+0x107/0x167 [ 3019.638246] should_fail.cold+0x5/0xa [ 3019.639018] ? dst_alloc+0x9e/0x610 [ 3019.639822] should_failslab+0x5/0x20 [ 3019.640610] kmem_cache_alloc+0x5b/0x310 [ 3019.641446] dst_alloc+0x9e/0x610 [ 3019.642211] rt_dst_alloc+0x73/0x440 [ 3019.642995] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 3019.644110] ip_route_output_key_hash+0x18d/0x340 [ 3019.645078] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 3019.646253] ? mark_lock+0xf5/0x2df0 [ 3019.647061] ? __lock_acquire+0x1657/0x5b00 [ 3019.648000] ip_route_output_flow+0x23/0x150 [ 3019.648931] ip_tunnel_xmit+0x70e/0x2f50 [ 3019.649785] ? usage_accumulate+0x70/0x110 [ 3019.650704] ? __is_insn_slot_addr+0x94/0x290 [ 3019.651662] ? perf_trace_lock+0xac/0x490 [ 3019.652552] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 3019.653542] sit_tunnel_xmit+0xef0/0x2960 [ 3019.654425] ? ipip_rcv+0x4f0/0x4f0 [ 3019.655197] ? skb_crc32c_csum_help+0x80/0x80 [ 3019.656166] ? lock_acquire+0x197/0x470 [ 3019.656971] ? __dev_queue_xmit+0x1c2/0x2710 [ 3019.657903] ? netif_skb_features+0x536/0xa00 [ 3019.658808] dev_hard_start_xmit+0x1cb/0x6f0 [ 3019.659794] __dev_queue_xmit+0x17ec/0x2710 [ 3019.660723] ? find_held_lock+0x2c/0x110 [ 3019.661583] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3019.662551] ? lock_downgrade+0x6d0/0x6d0 [ 3019.663411] ? lock_acquire+0x197/0x470 [ 3019.664271] ? ip_finish_output2+0x220/0x21f0 [ 3019.665207] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3019.666299] neigh_connected_output+0x382/0x4d0 [ 3019.667292] ip_finish_output2+0x6f1/0x21f0 [ 3019.668241] ? nf_hook_slow+0xfc/0x1e0 [ 3019.669047] ? ip_frag_next+0x9e0/0x9e0 [ 3019.669827] ? nf_hook+0x160/0x510 [ 3019.670565] ? __ip_finish_output.part.0+0xb50/0xb50 [ 3019.671650] __ip_finish_output.part.0+0x5f3/0xb50 [ 3019.672658] ? ip_fragment.constprop.0+0x240/0x240 [ 3019.673662] ? nf_hook+0x510/0x510 [ 3019.674416] ip_output+0x2f7/0x600 [ 3019.675160] ip_send_skb+0xdd/0x260 [ 3019.675930] udp_send_skb+0x6da/0x11d0 [ 3019.676780] udp_sendmsg+0x197f/0x2170 [ 3019.677588] ? ip_frag_init+0x350/0x350 [ 3019.678419] ? udp_setsockopt+0xc0/0xc0 [ 3019.679236] ? mark_lock+0xf5/0x2df0 [ 3019.680060] ? lock_chain_count+0x20/0x20 [ 3019.680926] ? mark_lock+0xf5/0x2df0 [ 3019.681705] ? mark_lock+0xf5/0x2df0 [ 3019.682462] ? lock_chain_count+0x20/0x20 [ 3019.683318] ? lock_chain_count+0x20/0x20 [ 3019.684190] ? prep_new_page+0x16d/0x1d0 [ 3019.685057] ? lock_chain_count+0x20/0x20 [ 3019.685934] ? __lock_acquire+0x1657/0x5b00 [ 3019.686836] udpv6_sendmsg+0x1b4e/0x2af0 [ 3019.687691] ? __lock_acquire+0x1657/0x5b00 [ 3019.688654] ? udp_v6_push_pending_frames+0x360/0x360 [ 3019.689721] ? __lockdep_reset_lock+0x180/0x180 [ 3019.690698] ? __lockdep_reset_lock+0x180/0x180 [ 3019.691666] ? lock_acquire+0x197/0x470 [ 3019.692509] ? find_held_lock+0x2c/0x110 [ 3019.693353] ? __might_fault+0xd3/0x180 [ 3019.694161] ? lock_downgrade+0x6d0/0x6d0 [ 3019.694988] ? lock_chain_count+0x20/0x20 [ 3019.695824] ? sock_has_perm+0x1ea/0x280 [ 3019.696667] ? selinux_socket_post_create+0x7f0/0x7f0 [ 3019.697762] ? __import_iovec+0x458/0x590 [ 3019.698612] ? udp_v6_push_pending_frames+0x360/0x360 [ 3019.699673] inet6_sendmsg+0x105/0x140 [ 3019.700502] ? inet6_compat_ioctl+0x320/0x320 [ 3019.701417] __sock_sendmsg+0xf2/0x190 [ 3019.702178] ____sys_sendmsg+0x334/0x870 [ 3019.702985] ? sock_write_iter+0x3d0/0x3d0 [ 3019.703843] ? do_recvmmsg+0x6d0/0x6d0 [ 3019.704683] ? __lock_acquire+0x1657/0x5b00 [ 3019.705586] ___sys_sendmsg+0xf3/0x170 [ 3019.706410] ? sendmsg_copy_msghdr+0x160/0x160 [ 3019.707300] ? __lockdep_reset_lock+0x180/0x180 [ 3019.708233] ? trace_hardirqs_on+0x5b/0x180 [ 3019.709149] ? lock_acquire+0x197/0x470 [ 3019.709962] ? find_held_lock+0x2c/0x110 [ 3019.710803] ? __might_fault+0xd3/0x180 [ 3019.711615] ? lock_downgrade+0x6d0/0x6d0 [ 3019.712504] ? io_schedule_timeout+0x140/0x140 [ 3019.713477] __sys_sendmmsg+0x195/0x470 [ 3019.714318] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 3019.715202] ? lock_downgrade+0x6d0/0x6d0 [ 3019.716092] ? __mutex_unlock_slowpath+0xe1/0x600 [ 3019.717078] ? wait_for_completion_io+0x270/0x270 [ 3019.718110] ? rcu_read_lock_any_held+0x75/0xa0 [ 3019.719059] ? vfs_write+0x354/0xa70 [ 3019.719857] ? fput_many+0x2f/0x1a0 [ 3019.720603] ? ksys_write+0x1a9/0x260 [ 3019.721386] ? __ia32_sys_read+0xb0/0xb0 [ 3019.722269] __x64_sys_sendmmsg+0x99/0x100 [ 3019.723168] do_syscall_64+0x33/0x40 [ 3019.723940] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3019.724971] RIP: 0033:0x7f1c4c8a5b19 [ 3019.725741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3019.729511] RSP: 002b:00007f1c49e1b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 3019.731054] RAX: ffffffffffffffda RBX: 00007f1c4c9b8f60 RCX: 00007f1c4c8a5b19 [ 3019.732529] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 3019.734013] RBP: 00007f1c49e1b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3019.735448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3019.736878] R13: 00007ffffc6fbc9f R14: 00007f1c49e1b300 R15: 0000000000022000 20:42:18 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) dup3(0xffffffffffffffff, r4, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200001, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffffc}, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709ca", 0xfffffffffffffdfb}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 20:42:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40049409, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) 20:42:18 executing program 3: bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x43c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x420, 0x91, "9883720a849dc74141d1ccbdc704b48042f4f77b2a72ada04fd779e157cd87e0b6a8c5527d50c9ba5855b8181fc7d9465055f2437094a32839b56d5da60f3289977cea01a710987e841b0ca21b3415e46b27a1b70e8f548a048bd84dab4584a9f64741dc62155d26cba534eebd3ecd69439ad3c4af9c17178f5948067eeef6133f1562207e946b7db4dbaa08725ec7da8b198031f16e871f18e0ceb7812c3b7262dcc601a7d53c370cd2f89f5b828a8a088071e6b39afda46379f3a13cbb3c7bbcec700b3c1a29df58e1bfd0b8232e68f8349fc391c0c0c8cefa8faa7a23c77f69d6f821060f7e3e96f934a2939d16edf3abea25dba3ed4ca2cdc1d2e7ebdaf0bb985d43a3829ed39ad0731131528a4a87c55b523b44e8904719a004cf7bdd5a9a1a240a59013ca35bed227eb637e85be1b8fc3e9e9fd6bd597e29cc2ce0aecf46420fdee77694d3c3bfee9b005afe9131b9d05cc34fd65cba456583e89d6cbbdb0ce8365433863d070f76d12adb94d2ee23d560c099767ac14a3051b91348a767b32097c64fff0b4b57a065836796586c8abd901e355747bfb746cdbe6dfaaa50c23f7da56ec0f981e46ea7f76c233fa1d673cc3904a735eceb689d257f00a3446cef9ba1c798a7260ecfaf289b8a85f7bf6ca3ce6f2e5d368fef80bbf0bd047280db72dee92d6e81eb8fac5deead4edca97dada8384ad972ca9ca33f2bc0aa4121739ecf37e2d2b8cb7f9427008847587ccdee411024e5e7736db2ca8c9e45f45f8555095fadbff1adb85b2ee6d1422f9324d325b4fa258c88117b32bcaeb3dd62e6263ab1e43affff0888b7e6768edcef4d2143ef9c8a3ba4e79b883a089615a4c354fa8a91172d86022d889d1daeb0d28712a901d3d61480f0ce9fb1bb4a7ab37552b18953ced07a634f19935998fd5af7902b6a7838c1b9b54774b6f12dd4578b64a1b7b4db63cc5a6101d45265d1f17a4d0cf9f8c4845a321aed7c151a87e3b3d5e2972b73da20da25dbf3e8433d17309e37b8df27016e154e9d1eaec99a5ae0eb373aece239e19861df83ca481df2b1cde16609464f4fa210d89961102aa3ab2483e47056ac6a6af725c9b6c92ab2072738cddb454bab6cbb4f647b4433c88709086af07cc6a64325d5f9f4967993231715ca277cba8158327ff6653a1827b42be3a4f2901ec02aa51949aaa25ec887c1c928fe8608c1d1ef7491d732263933f0a3e1c3375baeb619ed1285905c71f6fe99e21ad931ce8bd1a965f7b7c9d4dde114e5a52fc336ffa705880d9d0277f214f28846ad4df9479030c862a0da0c38de07bf3e3cf8af54b5a1724823e7a5b44fb378146e21c84f42fe6d902d72ba27ce81923700d3fb2c5df5814e033d5c44746f5912ecbe0a729338239b4ff65eaff7ee37c42a7ea1d499b633771b5457eafe218f82ac9a7fae57cfd92d1b0b5c6f573ba15f8a2bbef69a7dfcd803e79e6fe5292b1a5c41140790"}]]}, 0x43c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff91, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r4, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe0201100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x3f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="4a1d0fd80fc8"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc5f}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3ed23a8e9d49"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x60}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) write$rfkill(r5, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff91, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, 0x0, 0xa01, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x60, r1, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0xd}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x74}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x2d}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x44800}, 0x20000010) 20:42:18 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000a40), 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000002c0)=ANY=[], 0x54, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x40086602, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0xb) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r0, &(0x7f00000057c0)='devices.allow\x00', 0x2, 0x0) [ 3020.090739] [ 3020.091060] ====================================================== [ 3020.092110] WARNING: possible circular locking dependency detected [ 3020.093096] 5.10.205 #1 Not tainted [ 3020.093616] ------------------------------------------------------ [ 3020.094542] syz-executor.3/60041 is trying to acquire lock: [ 3020.095366] ffff888018074b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 3020.096939] [ 3020.096939] but task is already holding lock: [ 3020.097814] ffffffff85619628 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 3020.099109] [ 3020.099109] which lock already depends on the new lock. [ 3020.099109] [ 3020.100363] [ 3020.100363] the existing dependency chain (in reverse order) is: [ 3020.101633] [ 3020.101633] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 3020.102767] __mutex_lock+0x13d/0x10b0 [ 3020.103528] rfkill_register+0x36/0xa10 [ 3020.104168] udc-core: couldn't find an available UDC or it's busy [ 3020.104292] hci_register_dev+0x42e/0xc00 [ 3020.104310] __vhci_create_device+0x2c8/0x5c0 [ 3020.104335] vhci_open_timeout+0x38/0x50 [ 3020.109769] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 3020.110322] process_one_work+0x9a9/0x14b0 [ 3020.110333] worker_thread+0x61d/0x1310 [ 3020.110353] kthread+0x38f/0x470 [ 3020.115314] ret_from_fork+0x22/0x30 [ 3020.115988] [ 3020.115988] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 3020.117010] __mutex_lock+0x13d/0x10b0 [ 3020.117737] vhci_send_frame+0x63/0xa0 [ 3020.118431] hci_send_frame+0x1b9/0x320 [ 3020.119131] hci_tx_work+0x10af/0x1660 [ 3020.119826] process_one_work+0x9a9/0x14b0 [ 3020.120563] worker_thread+0x61d/0x1310 [ 3020.121264] kthread+0x38f/0x470 [ 3020.121895] ret_from_fork+0x22/0x30 [ 3020.122547] [ 3020.122547] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 3020.123790] __flush_work+0x105/0xa90 [ 3020.124472] hci_dev_do_close+0x131/0x1240 [ 3020.125206] hci_unregister_dev+0x149/0x430 [ 3020.125998] vhci_release+0x70/0xf0 [ 3020.126649] __fput+0x285/0x980 [ 3020.127246] task_work_run+0xe2/0x1a0 [ 3020.127972] do_exit+0xb6f/0x2600 [ 3020.128622] do_group_exit+0x125/0x310 [ 3020.129334] get_signal+0x4bc/0x22e0 [ 3020.130048] arch_do_signal_or_restart+0x2b7/0x1990 [ 3020.130950] exit_to_user_mode_prepare+0x10f/0x190 [ 3020.131859] syscall_exit_to_user_mode+0x38/0x1e0 [ 3020.132723] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3020.133657] [ 3020.133657] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 3020.134681] __mutex_lock+0x13d/0x10b0 [ 3020.135393] bg_scan_update+0x82/0x500 [ 3020.136108] process_one_work+0x9a9/0x14b0 [ 3020.136897] worker_thread+0x61d/0x1310 [ 3020.137625] kthread+0x38f/0x470 [ 3020.138251] ret_from_fork+0x22/0x30 [ 3020.138930] [ 3020.138930] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 3020.140300] __lock_acquire+0x29e7/0x5b00 [ 3020.141071] lock_acquire+0x197/0x470 [ 3020.141751] __flush_work+0x105/0xa90 [ 3020.142439] __cancel_work_timer+0x368/0x4c0 [ 3020.143222] hci_request_cancel_all+0x73/0x230 [ 3020.144060] hci_dev_do_close+0xd9/0x1240 [ 3020.144826] hci_rfkill_set_block+0x166/0x1a0 [ 3020.145646] rfkill_set_block+0x1fd/0x540 [ 3020.146388] rfkill_fop_write+0x253/0x4b0 [ 3020.147125] vfs_write+0x29a/0xa70 [ 3020.147771] ksys_write+0x1f6/0x260 [ 3020.148432] do_syscall_64+0x33/0x40 [ 3020.149107] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3020.150012] [ 3020.150012] other info that might help us debug this: [ 3020.150012] [ 3020.151280] Chain exists of: [ 3020.151280] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 3020.151280] [ 3020.153464] Possible unsafe locking scenario: [ 3020.153464] [ 3020.154403] CPU0 CPU1 [ 3020.155126] ---- ---- [ 3020.155892] lock(rfkill_global_mutex); [ 3020.156538] lock(&data->open_mutex); [ 3020.157542] lock(rfkill_global_mutex); [ 3020.158588] lock((work_completion)(&hdev->bg_scan_update)); [ 3020.159524] [ 3020.159524] *** DEADLOCK *** [ 3020.159524] [ 3020.160504] 1 lock held by syz-executor.3/60041: [ 3020.161241] #0: ffffffff85619628 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 3020.162707] [ 3020.162707] stack backtrace: [ 3020.163410] CPU: 1 PID: 60041 Comm: syz-executor.3 Not tainted 5.10.205 #1 [ 3020.164505] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3020.165799] Call Trace: [ 3020.166213] dump_stack+0x107/0x167 [ 3020.166812] check_noncircular+0x263/0x2e0 [ 3020.167479] ? register_lock_class+0xbb/0x17b0 [ 3020.168203] ? print_circular_bug+0x470/0x470 [ 3020.168913] ? find_first_zero_bit+0x94/0xb0 [ 3020.169627] ? alloc_chain_hlocks+0x342/0x5a0 [ 3020.170336] __lock_acquire+0x29e7/0x5b00 [ 3020.170999] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3020.171831] ? SOFTIRQ_verbose+0x10/0x10 [ 3020.172469] ? __lockdep_reset_lock+0x180/0x180 [ 3020.173193] ? mark_lock+0xf5/0x2df0 [ 3020.173807] lock_acquire+0x197/0x470 [ 3020.174400] ? __flush_work+0xdd/0xa90 [ 3020.175009] ? lock_release+0x680/0x680 [ 3020.175631] ? __flush_work+0x78c/0xa90 [ 3020.176268] ? lock_downgrade+0x6d0/0x6d0 [ 3020.176920] __flush_work+0x105/0xa90 [ 3020.177523] ? __flush_work+0xdd/0xa90 [ 3020.178131] ? lock_chain_count+0x20/0x20 [ 3020.178781] ? queue_delayed_work_on+0xe0/0xe0 [ 3020.179469] ? mark_lock+0xf5/0x2df0 [ 3020.180051] ? mark_lock+0xf5/0x2df0 [ 3020.180616] ? lock_chain_count+0x20/0x20 [ 3020.181237] ? perf_trace_lock+0xac/0x490 [ 3020.181862] ? lock_chain_count+0x20/0x20 [ 3020.182514] ? mark_held_locks+0x9e/0xe0 [ 3020.183130] __cancel_work_timer+0x368/0x4c0 [ 3020.183788] ? cancel_delayed_work+0x20/0x20 [ 3020.184426] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3020.185174] ? __cancel_work+0x250/0x2b0 [ 3020.185769] ? trace_hardirqs_on+0x5b/0x180 [ 3020.186406] ? __cancel_work+0x1bb/0x2b0 [ 3020.187026] ? try_to_grab_pending+0xe0/0xe0 [ 3020.187671] hci_request_cancel_all+0x73/0x230 [ 3020.188349] hci_dev_do_close+0xd9/0x1240 [ 3020.188941] ? rfkill_set_block+0x18f/0x540 [ 3020.189553] ? hci_dev_open+0x350/0x350 [ 3020.190123] ? mark_held_locks+0x9e/0xe0 [ 3020.190740] hci_rfkill_set_block+0x166/0x1a0 [ 3020.191378] ? hci_power_off+0x20/0x20 [ 3020.191948] rfkill_set_block+0x1fd/0x540 [ 3020.192553] rfkill_fop_write+0x253/0x4b0 [ 3020.193174] ? rfkill_sync_work+0xa0/0xa0 [ 3020.193802] ? security_file_permission+0x24e/0x570 [ 3020.194590] ? rfkill_sync_work+0xa0/0xa0 [ 3020.195213] vfs_write+0x29a/0xa70 [ 3020.195773] ksys_write+0x1f6/0x260 [ 3020.196318] ? __ia32_sys_read+0xb0/0xb0 [ 3020.196940] do_syscall_64+0x33/0x40 [ 3020.197512] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3020.198301] RIP: 0033:0x7fa1175beb19 [ 3020.198888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3020.201768] RSP: 002b:00007fa114b34188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3020.202953] RAX: ffffffffffffffda RBX: 00007fa1176d1f60 RCX: 00007fa1175beb19 [ 3020.204029] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000008 [ 3020.205086] RBP: 00007fa117618f6d R08: 0000000000000000 R09: 0000000000000000 [ 3020.206180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3020.207267] R13: 00007fffb81bc70f R14: 00007fa114b34300 R15: 0000000000022000 VM DIAGNOSIS: 20:42:18 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822cb55c RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88805c33f988 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d094 R14=fffffbfff0f3d04a R15=dffffc0000000000 RIP=ffffffff822cb5b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f08185fb700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f08185fa130 CR3=000000005c5e0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=000000000000ff0000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000001ff9b RBX=0000000000000001 RCX=ffffc9000480b000 RDX=0000000000040000 RSI=ffffffff81299d81 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff88804ea6f4b8 R8 =0000000000000000 R9 =ffffffff8567278f R10=0000000000000000 R11=0000000000000001 R12=0000000000000022 R13=0000000000000016 R14=ffff88805c681a40 R15=0000000000000000 RIP=ffffffff81299d83 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa114b34700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005584ee765a80 CR3=000000004fe5e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000