&(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:57:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:57:46 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2727.152041] FAULT_INJECTION: forcing a failure. [ 2727.152041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2727.153317] CPU: 0 PID: 12477 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2727.153908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.154621] Call Trace: [ 2727.154851] dump_stack+0x107/0x167 [ 2727.155162] should_fail.cold+0x5/0xa [ 2727.155491] _copy_to_iter+0x264/0x12d0 [ 2727.155849] ? find_held_lock+0x2c/0x110 [ 2727.156198] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2727.156620] ? __virt_addr_valid+0x170/0x5c0 [ 2727.157004] ? __check_object_size+0x319/0x440 [ 2727.157381] simple_copy_to_iter+0x4c/0x70 [ 2727.157732] __skb_datagram_iter+0x4f7/0x880 [ 2727.158111] ? zerocopy_sg_from_iter+0x110/0x110 [ 2727.158497] skb_copy_datagram_iter+0x88/0x190 [ 2727.158907] tcp_recvmsg+0x13b5/0x2930 [ 2727.159250] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.159625] ? sock_has_perm+0x1ea/0x280 [ 2727.159963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.160429] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.160789] inet6_recvmsg+0x13b/0x6e0 [ 2727.161134] ? inet6_bind+0x120/0x120 [ 2727.161450] ? security_socket_recvmsg+0x95/0xc0 [ 2727.161875] ? inet6_bind+0x120/0x120 [ 2727.162275] sock_recvmsg+0xff/0x180 [ 2727.162642] __sys_recvfrom+0x1be/0x2f0 [ 2727.163059] ? __ia32_sys_send+0x100/0x100 [ 2727.163461] ? lock_downgrade+0x6d0/0x6d0 [ 2727.163921] ? wait_for_completion_io+0x270/0x270 [ 2727.164386] ? rcu_read_lock_any_held+0x75/0xa0 [ 2727.164871] ? vfs_write+0x354/0xa70 [ 2727.165222] ? fput_many+0x2f/0x1a0 [ 2727.165602] ? ksys_write+0x1a9/0x260 [ 2727.165972] ? __ia32_sys_read+0xb0/0xb0 [ 2727.166398] __x64_sys_recvfrom+0xdd/0x1b0 [ 2727.166726] FAULT_INJECTION: forcing a failure. [ 2727.166726] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.166814] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.166838] do_syscall_64+0x33/0x40 [ 2727.168898] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.169426] RIP: 0033:0x7f4d5c7edb19 [ 2727.169818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.171717] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2727.172501] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2727.173239] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2727.173972] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.174706] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2727.175435] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2727.176202] CPU: 1 PID: 12475 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2727.176914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.177744] Call Trace: [ 2727.178022] dump_stack+0x107/0x167 [ 2727.178392] should_fail.cold+0x5/0xa [ 2727.178847] ? lock_release+0x680/0x680 [ 2727.179254] ? skb_clone+0x14f/0x3d0 [ 2727.179631] should_failslab+0x5/0x20 [ 2727.180044] kmem_cache_alloc+0x5b/0x310 [ 2727.180460] skb_clone+0x14f/0x3d0 [ 2727.180848] dev_queue_xmit_nit+0x3a7/0xb00 [ 2727.181329] dev_hard_start_xmit+0xab/0x6f0 [ 2727.181777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.182368] __dev_queue_xmit+0x17ec/0x2710 [ 2727.182895] ? find_held_lock+0x2c/0x110 [ 2727.183314] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2727.183818] ? mark_held_locks+0x9e/0xe0 [ 2727.184390] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2727.184952] ip6_finish_output2+0x17b4/0x1fe0 [ 2727.185452] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2727.185984] ip6_output+0x3aa/0x7e0 [ 2727.186401] ip6_xmit+0x10a1/0x1c40 [ 2727.186846] ? ip6_append_data+0x330/0x330 [ 2727.187285] ? inet6_csk_xmit+0xc6/0x680 [ 2727.187732] ? lock_release+0x680/0x680 [ 2727.188153] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2727.188267] FAULT_INJECTION: forcing a failure. [ 2727.188267] name failslab, interval 1, probability 0, space 0, times 0 [ 2727.188690] ? inet6_csk_route_req+0x850/0x850 [ 2727.188714] ? md5_transform+0x19/0xde0 [ 2727.190616] inet6_csk_xmit+0x315/0x680 [ 2727.191047] ? inet6_csk_update_pmtu+0x190/0x190 [ 2727.191545] ? __local_bh_enable_ip+0x9d/0x100 [ 2727.192043] ? csum_ipv6_magic+0x1e/0x70 [ 2727.192461] ? inet6_csk_update_pmtu+0x190/0x190 [ 2727.192978] __tcp_transmit_skb+0x18ef/0x35d0 [ 2727.193447] ? __tcp_select_window+0x900/0x900 [ 2727.193959] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2727.194496] ? __tcp_send_ack.part.0+0x67/0x650 [ 2727.195010] ? memset+0x20/0x50 [ 2727.195361] ? __alloc_skb+0x388/0x5b0 [ 2727.195771] __tcp_send_ack.part.0+0x3e0/0x650 [ 2727.196269] tcp_send_ack+0x7d/0xa0 [ 2727.196648] tcp_cleanup_rbuf+0x468/0x5a0 [ 2727.197079] tcp_recvmsg+0xb85/0x2930 [ 2727.197510] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.197979] ? sock_has_perm+0x1ea/0x280 [ 2727.198431] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.198984] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.199438] inet6_recvmsg+0x13b/0x6e0 [ 2727.199843] ? inet6_bind+0x120/0x120 [ 2727.200248] ? security_socket_recvmsg+0x95/0xc0 [ 2727.200751] ? inet6_bind+0x120/0x120 [ 2727.201157] sock_recvmsg+0xff/0x180 [ 2727.201547] __sys_recvfrom+0x1be/0x2f0 [ 2727.202001] ? __ia32_sys_send+0x100/0x100 [ 2727.202431] ? lock_downgrade+0x6d0/0x6d0 [ 2727.202957] ? wait_for_completion_io+0x270/0x270 [ 2727.203455] ? rcu_read_lock_any_held+0x75/0xa0 [ 2727.203961] ? vfs_write+0x354/0xa70 [ 2727.204403] ? fput_many+0x2f/0x1a0 [ 2727.204882] ? ksys_write+0x1a9/0x260 [ 2727.205390] ? __ia32_sys_read+0xb0/0xb0 [ 2727.205936] __x64_sys_recvfrom+0xdd/0x1b0 [ 2727.206524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.207087] do_syscall_64+0x33/0x40 [ 2727.207550] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.208149] RIP: 0033:0x7f7abd046b19 [ 2727.208601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.210655] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2727.211469] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2727.212245] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2727.212986] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.213748] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2727.214566] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2727.215401] CPU: 0 PID: 12479 Comm: syz-executor.3 Not tainted 5.10.211 #1 [ 2727.216140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2727.216986] Call Trace: [ 2727.217266] dump_stack+0x107/0x167 [ 2727.217638] should_fail.cold+0x5/0xa [ 2727.218037] ? __alloc_skb+0x6d/0x5b0 [ 2727.218426] should_failslab+0x5/0x20 [ 2727.218794] kmem_cache_alloc_node+0x55/0x330 [ 2727.219260] __alloc_skb+0x6d/0x5b0 [ 2727.219580] ? ktime_get+0x158/0x1f0 [ 2727.219966] __tcp_send_ack.part.0+0x67/0x650 [ 2727.220379] tcp_send_ack+0x7d/0xa0 [ 2727.220752] tcp_cleanup_rbuf+0x468/0x5a0 [ 2727.221112] tcp_recvmsg+0xb85/0x2930 [ 2727.221507] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.221899] ? sock_has_perm+0x1ea/0x280 [ 2727.222324] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2727.222809] ? tcp_splice_read+0x8c0/0x8c0 [ 2727.223230] inet6_recvmsg+0x13b/0x6e0 [ 2727.223590] ? inet6_bind+0x120/0x120 [ 2727.223982] ? security_socket_recvmsg+0x95/0xc0 [ 2727.224452] ? inet6_bind+0x120/0x120 [ 2727.224864] sock_recvmsg+0xff/0x180 [ 2727.225243] __sys_recvfrom+0x1be/0x2f0 [ 2727.225616] ? __ia32_sys_send+0x100/0x100 [ 2727.226047] ? lock_downgrade+0x6d0/0x6d0 [ 2727.226449] ? wait_for_completion_io+0x270/0x270 [ 2727.226953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2727.227375] ? vfs_write+0x354/0xa70 [ 2727.227757] ? fput_many+0x2f/0x1a0 [ 2727.228081] ? ksys_write+0x1a9/0x260 [ 2727.228468] ? __ia32_sys_read+0xb0/0xb0 [ 2727.228850] __x64_sys_recvfrom+0xdd/0x1b0 [ 2727.229279] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2727.229800] do_syscall_64+0x33/0x40 [ 2727.230145] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2727.230670] RIP: 0033:0x7f23168fdb19 [ 2727.231055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2727.232780] RSP: 002b:00007f2313e52188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2727.233557] RAX: ffffffffffffffda RBX: 00007f2316a11020 RCX: 00007f23168fdb19 [ 2727.234218] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2727.234956] RBP: 00007f2313e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2727.235669] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2727.236394] R13: 00007ffe5c5c887f R14: 00007f2313e52300 R15: 0000000000022000 10:58:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:00 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1400, 0xcd08, 0x0, 0x0) 10:58:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) recvfrom$inet6(r0, &(0x7f0000000240)=""/169, 0xa9, 0x274e09d3434a6b0c, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @mcast2, 0x660}, 0x1c) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 63) 10:58:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 48) 10:58:00 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 10:58:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 44) 10:58:00 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2741.326449] FAULT_INJECTION: forcing a failure. [ 2741.326449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.335169] CPU: 1 PID: 12524 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2741.335815] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.336569] Call Trace: [ 2741.336829] dump_stack+0x107/0x167 [ 2741.337175] should_fail.cold+0x5/0xa [ 2741.337542] _copy_to_iter+0x264/0x12d0 [ 2741.337936] ? mark_lock+0xf5/0x2df0 [ 2741.338295] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2741.342771] ? __virt_addr_valid+0x170/0x5c0 [ 2741.343160] ? __check_object_size+0x319/0x440 [ 2741.343556] simple_copy_to_iter+0x4c/0x70 [ 2741.343946] __skb_datagram_iter+0x4f7/0x880 [ 2741.344335] ? zerocopy_sg_from_iter+0x110/0x110 [ 2741.344754] skb_copy_datagram_iter+0x88/0x190 [ 2741.345155] tcp_recvmsg+0x13b5/0x2930 [ 2741.345529] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.345929] ? sock_has_perm+0x1ea/0x280 [ 2741.346282] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2741.346807] ? lock_downgrade+0x6d0/0x6d0 [ 2741.355039] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.355504] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.355876] inet6_recvmsg+0x13b/0x6e0 [ 2741.363040] ? inet6_bind+0x120/0x120 [ 2741.363400] ? security_socket_recvmsg+0x95/0xc0 [ 2741.363814] ? inet6_bind+0x120/0x120 [ 2741.364155] sock_recvmsg+0xff/0x180 [ 2741.364515] __sys_recvfrom+0x1be/0x2f0 [ 2741.364921] ? __ia32_sys_send+0x100/0x100 [ 2741.365314] ? lock_downgrade+0x6d0/0x6d0 [ 2741.365765] ? wait_for_completion_io+0x270/0x270 [ 2741.366235] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.366717] ? vfs_write+0x354/0xa70 [ 2741.367110] ? fput_many+0x2f/0x1a0 [ 2741.367457] ? ksys_write+0x1a9/0x260 [ 2741.367822] ? __ia32_sys_read+0xb0/0xb0 [ 2741.368213] __x64_sys_recvfrom+0xdd/0x1b0 [ 2741.368625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.369114] do_syscall_64+0x33/0x40 [ 2741.369458] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2741.369954] RIP: 0033:0x7fd4b1105b19 [ 2741.370296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.372010] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2741.372733] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2741.373376] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2741.374036] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.374678] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2741.375337] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 10:58:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:01 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2741.771956] FAULT_INJECTION: forcing a failure. [ 2741.771956] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.772767] FAULT_INJECTION: forcing a failure. [ 2741.772767] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.773082] CPU: 0 PID: 12521 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2741.773098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.777061] Call Trace: [ 2741.777677] dump_stack+0x107/0x167 [ 2741.778538] should_fail.cold+0x5/0xa [ 2741.779035] should_failslab+0x5/0x20 [ 2741.779398] __kmalloc_node_track_caller+0x74/0x3b0 [ 2741.779934] ? __tcp_send_ack.part.0+0x67/0x650 [ 2741.780403] __alloc_skb+0xb1/0x5b0 [ 2741.780755] __tcp_send_ack.part.0+0x67/0x650 [ 2741.781189] tcp_send_ack+0x7d/0xa0 [ 2741.781542] tcp_cleanup_rbuf+0x468/0x5a0 [ 2741.781944] tcp_recvmsg+0xb85/0x2930 [ 2741.782332] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.783000] ? sock_has_perm+0x1ea/0x280 [ 2741.783408] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.783873] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.784248] inet6_recvmsg+0x13b/0x6e0 [ 2741.784605] ? inet6_bind+0x120/0x120 [ 2741.784957] ? security_socket_recvmsg+0x95/0xc0 [ 2741.785382] ? inet6_bind+0x120/0x120 [ 2741.785713] sock_recvmsg+0xff/0x180 [ 2741.786051] __sys_recvfrom+0x1be/0x2f0 [ 2741.786443] ? __ia32_sys_send+0x100/0x100 [ 2741.787228] ? lock_downgrade+0x6d0/0x6d0 [ 2741.788222] ? wait_for_completion_io+0x270/0x270 [ 2741.789360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.790430] ? vfs_write+0x354/0xa70 [ 2741.791324] ? fput_many+0x2f/0x1a0 [ 2741.792206] ? ksys_write+0x1a9/0x260 [ 2741.793124] ? __ia32_sys_read+0xb0/0xb0 [ 2741.794101] __x64_sys_recvfrom+0xdd/0x1b0 [ 2741.794909] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.795398] do_syscall_64+0x33/0x40 [ 2741.795740] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2741.796211] RIP: 0033:0x7f4d5c7edb19 [ 2741.796551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.798274] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2741.799114] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2741.799786] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2741.800458] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.801132] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2741.801796] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2741.802507] CPU: 1 PID: 12522 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2741.803210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.803955] Call Trace: [ 2741.804208] dump_stack+0x107/0x167 [ 2741.804571] should_fail.cold+0x5/0xa [ 2741.810959] ? create_object.isra.0+0x3a/0xa20 [ 2741.811365] should_failslab+0x5/0x20 [ 2741.811706] kmem_cache_alloc+0x5b/0x310 [ 2741.812072] ? lock_acquire+0x197/0x470 [ 2741.812432] create_object.isra.0+0x3a/0xa20 [ 2741.812821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.813270] kmem_cache_alloc+0x159/0x310 [ 2741.813654] skb_clone+0x14f/0x3d0 [ 2741.813984] dev_queue_xmit_nit+0x3a7/0xb00 [ 2741.814381] dev_hard_start_xmit+0xab/0x6f0 [ 2741.814781] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.815127] FAULT_INJECTION: forcing a failure. [ 2741.815127] name failslab, interval 1, probability 0, space 0, times 0 [ 2741.815248] __dev_queue_xmit+0x17ec/0x2710 [ 2741.815274] ? find_held_lock+0x2c/0x110 [ 2741.817042] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2741.817453] ? mark_held_locks+0x9e/0xe0 [ 2741.817826] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2741.818299] ip6_finish_output2+0x17b4/0x1fe0 [ 2741.818728] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2741.819180] ip6_output+0x3aa/0x7e0 [ 2741.819509] ip6_xmit+0x10a1/0x1c40 [ 2741.819853] ? ip6_append_data+0x330/0x330 [ 2741.820225] ? inet6_csk_xmit+0xc6/0x680 [ 2741.820589] ? lock_release+0x680/0x680 [ 2741.820937] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2741.821362] ? inet6_csk_route_req+0x850/0x850 [ 2741.821771] ? md5_transform+0x19/0xde0 [ 2741.822122] inet6_csk_xmit+0x315/0x680 [ 2741.822475] ? inet6_csk_update_pmtu+0x190/0x190 [ 2741.822914] ? __local_bh_enable_ip+0x9d/0x100 [ 2741.823310] ? csum_ipv6_magic+0x1e/0x70 [ 2741.823677] ? inet6_csk_update_pmtu+0x190/0x190 [ 2741.824097] __tcp_transmit_skb+0x18ef/0x35d0 [ 2741.824506] ? __tcp_select_window+0x900/0x900 [ 2741.824900] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2741.825347] ? __tcp_send_ack.part.0+0x67/0x650 [ 2741.825762] ? memset+0x20/0x50 [ 2741.826056] ? __alloc_skb+0x388/0x5b0 [ 2741.826405] __tcp_send_ack.part.0+0x3e0/0x650 [ 2741.826836] tcp_send_ack+0x7d/0xa0 [ 2741.827157] tcp_cleanup_rbuf+0x468/0x5a0 [ 2741.827527] tcp_recvmsg+0xb85/0x2930 [ 2741.827879] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.828252] ? sock_has_perm+0x1ea/0x280 [ 2741.828626] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.829087] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.829457] inet6_recvmsg+0x13b/0x6e0 [ 2741.829804] ? inet6_bind+0x120/0x120 [ 2741.830143] ? security_socket_recvmsg+0x95/0xc0 [ 2741.830554] ? inet6_bind+0x120/0x120 [ 2741.830937] sock_recvmsg+0xff/0x180 [ 2741.831267] __sys_recvfrom+0x1be/0x2f0 [ 2741.831648] ? __ia32_sys_send+0x100/0x100 [ 2741.832015] ? lock_downgrade+0x6d0/0x6d0 [ 2741.832405] ? wait_for_completion_io+0x270/0x270 [ 2741.832843] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.833253] ? vfs_write+0x354/0xa70 [ 2741.833615] ? fput_many+0x2f/0x1a0 [ 2741.833936] ? ksys_write+0x1a9/0x260 [ 2741.834271] ? __ia32_sys_read+0xb0/0xb0 [ 2741.834676] __x64_sys_recvfrom+0xdd/0x1b0 [ 2741.839104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.839561] do_syscall_64+0x33/0x40 [ 2741.839891] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2741.840341] RIP: 0033:0x7f7abd046b19 [ 2741.840688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.842261] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2741.842940] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2741.843589] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2741.844252] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.844860] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2741.845444] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2741.846084] CPU: 0 PID: 12527 Comm: syz-executor.3 Not tainted 5.10.211 #1 [ 2741.847024] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.848619] Call Trace: [ 2741.849125] dump_stack+0x107/0x167 [ 2741.849688] should_fail.cold+0x5/0xa [ 2741.850070] ? create_object.isra.0+0x3a/0xa20 [ 2741.850513] should_failslab+0x5/0x20 [ 2741.855250] kmem_cache_alloc+0x5b/0x310 [ 2741.856027] ? lock_acquire+0x197/0x470 [ 2741.856797] create_object.isra.0+0x3a/0xa20 [ 2741.857628] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2741.858591] kmem_cache_alloc+0x159/0x310 [ 2741.859550] skb_clone+0x14f/0x3d0 [ 2741.860230] dev_queue_xmit_nit+0x3a7/0xb00 [ 2741.861038] dev_hard_start_xmit+0xab/0x6f0 [ 2741.861817] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.862775] __dev_queue_xmit+0x17ec/0x2710 [ 2741.863594] ? find_held_lock+0x2c/0x110 [ 2741.864339] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2741.865169] ? mark_held_locks+0x9e/0xe0 [ 2741.865887] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2741.867009] ip6_finish_output2+0x17b4/0x1fe0 [ 2741.867803] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2741.868740] ip6_output+0x3aa/0x7e0 [ 2741.869381] ip6_xmit+0x10a1/0x1c40 [ 2741.870050] ? ip6_append_data+0x330/0x330 [ 2741.870852] ? inet6_csk_xmit+0xc6/0x680 [ 2741.871608] ? lock_release+0x680/0x680 [ 2741.872336] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2741.873216] ? inet6_csk_route_req+0x850/0x850 [ 2741.874054] ? md5_transform+0x19/0xde0 [ 2741.874860] inet6_csk_xmit+0x315/0x680 [ 2741.875630] ? inet6_csk_update_pmtu+0x190/0x190 [ 2741.876508] ? __local_bh_enable_ip+0x9d/0x100 [ 2741.877358] ? csum_ipv6_magic+0x1e/0x70 [ 2741.878105] ? inet6_csk_update_pmtu+0x190/0x190 [ 2741.883147] __tcp_transmit_skb+0x18ef/0x35d0 [ 2741.884026] ? __tcp_select_window+0x900/0x900 [ 2741.884906] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2741.885925] ? __tcp_send_ack.part.0+0x67/0x650 [ 2741.886844] ? memset+0x20/0x50 [ 2741.887463] ? __alloc_skb+0x388/0x5b0 [ 2741.888235] __tcp_send_ack.part.0+0x3e0/0x650 [ 2741.889116] tcp_send_ack+0x7d/0xa0 [ 2741.889790] tcp_cleanup_rbuf+0x468/0x5a0 [ 2741.890573] tcp_recvmsg+0xb85/0x2930 [ 2741.891516] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.892538] ? sock_has_perm+0x1ea/0x280 [ 2741.893568] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2741.894790] ? tcp_splice_read+0x8c0/0x8c0 [ 2741.895856] inet6_recvmsg+0x13b/0x6e0 [ 2741.896796] ? inet6_bind+0x120/0x120 [ 2741.897735] ? security_socket_recvmsg+0x95/0xc0 [ 2741.899003] ? inet6_bind+0x120/0x120 [ 2741.899943] sock_recvmsg+0xff/0x180 [ 2741.900838] __sys_recvfrom+0x1be/0x2f0 [ 2741.901682] ? __ia32_sys_send+0x100/0x100 [ 2741.902075] ? lock_downgrade+0x6d0/0x6d0 [ 2741.902487] ? wait_for_completion_io+0x270/0x270 [ 2741.907390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2741.908469] ? vfs_write+0x354/0xa70 [ 2741.909333] ? fput_many+0x2f/0x1a0 [ 2741.910214] ? ksys_write+0x1a9/0x260 [ 2741.911161] ? __ia32_sys_read+0xb0/0xb0 [ 2741.912139] __x64_sys_recvfrom+0xdd/0x1b0 [ 2741.913224] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2741.914503] do_syscall_64+0x33/0x40 [ 2741.915471] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2741.916685] RIP: 0033:0x7f23168fdb19 [ 2741.917578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.920047] RSP: 002b:00007f2313e31188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2741.920767] RAX: ffffffffffffffda RBX: 00007f2316a110e0 RCX: 00007f23168fdb19 [ 2741.921426] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2741.922100] RBP: 00007f2313e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.922815] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2741.924926] R13: 00007ffe5c5c887f R14: 00007f2313e31300 R15: 0000000000022000 10:58:01 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 45) 10:58:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 10:58:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe400, 0xcd08, 0x0, 0x0) 10:58:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 64) 10:58:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 49) 10:58:01 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @empty, 0xfffffbff}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2743.097715] FAULT_INJECTION: forcing a failure. [ 2743.097715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2743.100623] CPU: 1 PID: 12560 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2743.102149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.118789] Call Trace: 10:58:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2743.126508] dump_stack+0x107/0x167 [ 2743.127312] should_fail.cold+0x5/0xa [ 2743.127647] _copy_to_iter+0x264/0x12d0 [ 2743.128012] ? mark_lock+0xf5/0x2df0 [ 2743.128779] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2743.129227] ? __virt_addr_valid+0x170/0x5c0 [ 2743.129623] ? __check_object_size+0x319/0x440 [ 2743.130595] simple_copy_to_iter+0x4c/0x70 [ 2743.130974] __skb_datagram_iter+0x4f7/0x880 [ 2743.131383] ? zerocopy_sg_from_iter+0x110/0x110 [ 2743.131821] skb_copy_datagram_iter+0x88/0x190 [ 2743.132274] tcp_recvmsg+0x13b5/0x2930 [ 2743.132649] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.133076] ? sock_has_perm+0x1ea/0x280 [ 2743.133465] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2743.133939] ? lock_downgrade+0x6d0/0x6d0 [ 2743.134322] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2743.134817] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.135203] inet6_recvmsg+0x13b/0x6e0 [ 2743.135551] ? inet6_bind+0x120/0x120 [ 2743.135897] ? security_socket_recvmsg+0x95/0xc0 [ 2743.136317] ? inet6_bind+0x120/0x120 [ 2743.136647] sock_recvmsg+0xff/0x180 [ 2743.137015] __sys_recvfrom+0x1be/0x2f0 [ 2743.137366] ? __ia32_sys_send+0x100/0x100 [ 2743.137733] ? lock_downgrade+0x6d0/0x6d0 [ 2743.138131] ? wait_for_completion_io+0x270/0x270 [ 2743.138564] ? rcu_read_lock_any_held+0x75/0xa0 [ 2743.139007] ? vfs_write+0x354/0xa70 [ 2743.139350] ? fput_many+0x2f/0x1a0 [ 2743.148437] ? ksys_write+0x1a9/0x260 [ 2743.148772] ? __ia32_sys_read+0xb0/0xb0 [ 2743.149143] __x64_sys_recvfrom+0xdd/0x1b0 [ 2743.149523] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.149976] do_syscall_64+0x33/0x40 [ 2743.150315] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.150788] RIP: 0033:0x7fd4b1105b19 [ 2743.151108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.163453] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2743.164154] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2743.164793] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2743.165444] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.166089] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2743.166736] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2743.522299] FAULT_INJECTION: forcing a failure. [ 2743.522299] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.523553] CPU: 0 PID: 12556 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2743.524201] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.524979] Call Trace: [ 2743.525247] dump_stack+0x107/0x167 [ 2743.525592] should_fail.cold+0x5/0xa [ 2743.525951] ? ___slab_alloc+0x155/0x700 [ 2743.526325] ? create_object.isra.0+0x3a/0xa20 [ 2743.526781] should_failslab+0x5/0x20 [ 2743.527164] kmem_cache_alloc+0x5b/0x310 [ 2743.527577] create_object.isra.0+0x3a/0xa20 [ 2743.528005] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2743.528500] kmem_cache_alloc_node+0x169/0x330 [ 2743.528950] __alloc_skb+0x6d/0x5b0 [ 2743.529303] __tcp_send_ack.part.0+0x67/0x650 [ 2743.529727] tcp_send_ack+0x7d/0xa0 [ 2743.530092] tcp_cleanup_rbuf+0x468/0x5a0 [ 2743.530465] tcp_recvmsg+0xb85/0x2930 [ 2743.534919] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.535345] ? sock_has_perm+0x1ea/0x280 [ 2743.535746] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2743.536235] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.536637] inet6_recvmsg+0x13b/0x6e0 [ 2743.537072] ? inet6_bind+0x120/0x120 [ 2743.537435] ? security_socket_recvmsg+0x95/0xc0 [ 2743.537850] ? inet6_bind+0x120/0x120 [ 2743.538183] sock_recvmsg+0xff/0x180 [ 2743.538511] __sys_recvfrom+0x1be/0x2f0 [ 2743.538884] ? __ia32_sys_send+0x100/0x100 [ 2743.539281] ? lock_downgrade+0x6d0/0x6d0 [ 2743.539709] ? wait_for_completion_io+0x270/0x270 [ 2743.540183] ? rcu_read_lock_any_held+0x75/0xa0 [ 2743.540630] ? vfs_write+0x354/0xa70 [ 2743.540994] ? fput_many+0x2f/0x1a0 [ 2743.541344] ? ksys_write+0x1a9/0x260 [ 2743.541730] ? __ia32_sys_read+0xb0/0xb0 [ 2743.542133] __x64_sys_recvfrom+0xdd/0x1b0 [ 2743.542550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.543081] do_syscall_64+0x33/0x40 [ 2743.543456] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.543953] RIP: 0033:0x7f4d5c7edb19 [ 2743.544317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.546112] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2743.546867] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2743.547573] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2743.548269] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.548964] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2743.549652] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2743.570753] FAULT_INJECTION: forcing a failure. [ 2743.570753] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.575047] CPU: 1 PID: 12563 Comm: syz-executor.3 Not tainted 5.10.211 #1 [ 2743.575646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.576364] Call Trace: [ 2743.576607] dump_stack+0x107/0x167 [ 2743.576940] should_fail.cold+0x5/0xa [ 2743.577288] should_failslab+0x5/0x20 [ 2743.577628] __kmalloc_node_track_caller+0x74/0x3b0 [ 2743.578067] ? __tcp_send_ack.part.0+0x67/0x650 [ 2743.578487] __alloc_skb+0xb1/0x5b0 [ 2743.578836] __tcp_send_ack.part.0+0x67/0x650 [ 2743.579248] tcp_send_ack+0x7d/0xa0 [ 2743.579590] tcp_cleanup_rbuf+0x468/0x5a0 [ 2743.579993] tcp_recvmsg+0xb85/0x2930 [ 2743.580378] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.580784] ? sock_has_perm+0x1ea/0x280 [ 2743.581176] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.581569] inet6_recvmsg+0x13b/0x6e0 [ 2743.581935] ? inet6_bind+0x120/0x120 [ 2743.582294] ? security_socket_recvmsg+0x95/0xc0 [ 2743.586770] ? inet6_bind+0x120/0x120 [ 2743.587138] sock_recvmsg+0xff/0x180 [ 2743.587493] __sys_recvfrom+0x1be/0x2f0 [ 2743.587882] ? __ia32_sys_send+0x100/0x100 [ 2743.588315] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 2743.588714] ? clockevents_program_event+0x131/0x360 [ 2743.589183] ? tick_program_event+0xa8/0x140 [ 2743.589585] ? hrtimer_interrupt+0x771/0x9b0 [ 2743.590005] __x64_sys_recvfrom+0xdd/0x1b0 [ 2743.590396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.590883] do_syscall_64+0x33/0x40 [ 2743.591209] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.591680] RIP: 0033:0x7f23168fdb19 [ 2743.592069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.593733] RSP: 002b:00007f2313e52188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2743.594419] RAX: ffffffffffffffda RBX: 00007f2316a11020 RCX: 00007f23168fdb19 [ 2743.599129] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2743.599787] RBP: 00007f2313e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.600440] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2743.601068] R13: 00007ffe5c5c887f R14: 00007f2313e52300 R15: 0000000000022000 [ 2743.613340] FAULT_INJECTION: forcing a failure. [ 2743.613340] name failslab, interval 1, probability 0, space 0, times 0 [ 2743.614473] CPU: 0 PID: 12559 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2743.615143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2743.615906] Call Trace: [ 2743.616163] dump_stack+0x107/0x167 [ 2743.616513] should_fail.cold+0x5/0xa [ 2743.616891] ? lock_release+0x680/0x680 [ 2743.617286] ? skb_clone+0x14f/0x3d0 [ 2743.617653] should_failslab+0x5/0x20 [ 2743.618029] kmem_cache_alloc+0x5b/0x310 [ 2743.618429] skb_clone+0x14f/0x3d0 [ 2743.622807] dev_queue_xmit_nit+0x3a7/0xb00 [ 2743.623243] dev_hard_start_xmit+0xab/0x6f0 [ 2743.623675] __dev_queue_xmit+0x17ec/0x2710 [ 2743.624086] ? find_held_lock+0x2c/0x110 [ 2743.624467] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2743.624942] ? mark_held_locks+0x9e/0xe0 [ 2743.625358] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2743.625894] ip6_finish_output2+0x17b4/0x1fe0 [ 2743.626343] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2743.626884] ip6_output+0x3aa/0x7e0 [ 2743.627268] ip6_xmit+0x10a1/0x1c40 [ 2743.627646] ? ip6_append_data+0x330/0x330 [ 2743.628070] ? inet6_csk_xmit+0xc6/0x680 [ 2743.628468] ? lock_release+0x680/0x680 [ 2743.628839] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2743.629301] ? inet6_csk_route_req+0x850/0x850 [ 2743.629754] ? md5_transform+0x19/0xde0 [ 2743.630205] inet6_csk_xmit+0x315/0x680 [ 2743.630606] ? inet6_csk_update_pmtu+0x190/0x190 [ 2743.631121] ? __local_bh_enable_ip+0x9d/0x100 [ 2743.631562] ? csum_ipv6_magic+0x1e/0x70 [ 2743.631958] ? inet6_csk_update_pmtu+0x190/0x190 [ 2743.632429] __tcp_transmit_skb+0x18ef/0x35d0 [ 2743.632895] ? __tcp_select_window+0x900/0x900 [ 2743.633338] ? tcp_trim_head+0x470/0x470 [ 2743.633743] ? lock_acquire+0x197/0x470 [ 2743.634149] ? find_held_lock+0x2c/0x110 [ 2743.634562] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2743.635053] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2743.635490] ? tcp_push_one+0x100/0x100 [ 2743.635887] ? tcp_current_mss+0x1f8/0x370 [ 2743.636307] ? tcp_trim_head+0x470/0x470 [ 2743.636694] ? __mod_timer+0x7fb/0xd10 [ 2743.637099] tcp_retransmit_skb+0x28/0x240 [ 2743.637525] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2743.638088] tcp_xmit_retransmit_queue+0x57/0x70 [ 2743.638549] tcp_xmit_recovery+0x86/0x180 [ 2743.638982] tcp_ack+0x25d9/0x5690 [ 2743.639374] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2743.639865] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2743.640381] ? tcp_validate_incoming+0x431/0x16a0 [ 2743.640873] tcp_rcv_established+0x57e/0x1e30 [ 2743.641298] ? tcp_check_space+0x6c0/0x6c0 [ 2743.641714] tcp_v6_do_rcv+0x7b3/0x1520 [ 2743.642127] __release_sock+0x139/0x3b0 [ 2743.642535] release_sock+0x54/0x1b0 [ 2743.646944] sk_wait_data+0x1a7/0x4d0 [ 2743.647310] ? sock_set_mark+0x130/0x130 [ 2743.647698] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2743.648182] ? tcp_send_ack+0x7d/0xa0 [ 2743.648562] tcp_recvmsg+0x17b2/0x2930 [ 2743.648968] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.649391] ? sock_has_perm+0x1ea/0x280 [ 2743.649796] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2743.650301] ? tcp_splice_read+0x8c0/0x8c0 [ 2743.650705] inet6_recvmsg+0x13b/0x6e0 [ 2743.651118] ? inet6_bind+0x120/0x120 [ 2743.651479] ? security_socket_recvmsg+0x95/0xc0 [ 2743.651924] ? inet6_bind+0x120/0x120 [ 2743.652275] sock_recvmsg+0xff/0x180 [ 2743.652632] __sys_recvfrom+0x1be/0x2f0 [ 2743.653016] ? __ia32_sys_send+0x100/0x100 [ 2743.653412] ? lock_downgrade+0x6d0/0x6d0 [ 2743.653830] ? wait_for_completion_io+0x270/0x270 [ 2743.654287] ? rcu_read_lock_any_held+0x75/0xa0 [ 2743.654736] ? vfs_write+0x354/0xa70 [ 2743.655103] ? fput_many+0x2f/0x1a0 [ 2743.655455] ? ksys_write+0x1a9/0x260 [ 2743.655807] ? __ia32_sys_read+0xb0/0xb0 [ 2743.656181] __x64_sys_recvfrom+0xdd/0x1b0 [ 2743.656556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2743.657014] do_syscall_64+0x33/0x40 [ 2743.657363] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2743.657819] RIP: 0033:0x7f7abd046b19 [ 2743.658149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2743.659797] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2743.660483] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2743.661117] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2743.661727] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2743.662371] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2743.667060] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:58:03 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 46) 10:58:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x20002e00, 0xcd08, 0x0, 0x0) 10:58:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 65) 10:58:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) [ 2744.842122] FAULT_INJECTION: forcing a failure. [ 2744.842122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2744.843310] CPU: 1 PID: 12584 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2744.844922] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2744.845632] Call Trace: [ 2744.845880] dump_stack+0x107/0x167 [ 2744.846227] should_fail.cold+0x5/0xa [ 2744.846577] _copy_to_iter+0x264/0x12d0 [ 2744.846963] ? mark_lock+0xf5/0x2df0 [ 2744.847298] ? mark_lock+0xf5/0x2df0 [ 2744.847629] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2744.848064] ? __virt_addr_valid+0x170/0x5c0 [ 2744.848441] ? __check_object_size+0x319/0x440 [ 2744.848841] simple_copy_to_iter+0x4c/0x70 [ 2744.849219] __skb_datagram_iter+0x4f7/0x880 [ 2744.849644] ? zerocopy_sg_from_iter+0x110/0x110 [ 2744.850085] skb_copy_datagram_iter+0x88/0x190 [ 2744.850486] tcp_recvmsg+0x13b5/0x2930 [ 2744.850860] ? tcp_splice_read+0x8c0/0x8c0 [ 2744.851245] ? sock_has_perm+0x1ea/0x280 [ 2744.851603] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2744.852050] ? lock_downgrade+0x6d0/0x6d0 [ 2744.852419] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2744.852881] ? tcp_splice_read+0x8c0/0x8c0 [ 2744.853270] inet6_recvmsg+0x13b/0x6e0 [ 2744.853640] ? inet6_bind+0x120/0x120 [ 2744.854006] ? security_socket_recvmsg+0x95/0xc0 [ 2744.854484] ? inet6_bind+0x120/0x120 [ 2744.855545] sock_recvmsg+0xff/0x180 [ 2744.855927] __sys_recvfrom+0x1be/0x2f0 [ 2744.856344] ? __ia32_sys_send+0x100/0x100 [ 2744.856873] ? lock_downgrade+0x6d0/0x6d0 [ 2744.857339] ? wait_for_completion_io+0x270/0x270 [ 2744.857918] ? rcu_read_lock_any_held+0x75/0xa0 [ 2744.858397] ? vfs_write+0x354/0xa70 [ 2744.858920] ? fput_many+0x2f/0x1a0 [ 2744.859262] ? ksys_write+0x1a9/0x260 [ 2744.859818] ? __ia32_sys_read+0xb0/0xb0 [ 2744.860195] __x64_sys_recvfrom+0xdd/0x1b0 [ 2744.860661] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2744.861243] do_syscall_64+0x33/0x40 [ 2744.861643] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2744.862228] RIP: 0033:0x7fd4b1105b19 [ 2744.862577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2744.864917] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2744.865690] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2744.866540] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2744.883272] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2744.883918] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2744.884528] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2745.209005] FAULT_INJECTION: forcing a failure. [ 2745.209005] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.210151] CPU: 1 PID: 12579 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2745.210811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2745.211632] Call Trace: [ 2745.211899] dump_stack+0x107/0x167 [ 2745.212245] should_fail.cold+0x5/0xa [ 2745.212609] ? lock_chain_count+0x20/0x20 [ 2745.213010] ? create_object.isra.0+0x3a/0xa20 [ 2745.213443] should_failslab+0x5/0x20 [ 2745.213805] kmem_cache_alloc+0x5b/0x310 [ 2745.214186] ? lock_acquire+0x197/0x470 [ 2745.214564] create_object.isra.0+0x3a/0xa20 [ 2745.214989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2745.215427] kmem_cache_alloc+0x159/0x310 [ 2745.215772] skb_clone+0x14f/0x3d0 [ 2745.216092] dev_queue_xmit_nit+0x3a7/0xb00 [ 2745.216462] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2745.216946] dev_hard_start_xmit+0xab/0x6f0 [ 2745.217323] __dev_queue_xmit+0x17ec/0x2710 [ 2745.217721] ? mark_held_locks+0x9e/0xe0 [ 2745.218077] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2745.218480] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2745.218965] ? trace_hardirqs_on+0x5b/0x180 [ 2745.219350] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2745.219837] ip6_finish_output2+0x17b4/0x1fe0 [ 2745.220260] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2745.220701] ip6_output+0x3aa/0x7e0 [ 2745.221062] ip6_xmit+0x10a1/0x1c40 [ 2745.221406] ? ip6_append_data+0x330/0x330 [ 2745.221773] ? inet6_csk_xmit+0xc6/0x680 [ 2745.222168] ? lock_release+0x680/0x680 [ 2745.222522] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2745.222970] ? inet6_csk_route_req+0x850/0x850 [ 2745.223387] ? md5_transform+0x19/0xde0 [ 2745.223742] inet6_csk_xmit+0x315/0x680 [ 2745.224112] ? inet6_csk_update_pmtu+0x190/0x190 [ 2745.224532] ? __local_bh_enable_ip+0x9d/0x100 [ 2745.224940] ? csum_ipv6_magic+0x1e/0x70 [ 2745.225305] ? inet6_csk_update_pmtu+0x190/0x190 [ 2745.225720] __tcp_transmit_skb+0x18ef/0x35d0 [ 2745.226144] ? __tcp_select_window+0x900/0x900 [ 2745.226539] ? tcp_trim_head+0x470/0x470 [ 2745.226958] ? lock_acquire+0x197/0x470 [ 2745.227333] ? find_held_lock+0x2c/0x110 [ 2745.227695] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2745.228118] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2745.228497] ? tcp_push_one+0x100/0x100 [ 2745.228868] ? tcp_current_mss+0x1f8/0x370 [ 2745.229267] ? tcp_trim_head+0x470/0x470 [ 2745.229653] ? __mod_timer+0x7fb/0xd10 [ 2745.230034] tcp_retransmit_skb+0x28/0x240 [ 2745.230434] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2745.230985] tcp_xmit_retransmit_queue+0x57/0x70 [ 2745.231431] tcp_xmit_recovery+0x86/0x180 [ 2745.231848] tcp_ack+0x25d9/0x5690 [ 2745.232241] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2745.232709] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2745.233209] ? tcp_validate_incoming+0x431/0x16a0 [ 2745.233669] tcp_rcv_established+0x57e/0x1e30 [ 2745.234095] ? tcp_check_space+0x6c0/0x6c0 [ 2745.234503] tcp_v6_do_rcv+0x7b3/0x1520 [ 2745.235017] __release_sock+0x139/0x3b0 [ 2745.235401] release_sock+0x54/0x1b0 [ 2745.235753] sk_wait_data+0x1a7/0x4d0 [ 2745.236115] ? sock_set_mark+0x130/0x130 [ 2745.236502] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2745.236972] ? tcp_send_ack+0x7d/0xa0 [ 2745.237332] tcp_recvmsg+0x17b2/0x2930 [ 2745.237713] ? tcp_splice_read+0x8c0/0x8c0 [ 2745.238110] ? sock_has_perm+0x1ea/0x280 [ 2745.238498] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2745.239093] ? tcp_splice_read+0x8c0/0x8c0 [ 2745.239572] inet6_recvmsg+0x13b/0x6e0 [ 2745.240001] ? inet6_bind+0x120/0x120 [ 2745.240359] ? security_socket_recvmsg+0x95/0xc0 [ 2745.240794] ? inet6_bind+0x120/0x120 [ 2745.241147] sock_recvmsg+0xff/0x180 [ 2745.241495] __sys_recvfrom+0x1be/0x2f0 [ 2745.241867] ? __ia32_sys_send+0x100/0x100 [ 2745.242256] ? lock_downgrade+0x6d0/0x6d0 [ 2745.242666] ? wait_for_completion_io+0x270/0x270 [ 2745.243166] ? rcu_read_lock_any_held+0x75/0xa0 [ 2745.243598] ? vfs_write+0x354/0xa70 [ 2745.243974] ? fput_many+0x2f/0x1a0 [ 2745.244310] ? ksys_write+0x1a9/0x260 [ 2745.244661] ? __ia32_sys_read+0xb0/0xb0 [ 2745.245040] __x64_sys_recvfrom+0xdd/0x1b0 [ 2745.245430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2745.245903] do_syscall_64+0x33/0x40 [ 2745.246293] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2745.246773] RIP: 0033:0x7f7abd046b19 [ 2745.247147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2745.248774] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2745.249463] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2745.250105] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2745.250889] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2745.252365] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2745.253694] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2745.280358] FAULT_INJECTION: forcing a failure. [ 2745.280358] name failslab, interval 1, probability 0, space 0, times 0 [ 2745.281564] CPU: 1 PID: 12583 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2745.282198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2745.282981] Call Trace: [ 2745.283287] dump_stack+0x107/0x167 [ 2745.283634] should_fail.cold+0x5/0xa [ 2745.284028] should_failslab+0x5/0x20 [ 2745.284387] __kmalloc_node_track_caller+0x74/0x3b0 [ 2745.284846] ? __tcp_send_ack.part.0+0x67/0x650 [ 2745.285288] __alloc_skb+0xb1/0x5b0 [ 2745.285642] __tcp_send_ack.part.0+0x67/0x650 [ 2745.286059] tcp_send_ack+0x7d/0xa0 [ 2745.299009] tcp_cleanup_rbuf+0x468/0x5a0 [ 2745.299375] tcp_recvmsg+0xb85/0x2930 [ 2745.299719] ? tcp_splice_read+0x8c0/0x8c0 [ 2745.300099] ? sock_has_perm+0x1ea/0x280 [ 2745.300472] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2745.300943] ? tcp_splice_read+0x8c0/0x8c0 [ 2745.301326] inet6_recvmsg+0x13b/0x6e0 [ 2745.301675] ? inet6_bind+0x120/0x120 [ 2745.302009] ? security_socket_recvmsg+0x95/0xc0 [ 2745.302425] ? inet6_bind+0x120/0x120 [ 2745.302774] sock_recvmsg+0xff/0x180 [ 2745.303204] __sys_recvfrom+0x1be/0x2f0 [ 2745.303590] ? __ia32_sys_send+0x100/0x100 [ 2745.303979] ? lock_downgrade+0x6d0/0x6d0 [ 2745.304383] ? wait_for_completion_io+0x270/0x270 [ 2745.304834] ? rcu_read_lock_any_held+0x75/0xa0 [ 2745.305265] ? vfs_write+0x354/0xa70 [ 2745.305613] ? fput_many+0x2f/0x1a0 [ 2745.305951] ? ksys_write+0x1a9/0x260 [ 2745.306303] ? __ia32_sys_read+0xb0/0xb0 [ 2745.306681] __x64_sys_recvfrom+0xdd/0x1b0 [ 2745.311150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2745.311652] do_syscall_64+0x33/0x40 [ 2745.312011] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2745.312497] RIP: 0033:0x7f4d5c7edb19 [ 2745.312846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2745.314487] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2745.315283] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2745.315932] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2745.316601] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2745.317246] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2745.317896] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:58:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 50) 10:58:20 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:20 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) 10:58:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 66) 10:58:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:20 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 47) 10:58:20 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd02, 0x0, 0x0) 10:58:20 executing program 0: ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:20 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2760.664693] FAULT_INJECTION: forcing a failure. [ 2760.664693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2760.666035] CPU: 0 PID: 12605 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2760.671231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.672012] Call Trace: [ 2760.672277] dump_stack+0x107/0x167 [ 2760.672632] should_fail.cold+0x5/0xa [ 2760.673019] _copy_to_iter+0x264/0x12d0 [ 2760.673414] ? mark_lock+0xf5/0x2df0 [ 2760.673794] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2760.674327] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2760.674807] ? __virt_addr_valid+0x170/0x5c0 [ 2760.675253] ? __check_object_size+0x319/0x440 [ 2760.675732] simple_copy_to_iter+0x4c/0x70 [ 2760.676156] __skb_datagram_iter+0x4f7/0x880 [ 2760.676593] ? zerocopy_sg_from_iter+0x110/0x110 [ 2760.677068] skb_copy_datagram_iter+0x88/0x190 [ 2760.677521] tcp_recvmsg+0x13b5/0x2930 [ 2760.677924] ? tcp_splice_read+0x8c0/0x8c0 [ 2760.678350] ? sock_has_perm+0x1ea/0x280 [ 2760.678752] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2760.679258] ? lock_downgrade+0x6d0/0x6d0 [ 2760.679623] ? tcp_splice_read+0x8c0/0x8c0 [ 2760.680011] inet6_recvmsg+0x13b/0x6e0 [ 2760.680392] ? inet6_bind+0x120/0x120 [ 2760.680768] ? security_socket_recvmsg+0x95/0xc0 [ 2760.681232] ? inet6_bind+0x120/0x120 [ 2760.681594] sock_recvmsg+0xff/0x180 [ 2760.681917] __sys_recvfrom+0x1be/0x2f0 [ 2760.682267] ? __ia32_sys_send+0x100/0x100 [ 2760.682656] ? lock_downgrade+0x6d0/0x6d0 [ 2760.683104] ? wait_for_completion_io+0x270/0x270 [ 2760.683568] ? rcu_read_lock_any_held+0x75/0xa0 [ 2760.684014] ? vfs_write+0x354/0xa70 [ 2760.684343] ? fput_many+0x2f/0x1a0 [ 2760.684660] ? ksys_write+0x1a9/0x260 [ 2760.684992] ? __ia32_sys_read+0xb0/0xb0 [ 2760.685388] __x64_sys_recvfrom+0xdd/0x1b0 [ 2760.685811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2760.686313] do_syscall_64+0x33/0x40 [ 2760.686694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.687215] RIP: 0033:0x7fd4b1105b19 [ 2760.687544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.689207] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2760.689852] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2760.690452] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2760.691091] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.691763] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2760.692443] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2761.057574] FAULT_INJECTION: forcing a failure. [ 2761.057574] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.058820] CPU: 1 PID: 12602 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2761.069043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2761.069718] Call Trace: [ 2761.069951] dump_stack+0x107/0x167 [ 2761.070255] should_fail.cold+0x5/0xa [ 2761.070575] ? lock_release+0x680/0x680 [ 2761.070907] ? skb_clone+0x14f/0x3d0 [ 2761.087255] should_failslab+0x5/0x20 [ 2761.087606] kmem_cache_alloc+0x5b/0x310 [ 2761.087975] skb_clone+0x14f/0x3d0 [ 2761.088278] dev_queue_xmit_nit+0x3a7/0xb00 [ 2761.088646] dev_hard_start_xmit+0xab/0x6f0 [ 2761.089006] __dev_queue_xmit+0x17ec/0x2710 [ 2761.089368] ? find_held_lock+0x2c/0x110 [ 2761.089703] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2761.090084] ? mark_held_locks+0x9e/0xe0 [ 2761.090425] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2761.090867] ip6_finish_output2+0x17b4/0x1fe0 [ 2761.091306] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2761.091768] ip6_output+0x3aa/0x7e0 [ 2761.092088] ip6_xmit+0x10a1/0x1c40 [ 2761.092408] ? ip6_append_data+0x330/0x330 [ 2761.092770] ? inet6_csk_xmit+0xc6/0x680 [ 2761.093121] ? lock_release+0x680/0x680 [ 2761.093472] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2761.093910] ? inet6_csk_route_req+0x850/0x850 [ 2761.094318] ? md5_transform+0x19/0xde0 [ 2761.094691] inet6_csk_xmit+0x315/0x680 [ 2761.095093] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.095542] ? __local_bh_enable_ip+0x9d/0x100 [ 2761.095940] ? csum_ipv6_magic+0x1e/0x70 [ 2761.096306] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.096729] __tcp_transmit_skb+0x18ef/0x35d0 [ 2761.097135] ? __tcp_select_window+0x900/0x900 [ 2761.097539] ? tcp_trim_head+0x470/0x470 [ 2761.097894] ? slab_free_freelist_hook+0xa9/0x180 [ 2761.098306] ? kmem_cache_free+0xa7/0x2d0 [ 2761.098687] ? lock_acquire+0x197/0x470 [ 2761.099070] ? find_held_lock+0x2c/0x110 [ 2761.099453] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2761.099871] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2761.100264] ? tcp_push_one+0x100/0x100 [ 2761.100641] ? tcp_current_mss+0x1f8/0x370 [ 2761.101037] ? tcp_trim_head+0x470/0x470 [ 2761.101422] ? tcp_rack_mark_lost+0xa9/0x270 [ 2761.101821] ? __mod_timer+0x7fb/0xd10 [ 2761.102193] tcp_retransmit_skb+0x28/0x240 [ 2761.102581] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2761.124321] tcp_xmit_retransmit_queue+0x57/0x70 [ 2761.124715] tcp_xmit_recovery+0x86/0x180 [ 2761.125059] tcp_ack+0x25d9/0x5690 [ 2761.125386] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2761.125799] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2761.126242] ? tcp_validate_incoming+0x431/0x16a0 [ 2761.126651] tcp_rcv_established+0x57e/0x1e30 [ 2761.127064] ? tcp_check_space+0x6c0/0x6c0 [ 2761.127473] tcp_v6_do_rcv+0x7b3/0x1520 [ 2761.127811] __release_sock+0x139/0x3b0 [ 2761.128155] release_sock+0x54/0x1b0 [ 2761.128489] sk_wait_data+0x1a7/0x4d0 [ 2761.128850] ? sock_set_mark+0x130/0x130 [ 2761.129219] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2761.129678] ? tcp_send_ack+0x7d/0xa0 [ 2761.130040] tcp_recvmsg+0x17b2/0x2930 [ 2761.130419] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.130801] ? sock_has_perm+0x1ea/0x280 [ 2761.131209] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.131692] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.132067] inet6_recvmsg+0x13b/0x6e0 [ 2761.132397] ? inet6_bind+0x120/0x120 [ 2761.132724] ? security_socket_recvmsg+0x95/0xc0 [ 2761.133130] ? inet6_bind+0x120/0x120 [ 2761.133453] sock_recvmsg+0xff/0x180 [ 2761.133775] __sys_recvfrom+0x1be/0x2f0 [ 2761.134119] ? __ia32_sys_send+0x100/0x100 [ 2761.134471] ? lock_downgrade+0x6d0/0x6d0 [ 2761.134843] ? wait_for_completion_io+0x270/0x270 [ 2761.135304] ? rcu_read_lock_any_held+0x75/0xa0 [ 2761.135738] ? vfs_write+0x354/0xa70 [ 2761.136050] ? fput_many+0x2f/0x1a0 [ 2761.136352] ? ksys_write+0x1a9/0x260 [ 2761.136665] ? __ia32_sys_read+0xb0/0xb0 [ 2761.137008] __x64_sys_recvfrom+0xdd/0x1b0 [ 2761.137360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2761.137785] do_syscall_64+0x33/0x40 [ 2761.138098] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2761.138526] RIP: 0033:0x7f4d5c7edb19 [ 2761.138845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.145094] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2761.146196] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2761.146811] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2761.147502] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.148563] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2761.149186] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2761.163257] FAULT_INJECTION: forcing a failure. [ 2761.163257] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.164413] CPU: 0 PID: 12610 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2761.165063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2761.165848] Call Trace: [ 2761.166115] dump_stack+0x107/0x167 [ 2761.166460] should_fail.cold+0x5/0xa [ 2761.166836] ? create_object.isra.0+0x3a/0xa20 [ 2761.167298] should_failslab+0x5/0x20 [ 2761.167673] kmem_cache_alloc+0x5b/0x310 [ 2761.168071] ? lock_acquire+0x197/0x470 [ 2761.168477] create_object.isra.0+0x3a/0xa20 [ 2761.168929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2761.169436] kmem_cache_alloc+0x159/0x310 [ 2761.169867] skb_clone+0x14f/0x3d0 [ 2761.170219] dev_queue_xmit_nit+0x3a7/0xb00 [ 2761.170648] dev_hard_start_xmit+0xab/0x6f0 [ 2761.171085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.171578] __dev_queue_xmit+0x17ec/0x2710 [ 2761.171991] ? find_held_lock+0x2c/0x110 [ 2761.172366] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2761.172804] ? mark_held_locks+0x9e/0xe0 [ 2761.173194] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2761.173689] ip6_finish_output2+0x17b4/0x1fe0 [ 2761.174112] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2761.174591] ip6_output+0x3aa/0x7e0 [ 2761.174998] ip6_xmit+0x10a1/0x1c40 [ 2761.175342] ? ip6_append_data+0x330/0x330 [ 2761.175731] ? inet6_csk_xmit+0xc6/0x680 [ 2761.176140] ? lock_release+0x680/0x680 [ 2761.176525] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2761.177010] ? inet6_csk_route_req+0x850/0x850 [ 2761.177459] ? md5_transform+0x19/0xde0 [ 2761.177856] inet6_csk_xmit+0x315/0x680 [ 2761.178256] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.180594] FAULT_INJECTION: forcing a failure. [ 2761.180594] name failslab, interval 1, probability 0, space 0, times 0 [ 2761.183284] ? __local_bh_enable_ip+0x9d/0x100 [ 2761.183301] ? csum_ipv6_magic+0x1e/0x70 [ 2761.183320] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.183343] __tcp_transmit_skb+0x18ef/0x35d0 [ 2761.183373] ? __tcp_select_window+0x900/0x900 [ 2761.183390] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2761.183403] ? __tcp_send_ack.part.0+0x67/0x650 [ 2761.183417] ? memset+0x20/0x50 [ 2761.183430] ? __alloc_skb+0x388/0x5b0 [ 2761.183451] __tcp_send_ack.part.0+0x3e0/0x650 [ 2761.183468] tcp_send_ack+0x7d/0xa0 [ 2761.183482] __tcp_ack_snd_check+0x156/0x9f0 [ 2761.183503] tcp_rcv_established+0x955/0x1e30 [ 2761.183524] ? tcp_check_space+0x6c0/0x6c0 [ 2761.183551] tcp_v6_do_rcv+0x7b3/0x1520 [ 2761.183571] __release_sock+0x139/0x3b0 [ 2761.183595] release_sock+0x54/0x1b0 [ 2761.183608] sk_wait_data+0x1a7/0x4d0 [ 2761.183627] ? sock_set_mark+0x130/0x130 [ 2761.183644] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2761.183661] ? kfree_skbmem+0xe0/0x1b0 [ 2761.183686] tcp_recvmsg+0x17b2/0x2930 [ 2761.193351] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.193762] ? sock_has_perm+0x1ea/0x280 [ 2761.194174] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.194664] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.195106] inet6_recvmsg+0x13b/0x6e0 [ 2761.195482] ? inet6_bind+0x120/0x120 [ 2761.195857] ? security_socket_recvmsg+0x95/0xc0 [ 2761.196320] ? inet6_bind+0x120/0x120 [ 2761.196690] sock_recvmsg+0xff/0x180 [ 2761.197057] __sys_recvfrom+0x1be/0x2f0 [ 2761.197443] ? __ia32_sys_send+0x100/0x100 [ 2761.197854] ? lock_downgrade+0x6d0/0x6d0 [ 2761.198292] ? wait_for_completion_io+0x270/0x270 [ 2761.198762] ? rcu_read_lock_any_held+0x75/0xa0 [ 2761.199377] ? vfs_write+0x354/0xa70 [ 2761.199725] ? fput_many+0x2f/0x1a0 [ 2761.200085] ? ksys_write+0x1a9/0x260 [ 2761.200442] ? __ia32_sys_read+0xb0/0xb0 [ 2761.200837] __x64_sys_recvfrom+0xdd/0x1b0 [ 2761.201253] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2761.201746] do_syscall_64+0x33/0x40 [ 2761.202098] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2761.202558] RIP: 0033:0x7f7abd046b19 [ 2761.202916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.204636] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2761.205367] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2761.206048] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2761.206723] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.211499] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2761.212164] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2761.212878] CPU: 1 PID: 12607 Comm: syz-executor.3 Not tainted 5.10.211 #1 [ 2761.213480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2761.214137] Call Trace: [ 2761.214371] dump_stack+0x107/0x167 [ 2761.214672] should_fail.cold+0x5/0xa [ 2761.215025] ? lock_release+0x680/0x680 [ 2761.215371] ? skb_clone+0x14f/0x3d0 [ 2761.215689] should_failslab+0x5/0x20 [ 2761.216009] kmem_cache_alloc+0x5b/0x310 [ 2761.216351] skb_clone+0x14f/0x3d0 [ 2761.216668] dev_queue_xmit_nit+0x3a7/0xb00 [ 2761.217062] dev_hard_start_xmit+0xab/0x6f0 [ 2761.217429] __dev_queue_xmit+0x17ec/0x2710 [ 2761.217795] ? find_held_lock+0x2c/0x110 [ 2761.218143] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2761.218539] ? mark_held_locks+0x9e/0xe0 [ 2761.218902] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2761.219385] ip6_finish_output2+0x17b4/0x1fe0 [ 2761.219765] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2761.220179] ip6_output+0x3aa/0x7e0 [ 2761.220498] ip6_xmit+0x10a1/0x1c40 [ 2761.220836] ? ip6_append_data+0x330/0x330 [ 2761.221211] ? inet6_csk_xmit+0xc6/0x680 [ 2761.221553] ? lock_release+0x680/0x680 [ 2761.221882] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2761.222290] ? inet6_csk_route_req+0x850/0x850 [ 2761.222666] ? md5_transform+0x19/0xde0 [ 2761.223020] inet6_csk_xmit+0x315/0x680 [ 2761.223383] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.223783] ? __local_bh_enable_ip+0x9d/0x100 [ 2761.224169] ? csum_ipv6_magic+0x1e/0x70 [ 2761.224506] ? inet6_csk_update_pmtu+0x190/0x190 [ 2761.224904] __tcp_transmit_skb+0x18ef/0x35d0 [ 2761.225285] ? __tcp_select_window+0x900/0x900 [ 2761.225660] ? tcp_trim_head+0x470/0x470 [ 2761.226004] ? lock_acquire+0x197/0x470 [ 2761.226353] ? find_held_lock+0x2c/0x110 [ 2761.226700] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2761.227109] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2761.227471] ? tcp_push_one+0x100/0x100 [ 2761.227808] ? tcp_current_mss+0x1f8/0x370 [ 2761.228182] ? tcp_trim_head+0x470/0x470 [ 2761.228538] ? __mod_timer+0x7fb/0xd10 [ 2761.228869] tcp_retransmit_skb+0x28/0x240 [ 2761.229228] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2761.229693] tcp_xmit_retransmit_queue+0x57/0x70 [ 2761.230098] tcp_xmit_recovery+0x86/0x180 [ 2761.230476] tcp_ack+0x25d9/0x5690 [ 2761.230801] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2761.231258] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2761.231711] ? tcp_validate_incoming+0x431/0x16a0 [ 2761.232164] tcp_rcv_established+0x57e/0x1e30 [ 2761.232572] ? tcp_check_space+0x6c0/0x6c0 [ 2761.232951] tcp_v6_do_rcv+0x7b3/0x1520 [ 2761.233312] __release_sock+0x139/0x3b0 [ 2761.233680] release_sock+0x54/0x1b0 [ 2761.234024] sk_wait_data+0x1a7/0x4d0 [ 2761.234356] ? sock_set_mark+0x130/0x130 [ 2761.234704] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2761.235157] ? tcp_send_ack+0x7d/0xa0 [ 2761.235492] tcp_recvmsg+0x17b2/0x2930 [ 2761.235847] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.236209] ? sock_has_perm+0x1ea/0x280 [ 2761.236560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2761.237009] ? tcp_splice_read+0x8c0/0x8c0 [ 2761.237391] inet6_recvmsg+0x13b/0x6e0 [ 2761.237732] ? inet6_bind+0x120/0x120 [ 2761.238077] ? security_socket_recvmsg+0x95/0xc0 [ 2761.238473] ? inet6_bind+0x120/0x120 [ 2761.238801] sock_recvmsg+0xff/0x180 [ 2761.239182] __sys_recvfrom+0x1be/0x2f0 [ 2761.239547] ? __ia32_sys_send+0x100/0x100 [ 2761.239976] ? lock_downgrade+0x6d0/0x6d0 [ 2761.240433] ? wait_for_completion_io+0x270/0x270 [ 2761.240888] ? rcu_read_lock_any_held+0x75/0xa0 [ 2761.241321] ? vfs_write+0x354/0xa70 [ 2761.241712] ? fput_many+0x2f/0x1a0 [ 2761.242106] ? ksys_write+0x1a9/0x260 [ 2761.242503] ? __ia32_sys_read+0xb0/0xb0 [ 2761.242909] __x64_sys_recvfrom+0xdd/0x1b0 [ 2761.243336] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2761.243835] do_syscall_64+0x33/0x40 [ 2761.244197] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2761.244704] RIP: 0033:0x7f23168fdb19 [ 2761.245077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2761.246834] RSP: 002b:00007f2313e52188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2761.247582] RAX: ffffffffffffffda RBX: 00007f2316a11020 RCX: 00007f23168fdb19 [ 2761.248317] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2761.249064] RBP: 00007f2313e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2761.249800] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2761.250533] R13: 00007ffe5c5c887f R14: 00007f2313e52300 R15: 0000000000022000 10:58:21 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 67) 10:58:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) r1 = syz_io_uring_complete(0x0) connect$inet6(r1, &(0x7f0000000840)={0xa, 0x4e21, 0x18000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xfffb, @loopback, 0x1}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e2661663940a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b71300"}, 0xd8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) openat(r2, &(0x7f0000000180)='./file0\x00', 0x102, 0x140) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000040)=[r3], 0x1) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r4, &(0x7f0000000680)={&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private1, 0x5}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="49819149b53e34e95712055029f5fd2e5442d4851f9843dfaf4331f8be870ab68f516101efc5483558a9b3838ba366d9e20e50", 0x33}, {&(0x7f0000000280)="38b2d7d282b79e8e769b89ed499430bdaf5eac7fe68354592a1ba86d7226967f1da696d82c3b02c1374bf093313cd4f19d3841af7d1558bc1a50db3e23e276e87246d5412a28", 0x46}, {&(0x7f0000000440)="e7e6161895b10c40f755a82ce7c3911061a65284a43d18a42faa141354bb932c1799b6e9389d414feb79a4ad55176e01426f22e88a77362d37ad3ab1a987901a1f818096b29ee4ba352eb10c4bb5eae564ae5767a33833e2c88286e247b0864260b1f73727933abc56940914352015d5d65f4552e0c06af0b026451904e71502f66985e86886223d9cb53af6dde51ee28bc75611ec7c3dbeb682249149fe35df33b4a97985aec4ec2239646280614e97f9aa10965840c73824c7002ae4114aebfada8a5dee0dbdb2ee98f697c8b74db6d5dae9213ed7e92f9c", 0xd9}, {&(0x7f0000000580)="00dc410e1fdd0a01aa14a43a4807bfcb", 0x10}, {&(0x7f00000005c0)="ee03e340dea58862ac4598ea77c60eb89ce0919491fb70110c7a1e344cbe281b47ee380dfdb1794cb06f267dd9e25ff8533255ac2b26491d07a60bb3112e13f7ecaa7d52641d3c12145f3a88284937acf6c1f0f2135b546fe09e0a54b3e66cdc822dfdaaf68af5455a6e38e58a5d839e7f7f7c2a13f4b382855953e2f03ad90f8663c3a503c507a27648b22ddd52d668e33e", 0x92}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="700000000000000029000000040000002b0a000000000000c910fc0000000000000000003f80000800000000000000070000000000000081cb000000000000c30100000000000000000000000000000100000000000000050293e2001400000000000000290000003e0000000900"/132], 0x88}, 0x4040000) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:21 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 51) 10:58:21 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) [ 2762.409004] FAULT_INJECTION: forcing a failure. [ 2762.409004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2762.411575] CPU: 1 PID: 12633 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2762.412207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.412941] Call Trace: [ 2762.413192] dump_stack+0x107/0x167 [ 2762.413531] should_fail.cold+0x5/0xa [ 2762.413890] _copy_to_iter+0x264/0x12d0 [ 2762.414271] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2762.414723] ? __virt_addr_valid+0x170/0x5c0 [ 2762.415591] ? __check_object_size+0x319/0x440 [ 2762.416693] simple_copy_to_iter+0x4c/0x70 [ 2762.417714] __skb_datagram_iter+0x4f7/0x880 [ 2762.418765] ? zerocopy_sg_from_iter+0x110/0x110 [ 2762.419930] skb_copy_datagram_iter+0x88/0x190 [ 2762.421021] tcp_recvmsg+0x13b5/0x2930 [ 2762.421976] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.423000] ? sock_has_perm+0x1ea/0x280 [ 2762.427782] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2762.429000] ? lock_downgrade+0x6d0/0x6d0 [ 2762.429773] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2762.430748] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.431713] inet6_recvmsg+0x13b/0x6e0 [ 2762.432439] ? inet6_bind+0x120/0x120 [ 2762.433148] ? security_socket_recvmsg+0x95/0xc0 [ 2762.434023] ? inet6_bind+0x120/0x120 [ 2762.434728] sock_recvmsg+0xff/0x180 [ 2762.435217] __sys_recvfrom+0x1be/0x2f0 [ 2762.435584] ? __ia32_sys_send+0x100/0x100 [ 2762.435969] ? lock_downgrade+0x6d0/0x6d0 [ 2762.436373] ? wait_for_completion_io+0x270/0x270 [ 2762.436807] ? rcu_read_lock_any_held+0x75/0xa0 [ 2762.437222] ? vfs_write+0x354/0xa70 [ 2762.437559] ? fput_many+0x2f/0x1a0 [ 2762.437897] ? ksys_write+0x1a9/0x260 [ 2762.438228] ? __ia32_sys_read+0xb0/0xb0 [ 2762.438598] __x64_sys_recvfrom+0xdd/0x1b0 [ 2762.439000] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2762.439477] do_syscall_64+0x33/0x40 [ 2762.439822] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2762.440349] RIP: 0033:0x7fd4b1105b19 [ 2762.440696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.442338] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2762.443174] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2762.443815] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2762.444460] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.445101] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2762.445738] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2762.706016] FAULT_INJECTION: forcing a failure. [ 2762.706016] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.708451] CPU: 1 PID: 12627 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2762.709677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.710431] Call Trace: [ 2762.710658] dump_stack+0x107/0x167 [ 2762.710983] should_fail.cold+0x5/0xa [ 2762.711309] ? lock_release+0x680/0x680 [ 2762.711664] ? skb_clone+0x14f/0x3d0 [ 2762.711980] should_failslab+0x5/0x20 [ 2762.712296] kmem_cache_alloc+0x5b/0x310 [ 2762.712635] skb_clone+0x14f/0x3d0 [ 2762.712968] dev_queue_xmit_nit+0x3a7/0xb00 [ 2762.713375] dev_hard_start_xmit+0xab/0x6f0 [ 2762.713755] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2762.714187] __dev_queue_xmit+0x17ec/0x2710 [ 2762.714551] ? find_held_lock+0x2c/0x110 [ 2762.714891] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2762.715291] ? mark_held_locks+0x9e/0xe0 [ 2762.715635] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2762.716077] ip6_finish_output2+0x17b4/0x1fe0 [ 2762.716499] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2762.716967] ip6_output+0x3aa/0x7e0 [ 2762.717300] ip6_xmit+0x10a1/0x1c40 [ 2762.717618] ? ip6_append_data+0x330/0x330 [ 2762.717968] ? inet6_csk_xmit+0xc6/0x680 [ 2762.718307] ? lock_release+0x680/0x680 [ 2762.718636] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2762.719050] ? inet6_csk_route_req+0x850/0x850 [ 2762.719437] ? md5_transform+0x19/0xde0 [ 2762.719782] inet6_csk_xmit+0x315/0x680 [ 2762.720139] ? inet6_csk_update_pmtu+0x190/0x190 [ 2762.720536] ? __local_bh_enable_ip+0x9d/0x100 [ 2762.720913] ? csum_ipv6_magic+0x1e/0x70 [ 2762.721250] ? inet6_csk_update_pmtu+0x190/0x190 [ 2762.721643] __tcp_transmit_skb+0x18ef/0x35d0 [ 2762.722059] ? __tcp_select_window+0x900/0x900 [ 2762.722470] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2762.722896] ? __tcp_send_ack.part.0+0x67/0x650 [ 2762.723383] ? memset+0x20/0x50 [ 2762.723656] ? __alloc_skb+0x388/0x5b0 [ 2762.723983] __tcp_send_ack.part.0+0x3e0/0x650 [ 2762.724358] tcp_send_ack+0x7d/0xa0 [ 2762.724654] tcp_cleanup_rbuf+0x468/0x5a0 [ 2762.724989] tcp_recvmsg+0xb85/0x2930 [ 2762.725316] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.725665] ? sock_has_perm+0x1ea/0x280 [ 2762.726014] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2762.726465] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.726807] inet6_recvmsg+0x13b/0x6e0 [ 2762.727166] ? inet6_bind+0x120/0x120 [ 2762.727515] ? security_socket_recvmsg+0x95/0xc0 [ 2762.727934] ? inet6_bind+0x120/0x120 [ 2762.728275] sock_recvmsg+0xff/0x180 [ 2762.728617] __sys_recvfrom+0x1be/0x2f0 [ 2762.728982] ? __ia32_sys_send+0x100/0x100 [ 2762.729367] ? lock_downgrade+0x6d0/0x6d0 [ 2762.729774] ? wait_for_completion_io+0x270/0x270 [ 2762.730222] ? rcu_read_lock_any_held+0x75/0xa0 [ 2762.730647] ? vfs_write+0x354/0xa70 [ 2762.731018] ? fput_many+0x2f/0x1a0 [ 2762.731340] ? ksys_write+0x1a9/0x260 [ 2762.731688] ? __ia32_sys_read+0xb0/0xb0 [ 2762.732047] __x64_sys_recvfrom+0xdd/0x1b0 [ 2762.732418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2762.732859] do_syscall_64+0x33/0x40 [ 2762.733200] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2762.733665] RIP: 0033:0x7f4d5c7edb19 [ 2762.734011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.735643] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2762.736305] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2762.736926] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2762.737551] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.738184] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2762.738827] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2762.827121] FAULT_INJECTION: forcing a failure. [ 2762.827121] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.828426] CPU: 0 PID: 12635 Comm: syz-executor.3 Not tainted 5.10.211 #1 [ 2762.829125] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.829954] Call Trace: [ 2762.830236] dump_stack+0x107/0x167 [ 2762.830610] should_fail.cold+0x5/0xa [ 2762.831034] ? __alloc_skb+0x6d/0x5b0 [ 2762.831399] should_failslab+0x5/0x20 [ 2762.831755] kmem_cache_alloc_node+0x55/0x330 [ 2762.832181] __alloc_skb+0x6d/0x5b0 [ 2762.832521] ? ktime_get+0x158/0x1f0 [ 2762.832874] __tcp_send_ack.part.0+0x67/0x650 [ 2762.833292] tcp_send_ack+0x7d/0xa0 [ 2762.833629] tcp_cleanup_rbuf+0x468/0x5a0 [ 2762.834010] tcp_recvmsg+0xb85/0x2930 [ 2762.834382] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.834782] ? sock_has_perm+0x1ea/0x280 [ 2762.835189] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2762.835669] ? tcp_splice_read+0x8c0/0x8c0 [ 2762.836061] inet6_recvmsg+0x13b/0x6e0 [ 2762.836417] ? inet6_bind+0x120/0x120 [ 2762.836772] ? security_socket_recvmsg+0x95/0xc0 [ 2762.837206] ? inet6_bind+0x120/0x120 [ 2762.837554] sock_recvmsg+0xff/0x180 [ 2762.837898] __sys_recvfrom+0x1be/0x2f0 [ 2762.838265] ? __ia32_sys_send+0x100/0x100 [ 2762.838649] ? lock_downgrade+0x6d0/0x6d0 [ 2762.839071] ? wait_for_completion_io+0x270/0x270 [ 2762.840224] ? rcu_read_lock_any_held+0x75/0xa0 [ 2762.841262] ? vfs_write+0x354/0xa70 [ 2762.842092] ? fput_many+0x2f/0x1a0 [ 2762.842872] ? ksys_write+0x1a9/0x260 [ 2762.843722] ? __ia32_sys_read+0xb0/0xb0 [ 2762.844621] __x64_sys_recvfrom+0xdd/0x1b0 [ 2762.845577] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2762.846720] do_syscall_64+0x33/0x40 [ 2762.851233] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2762.851697] RIP: 0033:0x7f23168fdb19 [ 2762.852040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.853653] RSP: 002b:00007f2313e52188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2762.854336] RAX: ffffffffffffffda RBX: 00007f2316a11020 RCX: 00007f23168fdb19 [ 2762.855090] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2762.855737] RBP: 00007f2313e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.856377] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2762.857016] R13: 00007ffe5c5c887f R14: 00007f2313e52300 R15: 0000000000022000 10:58:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd03, 0x0, 0x0) 10:58:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 52) 10:58:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 10:58:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 68) 10:58:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 48) 10:58:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_io_uring_setup(0x604, &(0x7f0000000140)={0x0, 0x5495, 0x1, 0x1, 0x34a}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x32fc, &(0x7f0000000280)={0x0, 0xfd95, 0x4, 0x2, 0x2c2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) r6 = openat$incfs(r3, &(0x7f0000000580)='.pending_reads\x00', 0x80002, 0x100) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x2d0}, 0x1, {0x0, r7}}, 0xffffffd8) 10:58:37 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2778.010528] FAULT_INJECTION: forcing a failure. [ 2778.010528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2778.012617] CPU: 0 PID: 12655 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2778.014206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2778.016090] Call Trace: [ 2778.016672] dump_stack+0x107/0x167 [ 2778.017471] should_fail.cold+0x5/0xa [ 2778.018291] _copy_to_iter+0x264/0x12d0 [ 2778.019169] ? mark_lock+0xf5/0x2df0 [ 2778.020096] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2778.021262] ? __virt_addr_valid+0x170/0x5c0 [ 2778.022220] ? __check_object_size+0x319/0x440 [ 2778.023271] simple_copy_to_iter+0x4c/0x70 [ 2778.024237] __skb_datagram_iter+0x4f7/0x880 [ 2778.025353] ? zerocopy_sg_from_iter+0x110/0x110 [ 2778.026540] skb_copy_datagram_iter+0x88/0x190 [ 2778.027626] tcp_recvmsg+0x13b5/0x2930 [ 2778.028470] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.029377] ? sock_has_perm+0x1ea/0x280 [ 2778.030237] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2778.031434] ? lock_downgrade+0x6d0/0x6d0 [ 2778.039307] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.040456] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.041356] inet6_recvmsg+0x13b/0x6e0 [ 2778.042191] ? inet6_bind+0x120/0x120 [ 2778.043010] ? security_socket_recvmsg+0x95/0xc0 [ 2778.044032] ? inet6_bind+0x120/0x120 [ 2778.044845] sock_recvmsg+0xff/0x180 [ 2778.045670] __sys_recvfrom+0x1be/0x2f0 [ 2778.046602] ? __ia32_sys_send+0x100/0x100 [ 2778.047633] ? lock_downgrade+0x6d0/0x6d0 [ 2778.048663] ? wait_for_completion_io+0x270/0x270 [ 2778.049778] ? rcu_read_lock_any_held+0x75/0xa0 [ 2778.050888] ? vfs_write+0x354/0xa70 [ 2778.051753] ? fput_many+0x2f/0x1a0 [ 2778.052579] ? ksys_write+0x1a9/0x260 [ 2778.053479] ? __ia32_sys_read+0xb0/0xb0 [ 2778.054446] __x64_sys_recvfrom+0xdd/0x1b0 [ 2778.059322] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2778.060569] do_syscall_64+0x33/0x40 [ 2778.061469] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2778.062694] RIP: 0033:0x7fd4b1105b19 [ 2778.063605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2778.067973] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2778.069706] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2778.071276] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2778.072817] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.074458] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2778.076084] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 10:58:37 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2778.462531] FAULT_INJECTION: forcing a failure. [ 2778.462531] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.463691] CPU: 1 PID: 12658 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2778.464290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2778.465001] Call Trace: [ 2778.465238] dump_stack+0x107/0x167 [ 2778.465551] should_fail.cold+0x5/0xa [ 2778.465880] ? create_object.isra.0+0x3a/0xa20 [ 2778.466271] should_failslab+0x5/0x20 [ 2778.466600] kmem_cache_alloc+0x5b/0x310 [ 2778.466961] ? lock_acquire+0x197/0x470 [ 2778.467334] create_object.isra.0+0x3a/0xa20 [ 2778.467697] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2778.468142] kmem_cache_alloc+0x159/0x310 [ 2778.468532] skb_clone+0x14f/0x3d0 [ 2778.468868] dev_queue_xmit_nit+0x3a7/0xb00 [ 2778.469269] dev_hard_start_xmit+0xab/0x6f0 [ 2778.469662] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.470146] __dev_queue_xmit+0x17ec/0x2710 [ 2778.470551] ? find_held_lock+0x2c/0x110 [ 2778.470915] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2778.471365] ? mark_held_locks+0x9e/0xe0 [ 2778.471751] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2778.472237] ip6_finish_output2+0x17b4/0x1fe0 [ 2778.472656] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2778.473092] ip6_output+0x3aa/0x7e0 [ 2778.473420] ip6_xmit+0x10a1/0x1c40 [ 2778.473761] ? ip6_append_data+0x330/0x330 [ 2778.474134] ? inet6_csk_xmit+0xc6/0x680 [ 2778.474497] ? lock_release+0x680/0x680 [ 2778.474847] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2778.475295] ? inet6_csk_route_req+0x850/0x850 [ 2778.475699] ? md5_transform+0x19/0xde0 [ 2778.476061] inet6_csk_xmit+0x315/0x680 [ 2778.476415] ? inet6_csk_update_pmtu+0x190/0x190 [ 2778.476838] ? __local_bh_enable_ip+0x9d/0x100 [ 2778.477241] ? csum_ipv6_magic+0x1e/0x70 [ 2778.477605] ? inet6_csk_update_pmtu+0x190/0x190 [ 2778.478028] __tcp_transmit_skb+0x18ef/0x35d0 [ 2778.478438] ? __tcp_select_window+0x900/0x900 [ 2778.478840] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2778.479318] ? __tcp_send_ack.part.0+0x67/0x650 [ 2778.479759] ? memset+0x20/0x50 [ 2778.480064] ? __alloc_skb+0x388/0x5b0 [ 2778.480433] __tcp_send_ack.part.0+0x3e0/0x650 [ 2778.480864] tcp_send_ack+0x7d/0xa0 [ 2778.481206] tcp_cleanup_rbuf+0x468/0x5a0 [ 2778.481594] tcp_recvmsg+0xb85/0x2930 [ 2778.481974] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.482379] ? sock_has_perm+0x1ea/0x280 [ 2778.482764] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.483256] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.484229] inet6_recvmsg+0x13b/0x6e0 [ 2778.484905] ? inet6_bind+0x120/0x120 [ 2778.485564] ? security_socket_recvmsg+0x95/0xc0 [ 2778.486410] ? inet6_bind+0x120/0x120 [ 2778.487085] sock_recvmsg+0xff/0x180 [ 2778.488006] __sys_recvfrom+0x1be/0x2f0 [ 2778.488704] ? __ia32_sys_send+0x100/0x100 [ 2778.489443] ? lock_downgrade+0x6d0/0x6d0 [ 2778.490216] ? wait_for_completion_io+0x270/0x270 [ 2778.491082] ? rcu_read_lock_any_held+0x75/0xa0 [ 2778.492104] ? vfs_write+0x354/0xa70 [ 2778.492758] ? fput_many+0x2f/0x1a0 [ 2778.493409] ? ksys_write+0x1a9/0x260 [ 2778.494090] ? __ia32_sys_read+0xb0/0xb0 [ 2778.494817] __x64_sys_recvfrom+0xdd/0x1b0 [ 2778.495740] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2778.496693] do_syscall_64+0x33/0x40 [ 2778.497341] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2778.498235] RIP: 0033:0x7f4d5c7edb19 [ 2778.498867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2778.502800] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2778.504322] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2778.505578] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2778.506823] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.508326] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2778.509591] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2778.533301] FAULT_INJECTION: forcing a failure. [ 2778.533301] name failslab, interval 1, probability 0, space 0, times 0 [ 2778.539410] CPU: 1 PID: 12657 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2778.539977] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2778.540649] Call Trace: [ 2778.540882] dump_stack+0x107/0x167 [ 2778.541188] should_fail.cold+0x5/0xa [ 2778.541507] ? create_object.isra.0+0x3a/0xa20 [ 2778.541892] should_failslab+0x5/0x20 [ 2778.542207] kmem_cache_alloc+0x5b/0x310 [ 2778.542545] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2778.542979] create_object.isra.0+0x3a/0xa20 [ 2778.547387] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2778.547815] kmem_cache_alloc_node+0x169/0x330 [ 2778.548198] __alloc_skb+0x6d/0x5b0 [ 2778.548500] ? ktime_get+0x158/0x1f0 [ 2778.548817] __tcp_send_ack.part.0+0x67/0x650 [ 2778.549191] tcp_send_ack+0x7d/0xa0 [ 2778.549496] tcp_cleanup_rbuf+0x468/0x5a0 [ 2778.549842] tcp_recvmsg+0xb85/0x2930 [ 2778.550174] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.550527] ? sock_has_perm+0x1ea/0x280 [ 2778.550878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2778.551349] ? tcp_splice_read+0x8c0/0x8c0 [ 2778.551697] inet6_recvmsg+0x13b/0x6e0 [ 2778.552017] ? inet6_bind+0x120/0x120 [ 2778.552333] ? security_socket_recvmsg+0x95/0xc0 [ 2778.552715] ? inet6_bind+0x120/0x120 [ 2778.553027] sock_recvmsg+0xff/0x180 [ 2778.553334] __sys_recvfrom+0x1be/0x2f0 [ 2778.553656] ? __ia32_sys_send+0x100/0x100 [ 2778.553997] ? lock_downgrade+0x6d0/0x6d0 [ 2778.554356] ? wait_for_completion_io+0x270/0x270 [ 2778.554747] ? rcu_read_lock_any_held+0x75/0xa0 [ 2778.555122] ? vfs_write+0x354/0xa70 [ 2778.555448] ? fput_many+0x2f/0x1a0 [ 2778.555748] ? ksys_write+0x1a9/0x260 [ 2778.556059] ? __ia32_sys_read+0xb0/0xb0 [ 2778.556394] __x64_sys_recvfrom+0xdd/0x1b0 [ 2778.556742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2778.557165] do_syscall_64+0x33/0x40 [ 2778.557471] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2778.557885] RIP: 0033:0x7f7abd046b19 [ 2778.558193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2778.559679] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2778.560291] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2778.560860] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2778.561430] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2778.562001] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2778.562571] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:58:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 69) 10:58:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 49) [ 2780.210669] FAULT_INJECTION: forcing a failure. [ 2780.210669] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.211781] CPU: 1 PID: 12676 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2780.212401] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.213082] Call Trace: [ 2780.213311] dump_stack+0x107/0x167 [ 2780.213613] should_fail.cold+0x5/0xa [ 2780.213928] ? lock_release+0x680/0x680 [ 2780.214257] ? skb_clone+0x14f/0x3d0 [ 2780.214566] should_failslab+0x5/0x20 [ 2780.214882] kmem_cache_alloc+0x5b/0x310 [ 2780.215237] skb_clone+0x14f/0x3d0 [ 2780.215549] dev_queue_xmit_nit+0x3a7/0xb00 [ 2780.215914] dev_hard_start_xmit+0xab/0x6f0 [ 2780.216278] __dev_queue_xmit+0x17ec/0x2710 [ 2780.216637] ? find_held_lock+0x2c/0x110 [ 2780.216971] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2780.217352] ? mark_held_locks+0x9e/0xe0 [ 2780.217693] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2780.218146] ip6_finish_output2+0x17b4/0x1fe0 [ 2780.218549] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2780.218967] ip6_output+0x3aa/0x7e0 [ 2780.219293] ip6_xmit+0x10a1/0x1c40 [ 2780.219608] ? ip6_append_data+0x330/0x330 [ 2780.219953] ? inet6_csk_xmit+0xc6/0x680 [ 2780.220290] ? lock_release+0x680/0x680 [ 2780.220616] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2780.221014] ? inet6_csk_route_req+0x850/0x850 [ 2780.221387] ? md5_transform+0x19/0xde0 [ 2780.221720] inet6_csk_xmit+0x315/0x680 [ 2780.222047] ? inet6_csk_update_pmtu+0x190/0x190 [ 2780.222444] ? __local_bh_enable_ip+0x9d/0x100 [ 2780.222817] ? csum_ipv6_magic+0x1e/0x70 [ 2780.223150] ? inet6_csk_update_pmtu+0x190/0x190 [ 2780.223600] __tcp_transmit_skb+0x18ef/0x35d0 [ 2780.223976] ? __tcp_select_window+0x900/0x900 [ 2780.224342] ? tcp_trim_head+0x470/0x470 [ 2780.224671] ? slab_free_freelist_hook+0xa9/0x180 [ 2780.225061] ? kmem_cache_free+0xa7/0x2d0 [ 2780.225404] ? lock_acquire+0x197/0x470 [ 2780.225726] ? find_held_lock+0x2c/0x110 [ 2780.226064] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2780.226444] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2780.226789] ? tcp_push_one+0x100/0x100 [ 2780.227118] ? tcp_current_mss+0x1f8/0x370 [ 2780.227480] ? tcp_trim_head+0x470/0x470 [ 2780.227814] ? tcp_rack_mark_lost+0xa9/0x270 [ 2780.228172] ? __mod_timer+0x7fb/0xd10 [ 2780.228498] tcp_retransmit_skb+0x28/0x240 [ 2780.228848] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2780.229304] tcp_xmit_retransmit_queue+0x57/0x70 [ 2780.229687] tcp_xmit_recovery+0x86/0x180 [ 2780.230024] tcp_ack+0x25d9/0x5690 [ 2780.230361] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2780.230812] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2780.231304] ? tcp_validate_incoming+0x431/0x16a0 [ 2780.231742] tcp_rcv_established+0x57e/0x1e30 [ 2780.232160] ? tcp_check_space+0x6c0/0x6c0 [ 2780.232517] tcp_v6_do_rcv+0x7b3/0x1520 [ 2780.232851] __release_sock+0x139/0x3b0 [ 2780.233189] release_sock+0x54/0x1b0 [ 2780.233492] sk_wait_data+0x1a7/0x4d0 [ 2780.233808] ? sock_set_mark+0x130/0x130 [ 2780.234147] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2780.234564] ? tcp_send_ack+0x7d/0xa0 [ 2780.234883] tcp_recvmsg+0x17b2/0x2930 [ 2780.235234] ? tcp_splice_read+0x8c0/0x8c0 [ 2780.235596] ? sock_has_perm+0x1ea/0x280 [ 2780.235942] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.236373] ? tcp_splice_read+0x8c0/0x8c0 [ 2780.236717] inet6_recvmsg+0x13b/0x6e0 [ 2780.237040] ? inet6_bind+0x120/0x120 [ 2780.237359] ? security_socket_recvmsg+0x95/0xc0 [ 2780.237752] ? inet6_bind+0x120/0x120 [ 2780.238083] sock_recvmsg+0xff/0x180 [ 2780.238393] __sys_recvfrom+0x1be/0x2f0 [ 2780.238724] ? __ia32_sys_send+0x100/0x100 [ 2780.239072] ? lock_downgrade+0x6d0/0x6d0 [ 2780.239463] ? wait_for_completion_io+0x270/0x270 [ 2780.239857] ? rcu_read_lock_any_held+0x75/0xa0 [ 2780.240233] ? vfs_write+0x354/0xa70 [ 2780.240538] ? fput_many+0x2f/0x1a0 [ 2780.240837] ? ksys_write+0x1a9/0x260 [ 2780.241153] ? __ia32_sys_read+0xb0/0xb0 [ 2780.241488] __x64_sys_recvfrom+0xdd/0x1b0 [ 2780.241852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2780.242270] do_syscall_64+0x33/0x40 [ 2780.242575] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2780.242990] RIP: 0033:0x7f4d5c7edb19 [ 2780.243390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.244847] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2780.245456] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2780.246024] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2780.246591] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.247178] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2780.247765] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2780.255732] FAULT_INJECTION: forcing a failure. [ 2780.255732] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.256682] CPU: 1 PID: 12677 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2780.257250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.257923] Call Trace: [ 2780.258146] dump_stack+0x107/0x167 [ 2780.258451] should_fail.cold+0x5/0xa [ 2780.258765] ? lock_release+0x680/0x680 [ 2780.259098] ? skb_clone+0x14f/0x3d0 [ 2780.263468] should_failslab+0x5/0x20 [ 2780.263830] kmem_cache_alloc+0x5b/0x310 [ 2780.264202] skb_clone+0x14f/0x3d0 [ 2780.264512] dev_queue_xmit_nit+0x3a7/0xb00 [ 2780.264885] dev_hard_start_xmit+0xab/0x6f0 [ 2780.265246] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.265685] __dev_queue_xmit+0x17ec/0x2710 [ 2780.266051] ? find_held_lock+0x2c/0x110 [ 2780.266393] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2780.266782] ? mark_held_locks+0x9e/0xe0 [ 2780.267123] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2780.267580] ip6_finish_output2+0x17b4/0x1fe0 [ 2780.267965] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2780.268398] ip6_output+0x3aa/0x7e0 [ 2780.268720] ip6_xmit+0x10a1/0x1c40 [ 2780.269052] ? ip6_append_data+0x330/0x330 [ 2780.269414] ? inet6_csk_xmit+0xc6/0x680 [ 2780.269760] ? lock_release+0x680/0x680 [ 2780.270093] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2780.270499] ? inet6_csk_route_req+0x850/0x850 [ 2780.270879] ? md5_transform+0x19/0xde0 [ 2780.271231] inet6_csk_xmit+0x315/0x680 [ 2780.271564] ? inet6_csk_update_pmtu+0x190/0x190 [ 2780.271970] ? __local_bh_enable_ip+0x9d/0x100 [ 2780.272354] ? csum_ipv6_magic+0x1e/0x70 [ 2780.272693] ? inet6_csk_update_pmtu+0x190/0x190 [ 2780.273097] __tcp_transmit_skb+0x18ef/0x35d0 [ 2780.273481] ? __tcp_select_window+0x900/0x900 [ 2780.273860] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2780.274287] ? __tcp_send_ack.part.0+0x67/0x650 [ 2780.274672] ? memset+0x20/0x50 [ 2780.274961] ? __alloc_skb+0x388/0x5b0 [ 2780.275296] __tcp_send_ack.part.0+0x3e0/0x650 [ 2780.275681] tcp_send_ack+0x7d/0xa0 [ 2780.275995] __tcp_ack_snd_check+0x156/0x9f0 [ 2780.276366] tcp_rcv_established+0x955/0x1e30 [ 2780.276744] ? tcp_check_space+0x6c0/0x6c0 [ 2780.277106] tcp_v6_do_rcv+0x7b3/0x1520 [ 2780.277460] __release_sock+0x139/0x3b0 [ 2780.277834] release_sock+0x54/0x1b0 [ 2780.278170] sk_wait_data+0x1a7/0x4d0 [ 2780.278521] ? sock_set_mark+0x130/0x130 [ 2780.278910] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2780.279364] tcp_recvmsg+0x17b2/0x2930 [ 2780.279708] ? tcp_splice_read+0x8c0/0x8c0 [ 2780.280061] ? sock_has_perm+0x1ea/0x280 [ 2780.280404] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2780.280835] ? tcp_splice_read+0x8c0/0x8c0 [ 2780.281182] inet6_recvmsg+0x13b/0x6e0 [ 2780.281507] ? inet6_bind+0x120/0x120 [ 2780.281827] ? security_socket_recvmsg+0x95/0xc0 [ 2780.282221] ? inet6_bind+0x120/0x120 [ 2780.282534] sock_recvmsg+0xff/0x180 [ 2780.282845] __sys_recvfrom+0x1be/0x2f0 [ 2780.283187] ? __ia32_sys_send+0x100/0x100 [ 2780.283545] ? lock_downgrade+0x6d0/0x6d0 [ 2780.283923] ? wait_for_completion_io+0x270/0x270 [ 2780.284324] ? rcu_read_lock_any_held+0x75/0xa0 [ 2780.284712] ? vfs_write+0x354/0xa70 [ 2780.285052] ? fput_many+0x2f/0x1a0 [ 2780.285387] ? ksys_write+0x1a9/0x260 [ 2780.285735] ? __ia32_sys_read+0xb0/0xb0 [ 2780.286110] __x64_sys_recvfrom+0xdd/0x1b0 [ 2780.286499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2780.286962] do_syscall_64+0x33/0x40 [ 2780.291334] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2780.291753] RIP: 0033:0x7f7abd046b19 [ 2780.292059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.293518] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2780.294134] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2780.294708] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2780.295290] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.295875] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2780.296459] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:58:54 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:54 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 50) 10:58:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 70) 10:58:54 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 10:58:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800000, 0x4010, r1, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x15, 0x1, {0x0, r3}}, 0xba98) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000300)) getsockopt$inet6_tcp_int(r5, 0x6, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd04, 0x0, 0x0) 10:58:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2795.713736] FAULT_INJECTION: forcing a failure. [ 2795.713736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2795.714978] CPU: 1 PID: 12699 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2795.719833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2795.720536] Call Trace: [ 2795.720778] dump_stack+0x107/0x167 [ 2795.721104] should_fail.cold+0x5/0xa [ 2795.721446] _copy_to_iter+0x264/0x12d0 [ 2795.721803] ? mark_lock+0xf5/0x2df0 [ 2795.722141] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2795.722558] ? __virt_addr_valid+0x170/0x5c0 [ 2795.722936] ? __check_object_size+0x319/0x440 [ 2795.723344] simple_copy_to_iter+0x4c/0x70 [ 2795.723743] __skb_datagram_iter+0x4f7/0x880 [ 2795.724142] ? zerocopy_sg_from_iter+0x110/0x110 [ 2795.724564] skb_copy_datagram_iter+0x88/0x190 [ 2795.724958] tcp_recvmsg+0x13b5/0x2930 [ 2795.725326] ? tcp_splice_read+0x8c0/0x8c0 [ 2795.725707] ? sock_has_perm+0x1ea/0x280 [ 2795.726068] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2795.726516] ? lock_downgrade+0x6d0/0x6d0 [ 2795.726886] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2795.727348] ? tcp_splice_read+0x8c0/0x8c0 [ 2795.727738] inet6_recvmsg+0x13b/0x6e0 [ 2795.728084] ? inet6_bind+0x120/0x120 [ 2795.728429] ? security_socket_recvmsg+0x95/0xc0 [ 2795.728847] ? inet6_bind+0x120/0x120 [ 2795.729185] sock_recvmsg+0xff/0x180 [ 2795.729511] __sys_recvfrom+0x1be/0x2f0 [ 2795.729859] ? __ia32_sys_send+0x100/0x100 [ 2795.730233] ? lock_downgrade+0x6d0/0x6d0 [ 2795.730623] ? wait_for_completion_io+0x270/0x270 [ 2795.731017] ? rcu_read_lock_any_held+0x75/0xa0 [ 2795.731504] ? vfs_write+0x354/0xa70 [ 2795.731831] ? fput_many+0x2f/0x1a0 [ 2795.732147] ? ksys_write+0x1a9/0x260 [ 2795.732459] ? __ia32_sys_read+0xb0/0xb0 [ 2795.732814] __x64_sys_recvfrom+0xdd/0x1b0 [ 2795.733194] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2795.733622] do_syscall_64+0x33/0x40 [ 2795.733929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2795.734346] RIP: 0033:0x7fd4b1105b19 [ 2795.734656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2795.736196] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2795.736838] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2795.737445] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2795.738060] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2795.738677] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2795.739293] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2796.127452] FAULT_INJECTION: forcing a failure. [ 2796.127452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2796.128738] CPU: 0 PID: 12698 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2796.129486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.130347] Call Trace: [ 2796.130581] dump_stack+0x107/0x167 [ 2796.130894] should_fail.cold+0x5/0xa [ 2796.131224] _copy_to_iter+0x264/0x12d0 [ 2796.131604] ? find_held_lock+0x2c/0x110 [ 2796.131982] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2796.132428] ? __virt_addr_valid+0x170/0x5c0 [ 2796.132844] ? __check_object_size+0x319/0x440 [ 2796.133251] simple_copy_to_iter+0x4c/0x70 [ 2796.133630] __skb_datagram_iter+0x4f7/0x880 [ 2796.134015] ? zerocopy_sg_from_iter+0x110/0x110 [ 2796.134432] skb_copy_datagram_iter+0x88/0x190 [ 2796.134820] tcp_recvmsg+0x13b5/0x2930 [ 2796.135173] ? tcp_splice_read+0x8c0/0x8c0 [ 2796.135592] ? sock_has_perm+0x1ea/0x280 [ 2796.135993] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.136496] ? tcp_splice_read+0x8c0/0x8c0 [ 2796.136904] inet6_recvmsg+0x13b/0x6e0 [ 2796.137275] ? inet6_bind+0x120/0x120 [ 2796.137643] ? security_socket_recvmsg+0x95/0xc0 [ 2796.138081] ? inet6_bind+0x120/0x120 [ 2796.138441] sock_recvmsg+0xff/0x180 [ 2796.138794] __sys_recvfrom+0x1be/0x2f0 [ 2796.139166] ? __ia32_sys_send+0x100/0x100 [ 2796.140936] ? lock_downgrade+0x6d0/0x6d0 [ 2796.141351] ? wait_for_completion_io+0x270/0x270 [ 2796.142095] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.142536] ? vfs_write+0x354/0xa70 [ 2796.143163] ? fput_many+0x2f/0x1a0 [ 2796.147832] ? ksys_write+0x1a9/0x260 [ 2796.148174] ? __ia32_sys_read+0xb0/0xb0 [ 2796.148526] __x64_sys_recvfrom+0xdd/0x1b0 [ 2796.149130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.149579] do_syscall_64+0x33/0x40 [ 2796.150125] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2796.150571] RIP: 0033:0x7f7abd046b19 [ 2796.151143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.153556] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2796.154472] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2796.155135] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2796.156050] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.156971] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2796.157885] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2796.193580] FAULT_INJECTION: forcing a failure. [ 2796.193580] name failslab, interval 1, probability 0, space 0, times 0 [ 2796.194709] CPU: 1 PID: 12700 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2796.195307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2796.196046] Call Trace: [ 2796.196294] dump_stack+0x107/0x167 [ 2796.196646] should_fail.cold+0x5/0xa [ 2796.203759] ? create_object.isra.0+0x3a/0xa20 [ 2796.204147] should_failslab+0x5/0x20 [ 2796.204475] kmem_cache_alloc+0x5b/0x310 [ 2796.204811] ? lock_acquire+0x197/0x470 [ 2796.205160] create_object.isra.0+0x3a/0xa20 [ 2796.205537] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2796.205972] kmem_cache_alloc+0x159/0x310 [ 2796.206340] skb_clone+0x14f/0x3d0 [ 2796.206671] dev_queue_xmit_nit+0x3a7/0xb00 [ 2796.207070] dev_hard_start_xmit+0xab/0x6f0 [ 2796.207450] __dev_queue_xmit+0x17ec/0x2710 [ 2796.207818] ? find_held_lock+0x2c/0x110 [ 2796.208155] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2796.208541] ? mark_held_locks+0x9e/0xe0 [ 2796.208880] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2796.209315] ip6_finish_output2+0x17b4/0x1fe0 [ 2796.209697] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2796.210110] ip6_output+0x3aa/0x7e0 [ 2796.210415] ip6_xmit+0x10a1/0x1c40 [ 2796.210729] ? ip6_append_data+0x330/0x330 [ 2796.211074] ? inet6_csk_xmit+0xc6/0x680 [ 2796.211424] ? lock_release+0x680/0x680 [ 2796.211765] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2796.212163] ? inet6_csk_route_req+0x850/0x850 [ 2796.212554] ? md5_transform+0x19/0xde0 [ 2796.212932] inet6_csk_xmit+0x315/0x680 [ 2796.213269] ? inet6_csk_update_pmtu+0x190/0x190 [ 2796.213669] ? __local_bh_enable_ip+0x9d/0x100 [ 2796.214044] ? csum_ipv6_magic+0x1e/0x70 [ 2796.214380] ? inet6_csk_update_pmtu+0x190/0x190 [ 2796.214772] __tcp_transmit_skb+0x18ef/0x35d0 [ 2796.215154] ? __tcp_select_window+0x900/0x900 [ 2796.215539] ? tcp_trim_head+0x470/0x470 [ 2796.215887] ? lock_acquire+0x197/0x470 [ 2796.216210] ? find_held_lock+0x2c/0x110 [ 2796.216555] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2796.216948] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2796.217297] ? tcp_push_one+0x100/0x100 [ 2796.217627] ? tcp_current_mss+0x1f8/0x370 [ 2796.217971] ? tcp_trim_head+0x470/0x470 [ 2796.218308] ? __mod_timer+0x7fb/0xd10 [ 2796.218663] tcp_retransmit_skb+0x28/0x240 [ 2796.219047] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2796.219584] tcp_xmit_retransmit_queue+0x57/0x70 [ 2796.220007] tcp_xmit_recovery+0x86/0x180 [ 2796.220382] tcp_ack+0x25d9/0x5690 [ 2796.220745] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2796.221198] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2796.221678] ? tcp_validate_incoming+0x431/0x16a0 [ 2796.222137] tcp_rcv_established+0x57e/0x1e30 [ 2796.222561] ? tcp_check_space+0x6c0/0x6c0 [ 2796.222974] tcp_v6_do_rcv+0x7b3/0x1520 [ 2796.223343] __release_sock+0x139/0x3b0 [ 2796.227754] release_sock+0x54/0x1b0 [ 2796.228097] sk_wait_data+0x1a7/0x4d0 [ 2796.228416] ? sock_set_mark+0x130/0x130 [ 2796.228757] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2796.229176] ? tcp_send_ack+0x7d/0xa0 [ 2796.229493] tcp_recvmsg+0x17b2/0x2930 [ 2796.229832] ? tcp_splice_read+0x8c0/0x8c0 [ 2796.230181] ? sock_has_perm+0x1ea/0x280 [ 2796.230527] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2796.230955] ? tcp_splice_read+0x8c0/0x8c0 [ 2796.231300] inet6_recvmsg+0x13b/0x6e0 [ 2796.231680] ? inet6_bind+0x120/0x120 [ 2796.232029] ? security_socket_recvmsg+0x95/0xc0 [ 2796.232412] ? inet6_bind+0x120/0x120 [ 2796.232726] sock_recvmsg+0xff/0x180 [ 2796.233033] __sys_recvfrom+0x1be/0x2f0 [ 2796.233362] ? __ia32_sys_send+0x100/0x100 [ 2796.233707] ? lock_downgrade+0x6d0/0x6d0 [ 2796.234074] ? wait_for_completion_io+0x270/0x270 [ 2796.234469] ? rcu_read_lock_any_held+0x75/0xa0 [ 2796.234848] ? vfs_write+0x354/0xa70 [ 2796.235155] ? fput_many+0x2f/0x1a0 [ 2796.235479] ? ksys_write+0x1a9/0x260 [ 2796.235831] ? __ia32_sys_read+0xb0/0xb0 [ 2796.236200] __x64_sys_recvfrom+0xdd/0x1b0 [ 2796.236572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2796.237033] do_syscall_64+0x33/0x40 [ 2796.237382] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2796.237847] RIP: 0033:0x7f4d5c7edb19 [ 2796.238191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2796.239813] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2796.240483] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2796.241066] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2796.241640] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2796.242212] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2796.242788] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:58:56 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:58:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 10:58:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 71) 10:58:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@loopback, 0x7a}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000005840)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/115, 0x73}, {&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000700)=""/227, 0xe3}], 0x4, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000008c0)=""/157, 0x9d}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/116, 0x74}], 0x3, &(0x7f0000001a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000004100)=[{&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/116, 0x74}, {&(0x7f0000001c00)=""/187, 0xbb}, {&(0x7f0000003f00)=""/197, 0xc5}, {&(0x7f0000001cc0)=""/69, 0x45}, {&(0x7f0000001d40)=""/50, 0x32}, {&(0x7f0000002e00)=""/38, 0x26}, {&(0x7f0000002e40)=""/2, 0x2}, {&(0x7f0000004000)=""/236, 0xec}], 0xa, &(0x7f00000041c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000004300)=""/194, 0xc2}], 0x1, &(0x7f0000004400)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004440), 0x6e, &(0x7f0000004700)=[{&(0x7f00000044c0)=""/93, 0x5d}, {&(0x7f0000004540)=""/95, 0x5f}, {&(0x7f00000045c0)=""/232, 0xe8}, {&(0x7f00000046c0)=""/13, 0xd}], 0x4, &(0x7f0000004740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004dc0)=[{&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/214, 0xd6}, {&(0x7f0000004980)=""/69, 0x45}, {&(0x7f0000004a00)=""/17, 0x11}, {&(0x7f0000004a40)=""/112, 0x70}, {&(0x7f0000004ac0)=""/158, 0x9e}, {&(0x7f0000004b80)=""/113, 0x71}, {&(0x7f0000004c00)=""/130, 0x82}, {&(0x7f0000004cc0)=""/63, 0x3f}, {&(0x7f0000004d00)=""/165, 0xa5}], 0xa, &(0x7f0000004e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000004f40)=@abs, 0x6e, &(0x7f00000054c0)=[{&(0x7f0000004fc0)=""/184, 0xb8}, {&(0x7f0000005080)=""/254, 0xfe}, {&(0x7f0000005180)=""/128, 0x80}, {&(0x7f0000005200)=""/175, 0xaf}, {&(0x7f00000052c0)=""/138, 0x8a}, {&(0x7f0000005380)=""/27, 0x1b}, {&(0x7f00000053c0)=""/129, 0x81}, {&(0x7f0000005480)=""/22, 0x16}], 0x8, &(0x7f0000005540)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000055c0), 0x6e, &(0x7f0000005740)=[{&(0x7f0000005640)=""/206, 0xce}], 0x1, &(0x7f0000005780)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}], 0x8, 0x3, &(0x7f0000005a40)={0x0, 0x3938700}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000005a80)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 51) 10:58:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd05, 0x0, 0x0) 10:58:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x2a0, 0xcd08, 0x0, 0x0) 10:58:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2797.823835] FAULT_INJECTION: forcing a failure. [ 2797.823835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2797.824987] CPU: 1 PID: 12729 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2797.825581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2797.826287] Call Trace: [ 2797.826526] dump_stack+0x107/0x167 [ 2797.826850] should_fail.cold+0x5/0xa [ 2797.827194] _copy_to_iter+0x264/0x12d0 [ 2797.827593] ? mark_lock+0xf5/0x2df0 [ 2797.827930] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2797.828357] ? __virt_addr_valid+0x170/0x5c0 [ 2797.828744] ? __check_object_size+0x319/0x440 [ 2797.829159] simple_copy_to_iter+0x4c/0x70 [ 2797.829555] __skb_datagram_iter+0x4f7/0x880 [ 2797.829942] ? zerocopy_sg_from_iter+0x110/0x110 [ 2797.830356] skb_copy_datagram_iter+0x88/0x190 [ 2797.830754] tcp_recvmsg+0x13b5/0x2930 [ 2797.831110] ? tcp_splice_read+0x8c0/0x8c0 [ 2797.831505] ? sock_has_perm+0x1ea/0x280 [ 2797.831858] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2797.832310] ? lock_downgrade+0x6d0/0x6d0 [ 2797.832680] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2797.833143] ? tcp_splice_read+0x8c0/0x8c0 [ 2797.833516] inet6_recvmsg+0x13b/0x6e0 [ 2797.833862] ? inet6_bind+0x120/0x120 [ 2797.834210] ? security_socket_recvmsg+0x95/0xc0 [ 2797.834630] ? inet6_bind+0x120/0x120 [ 2797.834966] sock_recvmsg+0xff/0x180 [ 2797.835301] __sys_recvfrom+0x1be/0x2f0 [ 2797.835685] ? __ia32_sys_send+0x100/0x100 [ 2797.836055] ? lock_downgrade+0x6d0/0x6d0 [ 2797.836449] ? wait_for_completion_io+0x270/0x270 [ 2797.836872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2797.837279] ? vfs_write+0x354/0xa70 [ 2797.837607] ? fput_many+0x2f/0x1a0 [ 2797.837928] ? ksys_write+0x1a9/0x260 [ 2797.838264] ? __ia32_sys_read+0xb0/0xb0 [ 2797.838651] __x64_sys_recvfrom+0xdd/0x1b0 [ 2797.839025] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2797.839483] do_syscall_64+0x33/0x40 [ 2797.839817] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2797.840265] RIP: 0033:0x7fd4b1105b19 [ 2797.840595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2797.842148] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2797.842800] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2797.843437] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2797.844055] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2797.844667] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2797.845281] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 10:58:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(0xffffffffffffffff) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:57 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2798.294488] FAULT_INJECTION: forcing a failure. [ 2798.294488] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.299943] FAULT_INJECTION: forcing a failure. [ 2798.299943] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.300466] CPU: 0 PID: 12728 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2798.301828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2798.302609] Call Trace: [ 2798.302862] dump_stack+0x107/0x167 [ 2798.303175] should_fail.cold+0x5/0xa [ 2798.303514] ? lock_release+0x680/0x680 [ 2798.303862] ? skb_clone+0x14f/0x3d0 [ 2798.304186] should_failslab+0x5/0x20 [ 2798.304511] kmem_cache_alloc+0x5b/0x310 [ 2798.304869] skb_clone+0x14f/0x3d0 [ 2798.305182] dev_queue_xmit_nit+0x3a7/0xb00 [ 2798.305558] dev_hard_start_xmit+0xab/0x6f0 [ 2798.305928] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2798.306373] __dev_queue_xmit+0x17ec/0x2710 [ 2798.306746] ? find_held_lock+0x2c/0x110 [ 2798.307095] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2798.307506] ? mark_held_locks+0x9e/0xe0 [ 2798.307858] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2798.308311] ip6_finish_output2+0x17b4/0x1fe0 [ 2798.308709] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2798.309138] ip6_output+0x3aa/0x7e0 [ 2798.309454] ip6_xmit+0x10a1/0x1c40 [ 2798.309777] ? ip6_append_data+0x330/0x330 [ 2798.310142] ? inet6_csk_xmit+0xc6/0x680 [ 2798.310493] ? lock_release+0x680/0x680 [ 2798.310834] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2798.311252] ? inet6_csk_route_req+0x850/0x850 [ 2798.311660] ? md5_transform+0x19/0xde0 [ 2798.312007] inet6_csk_xmit+0x315/0x680 [ 2798.312346] ? inet6_csk_update_pmtu+0x190/0x190 [ 2798.312755] ? __local_bh_enable_ip+0x9d/0x100 [ 2798.313140] ? csum_ipv6_magic+0x1e/0x70 [ 2798.313486] ? inet6_csk_update_pmtu+0x190/0x190 [ 2798.313891] __tcp_transmit_skb+0x18ef/0x35d0 [ 2798.314287] ? __tcp_select_window+0x900/0x900 [ 2798.314672] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2798.315107] ? __tcp_send_ack.part.0+0x67/0x650 [ 2798.319541] ? memset+0x20/0x50 [ 2798.319830] ? __alloc_skb+0x388/0x5b0 [ 2798.320167] __tcp_send_ack.part.0+0x3e0/0x650 [ 2798.320560] tcp_send_ack+0x7d/0xa0 [ 2798.320870] tcp_cleanup_rbuf+0x468/0x5a0 [ 2798.321221] tcp_recvmsg+0xb85/0x2930 [ 2798.321565] ? tcp_splice_read+0x8c0/0x8c0 [ 2798.321931] ? sock_has_perm+0x1ea/0x280 [ 2798.322292] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2798.322747] ? tcp_splice_read+0x8c0/0x8c0 [ 2798.323109] inet6_recvmsg+0x13b/0x6e0 [ 2798.323453] ? inet6_bind+0x120/0x120 [ 2798.323786] ? security_socket_recvmsg+0x95/0xc0 [ 2798.324183] ? inet6_bind+0x120/0x120 [ 2798.324506] sock_recvmsg+0xff/0x180 [ 2798.324826] __sys_recvfrom+0x1be/0x2f0 [ 2798.325164] ? __ia32_sys_send+0x100/0x100 [ 2798.325519] ? lock_downgrade+0x6d0/0x6d0 [ 2798.325898] ? wait_for_completion_io+0x270/0x270 [ 2798.326315] ? rcu_read_lock_any_held+0x75/0xa0 [ 2798.326714] ? vfs_write+0x354/0xa70 [ 2798.327041] ? fput_many+0x2f/0x1a0 [ 2798.327352] ? ksys_write+0x1a9/0x260 [ 2798.327693] ? __ia32_sys_read+0xb0/0xb0 [ 2798.328046] __x64_sys_recvfrom+0xdd/0x1b0 [ 2798.328407] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2798.328849] do_syscall_64+0x33/0x40 [ 2798.329168] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2798.329606] RIP: 0033:0x7f7abd046b19 [ 2798.329926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2798.335482] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2798.336119] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2798.336704] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2798.337288] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2798.337920] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2798.338590] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2798.339281] CPU: 1 PID: 12730 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2798.339912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2798.340631] Call Trace: [ 2798.340873] dump_stack+0x107/0x167 [ 2798.341197] should_fail.cold+0x5/0xa [ 2798.341537] ? __alloc_skb+0x6d/0x5b0 [ 2798.341878] should_failslab+0x5/0x20 [ 2798.342212] kmem_cache_alloc_node+0x55/0x330 [ 2798.342609] __alloc_skb+0x6d/0x5b0 [ 2798.342937] __tcp_send_ack.part.0+0x67/0x650 [ 2798.343339] tcp_send_ack+0x7d/0xa0 [ 2798.343685] tcp_cleanup_rbuf+0x468/0x5a0 [ 2798.344052] tcp_recvmsg+0xb85/0x2930 [ 2798.344404] ? tcp_splice_read+0x8c0/0x8c0 [ 2798.344779] ? sock_has_perm+0x1ea/0x280 [ 2798.345154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2798.345608] ? tcp_splice_read+0x8c0/0x8c0 [ 2798.345974] inet6_recvmsg+0x13b/0x6e0 [ 2798.346318] ? inet6_bind+0x120/0x120 [ 2798.346658] ? security_socket_recvmsg+0x95/0xc0 [ 2798.347071] ? inet6_bind+0x120/0x120 [ 2798.347420] sock_recvmsg+0xff/0x180 [ 2798.347752] __sys_recvfrom+0x1be/0x2f0 [ 2798.348103] ? __ia32_sys_send+0x100/0x100 [ 2798.348467] ? lock_downgrade+0x6d0/0x6d0 [ 2798.348851] ? wait_for_completion_io+0x270/0x270 [ 2798.349274] ? rcu_read_lock_any_held+0x75/0xa0 [ 2798.349703] ? vfs_write+0x354/0xa70 [ 2798.350031] ? fput_many+0x2f/0x1a0 [ 2798.350350] ? ksys_write+0x1a9/0x260 [ 2798.350680] ? __ia32_sys_read+0xb0/0xb0 [ 2798.351044] __x64_sys_recvfrom+0xdd/0x1b0 [ 2798.351427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2798.351885] do_syscall_64+0x33/0x40 [ 2798.352215] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2798.352658] RIP: 0033:0x7f4d5c7edb19 [ 2798.352987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2798.354561] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2798.355228] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2798.355855] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2798.356464] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2798.357073] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2798.357677] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:58:58 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:58:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 72) 10:58:58 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 10:58:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:58:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd09, 0x0, 0x0) 10:58:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x310, 0xcd08, 0x0, 0x0) [ 2799.672095] FAULT_INJECTION: forcing a failure. [ 2799.672095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2799.673561] CPU: 1 PID: 12757 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2799.674391] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2799.675349] Call Trace: [ 2799.675609] dump_stack+0x107/0x167 [ 2799.676172] should_fail.cold+0x5/0xa [ 2799.676521] _copy_to_iter+0x264/0x12d0 [ 2799.676924] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2799.677591] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2799.678065] ? __check_object_size+0x27b/0x440 [ 2799.678645] ? __check_object_size+0x294/0x440 [ 2799.679123] ? __check_object_size+0x319/0x440 [ 2799.679734] simple_copy_to_iter+0x4c/0x70 [ 2799.680156] __skb_datagram_iter+0x4f7/0x880 [ 2799.680737] ? zerocopy_sg_from_iter+0x110/0x110 [ 2799.681203] skb_copy_datagram_iter+0x88/0x190 [ 2799.681836] tcp_recvmsg+0x13b5/0x2930 [ 2799.682198] ? tcp_splice_read+0x8c0/0x8c0 [ 2799.682789] ? sock_has_perm+0x1ea/0x280 [ 2799.683165] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2799.683856] ? tcp_splice_read+0x8c0/0x8c0 [ 2799.684234] inet6_recvmsg+0x13b/0x6e0 [ 2799.684578] ? inet6_bind+0x120/0x120 [ 2799.685129] ? security_socket_recvmsg+0x95/0xc0 [ 2799.685543] ? inet6_bind+0x120/0x120 [ 2799.686102] sock_recvmsg+0xff/0x180 [ 2799.686433] __sys_recvfrom+0x1be/0x2f0 [ 2799.686829] ? __ia32_sys_send+0x100/0x100 [ 2799.687381] ? lock_downgrade+0x6d0/0x6d0 [ 2799.687829] ? wait_for_completion_io+0x270/0x270 [ 2799.688441] ? rcu_read_lock_any_held+0x75/0xa0 [ 2799.688923] ? vfs_write+0x354/0xa70 [ 2799.689433] ? fput_many+0x2f/0x1a0 [ 2799.689793] ? ksys_write+0x1a9/0x260 [ 2799.690135] ? __ia32_sys_read+0xb0/0xb0 [ 2799.690683] __x64_sys_recvfrom+0xdd/0x1b0 [ 2799.691094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2799.691737] do_syscall_64+0x33/0x40 [ 2799.692107] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2799.692782] RIP: 0033:0x7fd4b1105b19 [ 2799.693117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2799.695616] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2799.696461] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2799.697305] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2799.698145] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2799.698831] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2799.699642] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2800.056141] FAULT_INJECTION: forcing a failure. [ 2800.056141] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.057151] CPU: 1 PID: 12759 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2800.057727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2800.058404] Call Trace: [ 2800.058634] dump_stack+0x107/0x167 [ 2800.058946] should_fail.cold+0x5/0xa [ 2800.059274] ? create_object.isra.0+0x3a/0xa20 [ 2800.059702] should_failslab+0x5/0x20 [ 2800.060056] kmem_cache_alloc+0x5b/0x310 [ 2800.060558] create_object.isra.0+0x3a/0xa20 [ 2800.060925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2800.061344] kmem_cache_alloc+0x159/0x310 [ 2800.061696] skb_clone+0x14f/0x3d0 [ 2800.061997] dev_queue_xmit_nit+0x3a7/0xb00 [ 2800.062362] dev_hard_start_xmit+0xab/0x6f0 [ 2800.062723] __dev_queue_xmit+0x17ec/0x2710 [ 2800.063083] ? find_held_lock+0x2c/0x110 [ 2800.063415] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2800.064477] ? mark_held_locks+0x9e/0xe0 [ 2800.064980] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2800.065522] ip6_finish_output2+0x17b4/0x1fe0 [ 2800.065905] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2800.066431] ip6_output+0x3aa/0x7e0 [ 2800.066903] ip6_xmit+0x10a1/0x1c40 [ 2800.067282] ? ip6_append_data+0x330/0x330 [ 2800.067698] ? inet6_csk_xmit+0xc6/0x680 [ 2800.068036] ? lock_release+0x680/0x680 [ 2800.068617] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2800.069024] ? inet6_csk_route_req+0x850/0x850 [ 2800.069595] ? md5_transform+0x19/0xde0 [ 2800.070100] inet6_csk_xmit+0x315/0x680 [ 2800.070559] ? inet6_csk_update_pmtu+0x190/0x190 [ 2800.070977] ? __local_bh_enable_ip+0x9d/0x100 [ 2800.071666] ? csum_ipv6_magic+0x1e/0x70 [ 2800.072027] ? inet6_csk_update_pmtu+0x190/0x190 [ 2800.072554] __tcp_transmit_skb+0x18ef/0x35d0 [ 2800.073126] ? __tcp_select_window+0x900/0x900 [ 2800.073562] ? tcp_trim_head+0x470/0x470 [ 2800.074085] ? mark_held_locks+0x9e/0xe0 [ 2800.074545] ? find_held_lock+0x2c/0x110 [ 2800.074966] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2800.075533] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2800.075975] ? tcp_push_one+0x100/0x100 [ 2800.076321] ? tcp_current_mss+0x1f8/0x370 [ 2800.076729] ? tcp_trim_head+0x470/0x470 [ 2800.077253] ? mark_held_locks+0x9e/0xe0 [ 2800.077676] tcp_retransmit_skb+0x28/0x240 [ 2800.078104] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2800.078726] tcp_xmit_retransmit_queue+0x57/0x70 [ 2800.079190] tcp_xmit_recovery+0x86/0x180 [ 2800.079591] tcp_ack+0x25d9/0x5690 [ 2800.080085] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2800.080616] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2800.081061] ? tcp_validate_incoming+0x431/0x16a0 [ 2800.081714] tcp_rcv_established+0x57e/0x1e30 [ 2800.082099] ? tcp_check_space+0x6c0/0x6c0 [ 2800.082722] tcp_v6_do_rcv+0x7b3/0x1520 [ 2800.083061] __release_sock+0x139/0x3b0 [ 2800.083484] release_sock+0x54/0x1b0 [ 2800.083806] sk_wait_data+0x1a7/0x4d0 [ 2800.084284] ? sock_set_mark+0x130/0x130 [ 2800.084741] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2800.085175] ? tcp_send_ack+0x7d/0xa0 [ 2800.085744] tcp_recvmsg+0x17b2/0x2930 [ 2800.086089] ? tcp_splice_read+0x8c0/0x8c0 [ 2800.086524] ? sock_has_perm+0x1ea/0x280 [ 2800.087041] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2800.087535] ? tcp_splice_read+0x8c0/0x8c0 [ 2800.087959] inet6_recvmsg+0x13b/0x6e0 [ 2800.088502] ? inet6_bind+0x120/0x120 [ 2800.088899] ? security_socket_recvmsg+0x95/0xc0 [ 2800.089297] ? inet6_bind+0x120/0x120 [ 2800.089796] sock_recvmsg+0xff/0x180 [ 2800.090178] __sys_recvfrom+0x1be/0x2f0 [ 2800.090592] ? __ia32_sys_send+0x100/0x100 [ 2800.091165] ? lock_downgrade+0x6d0/0x6d0 [ 2800.091599] ? wait_for_completion_io+0x270/0x270 [ 2800.092141] ? rcu_read_lock_any_held+0x75/0xa0 [ 2800.092651] ? vfs_write+0x354/0xa70 [ 2800.092968] ? fput_many+0x2f/0x1a0 [ 2800.093409] ? ksys_write+0x1a9/0x260 [ 2800.093947] ? __ia32_sys_read+0xb0/0xb0 [ 2800.094444] __x64_sys_recvfrom+0xdd/0x1b0 [ 2800.094816] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2800.095517] do_syscall_64+0x33/0x40 [ 2800.095840] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2800.096271] RIP: 0033:0x7f4d5c7edb19 [ 2800.096826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2800.098754] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2800.099609] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2800.100273] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2800.101134] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2800.101775] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2800.102661] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:59:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 73) 10:59:15 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd0a, 0x0, 0x0) 10:59:15 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x804a, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bea2cd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x380, 0xcd08, 0x0, 0x0) 10:59:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 52) 10:59:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:15 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xcd08, 0x0, 0x0) 10:59:15 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) 10:59:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2816.025746] FAULT_INJECTION: forcing a failure. [ 2816.025746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2816.026928] CPU: 1 PID: 12781 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2816.027498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.028200] Call Trace: [ 2816.028425] dump_stack+0x107/0x167 [ 2816.028725] should_fail.cold+0x5/0xa [ 2816.029041] _copy_to_iter+0x264/0x12d0 [ 2816.029380] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.029807] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2816.030248] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2816.030690] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2816.031093] ? __virt_addr_valid+0x170/0x5c0 [ 2816.031455] ? __check_object_size+0x319/0x440 [ 2816.031885] simple_copy_to_iter+0x4c/0x70 [ 2816.032283] __skb_datagram_iter+0x4f7/0x880 [ 2816.032696] ? zerocopy_sg_from_iter+0x110/0x110 [ 2816.033153] skb_copy_datagram_iter+0x88/0x190 [ 2816.033579] tcp_recvmsg+0x13b5/0x2930 [ 2816.033958] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.034365] ? sock_has_perm+0x1ea/0x280 [ 2816.034751] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2816.035238] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.035642] inet6_recvmsg+0x13b/0x6e0 [ 2816.036019] ? inet6_bind+0x120/0x120 [ 2816.036389] ? security_socket_recvmsg+0x95/0xc0 [ 2816.036825] ? inet6_bind+0x120/0x120 [ 2816.037176] sock_recvmsg+0xff/0x180 [ 2816.037534] __sys_recvfrom+0x1be/0x2f0 [ 2816.037900] ? __ia32_sys_send+0x100/0x100 [ 2816.038283] ? lock_downgrade+0x6d0/0x6d0 [ 2816.038706] ? wait_for_completion_io+0x270/0x270 [ 2816.039146] ? rcu_read_lock_any_held+0x75/0xa0 [ 2816.039569] ? vfs_write+0x354/0xa70 [ 2816.039961] ? fput_many+0x2f/0x1a0 [ 2816.040296] ? ksys_write+0x1a9/0x260 [ 2816.040659] ? __ia32_sys_read+0xb0/0xb0 [ 2816.041054] __x64_sys_recvfrom+0xdd/0x1b0 [ 2816.041447] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.041935] do_syscall_64+0x33/0x40 [ 2816.042278] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2816.042744] RIP: 0033:0x7f4d5c7edb19 [ 2816.043118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.044800] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2816.045512] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2816.046151] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2816.046818] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.047481] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2816.048152] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2816.092068] FAULT_INJECTION: forcing a failure. [ 2816.092068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2816.093167] CPU: 0 PID: 12784 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2816.093744] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.094433] Call Trace: [ 2816.094675] dump_stack+0x107/0x167 [ 2816.094990] should_fail.cold+0x5/0xa [ 2816.095317] _copy_to_iter+0x264/0x12d0 [ 2816.095857] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2816.096307] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2816.096771] ? trace_hardirqs_on+0x5b/0x180 [ 2816.097144] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2816.097567] ? __check_object_size+0x319/0x440 [ 2816.097956] ? simple_copy_to_iter+0x3e/0x70 [ 2816.098333] simple_copy_to_iter+0x4c/0x70 [ 2816.098708] __skb_datagram_iter+0x122/0x880 [ 2816.099117] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2816.099590] ? zerocopy_sg_from_iter+0x110/0x110 [ 2816.100018] skb_copy_datagram_iter+0x88/0x190 [ 2816.100406] tcp_recvmsg+0x13b5/0x2930 [ 2816.100755] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.101120] ? sock_has_perm+0x1ea/0x280 [ 2816.101476] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2816.101920] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.102282] inet6_recvmsg+0x13b/0x6e0 [ 2816.102613] ? inet6_bind+0x120/0x120 [ 2816.102943] ? security_socket_recvmsg+0x95/0xc0 [ 2816.103344] ? inet6_bind+0x120/0x120 [ 2816.103689] sock_recvmsg+0xff/0x180 [ 2816.104015] __sys_recvfrom+0x1be/0x2f0 [ 2816.104358] ? __ia32_sys_send+0x100/0x100 [ 2816.104719] ? lock_downgrade+0x6d0/0x6d0 [ 2816.105099] ? wait_for_completion_io+0x270/0x270 [ 2816.105512] ? rcu_read_lock_any_held+0x75/0xa0 [ 2816.105905] ? vfs_write+0x354/0xa70 [ 2816.106223] ? fput_many+0x2f/0x1a0 [ 2816.106533] ? ksys_write+0x1a9/0x260 [ 2816.106855] ? __ia32_sys_read+0xb0/0xb0 [ 2816.107201] __x64_sys_recvfrom+0xdd/0x1b0 [ 2816.107556] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.108043] do_syscall_64+0x33/0x40 [ 2816.108374] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2816.108840] RIP: 0033:0x7fd4b1105b19 [ 2816.109167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.110739] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2816.111405] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2816.112065] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2816.112703] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.113367] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2816.114028] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2816.122981] FAULT_INJECTION: forcing a failure. [ 2816.122981] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.128138] CPU: 0 PID: 12786 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2816.128718] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.129402] Call Trace: [ 2816.129648] dump_stack+0x107/0x167 [ 2816.129970] should_fail.cold+0x5/0xa [ 2816.130307] ? create_object.isra.0+0x3a/0xa20 [ 2816.130718] should_failslab+0x5/0x20 [ 2816.131054] kmem_cache_alloc+0x5b/0x310 [ 2816.131416] ? lock_acquire+0x197/0x470 [ 2816.131786] create_object.isra.0+0x3a/0xa20 [ 2816.132170] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2816.132641] kmem_cache_alloc+0x159/0x310 [ 2816.133046] skb_clone+0x14f/0x3d0 [ 2816.133396] dev_queue_xmit_nit+0x3a7/0xb00 [ 2816.133822] dev_hard_start_xmit+0xab/0x6f0 [ 2816.134229] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2816.134734] __dev_queue_xmit+0x17ec/0x2710 [ 2816.135136] ? find_held_lock+0x2c/0x110 [ 2816.135542] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2816.136057] ? mark_held_locks+0x9e/0xe0 [ 2816.136416] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2816.136916] ip6_finish_output2+0x17b4/0x1fe0 [ 2816.137343] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2816.137797] ip6_output+0x3aa/0x7e0 [ 2816.138127] ip6_xmit+0x10a1/0x1c40 [ 2816.138470] ? ip6_append_data+0x330/0x330 [ 2816.138851] ? inet6_csk_xmit+0xc6/0x680 [ 2816.139229] ? lock_release+0x680/0x680 [ 2816.139597] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2816.140197] ? inet6_csk_route_req+0x850/0x850 [ 2816.140621] ? md5_transform+0x19/0xde0 [ 2816.140993] inet6_csk_xmit+0x315/0x680 [ 2816.141350] ? inet6_csk_update_pmtu+0x190/0x190 [ 2816.141778] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2816.142278] ? __tcp_transmit_skb+0x1883/0x35d0 [ 2816.142712] ? inet6_csk_update_pmtu+0x190/0x190 [ 2816.143169] __tcp_transmit_skb+0x18ef/0x35d0 [ 2816.143612] ? __tcp_select_window+0x900/0x900 [ 2816.144068] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2816.144555] ? __tcp_send_ack.part.0+0x67/0x650 [ 2816.145008] ? memset+0x20/0x50 [ 2816.145326] ? __alloc_skb+0x388/0x5b0 [ 2816.145706] __tcp_send_ack.part.0+0x3e0/0x650 [ 2816.146146] tcp_send_ack+0x7d/0xa0 [ 2816.146495] tcp_cleanup_rbuf+0x468/0x5a0 [ 2816.146887] tcp_recvmsg+0xb85/0x2930 [ 2816.147257] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.147671] ? sock_has_perm+0x1ea/0x280 [ 2816.148085] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2816.148591] ? tcp_splice_read+0x8c0/0x8c0 [ 2816.149007] inet6_recvmsg+0x13b/0x6e0 [ 2816.149380] ? inet6_bind+0x120/0x120 [ 2816.149750] ? security_socket_recvmsg+0x95/0xc0 [ 2816.150206] ? inet6_bind+0x120/0x120 [ 2816.150580] sock_recvmsg+0xff/0x180 [ 2816.150931] __sys_recvfrom+0x1be/0x2f0 [ 2816.151297] ? __ia32_sys_send+0x100/0x100 [ 2816.151754] ? lock_downgrade+0x6d0/0x6d0 [ 2816.152169] ? wait_for_completion_io+0x270/0x270 [ 2816.152608] ? rcu_read_lock_any_held+0x75/0xa0 [ 2816.153025] ? vfs_write+0x354/0xa70 [ 2816.153349] ? fput_many+0x2f/0x1a0 [ 2816.153685] ? ksys_write+0x1a9/0x260 [ 2816.154042] ? __ia32_sys_read+0xb0/0xb0 [ 2816.154393] __x64_sys_recvfrom+0xdd/0x1b0 [ 2816.154761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2816.155236] do_syscall_64+0x33/0x40 [ 2816.155582] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2816.156064] RIP: 0033:0x7f7abd046b19 [ 2816.156400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.158082] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2816.158800] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2816.159461] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2816.160086] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.160685] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2816.161319] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:59:15 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 53) 10:59:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd13, 0x0, 0x0) 10:59:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 74) 10:59:16 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:59:16 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) 10:59:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2817.586072] FAULT_INJECTION: forcing a failure. [ 2817.586072] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.587273] CPU: 0 PID: 12812 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2817.587908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.588640] Call Trace: [ 2817.588890] dump_stack+0x107/0x167 [ 2817.589232] should_fail.cold+0x5/0xa [ 2817.589615] ? create_object.isra.0+0x3a/0xa20 [ 2817.590050] should_failslab+0x5/0x20 [ 2817.590391] kmem_cache_alloc+0x5b/0x310 [ 2817.590763] create_object.isra.0+0x3a/0xa20 [ 2817.591158] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2817.591615] kmem_cache_alloc_node+0x169/0x330 [ 2817.592460] __alloc_skb+0x6d/0x5b0 [ 2817.593190] ? ktime_get+0x158/0x1f0 [ 2817.593535] __tcp_send_ack.part.0+0x67/0x650 [ 2817.593951] tcp_send_ack+0x7d/0xa0 [ 2817.594526] tcp_cleanup_rbuf+0x468/0x5a0 [ 2817.594905] tcp_recvmsg+0xb85/0x2930 [ 2817.595502] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.595917] ? sock_has_perm+0x1ea/0x280 [ 2817.596537] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.597060] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.597660] inet6_recvmsg+0x13b/0x6e0 [ 2817.598062] ? inet6_bind+0x120/0x120 [ 2817.598632] ? security_socket_recvmsg+0x95/0xc0 [ 2817.599108] ? inet6_bind+0x120/0x120 [ 2817.599481] sock_recvmsg+0xff/0x180 [ 2817.600137] __sys_recvfrom+0x1be/0x2f0 [ 2817.600499] ? __ia32_sys_send+0x100/0x100 [ 2817.601144] ? lock_downgrade+0x6d0/0x6d0 [ 2817.601556] ? wait_for_completion_io+0x270/0x270 [ 2817.602308] ? rcu_read_lock_any_held+0x75/0xa0 [ 2817.602764] ? vfs_write+0x354/0xa70 [ 2817.603371] ? fput_many+0x2f/0x1a0 [ 2817.607987] ? ksys_write+0x1a9/0x260 [ 2817.608334] ? __ia32_sys_read+0xb0/0xb0 [ 2817.608711] __x64_sys_recvfrom+0xdd/0x1b0 [ 2817.609324] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.609800] do_syscall_64+0x33/0x40 [ 2817.610357] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2817.610817] RIP: 0033:0x7f7abd046b19 [ 2817.611380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.613536] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2817.614259] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2817.615155] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2817.616077] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.617010] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2817.617978] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2817.663551] FAULT_INJECTION: forcing a failure. [ 2817.663551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2817.668088] CPU: 0 PID: 12819 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2817.668745] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.669540] Call Trace: [ 2817.669800] dump_stack+0x107/0x167 [ 2817.670120] should_fail.cold+0x5/0xa [ 2817.670526] _copy_to_iter+0x264/0x12d0 [ 2817.670920] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2817.671393] ? __virt_addr_valid+0x170/0x5c0 [ 2817.675870] ? __check_object_size+0x319/0x440 [ 2817.676326] simple_copy_to_iter+0x4c/0x70 [ 2817.676719] __skb_datagram_iter+0x4f7/0x880 [ 2817.677155] ? zerocopy_sg_from_iter+0x110/0x110 [ 2817.677637] skb_copy_datagram_iter+0x88/0x190 [ 2817.678092] tcp_recvmsg+0x13b5/0x2930 [ 2817.678494] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.678910] ? sock_has_perm+0x1ea/0x280 [ 2817.679310] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.679843] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.680264] inet6_recvmsg+0x13b/0x6e0 [ 2817.680649] ? inet6_bind+0x120/0x120 [ 2817.681030] ? security_socket_recvmsg+0x95/0xc0 [ 2817.681495] ? inet6_bind+0x120/0x120 [ 2817.681882] sock_recvmsg+0xff/0x180 [ 2817.682260] __sys_recvfrom+0x1be/0x2f0 [ 2817.682652] ? __ia32_sys_send+0x100/0x100 [ 2817.683071] ? lock_downgrade+0x6d0/0x6d0 [ 2817.683505] ? wait_for_completion_io+0x270/0x270 [ 2817.684007] ? rcu_read_lock_any_held+0x75/0xa0 [ 2817.684470] ? vfs_write+0x354/0xa70 [ 2817.684845] ? fput_many+0x2f/0x1a0 [ 2817.685209] ? ksys_write+0x1a9/0x260 [ 2817.685591] ? __ia32_sys_read+0xb0/0xb0 [ 2817.686003] __x64_sys_recvfrom+0xdd/0x1b0 [ 2817.686427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.686941] do_syscall_64+0x33/0x40 [ 2817.687317] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2817.687800] RIP: 0033:0x7fd4b1105b19 [ 2817.688176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.689952] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2817.690704] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2817.691404] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2817.696148] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.696868] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2817.697589] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2817.706496] FAULT_INJECTION: forcing a failure. [ 2817.706496] name failslab, interval 1, probability 0, space 0, times 0 [ 2817.707507] CPU: 1 PID: 12821 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2817.708138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2817.708840] Call Trace: [ 2817.709078] dump_stack+0x107/0x167 [ 2817.709401] should_fail.cold+0x5/0xa [ 2817.709745] ? create_object.isra.0+0x3a/0xa20 [ 2817.710149] should_failslab+0x5/0x20 [ 2817.710489] kmem_cache_alloc+0x5b/0x310 [ 2817.710858] create_object.isra.0+0x3a/0xa20 [ 2817.711249] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2817.711724] kmem_cache_alloc+0x159/0x310 [ 2817.712110] skb_clone+0x14f/0x3d0 [ 2817.712434] dev_queue_xmit_nit+0x3a7/0xb00 [ 2817.712829] dev_hard_start_xmit+0xab/0x6f0 [ 2817.713221] __dev_queue_xmit+0x17ec/0x2710 [ 2817.713611] ? find_held_lock+0x2c/0x110 [ 2817.713972] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2817.714387] ? mark_held_locks+0x9e/0xe0 [ 2817.714751] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2817.715223] ip6_finish_output2+0x17b4/0x1fe0 [ 2817.715641] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2817.716139] ip6_output+0x3aa/0x7e0 [ 2817.716482] ip6_xmit+0x10a1/0x1c40 [ 2817.716843] ? ip6_append_data+0x330/0x330 [ 2817.717228] ? inet6_csk_xmit+0xc6/0x680 [ 2817.717608] ? lock_release+0x680/0x680 [ 2817.717983] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2817.718441] ? inet6_csk_route_req+0x850/0x850 [ 2817.718864] ? md5_transform+0x19/0xde0 [ 2817.719259] inet6_csk_xmit+0x315/0x680 [ 2817.719639] ? inet6_csk_update_pmtu+0x190/0x190 [ 2817.724204] ? __local_bh_enable_ip+0x9d/0x100 [ 2817.724606] ? csum_ipv6_magic+0x1e/0x70 [ 2817.724978] ? inet6_csk_update_pmtu+0x190/0x190 [ 2817.725403] __tcp_transmit_skb+0x18ef/0x35d0 [ 2817.725812] ? __tcp_select_window+0x900/0x900 [ 2817.726211] ? tcp_trim_head+0x470/0x470 [ 2817.726572] ? slab_free_freelist_hook+0xa9/0x180 [ 2817.726997] ? kmem_cache_free+0xa7/0x2d0 [ 2817.727365] ? lock_acquire+0x197/0x470 [ 2817.727730] ? find_held_lock+0x2c/0x110 [ 2817.728099] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2817.728516] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2817.728891] ? tcp_push_one+0x100/0x100 [ 2817.729251] ? tcp_current_mss+0x1f8/0x370 [ 2817.729626] ? tcp_trim_head+0x470/0x470 [ 2817.729980] ? tcp_rack_mark_lost+0xa9/0x270 [ 2817.730361] ? __mod_timer+0x7fb/0xd10 [ 2817.730719] tcp_retransmit_skb+0x28/0x240 [ 2817.731102] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2817.731600] tcp_xmit_retransmit_queue+0x57/0x70 [ 2817.734366] tcp_xmit_recovery+0x86/0x180 [ 2817.734748] tcp_ack+0x25d9/0x5690 [ 2817.735112] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2817.735573] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2817.736069] ? tcp_validate_incoming+0x431/0x16a0 [ 2817.736518] tcp_rcv_established+0x57e/0x1e30 [ 2817.736938] ? tcp_check_space+0x6c0/0x6c0 [ 2817.737335] tcp_v6_do_rcv+0x7b3/0x1520 [ 2817.737704] __release_sock+0x139/0x3b0 [ 2817.738080] release_sock+0x54/0x1b0 [ 2817.738422] sk_wait_data+0x1a7/0x4d0 [ 2817.738778] ? sock_set_mark+0x130/0x130 [ 2817.739152] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2817.739614] ? tcp_send_ack+0x7d/0xa0 [ 2817.739977] tcp_recvmsg+0x17b2/0x2930 [ 2817.740345] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.740731] ? sock_has_perm+0x1ea/0x280 [ 2817.741107] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2817.741576] ? tcp_splice_read+0x8c0/0x8c0 [ 2817.741950] inet6_recvmsg+0x13b/0x6e0 [ 2817.742303] ? inet6_bind+0x120/0x120 [ 2817.742653] ? security_socket_recvmsg+0x95/0xc0 [ 2817.743078] ? inet6_bind+0x120/0x120 [ 2817.743421] sock_recvmsg+0xff/0x180 [ 2817.743774] __sys_recvfrom+0x1be/0x2f0 [ 2817.744137] ? __ia32_sys_send+0x100/0x100 [ 2817.744512] ? lock_downgrade+0x6d0/0x6d0 [ 2817.744908] ? wait_for_completion_io+0x270/0x270 [ 2817.745340] ? rcu_read_lock_any_held+0x75/0xa0 [ 2817.745745] ? vfs_write+0x354/0xa70 [ 2817.746079] ? fput_many+0x2f/0x1a0 [ 2817.746403] ? ksys_write+0x1a9/0x260 [ 2817.746739] ? __ia32_sys_read+0xb0/0xb0 [ 2817.747109] __x64_sys_recvfrom+0xdd/0x1b0 [ 2817.747497] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2817.747982] do_syscall_64+0x33/0x40 [ 2817.748313] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2817.748762] RIP: 0033:0x7f4d5c7edb19 [ 2817.749095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2817.750676] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2817.751348] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2817.751991] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2817.752634] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2817.753280] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2817.753945] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:59:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x3f0, 0xcd08, 0x0, 0x0) 10:59:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd14, 0x0, 0x0) 10:59:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) r4 = accept4$unix(r1, &(0x7f0000000240)=@abs, &(0x7f0000000040)=0x6e, 0x800) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000140)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 75) 10:59:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 54) 10:59:32 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:59:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) 10:59:32 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2833.811572] FAULT_INJECTION: forcing a failure. [ 2833.811572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.812761] CPU: 1 PID: 12844 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2833.813335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.814015] Call Trace: [ 2833.814256] dump_stack+0x107/0x167 [ 2833.814578] should_fail.cold+0x5/0xa [ 2833.814920] _copy_to_iter+0x264/0x12d0 [ 2833.815284] ? find_held_lock+0x2c/0x110 [ 2833.815645] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2833.816101] ? __virt_addr_valid+0x170/0x5c0 [ 2833.816494] ? __check_object_size+0x319/0x440 [ 2833.816908] simple_copy_to_iter+0x4c/0x70 [ 2833.817288] __skb_datagram_iter+0x4f7/0x880 [ 2833.817685] ? zerocopy_sg_from_iter+0x110/0x110 [ 2833.818110] skb_copy_datagram_iter+0x88/0x190 [ 2833.818514] tcp_recvmsg+0x13b5/0x2930 [ 2833.818873] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.819253] ? sock_has_perm+0x1ea/0x280 [ 2833.819629] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2833.820495] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.821281] inet6_recvmsg+0x13b/0x6e0 [ 2833.822005] ? inet6_bind+0x120/0x120 [ 2833.822719] ? security_socket_recvmsg+0x95/0xc0 [ 2833.823573] ? inet6_bind+0x120/0x120 [ 2833.824409] sock_recvmsg+0xff/0x180 [ 2833.825228] __sys_recvfrom+0x1be/0x2f0 [ 2833.826093] ? __ia32_sys_send+0x100/0x100 [ 2833.827007] ? lock_downgrade+0x6d0/0x6d0 [ 2833.827943] ? wait_for_completion_io+0x270/0x270 [ 2833.828816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2833.829649] ? vfs_write+0x354/0xa70 [ 2833.830310] ? fput_many+0x2f/0x1a0 [ 2833.830960] ? ksys_write+0x1a9/0x260 [ 2833.831637] ? __ia32_sys_read+0xb0/0xb0 [ 2833.832521] __x64_sys_recvfrom+0xdd/0x1b0 [ 2833.833425] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.834560] do_syscall_64+0x33/0x40 [ 2833.835385] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2833.836187] RIP: 0033:0x7f7abd046b19 [ 2833.836522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.838087] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2833.838747] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2833.839362] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2833.840036] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.840651] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2833.841264] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:59:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2833.863058] FAULT_INJECTION: forcing a failure. [ 2833.863058] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.868931] CPU: 0 PID: 12846 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2833.876223] FAULT_INJECTION: forcing a failure. [ 2833.876223] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.880193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.880200] Call Trace: [ 2833.880225] dump_stack+0x107/0x167 [ 2833.880242] should_fail.cold+0x5/0xa [ 2833.880260] ? __alloc_skb+0x6d/0x5b0 [ 2833.880277] should_failslab+0x5/0x20 [ 2833.880291] kmem_cache_alloc_node+0x55/0x330 [ 2833.880311] __alloc_skb+0x6d/0x5b0 [ 2833.880328] ? ktime_get+0x158/0x1f0 [ 2833.880351] __tcp_send_ack.part.0+0x67/0x650 [ 2833.880369] tcp_send_ack+0x7d/0xa0 [ 2833.880384] tcp_cleanup_rbuf+0x468/0x5a0 [ 2833.880397] tcp_recvmsg+0xb85/0x2930 [ 2833.880426] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.880446] ? sock_has_perm+0x1ea/0x280 [ 2833.880473] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2833.880489] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.880502] inet6_recvmsg+0x13b/0x6e0 [ 2833.880524] ? inet6_bind+0x120/0x120 [ 2833.889046] ? security_socket_recvmsg+0x95/0xc0 [ 2833.889502] ? inet6_bind+0x120/0x120 [ 2833.889872] sock_recvmsg+0xff/0x180 [ 2833.890242] __sys_recvfrom+0x1be/0x2f0 [ 2833.890626] ? __ia32_sys_send+0x100/0x100 [ 2833.891041] ? lock_downgrade+0x6d0/0x6d0 [ 2833.891457] ? wait_for_completion_io+0x270/0x270 [ 2833.891950] ? rcu_read_lock_any_held+0x75/0xa0 [ 2833.892384] ? vfs_write+0x354/0xa70 [ 2833.892740] ? fput_many+0x2f/0x1a0 [ 2833.893095] ? ksys_write+0x1a9/0x260 [ 2833.893449] ? __ia32_sys_read+0xb0/0xb0 [ 2833.893843] __x64_sys_recvfrom+0xdd/0x1b0 [ 2833.894254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.894718] do_syscall_64+0x33/0x40 [ 2833.895083] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2833.895559] RIP: 0033:0x7f4d5c7edb19 [ 2833.895974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.897567] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2833.898242] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2833.898851] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2833.899459] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.900138] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2833.900791] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2833.901475] CPU: 1 PID: 12850 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2833.902200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2833.902933] Call Trace: [ 2833.903200] dump_stack+0x107/0x167 [ 2833.903544] should_fail.cold+0x5/0xa [ 2833.903937] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2833.904397] ? __alloc_skb+0x6d/0x5b0 [ 2833.904727] should_failslab+0x5/0x20 [ 2833.905061] kmem_cache_alloc_node+0x55/0x330 [ 2833.905447] ? kmem_cache_free+0xa7/0x2d0 [ 2833.905809] __alloc_skb+0x6d/0x5b0 [ 2833.906137] __tcp_send_ack.part.0+0x67/0x650 [ 2833.906523] ? kmem_cache_free+0x249/0x2d0 [ 2833.906890] tcp_send_ack+0x7d/0xa0 [ 2833.907213] tcp_cleanup_rbuf+0x468/0x5a0 [ 2833.907572] tcp_recvmsg+0xb85/0x2930 [ 2833.907928] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.908303] ? sock_has_perm+0x1ea/0x280 [ 2833.908664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2833.909118] ? tcp_splice_read+0x8c0/0x8c0 [ 2833.909490] inet6_recvmsg+0x13b/0x6e0 [ 2833.909832] ? inet6_bind+0x120/0x120 [ 2833.910172] ? security_socket_recvmsg+0x95/0xc0 [ 2833.910586] ? inet6_bind+0x120/0x120 [ 2833.910922] sock_recvmsg+0xff/0x180 [ 2833.911253] __sys_recvfrom+0x1be/0x2f0 [ 2833.911602] ? __ia32_sys_send+0x100/0x100 [ 2833.911979] ? lock_downgrade+0x6d0/0x6d0 [ 2833.912367] ? wait_for_completion_io+0x270/0x270 [ 2833.912795] ? rcu_read_lock_any_held+0x75/0xa0 [ 2833.913206] ? vfs_write+0x354/0xa70 [ 2833.913538] ? fput_many+0x2f/0x1a0 [ 2833.913864] ? ksys_write+0x1a9/0x260 [ 2833.914205] ? __ia32_sys_read+0xb0/0xb0 [ 2833.914575] __x64_sys_recvfrom+0xdd/0x1b0 [ 2833.914960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2833.915413] do_syscall_64+0x33/0x40 [ 2833.915744] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2833.916224] RIP: 0033:0x7fd4b1105b19 [ 2833.916574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2833.918217] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2833.918907] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2833.919535] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2833.920243] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2833.920854] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2833.921464] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 10:59:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 55) 10:59:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x460, 0xcd08, 0x0, 0x0) 10:59:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd22, 0x0, 0x0) 10:59:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 76) [ 2835.660191] FAULT_INJECTION: forcing a failure. [ 2835.660191] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.661451] CPU: 1 PID: 12870 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2835.662073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.662830] Call Trace: [ 2835.663085] dump_stack+0x107/0x167 [ 2835.663433] should_fail.cold+0x5/0xa [ 2835.663789] ? create_object.isra.0+0x3a/0xa20 [ 2835.664249] should_failslab+0x5/0x20 [ 2835.664614] kmem_cache_alloc+0x5b/0x310 [ 2835.665009] create_object.isra.0+0x3a/0xa20 [ 2835.665424] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2835.665910] kmem_cache_alloc+0x159/0x310 [ 2835.666315] skb_clone+0x14f/0x3d0 [ 2835.666668] dev_queue_xmit_nit+0x3a7/0xb00 [ 2835.667089] dev_hard_start_xmit+0xab/0x6f0 [ 2835.667508] __dev_queue_xmit+0x17ec/0x2710 [ 2835.667927] ? find_held_lock+0x2c/0x110 [ 2835.668303] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2835.668714] ? mark_held_locks+0x9e/0xe0 [ 2835.669081] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2835.669547] ip6_finish_output2+0x17b4/0x1fe0 [ 2835.669956] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2835.670401] ip6_output+0x3aa/0x7e0 [ 2835.670734] ip6_xmit+0x10a1/0x1c40 [ 2835.671081] ? ip6_append_data+0x330/0x330 [ 2835.671464] ? inet6_csk_xmit+0xc6/0x680 [ 2835.671832] ? lock_release+0x680/0x680 [ 2835.672210] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2835.672639] ? inet6_csk_route_req+0x850/0x850 [ 2835.673041] ? md5_transform+0x19/0xde0 [ 2835.673401] inet6_csk_xmit+0x315/0x680 [ 2835.673751] ? inet6_csk_update_pmtu+0x190/0x190 [ 2835.674177] ? __local_bh_enable_ip+0x9d/0x100 [ 2835.674582] ? csum_ipv6_magic+0x1e/0x70 [ 2835.674946] ? inet6_csk_update_pmtu+0x190/0x190 [ 2835.675372] __tcp_transmit_skb+0x18ef/0x35d0 [ 2835.675787] ? __tcp_select_window+0x900/0x900 [ 2835.676208] ? tcp_trim_head+0x470/0x470 [ 2835.676584] ? lock_acquire+0x197/0x470 [ 2835.676936] ? find_held_lock+0x2c/0x110 [ 2835.677306] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2835.677721] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2835.678105] ? tcp_push_one+0x100/0x100 [ 2835.678462] ? tcp_current_mss+0x1f8/0x370 [ 2835.678843] ? tcp_trim_head+0x470/0x470 [ 2835.679219] ? __mod_timer+0x7fb/0xd10 [ 2835.679578] tcp_retransmit_skb+0x28/0x240 [ 2835.679988] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2835.680489] tcp_xmit_retransmit_queue+0x57/0x70 [ 2835.680923] tcp_xmit_recovery+0x86/0x180 [ 2835.681293] tcp_ack+0x25d9/0x5690 [ 2835.681659] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2835.682113] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2835.682592] ? tcp_validate_incoming+0x431/0x16a0 [ 2835.683042] tcp_rcv_established+0x57e/0x1e30 [ 2835.683445] ? tcp_check_space+0x6c0/0x6c0 [ 2835.683843] tcp_v6_do_rcv+0x7b3/0x1520 [ 2835.684253] __release_sock+0x139/0x3b0 [ 2835.684642] FAULT_INJECTION: forcing a failure. [ 2835.684642] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.684655] release_sock+0x54/0x1b0 [ 2835.684676] sk_wait_data+0x1a7/0x4d0 [ 2835.686318] ? sock_set_mark+0x130/0x130 [ 2835.686702] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2835.687165] ? tcp_send_ack+0x7d/0xa0 [ 2835.687528] tcp_recvmsg+0x17b2/0x2930 [ 2835.687926] ? tcp_splice_read+0x8c0/0x8c0 [ 2835.688318] ? sock_has_perm+0x1ea/0x280 [ 2835.688691] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2835.689165] ? tcp_splice_read+0x8c0/0x8c0 [ 2835.689543] inet6_recvmsg+0x13b/0x6e0 [ 2835.689896] ? inet6_bind+0x120/0x120 [ 2835.690242] ? security_socket_recvmsg+0x95/0xc0 [ 2835.690660] ? inet6_bind+0x120/0x120 [ 2835.691012] sock_recvmsg+0xff/0x180 [ 2835.691350] __sys_recvfrom+0x1be/0x2f0 [ 2835.691705] ? __ia32_sys_send+0x100/0x100 [ 2835.692099] ? lock_downgrade+0x6d0/0x6d0 [ 2835.692515] ? wait_for_completion_io+0x270/0x270 [ 2835.692950] ? rcu_read_lock_any_held+0x75/0xa0 [ 2835.693360] ? vfs_write+0x354/0xa70 [ 2835.693694] ? fput_many+0x2f/0x1a0 [ 2835.694027] ? ksys_write+0x1a9/0x260 [ 2835.694363] ? __ia32_sys_read+0xb0/0xb0 [ 2835.694727] __x64_sys_recvfrom+0xdd/0x1b0 [ 2835.695114] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2835.695566] do_syscall_64+0x33/0x40 [ 2835.695927] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2835.696432] RIP: 0033:0x7f7abd046b19 [ 2835.696789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.698476] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2835.699190] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2835.699850] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2835.700496] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.701115] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2835.701730] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2835.702397] CPU: 0 PID: 12872 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2835.703061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.703770] Call Trace: [ 2835.704066] dump_stack+0x107/0x167 [ 2835.704396] should_fail.cold+0x5/0xa [ 2835.704758] should_failslab+0x5/0x20 [ 2835.705111] __kmalloc_node_track_caller+0x74/0x3b0 [ 2835.705568] ? __tcp_send_ack.part.0+0x67/0x650 [ 2835.706014] __alloc_skb+0xb1/0x5b0 [ 2835.706373] __tcp_send_ack.part.0+0x67/0x650 [ 2835.706796] tcp_send_ack+0x7d/0xa0 [ 2835.707133] tcp_cleanup_rbuf+0x468/0x5a0 [ 2835.707518] tcp_recvmsg+0x868/0x2930 [ 2835.707896] ? tcp_splice_read+0x8c0/0x8c0 [ 2835.708311] ? sock_has_perm+0x1ea/0x280 [ 2835.708697] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2835.709179] ? tcp_splice_read+0x8c0/0x8c0 [ 2835.709568] inet6_recvmsg+0x13b/0x6e0 [ 2835.709931] ? inet6_bind+0x120/0x120 [ 2835.710291] ? security_socket_recvmsg+0x95/0xc0 [ 2835.710728] ? inet6_bind+0x120/0x120 [ 2835.711079] sock_recvmsg+0xff/0x180 [ 2835.711432] __sys_recvfrom+0x1be/0x2f0 [ 2835.711806] ? __ia32_sys_send+0x100/0x100 [ 2835.712409] ? lock_downgrade+0x6d0/0x6d0 [ 2835.712809] ? wait_for_completion_io+0x270/0x270 [ 2835.713249] ? rcu_read_lock_any_held+0x75/0xa0 [ 2835.713668] ? vfs_write+0x354/0xa70 [ 2835.714016] ? fput_many+0x2f/0x1a0 [ 2835.714346] ? ksys_write+0x1a9/0x260 [ 2835.714692] ? __ia32_sys_read+0xb0/0xb0 [ 2835.715073] __x64_sys_recvfrom+0xdd/0x1b0 [ 2835.715458] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2835.715942] do_syscall_64+0x33/0x40 [ 2835.716274] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2835.716708] RIP: 0033:0x7f4d5c7edb19 [ 2835.717033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.718567] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2835.719210] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2835.719808] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2835.720463] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.721105] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2835.721746] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 10:59:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x4d0, 0xcd08, 0x0, 0x0) 10:59:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x2) 10:59:50 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 10:59:50 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 10:59:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 56) 10:59:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 77) 10:59:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x765c00, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000427bd7000fedbdf250c000000080004005000004034000180060801000200000006000100000a060000000000000078d309eb8f0e2ff9d7000000060001000a000000080009005d00"/83], 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x8004) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2851.819152] FAULT_INJECTION: forcing a failure. [ 2851.819152] name failslab, interval 1, probability 0, space 0, times 0 [ 2851.820284] CPU: 1 PID: 12896 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2851.820856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.821536] Call Trace: [ 2851.821771] dump_stack+0x107/0x167 [ 2851.822086] should_fail.cold+0x5/0xa [ 2851.822402] ? lock_release+0x680/0x680 [ 2851.822733] ? skb_clone+0x14f/0x3d0 [ 2851.823042] should_failslab+0x5/0x20 [ 2851.823361] kmem_cache_alloc+0x5b/0x310 [ 2851.823727] skb_clone+0x14f/0x3d0 [ 2851.824038] dev_queue_xmit_nit+0x3a7/0xb00 [ 2851.832427] dev_hard_start_xmit+0xab/0x6f0 [ 2851.832802] __dev_queue_xmit+0x17ec/0x2710 [ 2851.833168] ? find_held_lock+0x2c/0x110 [ 2851.833501] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2851.833897] ? mark_held_locks+0x9e/0xe0 [ 2851.834236] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2851.834693] ip6_finish_output2+0x17b4/0x1fe0 [ 2851.835074] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2851.835487] ip6_output+0x3aa/0x7e0 [ 2851.835794] ip6_xmit+0x10a1/0x1c40 [ 2851.836127] ? ip6_append_data+0x330/0x330 [ 2851.836529] ? inet6_csk_xmit+0xc6/0x680 [ 2851.836864] ? lock_release+0x680/0x680 [ 2851.837185] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2851.837583] ? inet6_csk_route_req+0x850/0x850 [ 2851.837961] ? md5_transform+0x19/0xde0 [ 2851.838317] inet6_csk_xmit+0x315/0x680 [ 2851.838656] ? inet6_csk_update_pmtu+0x190/0x190 [ 2851.839057] ? __local_bh_enable_ip+0x9d/0x100 [ 2851.839428] ? csum_ipv6_magic+0x1e/0x70 [ 2851.839762] ? inet6_csk_update_pmtu+0x190/0x190 [ 2851.844194] __tcp_transmit_skb+0x18ef/0x35d0 [ 2851.848528] ? __tcp_select_window+0x900/0x900 [ 2851.848960] ? tcp_trim_head+0x470/0x470 [ 2851.849342] ? lock_acquire+0x197/0x470 [ 2851.849705] ? find_held_lock+0x2c/0x110 [ 2851.850099] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2851.850500] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2851.850885] ? tcp_push_one+0x100/0x100 [ 2851.851242] ? tcp_current_mss+0x1f8/0x370 [ 2851.851611] ? tcp_trim_head+0x470/0x470 [ 2851.851962] ? __mod_timer+0x7fb/0xd10 [ 2851.852354] tcp_retransmit_skb+0x28/0x240 [ 2851.852713] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2851.853182] tcp_xmit_retransmit_queue+0x57/0x70 [ 2851.853597] tcp_xmit_recovery+0x86/0x180 [ 2851.853955] tcp_ack+0x25d9/0x5690 [ 2851.854289] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2851.854720] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2851.855193] ? tcp_validate_incoming+0x431/0x16a0 [ 2851.855654] tcp_rcv_established+0x57e/0x1e30 [ 2851.856060] ? tcp_check_space+0x6c0/0x6c0 [ 2851.872295] tcp_v6_do_rcv+0x7b3/0x1520 [ 2851.872686] __release_sock+0x139/0x3b0 [ 2851.873075] release_sock+0x54/0x1b0 [ 2851.873424] sk_wait_data+0x1a7/0x4d0 [ 2851.873792] ? sock_set_mark+0x130/0x130 [ 2851.874185] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2851.874665] ? tcp_send_ack+0x7d/0xa0 [ 2851.875028] tcp_recvmsg+0x17b2/0x2930 [ 2851.875410] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.875814] ? sock_has_perm+0x1ea/0x280 [ 2851.876213] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2851.876701] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.877095] inet6_recvmsg+0x13b/0x6e0 [ 2851.877466] ? inet6_bind+0x120/0x120 [ 2851.877831] ? security_socket_recvmsg+0x95/0xc0 [ 2851.878269] ? inet6_bind+0x120/0x120 [ 2851.878620] sock_recvmsg+0xff/0x180 [ 2851.878970] __sys_recvfrom+0x1be/0x2f0 [ 2851.879346] ? __ia32_sys_send+0x100/0x100 [ 2851.879735] ? lock_downgrade+0x6d0/0x6d0 [ 2851.880165] ? wait_for_completion_io+0x270/0x270 [ 2851.880616] ? rcu_read_lock_any_held+0x75/0xa0 [ 2851.881041] ? vfs_write+0x354/0xa70 [ 2851.881393] ? fput_many+0x2f/0x1a0 [ 2851.881738] ? ksys_write+0x1a9/0x260 [ 2851.882099] ? __ia32_sys_read+0xb0/0xb0 [ 2851.882479] __x64_sys_recvfrom+0xdd/0x1b0 [ 2851.882874] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2851.883344] do_syscall_64+0x33/0x40 [ 2851.883694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2851.884202] RIP: 0033:0x7f4d5c7edb19 [ 2851.884551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2851.886192] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2851.886879] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2851.887505] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2851.892181] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2851.892826] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2851.893463] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 [ 2851.897477] FAULT_INJECTION: forcing a failure. [ 2851.897477] name failslab, interval 1, probability 0, space 0, times 0 [ 2851.898664] CPU: 0 PID: 12897 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2851.900252] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.901932] Call Trace: [ 2851.902436] dump_stack+0x107/0x167 [ 2851.903114] should_fail.cold+0x5/0xa [ 2851.903823] ? create_object.isra.0+0x3a/0xa20 [ 2851.904431] should_failslab+0x5/0x20 [ 2851.904756] kmem_cache_alloc+0x5b/0x310 [ 2851.905100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2851.905543] create_object.isra.0+0x3a/0xa20 [ 2851.905956] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2851.906438] kmem_cache_alloc_node+0x169/0x330 [ 2851.906882] __alloc_skb+0x6d/0x5b0 [ 2851.907240] __tcp_send_ack.part.0+0x67/0x650 [ 2851.907302] FAULT_INJECTION: forcing a failure. [ 2851.907302] name failslab, interval 1, probability 0, space 0, times 0 [ 2851.907659] tcp_send_ack+0x7d/0xa0 [ 2851.909598] __tcp_ack_snd_check+0x156/0x9f0 [ 2851.910080] tcp_rcv_established+0x955/0x1e30 [ 2851.910546] ? tcp_check_space+0x6c0/0x6c0 [ 2851.911004] tcp_v6_do_rcv+0x7b3/0x1520 [ 2851.911426] __release_sock+0x139/0x3b0 [ 2851.911855] release_sock+0x54/0x1b0 [ 2851.912369] sk_wait_data+0x1a7/0x4d0 [ 2851.913028] ? sock_set_mark+0x130/0x130 [ 2851.913712] ? asm_sysvec_call_function_single+0x12/0x20 [ 2851.914665] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2851.915523] ? tcp_recvmsg+0x76b/0x2930 [ 2851.916176] tcp_recvmsg+0x17b2/0x2930 [ 2851.916535] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.916905] ? sock_has_perm+0x1ea/0x280 [ 2851.917262] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2851.917707] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.918071] inet6_recvmsg+0x13b/0x6e0 [ 2851.918402] ? inet6_bind+0x120/0x120 [ 2851.918733] ? security_socket_recvmsg+0x95/0xc0 [ 2851.919144] ? inet6_bind+0x120/0x120 [ 2851.919469] sock_recvmsg+0xff/0x180 [ 2851.919793] __sys_recvfrom+0x1be/0x2f0 [ 2851.920212] ? __ia32_sys_send+0x100/0x100 [ 2851.920579] ? lock_downgrade+0x6d0/0x6d0 [ 2851.920963] ? wait_for_completion_io+0x270/0x270 [ 2851.921374] ? rcu_read_lock_any_held+0x75/0xa0 [ 2851.921769] ? vfs_write+0x354/0xa70 [ 2851.922099] ? fput_many+0x2f/0x1a0 [ 2851.922409] ? ksys_write+0x1a9/0x260 [ 2851.922737] ? __ia32_sys_read+0xb0/0xb0 [ 2851.923099] __x64_sys_recvfrom+0xdd/0x1b0 [ 2851.923459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2851.923901] do_syscall_64+0x33/0x40 [ 2851.924232] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2851.924712] RIP: 0033:0x7fd4b1105b19 [ 2851.925043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2851.926571] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2851.927229] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2851.927831] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2851.929041] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2851.930606] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2851.932169] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2851.932883] CPU: 1 PID: 12898 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2851.933524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.934225] Call Trace: [ 2851.934472] dump_stack+0x107/0x167 [ 2851.934797] should_fail.cold+0x5/0xa [ 2851.935139] ? create_object.isra.0+0x3a/0xa20 [ 2851.935544] should_failslab+0x5/0x20 [ 2851.935886] kmem_cache_alloc+0x5b/0x310 [ 2851.936263] ? lock_acquire+0x197/0x470 [ 2851.940254] create_object.isra.0+0x3a/0xa20 [ 2851.940642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2851.941088] kmem_cache_alloc+0x159/0x310 [ 2851.941462] skb_clone+0x14f/0x3d0 [ 2851.941787] dev_queue_xmit_nit+0x3a7/0xb00 [ 2851.942182] dev_hard_start_xmit+0xab/0x6f0 [ 2851.942570] __dev_queue_xmit+0x17ec/0x2710 [ 2851.942965] ? find_held_lock+0x2c/0x110 [ 2851.943334] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2851.948223] ? mark_held_locks+0x9e/0xe0 [ 2851.948599] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2851.949069] ip6_finish_output2+0x17b4/0x1fe0 [ 2851.949492] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2851.949943] ip6_output+0x3aa/0x7e0 [ 2851.950286] ip6_xmit+0x10a1/0x1c40 [ 2851.950628] ? ip6_append_data+0x330/0x330 [ 2851.951006] ? inet6_csk_xmit+0xc6/0x680 [ 2851.951368] ? lock_release+0x680/0x680 [ 2851.951720] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2851.952169] ? inet6_csk_route_req+0x850/0x850 [ 2851.952581] ? md5_transform+0x19/0xde0 [ 2851.952944] inet6_csk_xmit+0x315/0x680 [ 2851.953299] ? inet6_csk_update_pmtu+0x190/0x190 [ 2851.972305] ? __local_bh_enable_ip+0x9d/0x100 [ 2851.972688] ? csum_ipv6_magic+0x1e/0x70 [ 2851.973055] ? inet6_csk_update_pmtu+0x190/0x190 [ 2851.973485] __tcp_transmit_skb+0x18ef/0x35d0 [ 2851.973905] ? __tcp_select_window+0x900/0x900 [ 2851.974305] ? tcp_trim_head+0x470/0x470 [ 2851.974676] ? lock_acquire+0x197/0x470 [ 2851.975028] ? find_held_lock+0x2c/0x110 [ 2851.975398] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2851.975814] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2851.976216] ? tcp_push_one+0x100/0x100 [ 2851.976581] ? tcp_current_mss+0x1f8/0x370 [ 2851.976956] ? tcp_trim_head+0x470/0x470 [ 2851.977317] ? __mod_timer+0x7fb/0xd10 [ 2851.977674] tcp_retransmit_skb+0x28/0x240 [ 2851.978057] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2851.978554] tcp_xmit_retransmit_queue+0x57/0x70 [ 2851.978971] tcp_xmit_recovery+0x86/0x180 [ 2851.979340] tcp_ack+0x25d9/0x5690 [ 2851.979689] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2851.980151] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2851.980624] ? tcp_validate_incoming+0x431/0x16a0 [ 2851.981058] tcp_rcv_established+0x57e/0x1e30 [ 2851.981462] ? tcp_check_space+0x6c0/0x6c0 [ 2851.981851] tcp_v6_do_rcv+0x7b3/0x1520 [ 2851.982219] __release_sock+0x139/0x3b0 [ 2851.982582] release_sock+0x54/0x1b0 [ 2851.982917] sk_wait_data+0x1a7/0x4d0 [ 2851.983265] ? sock_set_mark+0x130/0x130 [ 2851.983644] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2851.984106] ? tcp_send_ack+0x7d/0xa0 [ 2851.988431] tcp_recvmsg+0x17b2/0x2930 [ 2851.988798] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.989181] ? sock_has_perm+0x1ea/0x280 [ 2851.989554] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2851.990019] ? tcp_splice_read+0x8c0/0x8c0 [ 2851.990394] inet6_recvmsg+0x13b/0x6e0 [ 2851.990741] ? inet6_bind+0x120/0x120 [ 2851.991086] ? security_socket_recvmsg+0x95/0xc0 [ 2851.991505] ? inet6_bind+0x120/0x120 [ 2851.991846] sock_recvmsg+0xff/0x180 [ 2852.000210] __sys_recvfrom+0x1be/0x2f0 [ 2852.008248] ? __ia32_sys_send+0x100/0x100 [ 2852.008619] ? lock_downgrade+0x6d0/0x6d0 [ 2852.009008] ? wait_for_completion_io+0x270/0x270 [ 2852.009427] ? rcu_read_lock_any_held+0x75/0xa0 [ 2852.009833] ? vfs_write+0x354/0xa70 [ 2852.010166] ? fput_many+0x2f/0x1a0 [ 2852.010504] ? ksys_write+0x1a9/0x260 [ 2852.010843] ? __ia32_sys_read+0xb0/0xb0 [ 2852.011214] __x64_sys_recvfrom+0xdd/0x1b0 [ 2852.011591] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2852.012045] do_syscall_64+0x33/0x40 [ 2852.016415] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2852.016863] RIP: 0033:0x7f7abd046b19 [ 2852.017200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2852.018770] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2852.019441] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2852.020057] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2852.024643] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2852.025258] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2852.025870] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 10:59:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 10:59:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 78) 10:59:51 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 57) [ 2853.581577] FAULT_INJECTION: forcing a failure. [ 2853.581577] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.583067] CPU: 0 PID: 12921 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2853.583732] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2853.584610] Call Trace: [ 2853.584858] dump_stack+0x107/0x167 [ 2853.585176] should_fail.cold+0x5/0xa [ 2853.585548] ? create_object.isra.0+0x3a/0xa20 [ 2853.585933] should_failslab+0x5/0x20 [ 2853.586253] kmem_cache_alloc+0x5b/0x310 [ 2853.586646] create_object.isra.0+0x3a/0xa20 [ 2853.587111] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2853.587593] kmem_cache_alloc+0x159/0x310 [ 2853.588117] skb_clone+0x14f/0x3d0 [ 2853.588506] dev_queue_xmit_nit+0x3a7/0xb00 [ 2853.589016] dev_hard_start_xmit+0xab/0x6f0 [ 2853.589435] __dev_queue_xmit+0x17ec/0x2710 [ 2853.589860] ? find_held_lock+0x2c/0x110 [ 2853.590203] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2853.590641] ? mark_held_locks+0x9e/0xe0 [ 2853.591133] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2853.591631] ip6_finish_output2+0x17b4/0x1fe0 [ 2853.592338] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2853.592992] ip6_output+0x3aa/0x7e0 [ 2853.593328] ip6_xmit+0x10a1/0x1c40 [ 2853.593726] ? ip6_append_data+0x330/0x330 [ 2853.594163] ? inet6_csk_xmit+0xc6/0x680 [ 2853.594590] ? lock_release+0x680/0x680 [ 2853.598320] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2853.598967] ? inet6_csk_route_req+0x850/0x850 [ 2853.599429] ? md5_transform+0x19/0xde0 [ 2853.599802] inet6_csk_xmit+0x315/0x680 [ 2853.600240] ? inet6_csk_update_pmtu+0x190/0x190 [ 2853.600734] ? __local_bh_enable_ip+0x9d/0x100 [ 2853.601225] ? csum_ipv6_magic+0x1e/0x70 [ 2853.601647] ? inet6_csk_update_pmtu+0x190/0x190 [ 2853.602128] __tcp_transmit_skb+0x18ef/0x35d0 [ 2853.602633] ? __tcp_select_window+0x900/0x900 [ 2853.603097] ? tcp_trim_head+0x470/0x470 [ 2853.603520] ? slab_free_freelist_hook+0xa9/0x180 [ 2853.604003] ? kmem_cache_free+0xa7/0x2d0 [ 2853.604462] ? lock_acquire+0x197/0x470 [ 2853.604862] ? find_held_lock+0x2c/0x110 [ 2853.605249] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2853.606477] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2853.606918] ? tcp_push_one+0x100/0x100 [ 2853.610510] ? tcp_current_mss+0x1f8/0x370 [ 2853.610923] ? tcp_trim_head+0x470/0x470 [ 2853.611272] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2853.611775] ? quarantine_put+0x8b/0x1a0 [ 2853.612183] ? tcp_rack_mark_lost+0xa9/0x270 [ 2853.612629] ? __mod_timer+0x7fb/0xd10 [ 2853.613022] tcp_retransmit_skb+0x28/0x240 [ 2853.613442] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2853.613975] tcp_xmit_retransmit_queue+0x57/0x70 [ 2853.614428] tcp_xmit_recovery+0x86/0x180 [ 2853.614785] tcp_ack+0x25d9/0x5690 [ 2853.615206] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2853.615688] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2853.616202] ? tcp_validate_incoming+0x431/0x16a0 [ 2853.616689] tcp_rcv_established+0x57e/0x1e30 [ 2853.617129] ? tcp_check_space+0x6c0/0x6c0 [ 2853.617576] tcp_v6_do_rcv+0x7b3/0x1520 [ 2853.617974] __release_sock+0x139/0x3b0 [ 2853.618326] release_sock+0x54/0x1b0 [ 2853.618691] sk_wait_data+0x1a7/0x4d0 [ 2853.619065] ? ktime_get+0x1c3/0x1f0 [ 2853.619442] ? sock_set_mark+0x130/0x130 [ 2853.619796] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2853.620337] ? tcp_mstamp_refresh+0x12/0xa0 [ 2853.620754] ? sock_rfree+0x107/0x170 [ 2853.621132] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2853.621623] tcp_recvmsg+0x17b2/0x2930 [ 2853.622026] ? tcp_splice_read+0x8c0/0x8c0 [ 2853.622464] ? sock_has_perm+0x1ea/0x280 [ 2853.622866] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2853.623325] ? tcp_splice_read+0x8c0/0x8c0 [ 2853.623737] inet6_recvmsg+0x13b/0x6e0 [ 2853.624133] ? inet6_bind+0x120/0x120 [ 2853.624553] ? security_socket_recvmsg+0x95/0xc0 [ 2853.625072] ? inet6_bind+0x120/0x120 [ 2853.625456] sock_recvmsg+0xff/0x180 [ 2853.625798] __sys_recvfrom+0x1be/0x2f0 [ 2853.626210] ? __ia32_sys_send+0x100/0x100 [ 2853.626638] ? lock_downgrade+0x6d0/0x6d0 [ 2853.627094] ? wait_for_completion_io+0x270/0x270 [ 2853.627640] ? rcu_read_lock_any_held+0x75/0xa0 [ 2853.628120] ? vfs_write+0x354/0xa70 [ 2853.628521] ? fput_many+0x2f/0x1a0 [ 2853.628901] ? ksys_write+0x1a9/0x260 [ 2853.629248] ? __ia32_sys_read+0xb0/0xb0 [ 2853.629674] __x64_sys_recvfrom+0xdd/0x1b0 [ 2853.630140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2853.630655] do_syscall_64+0x33/0x40 [ 2853.631046] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2853.631580] RIP: 0033:0x7f7abd046b19 [ 2853.631969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2853.633763] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2853.634526] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2853.635230] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2853.635949] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2853.636674] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2853.637345] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2853.647148] FAULT_INJECTION: forcing a failure. [ 2853.647148] name failslab, interval 1, probability 0, space 0, times 0 [ 2853.648182] CPU: 1 PID: 12922 Comm: syz-executor.1 Not tainted 5.10.211 #1 [ 2853.648809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2853.649517] Call Trace: [ 2853.649755] dump_stack+0x107/0x167 [ 2853.650080] should_fail.cold+0x5/0xa [ 2853.650415] ? create_object.isra.0+0x3a/0xa20 [ 2853.650818] should_failslab+0x5/0x20 [ 2853.651156] kmem_cache_alloc+0x5b/0x310 [ 2853.651520] create_object.isra.0+0x3a/0xa20 [ 2853.651908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2853.652380] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2853.652825] ? __tcp_send_ack.part.0+0x67/0x650 [ 2853.653243] __alloc_skb+0xb1/0x5b0 [ 2853.653568] __tcp_send_ack.part.0+0x67/0x650 [ 2853.653962] tcp_send_ack+0x7d/0xa0 [ 2853.654291] tcp_cleanup_rbuf+0x468/0x5a0 [ 2853.654657] tcp_recvmsg+0xb85/0x2930 [ 2853.655013] ? tcp_splice_read+0x8c0/0x8c0 [ 2853.655391] ? sock_has_perm+0x1ea/0x280 [ 2853.655762] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2853.656235] ? tcp_splice_read+0x8c0/0x8c0 [ 2853.656594] inet6_recvmsg+0x13b/0x6e0 [ 2853.656914] ? inet6_bind+0x120/0x120 [ 2853.657230] ? security_socket_recvmsg+0x95/0xc0 [ 2853.657618] ? inet6_bind+0x120/0x120 [ 2853.657927] sock_recvmsg+0xff/0x180 [ 2853.658236] __sys_recvfrom+0x1be/0x2f0 [ 2853.658560] ? __ia32_sys_send+0x100/0x100 [ 2853.658906] ? lock_downgrade+0x6d0/0x6d0 [ 2853.659268] ? wait_for_completion_io+0x270/0x270 [ 2853.659663] ? rcu_read_lock_any_held+0x75/0xa0 [ 2853.660041] ? vfs_write+0x354/0xa70 [ 2853.660401] ? fput_many+0x2f/0x1a0 [ 2853.660716] ? ksys_write+0x1a9/0x260 [ 2853.661029] ? __ia32_sys_read+0xb0/0xb0 [ 2853.661360] __x64_sys_recvfrom+0xdd/0x1b0 [ 2853.661700] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2853.662114] do_syscall_64+0x33/0x40 [ 2853.662422] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2853.662831] RIP: 0033:0x7f4d5c7edb19 [ 2853.663132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2853.668612] RSP: 002b:00007f4d59d42188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2853.669221] RAX: ffffffffffffffda RBX: 00007f4d5c901020 RCX: 00007f4d5c7edb19 [ 2853.669791] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2853.670357] RBP: 00007f4d59d421d0 R08: 0000000000000000 R09: 0000000000000000 [ 2853.670919] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2853.671484] R13: 00007ffcf7a7fe5f R14: 00007f4d59d42300 R15: 0000000000022000 11:00:07 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) 11:00:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 79) 11:00:07 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 58) 11:00:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x2}, 0x11a98, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x8) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x540, 0xcd08, 0x0, 0x0) 11:00:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x3) 11:00:07 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd02, 0x0, 0x0) 11:00:07 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:08 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2869.051309] FAULT_INJECTION: forcing a failure. [ 2869.051309] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.052684] CPU: 0 PID: 12947 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2869.053347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.054094] Call Trace: [ 2869.054337] dump_stack+0x107/0x167 [ 2869.054536] FAULT_INJECTION: forcing a failure. [ 2869.054536] name failslab, interval 1, probability 0, space 0, times 0 [ 2869.054658] should_fail.cold+0x5/0xa [ 2869.055910] should_failslab+0x5/0x20 [ 2869.056268] __kmalloc_node_track_caller+0x74/0x3b0 [ 2869.056746] ? __tcp_send_ack.part.0+0x67/0x650 [ 2869.057149] ? kmem_cache_free+0xa7/0x2d0 [ 2869.057506] __alloc_skb+0xb1/0x5b0 [ 2869.057823] __tcp_send_ack.part.0+0x67/0x650 [ 2869.058239] ? kmem_cache_free+0x249/0x2d0 [ 2869.058623] tcp_send_ack+0x7d/0xa0 [ 2869.058943] tcp_cleanup_rbuf+0x468/0x5a0 [ 2869.059299] tcp_recvmsg+0xb85/0x2930 [ 2869.059642] ? tcp_splice_read+0x8c0/0x8c0 [ 2869.060019] ? sock_has_perm+0x1ea/0x280 [ 2869.060788] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2869.061853] ? tcp_splice_read+0x8c0/0x8c0 [ 2869.062686] inet6_recvmsg+0x13b/0x6e0 [ 2869.063400] ? inet6_bind+0x120/0x120 [ 2869.064157] ? security_socket_recvmsg+0x95/0xc0 [ 2869.065265] ? inet6_bind+0x120/0x120 [ 2869.066122] sock_recvmsg+0xff/0x180 [ 2869.066956] __sys_recvfrom+0x1be/0x2f0 [ 2869.067861] ? __ia32_sys_send+0x100/0x100 [ 2869.068793] ? lock_downgrade+0x6d0/0x6d0 [ 2869.069749] ? wait_for_completion_io+0x270/0x270 [ 2869.070802] ? rcu_read_lock_any_held+0x75/0xa0 [ 2869.071824] ? vfs_write+0x354/0xa70 [ 2869.072655] ? fput_many+0x2f/0x1a0 [ 2869.073487] ? ksys_write+0x1a9/0x260 [ 2869.074328] ? __ia32_sys_read+0xb0/0xb0 [ 2869.075238] __x64_sys_recvfrom+0xdd/0x1b0 [ 2869.076170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.077306] do_syscall_64+0x33/0x40 [ 2869.078118] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2869.079202] RIP: 0033:0x7fd4b1105b19 [ 2869.080020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.084203] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2869.085091] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2869.085698] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2869.086308] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.086932] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2869.087547] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2869.088193] CPU: 1 PID: 12941 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2869.096411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2869.097139] Call Trace: [ 2869.097394] dump_stack+0x107/0x167 [ 2869.097729] should_fail.cold+0x5/0xa [ 2869.098081] ? create_object.isra.0+0x3a/0xa20 [ 2869.104668] should_failslab+0x5/0x20 [ 2869.104998] kmem_cache_alloc+0x5b/0x310 [ 2869.105339] create_object.isra.0+0x3a/0xa20 [ 2869.105703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2869.106134] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2869.106557] ? __tcp_send_ack.part.0+0x67/0x650 [ 2869.107039] __alloc_skb+0xb1/0x5b0 [ 2869.107350] __tcp_send_ack.part.0+0x67/0x650 [ 2869.107723] tcp_send_ack+0x7d/0xa0 [ 2869.108027] tcp_cleanup_rbuf+0x468/0x5a0 [ 2869.108575] tcp_recvmsg+0xb85/0x2930 [ 2869.108900] ? tcp_splice_read+0x8c0/0x8c0 [ 2869.109249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2869.109684] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2869.110121] ? trace_hardirqs_on+0x5b/0x180 [ 2869.110470] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2869.110914] ? tcp_splice_read+0x8c0/0x8c0 [ 2869.111257] inet6_recvmsg+0x13b/0x6e0 [ 2869.111580] ? inet6_bind+0x120/0x120 [ 2869.112197] ? security_socket_recvmsg+0x95/0xc0 [ 2869.128641] ? inet6_bind+0x120/0x120 [ 2869.128990] sock_recvmsg+0xff/0x180 [ 2869.129332] __sys_recvfrom+0x1be/0x2f0 [ 2869.129693] ? __ia32_sys_send+0x100/0x100 [ 2869.130098] ? wait_for_completion_io+0x270/0x270 [ 2869.130534] ? rcu_read_lock_any_held+0x75/0xa0 [ 2869.130949] ? vfs_write+0x354/0xa70 [ 2869.131288] ? fput_many+0x2f/0x1a0 [ 2869.131619] ? ksys_write+0x1a9/0x260 [ 2869.132472] ? __ia32_sys_read+0xb0/0xb0 [ 2869.132820] __x64_sys_recvfrom+0xdd/0x1b0 [ 2869.133169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2869.144542] do_syscall_64+0x33/0x40 [ 2869.144855] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2869.145270] RIP: 0033:0x7f7abd046b19 [ 2869.145578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2869.147043] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2869.147662] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2869.148231] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2869.176555] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2869.177194] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2869.177801] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:00:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x4) 11:00:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 59) 11:00:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:09 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 1) 11:00:09 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) 11:00:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x5b0, 0xcd08, 0x0, 0x0) 11:00:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/scsi', 0x20802, 0x1) recvfrom$inet6(r3, &(0x7f0000000240)=""/181, 0xb5, 0x201c3, &(0x7f0000000140)={0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00', 0x7fff}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x72, 0xff, 0x7f, 0x0, 0x0, 0x2, 0x1200, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcce5, 0x2, @perf_config_ext={0x7, 0x10000}, 0x100, 0x5, 0x1, 0x1, 0x9, 0x80000000, 0x40, 0x0, 0xc9, 0x0, 0x5}, 0x0, 0xf, r3, 0x9) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) sendfile(r4, r5, &(0x7f00000004c0)=0x5, 0x4) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2870.406403] FAULT_INJECTION: forcing a failure. [ 2870.406403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2870.407492] CPU: 1 PID: 12975 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2870.408074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.408756] Call Trace: [ 2870.408983] dump_stack+0x107/0x167 [ 2870.409285] should_fail.cold+0x5/0xa [ 2870.409606] _copy_to_iter+0x264/0x12d0 [ 2870.409939] ? mark_lock+0xf5/0x2df0 [ 2870.410251] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2870.410654] ? __virt_addr_valid+0x170/0x5c0 [ 2870.411034] ? __check_object_size+0x319/0x440 [ 2870.411470] simple_copy_to_iter+0x4c/0x70 [ 2870.411866] __skb_datagram_iter+0x122/0x880 [ 2870.412255] ? do_raw_spin_lock+0x121/0x260 [ 2870.412666] ? zerocopy_sg_from_iter+0x110/0x110 [ 2870.413059] ? mark_held_locks+0x9e/0xe0 [ 2870.413400] skb_copy_datagram_iter+0x88/0x190 [ 2870.413780] tcp_recvmsg+0x13b5/0x2930 [ 2870.414117] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.414470] ? sock_has_perm+0x1ea/0x280 [ 2870.414804] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2870.415226] ? lock_downgrade+0x6d0/0x6d0 [ 2870.415568] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.415996] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.416359] inet6_recvmsg+0x13b/0x6e0 [ 2870.416686] ? inet6_bind+0x120/0x120 [ 2870.417012] ? security_socket_recvmsg+0x95/0xc0 [ 2870.417399] ? inet6_bind+0x120/0x120 [ 2870.417714] sock_recvmsg+0xff/0x180 [ 2870.418024] __sys_recvfrom+0x1be/0x2f0 [ 2870.418354] ? __ia32_sys_send+0x100/0x100 [ 2870.418700] ? lock_downgrade+0x6d0/0x6d0 [ 2870.419065] ? wait_for_completion_io+0x270/0x270 [ 2870.419468] ? rcu_read_lock_any_held+0x75/0xa0 [ 2870.419850] ? vfs_write+0x354/0xa70 [ 2870.420159] ? fput_many+0x2f/0x1a0 [ 2870.420480] ? ksys_write+0x1a9/0x260 [ 2870.420801] ? __ia32_sys_read+0xb0/0xb0 [ 2870.421142] __x64_sys_recvfrom+0xdd/0x1b0 [ 2870.421495] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.421923] do_syscall_64+0x33/0x40 [ 2870.422234] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2870.422655] RIP: 0033:0x7f083c71fb19 [ 2870.422966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.424461] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2870.425082] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2870.425657] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2870.426237] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.426874] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2870.427513] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2870.801984] FAULT_INJECTION: forcing a failure. [ 2870.801984] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.803007] CPU: 0 PID: 12972 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2870.803586] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.804276] Call Trace: [ 2870.804544] dump_stack+0x107/0x167 [ 2870.804909] should_fail.cold+0x5/0xa [ 2870.805280] ? lock_release+0x680/0x680 [ 2870.805666] ? skb_clone+0x14f/0x3d0 [ 2870.806028] should_failslab+0x5/0x20 [ 2870.806395] kmem_cache_alloc+0x5b/0x310 [ 2870.806792] skb_clone+0x14f/0x3d0 [ 2870.807143] dev_queue_xmit_nit+0x3a7/0xb00 [ 2870.807567] dev_hard_start_xmit+0xab/0x6f0 [ 2870.807982] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.808512] __dev_queue_xmit+0x17ec/0x2710 [ 2870.808930] ? find_held_lock+0x2c/0x110 [ 2870.809319] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2870.809759] ? mark_held_locks+0x9e/0xe0 [ 2870.810150] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2870.810660] ip6_finish_output2+0x17b4/0x1fe0 [ 2870.811102] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2870.811582] ip6_output+0x3aa/0x7e0 [ 2870.811942] ip6_xmit+0x10a1/0x1c40 [ 2870.812303] ? ip6_append_data+0x330/0x330 [ 2870.812765] ? inet6_csk_xmit+0xc6/0x680 [ 2870.813119] ? lock_release+0x680/0x680 [ 2870.813462] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2870.813888] ? inet6_csk_route_req+0x850/0x850 [ 2870.814283] ? md5_transform+0x19/0xde0 [ 2870.814638] inet6_csk_xmit+0x315/0x680 [ 2870.814987] ? inet6_csk_update_pmtu+0x190/0x190 [ 2870.815392] ? __local_bh_enable_ip+0x9d/0x100 [ 2870.815790] ? csum_ipv6_magic+0x1e/0x70 [ 2870.816145] ? inet6_csk_update_pmtu+0x190/0x190 [ 2870.816576] __tcp_transmit_skb+0x18ef/0x35d0 [ 2870.816976] ? __tcp_select_window+0x900/0x900 [ 2870.817369] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2870.817812] ? __tcp_send_ack.part.0+0x67/0x650 [ 2870.818209] ? memset+0x20/0x50 [ 2870.818495] ? __alloc_skb+0x388/0x5b0 [ 2870.818837] __tcp_send_ack.part.0+0x3e0/0x650 [ 2870.819232] tcp_send_ack+0x7d/0xa0 [ 2870.819545] tcp_cleanup_rbuf+0x468/0x5a0 [ 2870.819905] tcp_recvmsg+0xb85/0x2930 [ 2870.820249] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.820636] ? sock_has_perm+0x1ea/0x280 [ 2870.820995] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.821450] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.821813] inet6_recvmsg+0x13b/0x6e0 [ 2870.822150] ? inet6_bind+0x120/0x120 [ 2870.822485] ? security_socket_recvmsg+0x95/0xc0 [ 2870.822893] ? inet6_bind+0x120/0x120 [ 2870.823222] sock_recvmsg+0xff/0x180 [ 2870.823547] __sys_recvfrom+0x1be/0x2f0 [ 2870.823894] ? __ia32_sys_send+0x100/0x100 [ 2870.824260] ? lock_downgrade+0x6d0/0x6d0 [ 2870.824665] ? wait_for_completion_io+0x270/0x270 [ 2870.825090] ? rcu_read_lock_any_held+0x75/0xa0 [ 2870.825496] ? vfs_write+0x354/0xa70 [ 2870.825826] ? fput_many+0x2f/0x1a0 [ 2870.826144] ? ksys_write+0x1a9/0x260 [ 2870.826477] ? __ia32_sys_read+0xb0/0xb0 [ 2870.826838] __x64_sys_recvfrom+0xdd/0x1b0 [ 2870.827209] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.827656] do_syscall_64+0x33/0x40 [ 2870.827987] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2870.828461] RIP: 0033:0x7f7abd046b19 [ 2870.828823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.830504] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2870.831211] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2870.831871] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2870.832616] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.833277] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2870.833934] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2870.847569] FAULT_INJECTION: forcing a failure. [ 2870.847569] name failslab, interval 1, probability 0, space 0, times 0 [ 2870.848685] CPU: 1 PID: 12978 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2870.849271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2870.849964] Call Trace: [ 2870.850195] dump_stack+0x107/0x167 [ 2870.850514] should_fail.cold+0x5/0xa [ 2870.850854] should_failslab+0x5/0x20 [ 2870.851180] __kmalloc_node_track_caller+0x74/0x3b0 [ 2870.851613] ? __tcp_send_ack.part.0+0x67/0x650 [ 2870.852027] __alloc_skb+0xb1/0x5b0 [ 2870.852419] __tcp_send_ack.part.0+0x67/0x650 [ 2870.852849] tcp_send_ack+0x7d/0xa0 [ 2870.853192] tcp_cleanup_rbuf+0x468/0x5a0 [ 2870.853549] tcp_recvmsg+0xb85/0x2930 [ 2870.853885] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.854242] ? sock_has_perm+0x1ea/0x280 [ 2870.854594] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2870.855033] ? tcp_splice_read+0x8c0/0x8c0 [ 2870.855391] inet6_recvmsg+0x13b/0x6e0 [ 2870.855722] ? inet6_bind+0x120/0x120 [ 2870.856046] ? security_socket_recvmsg+0x95/0xc0 [ 2870.856473] ? inet6_bind+0x120/0x120 [ 2870.856796] sock_recvmsg+0xff/0x180 [ 2870.857116] __sys_recvfrom+0x1be/0x2f0 [ 2870.857449] ? __ia32_sys_send+0x100/0x100 [ 2870.857804] ? lock_downgrade+0x6d0/0x6d0 [ 2870.858182] ? wait_for_completion_io+0x270/0x270 [ 2870.858594] ? rcu_read_lock_any_held+0x75/0xa0 [ 2870.858990] ? vfs_write+0x354/0xa70 [ 2870.859314] ? fput_many+0x2f/0x1a0 [ 2870.859619] ? ksys_write+0x1a9/0x260 [ 2870.859936] ? __ia32_sys_read+0xb0/0xb0 [ 2870.860284] __x64_sys_recvfrom+0xdd/0x1b0 [ 2870.860658] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2870.861092] do_syscall_64+0x33/0x40 [ 2870.861408] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2870.861842] RIP: 0033:0x7fd4b1105b19 [ 2870.862156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2870.863629] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2870.864248] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2870.864919] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2870.865497] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2870.866078] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2870.866654] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:00:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:25 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x6) 11:00:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 60) 11:00:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 11:00:25 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 2) 11:00:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x620, 0xcd08, 0x0, 0x0) 11:00:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x2a0, 0xcd08, 0x0, 0x0) 11:00:25 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000f00), 0x0, 0x40) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x4f}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)={0x8, 0x4, 0x2, 0x1, 0x7, [{0x6, 0x7, 0x42, '\x00', 0xa00}, {0x5, 0x7fffffff, 0x401, '\x00', 0x8}, {0xd3, 0x81, 0x100000000}, {0xe5a4, 0xfff, 0x4, '\x00', 0x4}, {0x9, 0xffffffffffffffc3, 0x3, '\x00', 0x402}, {0x0, 0x2, 0x101, '\x00', 0x100}, {0x1, 0x2, 0x0, '\x00', 0x200}]}) recvmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000580)=""/4, 0x4}, {&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f00000008c0)=""/135, 0x87}, {&(0x7f0000000980)=""/193, 0xc1}, {&(0x7f0000000a80)=""/139, 0x8b}, {&(0x7f0000000b40)=""/230, 0xe6}], 0xa, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x41) sendmsg$nl_generic(r1, &(0x7f0000000ec0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe204840d7a01431b}, 0xc, &(0x7f0000000680)={&(0x7f0000000dc0)={0xd0, 0x3c, 0x400, 0x70bd2a, 0x6f72e73e, {0xb}, [@typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@loopback}, @generic="6f7d8e124e4e786882d6f9815bf8a4bd89efa73ca6e577b6c33c57d77bfee3a76bee00b9203de520e8467343b2892869747f4327de97b64df789791d1acca62a6451b47e044f3d15769e091eae03977462cff730126d8343dc6ccb86b35dc8810cef8a8085760471ee5b37", @nested={0x34, 0x80, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @u32=0x5}, @generic="7521eebebe1937cb66b8adc9bb9648c5acaab2675337fc082a14c595e006470966b59c79a5231f1b"]}, @typed={0x8, 0x87, 0x0, 0x0, @uid=r5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x804}, 0x800) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:25 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2886.278407] FAULT_INJECTION: forcing a failure. [ 2886.278407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2886.279542] CPU: 0 PID: 13006 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2886.280180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.284972] Call Trace: [ 2886.285235] dump_stack+0x107/0x167 [ 2886.285594] should_fail.cold+0x5/0xa [ 2886.285973] _copy_to_iter+0x264/0x12d0 [ 2886.286363] ? mark_lock+0xf5/0x2df0 [ 2886.286729] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2886.287202] ? __virt_addr_valid+0x170/0x5c0 [ 2886.287624] ? __check_object_size+0x319/0x440 [ 2886.288070] simple_copy_to_iter+0x4c/0x70 [ 2886.288459] __skb_datagram_iter+0x4f7/0x880 [ 2886.288923] ? zerocopy_sg_from_iter+0x110/0x110 [ 2886.289384] skb_copy_datagram_iter+0x88/0x190 [ 2886.289824] tcp_recvmsg+0x13b5/0x2930 [ 2886.290214] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.290628] ? sock_has_perm+0x1ea/0x280 [ 2886.291015] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2886.291503] ? lock_downgrade+0x6d0/0x6d0 [ 2886.291903] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.292404] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.292828] inet6_recvmsg+0x13b/0x6e0 [ 2886.293203] ? inet6_bind+0x120/0x120 [ 2886.293563] ? security_socket_recvmsg+0x95/0xc0 [ 2886.294015] ? inet6_bind+0x120/0x120 [ 2886.294379] sock_recvmsg+0xff/0x180 [ 2886.294743] __sys_recvfrom+0x1be/0x2f0 [ 2886.295131] ? __ia32_sys_send+0x100/0x100 [ 2886.295532] ? lock_downgrade+0x6d0/0x6d0 [ 2886.295962] ? wait_for_completion_io+0x270/0x270 [ 2886.296424] ? rcu_read_lock_any_held+0x75/0xa0 [ 2886.296882] ? vfs_write+0x354/0xa70 [ 2886.297236] ? fput_many+0x2f/0x1a0 [ 2886.297588] ? ksys_write+0x1a9/0x260 [ 2886.297957] ? __ia32_sys_read+0xb0/0xb0 [ 2886.298347] __x64_sys_recvfrom+0xdd/0x1b0 [ 2886.298743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.299241] do_syscall_64+0x33/0x40 [ 2886.299599] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2886.300082] RIP: 0033:0x7f083c71fb19 [ 2886.300439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.302138] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2886.302852] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2886.303499] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2886.304158] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2886.304870] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2886.305541] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2886.623407] FAULT_INJECTION: forcing a failure. [ 2886.623407] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.624646] CPU: 1 PID: 12997 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2886.625256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.625970] Call Trace: [ 2886.626215] dump_stack+0x107/0x167 [ 2886.626541] should_fail.cold+0x5/0xa [ 2886.626883] ? create_object.isra.0+0x3a/0xa20 [ 2886.627290] should_failslab+0x5/0x20 [ 2886.627629] kmem_cache_alloc+0x5b/0x310 [ 2886.627995] create_object.isra.0+0x3a/0xa20 [ 2886.628382] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2886.628861] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2886.629306] ? __tcp_send_ack.part.0+0x67/0x650 [ 2886.629724] __alloc_skb+0xb1/0x5b0 [ 2886.630053] __tcp_send_ack.part.0+0x67/0x650 [ 2886.630444] ? kmem_cache_free+0x249/0x2d0 [ 2886.630818] tcp_send_ack+0x7d/0xa0 [ 2886.631137] tcp_cleanup_rbuf+0x468/0x5a0 [ 2886.631508] tcp_recvmsg+0xb85/0x2930 [ 2886.631866] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.632247] ? sock_has_perm+0x1ea/0x280 [ 2886.632655] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.633124] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.633503] inet6_recvmsg+0x13b/0x6e0 [ 2886.633853] ? inet6_bind+0x120/0x120 [ 2886.634201] ? security_socket_recvmsg+0x95/0xc0 [ 2886.634623] ? inet6_bind+0x120/0x120 [ 2886.634965] sock_recvmsg+0xff/0x180 [ 2886.635301] __sys_recvfrom+0x1be/0x2f0 [ 2886.635667] ? __ia32_sys_send+0x100/0x100 [ 2886.636040] ? lock_downgrade+0x6d0/0x6d0 [ 2886.636436] ? wait_for_completion_io+0x270/0x270 [ 2886.637348] ? rcu_read_lock_any_held+0x75/0xa0 [ 2886.637812] ? vfs_write+0x354/0xa70 [ 2886.638389] ? fput_many+0x2f/0x1a0 [ 2886.638753] ? ksys_write+0x1a9/0x260 [ 2886.639341] ? __ia32_sys_read+0xb0/0xb0 [ 2886.639747] __x64_sys_recvfrom+0xdd/0x1b0 [ 2886.640372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.640885] do_syscall_64+0x33/0x40 [ 2886.641462] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2886.641964] RIP: 0033:0x7fd4b1105b19 [ 2886.642541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.644411] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2886.645366] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2886.646243] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2886.647588] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2886.648284] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2886.649237] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2886.671019] FAULT_INJECTION: forcing a failure. [ 2886.671019] name failslab, interval 1, probability 0, space 0, times 0 [ 2886.672005] CPU: 1 PID: 13002 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2886.672608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2886.673328] Call Trace: [ 2886.673571] dump_stack+0x107/0x167 [ 2886.673898] should_fail.cold+0x5/0xa [ 2886.674242] ? create_object.isra.0+0x3a/0xa20 [ 2886.674654] should_failslab+0x5/0x20 [ 2886.674993] kmem_cache_alloc+0x5b/0x310 [ 2886.675359] create_object.isra.0+0x3a/0xa20 [ 2886.675747] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2886.676195] kmem_cache_alloc_node+0x169/0x330 [ 2886.676633] __alloc_skb+0x6d/0x5b0 [ 2886.676962] ? ktime_get+0x158/0x1f0 [ 2886.677299] __tcp_send_ack.part.0+0x67/0x650 [ 2886.677701] tcp_send_ack+0x7d/0xa0 [ 2886.678021] tcp_cleanup_rbuf+0x468/0x5a0 [ 2886.678387] tcp_recvmsg+0xb85/0x2930 [ 2886.678746] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.679122] ? sock_has_perm+0x1ea/0x280 [ 2886.679492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2886.679959] ? tcp_splice_read+0x8c0/0x8c0 [ 2886.680330] inet6_recvmsg+0x13b/0x6e0 [ 2886.700758] ? inet6_bind+0x120/0x120 [ 2886.701107] ? security_socket_recvmsg+0x95/0xc0 [ 2886.701529] ? inet6_bind+0x120/0x120 [ 2886.701876] sock_recvmsg+0xff/0x180 [ 2886.702213] __sys_recvfrom+0x1be/0x2f0 [ 2886.702570] ? __ia32_sys_send+0x100/0x100 [ 2886.702946] ? lock_downgrade+0x6d0/0x6d0 [ 2886.703345] ? wait_for_completion_io+0x270/0x270 [ 2886.703775] ? rcu_read_lock_any_held+0x75/0xa0 [ 2886.704184] ? vfs_write+0x354/0xa70 [ 2886.704531] ? fput_many+0x2f/0x1a0 [ 2886.704866] ? ksys_write+0x1a9/0x260 [ 2886.705203] ? __ia32_sys_read+0xb0/0xb0 [ 2886.705567] __x64_sys_recvfrom+0xdd/0x1b0 [ 2886.705943] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2886.706395] do_syscall_64+0x33/0x40 [ 2886.706724] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2886.707171] RIP: 0033:0x7f7abd046b19 [ 2886.707501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2886.709086] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2886.709749] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2886.710340] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2886.710963] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2886.711579] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2886.712196] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:00:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 11:00:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 61) 11:00:26 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 3) 11:00:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x310, 0xcd08, 0x0, 0x0) 11:00:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) dup3(0xffffffffffffffff, r3, 0x0) 11:00:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x690, 0xcd08, 0x0, 0x0) 11:00:26 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x7) [ 2887.864121] FAULT_INJECTION: forcing a failure. [ 2887.864121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2887.866579] CPU: 1 PID: 13038 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2887.867901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2887.869721] Call Trace: [ 2887.870236] dump_stack+0x107/0x167 [ 2887.870948] should_fail.cold+0x5/0xa [ 2887.871699] _copy_to_iter+0x264/0x12d0 [ 2887.872479] ? mark_lock+0xf5/0x2df0 [ 2887.872888] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2887.873335] ? __virt_addr_valid+0x170/0x5c0 [ 2887.873738] ? __check_object_size+0x319/0x440 [ 2887.874159] simple_copy_to_iter+0x4c/0x70 [ 2887.874546] __skb_datagram_iter+0x4f7/0x880 [ 2887.874956] ? zerocopy_sg_from_iter+0x110/0x110 [ 2887.875390] skb_copy_datagram_iter+0x88/0x190 [ 2887.875807] tcp_recvmsg+0x13b5/0x2930 [ 2887.876182] ? tcp_splice_read+0x8c0/0x8c0 [ 2887.876614] ? sock_has_perm+0x1ea/0x280 [ 2887.877000] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2887.877465] ? lock_downgrade+0x6d0/0x6d0 [ 2887.877845] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2887.878321] ? tcp_splice_read+0x8c0/0x8c0 [ 2887.878709] inet6_recvmsg+0x13b/0x6e0 [ 2887.879065] ? inet6_bind+0x120/0x120 [ 2887.879418] ? security_socket_recvmsg+0x95/0xc0 [ 2887.879850] ? inet6_bind+0x120/0x120 [ 2887.880205] sock_recvmsg+0xff/0x180 [ 2887.884568] __sys_recvfrom+0x1be/0x2f0 [ 2887.884950] ? __ia32_sys_send+0x100/0x100 [ 2887.885334] ? lock_downgrade+0x6d0/0x6d0 [ 2887.885739] ? wait_for_completion_io+0x270/0x270 [ 2887.886175] ? rcu_read_lock_any_held+0x75/0xa0 [ 2887.886597] ? vfs_write+0x354/0xa70 [ 2887.886940] ? fput_many+0x2f/0x1a0 [ 2887.887279] ? ksys_write+0x1a9/0x260 [ 2887.887629] ? __ia32_sys_read+0xb0/0xb0 [ 2887.888009] __x64_sys_recvfrom+0xdd/0x1b0 [ 2887.888395] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.888882] do_syscall_64+0x33/0x40 [ 2887.889225] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2887.889686] RIP: 0033:0x7f083c71fb19 [ 2887.890028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.891650] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2887.892329] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2887.892986] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2887.893622] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2887.894262] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2887.894901] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2888.263134] FAULT_INJECTION: forcing a failure. [ 2888.263134] name failslab, interval 1, probability 0, space 0, times 0 [ 2888.264295] CPU: 1 PID: 13034 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2888.264950] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.265711] Call Trace: [ 2888.265972] dump_stack+0x107/0x167 [ 2888.266313] should_fail.cold+0x5/0xa [ 2888.266682] ? create_object.isra.0+0x3a/0xa20 [ 2888.267129] should_failslab+0x5/0x20 [ 2888.267495] kmem_cache_alloc+0x5b/0x310 [ 2888.267870] ? lock_acquire+0x197/0x470 [ 2888.268245] create_object.isra.0+0x3a/0xa20 [ 2888.268651] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2888.269090] kmem_cache_alloc+0x159/0x310 [ 2888.269438] skb_clone+0x14f/0x3d0 [ 2888.269742] dev_queue_xmit_nit+0x3a7/0xb00 [ 2888.270103] dev_hard_start_xmit+0xab/0x6f0 [ 2888.270454] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2888.270883] __dev_queue_xmit+0x17ec/0x2710 [ 2888.271242] ? find_held_lock+0x2c/0x110 [ 2888.271574] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2888.271954] ? mark_held_locks+0x9e/0xe0 [ 2888.272288] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2888.272754] ip6_finish_output2+0x17b4/0x1fe0 [ 2888.273135] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2888.273554] ip6_output+0x3aa/0x7e0 [ 2888.273860] ip6_xmit+0x10a1/0x1c40 [ 2888.274176] ? ip6_append_data+0x330/0x330 [ 2888.274524] ? inet6_csk_xmit+0xc6/0x680 [ 2888.274864] ? lock_release+0x680/0x680 [ 2888.275188] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2888.275588] ? inet6_csk_route_req+0x850/0x850 [ 2888.275959] ? md5_transform+0x19/0xde0 [ 2888.276293] inet6_csk_xmit+0x315/0x680 [ 2888.276642] ? inet6_csk_update_pmtu+0x190/0x190 [ 2888.277043] ? __local_bh_enable_ip+0x9d/0x100 [ 2888.277415] ? csum_ipv6_magic+0x1e/0x70 [ 2888.277750] ? inet6_csk_update_pmtu+0x190/0x190 [ 2888.278141] __tcp_transmit_skb+0x18ef/0x35d0 [ 2888.278520] ? __tcp_select_window+0x900/0x900 [ 2888.278897] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2888.279321] ? __tcp_send_ack.part.0+0x67/0x650 [ 2888.279703] ? memset+0x20/0x50 [ 2888.279976] ? __alloc_skb+0x388/0x5b0 [ 2888.280302] __tcp_send_ack.part.0+0x3e0/0x650 [ 2888.280694] ? kmem_cache_free+0x249/0x2d0 [ 2888.281045] tcp_send_ack+0x7d/0xa0 [ 2888.281346] tcp_cleanup_rbuf+0x468/0x5a0 [ 2888.281683] tcp_recvmsg+0xb85/0x2930 [ 2888.282013] ? tcp_splice_read+0x8c0/0x8c0 [ 2888.282363] ? sock_has_perm+0x1ea/0x280 [ 2888.282711] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2888.283137] ? tcp_splice_read+0x8c0/0x8c0 [ 2888.283480] inet6_recvmsg+0x13b/0x6e0 [ 2888.283799] ? inet6_bind+0x120/0x120 [ 2888.284117] ? security_socket_recvmsg+0x95/0xc0 [ 2888.284502] ? inet6_bind+0x120/0x120 [ 2888.284869] sock_recvmsg+0xff/0x180 [ 2888.285212] __sys_recvfrom+0x1be/0x2f0 [ 2888.285591] ? __ia32_sys_send+0x100/0x100 [ 2888.285972] ? lock_downgrade+0x6d0/0x6d0 [ 2888.286378] ? wait_for_completion_io+0x270/0x270 [ 2888.286828] ? rcu_read_lock_any_held+0x75/0xa0 [ 2888.287257] ? vfs_write+0x354/0xa70 [ 2888.287601] ? fput_many+0x2f/0x1a0 [ 2888.287939] ? ksys_write+0x1a9/0x260 [ 2888.288301] ? __ia32_sys_read+0xb0/0xb0 [ 2888.292784] __x64_sys_recvfrom+0xdd/0x1b0 [ 2888.293183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.293650] do_syscall_64+0x33/0x40 [ 2888.293997] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2888.294463] RIP: 0033:0x7fd4b1105b19 [ 2888.294810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.296462] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2888.297156] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2888.297800] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2888.298451] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.299113] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2888.299763] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2888.322670] FAULT_INJECTION: forcing a failure. [ 2888.322670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2888.327776] CPU: 1 PID: 13040 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2888.328345] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2888.329073] Call Trace: [ 2888.329301] dump_stack+0x107/0x167 [ 2888.329609] should_fail.cold+0x5/0xa [ 2888.329937] _copy_to_iter+0x264/0x12d0 [ 2888.330292] ? zerocopy_sg_from_iter+0x110/0x110 [ 2888.330720] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2888.331182] ? __virt_addr_valid+0x170/0x5c0 [ 2888.331604] ? __check_object_size+0x319/0x440 [ 2888.332038] simple_copy_to_iter+0x4c/0x70 [ 2888.336778] __skb_datagram_iter+0x4f7/0x880 [ 2888.337143] ? zerocopy_sg_from_iter+0x110/0x110 [ 2888.337539] skb_copy_datagram_iter+0x88/0x190 [ 2888.337915] tcp_recvmsg+0x13b5/0x2930 [ 2888.338249] ? tcp_splice_read+0x8c0/0x8c0 [ 2888.338597] ? sock_has_perm+0x1ea/0x280 [ 2888.338936] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2888.339360] ? tcp_splice_read+0x8c0/0x8c0 [ 2888.339705] inet6_recvmsg+0x13b/0x6e0 [ 2888.340026] ? inet6_bind+0x120/0x120 [ 2888.340341] ? security_socket_recvmsg+0x95/0xc0 [ 2888.344768] ? inet6_bind+0x120/0x120 [ 2888.345089] sock_recvmsg+0xff/0x180 [ 2888.348740] __sys_recvfrom+0x1be/0x2f0 [ 2888.349074] ? __ia32_sys_send+0x100/0x100 [ 2888.349423] ? lock_downgrade+0x6d0/0x6d0 [ 2888.349788] ? wait_for_completion_io+0x270/0x270 [ 2888.350188] ? rcu_read_lock_any_held+0x75/0xa0 [ 2888.350576] ? vfs_write+0x354/0xa70 [ 2888.350893] ? fput_many+0x2f/0x1a0 [ 2888.351201] ? ksys_write+0x1a9/0x260 [ 2888.351518] ? __ia32_sys_read+0xb0/0xb0 [ 2888.351857] __x64_sys_recvfrom+0xdd/0x1b0 [ 2888.352206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.352652] do_syscall_64+0x33/0x40 [ 2888.352961] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2888.353384] RIP: 0033:0x7f7abd046b19 [ 2888.353697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.355196] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2888.355840] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2888.356419] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2888.357019] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.357596] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2888.358175] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:00:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:43 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = signalfd4(r0, &(0x7f0000000040)={[0x6]}, 0x8, 0x80800) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000140)={0x2, {0x2, 0xfff, 0x29, 0x101, 0x2}}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x380, 0xcd08, 0x0, 0x0) 11:00:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 62) 11:00:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x700, 0xcd08, 0x0, 0x0) 11:00:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x8) 11:00:43 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 4) 11:00:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) [ 2903.924073] FAULT_INJECTION: forcing a failure. [ 2903.924073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2903.926047] CPU: 1 PID: 13064 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2903.926764] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2903.927550] Call Trace: [ 2903.928140] dump_stack+0x107/0x167 [ 2903.928943] should_fail.cold+0x5/0xa [ 2903.929769] _copy_to_iter+0x264/0x12d0 [ 2903.930628] ? mark_lock+0xf5/0x2df0 [ 2903.931416] ? mark_lock+0xf5/0x2df0 [ 2903.932197] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2903.933339] ? __virt_addr_valid+0x170/0x5c0 [ 2903.934299] ? __check_object_size+0x319/0x440 [ 2903.935273] simple_copy_to_iter+0x4c/0x70 [ 2903.936166] __skb_datagram_iter+0x4f7/0x880 [ 2903.937147] ? zerocopy_sg_from_iter+0x110/0x110 [ 2903.938168] skb_copy_datagram_iter+0x88/0x190 [ 2903.939132] tcp_recvmsg+0x13b5/0x2930 [ 2903.939961] ? tcp_splice_read+0x8c0/0x8c0 [ 2903.940900] ? sock_has_perm+0x1ea/0x280 [ 2903.941774] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2903.942857] ? lock_downgrade+0x6d0/0x6d0 [ 2903.943735] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2903.944891] ? tcp_splice_read+0x8c0/0x8c0 [ 2903.945834] inet6_recvmsg+0x13b/0x6e0 [ 2903.946669] ? inet6_bind+0x120/0x120 [ 2903.947484] ? security_socket_recvmsg+0x95/0xc0 [ 2903.948517] ? inet6_bind+0x120/0x120 [ 2903.949491] sock_recvmsg+0xff/0x180 [ 2903.950326] __sys_recvfrom+0x1be/0x2f0 [ 2903.951264] ? __ia32_sys_send+0x100/0x100 [ 2903.952250] ? lock_downgrade+0x6d0/0x6d0 [ 2903.953197] ? wait_for_completion_io+0x270/0x270 [ 2903.954297] ? rcu_read_lock_any_held+0x75/0xa0 [ 2903.955404] ? vfs_write+0x354/0xa70 [ 2903.956244] ? fput_many+0x2f/0x1a0 [ 2903.957038] ? ksys_write+0x1a9/0x260 [ 2903.957865] ? __ia32_sys_read+0xb0/0xb0 [ 2903.958737] __x64_sys_recvfrom+0xdd/0x1b0 [ 2903.959684] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2903.960808] do_syscall_64+0x33/0x40 [ 2903.961596] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2903.962689] RIP: 0033:0x7f083c71fb19 [ 2903.963535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2903.967887] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2903.969618] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2903.971171] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2903.972691] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2903.974511] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2903.976036] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:00:43 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2904.360596] FAULT_INJECTION: forcing a failure. [ 2904.360596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2904.362604] CPU: 1 PID: 13065 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2904.366221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.366974] Call Trace: [ 2904.367228] dump_stack+0x107/0x167 [ 2904.367569] should_fail.cold+0x5/0xa [ 2904.367932] _copy_to_iter+0x264/0x12d0 [ 2904.368314] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2904.368777] ? __virt_addr_valid+0x170/0x5c0 [ 2904.369193] ? __check_object_size+0x319/0x440 [ 2904.369617] simple_copy_to_iter+0x4c/0x70 [ 2904.370007] __skb_datagram_iter+0x4f7/0x880 [ 2904.370415] ? zerocopy_sg_from_iter+0x110/0x110 [ 2904.370854] skb_copy_datagram_iter+0x88/0x190 [ 2904.371279] tcp_recvmsg+0x13b5/0x2930 [ 2904.371652] ? tcp_splice_read+0x8c0/0x8c0 [ 2904.372048] ? sock_has_perm+0x1ea/0x280 [ 2904.372427] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.372929] ? tcp_splice_read+0x8c0/0x8c0 [ 2904.373316] inet6_recvmsg+0x13b/0x6e0 [ 2904.373673] ? inet6_bind+0x120/0x120 [ 2904.374031] ? security_socket_recvmsg+0x95/0xc0 [ 2904.374462] ? inet6_bind+0x120/0x120 [ 2904.374812] sock_recvmsg+0xff/0x180 [ 2904.375163] __sys_recvfrom+0x1be/0x2f0 [ 2904.375527] ? __ia32_sys_send+0x100/0x100 [ 2904.375905] ? lock_downgrade+0x6d0/0x6d0 [ 2904.376311] ? wait_for_completion_io+0x270/0x270 [ 2904.376766] ? rcu_read_lock_any_held+0x75/0xa0 [ 2904.377203] ? vfs_write+0x354/0xa70 [ 2904.377547] ? fput_many+0x2f/0x1a0 [ 2904.377881] ? ksys_write+0x1a9/0x260 [ 2904.378232] ? __ia32_sys_read+0xb0/0xb0 [ 2904.378608] __x64_sys_recvfrom+0xdd/0x1b0 [ 2904.379001] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.379474] do_syscall_64+0x33/0x40 [ 2904.379821] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2904.380297] RIP: 0033:0x7fd4b1105b19 [ 2904.380645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.382301] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2904.382982] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2904.383619] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2904.384250] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2904.384897] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2904.385532] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2904.468707] FAULT_INJECTION: forcing a failure. [ 2904.468707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2904.470225] CPU: 0 PID: 13068 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2904.470883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2904.471581] Call Trace: [ 2904.471873] dump_stack+0x107/0x167 [ 2904.472193] should_fail.cold+0x5/0xa [ 2904.472560] _copy_to_iter+0x264/0x12d0 [ 2904.473120] ? find_held_lock+0x2c/0x110 [ 2904.473477] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2904.474030] ? __virt_addr_valid+0x170/0x5c0 [ 2904.474427] ? __check_object_size+0x319/0x440 [ 2904.474830] simple_copy_to_iter+0x4c/0x70 [ 2904.475201] __skb_datagram_iter+0x4f7/0x880 [ 2904.475587] ? zerocopy_sg_from_iter+0x110/0x110 [ 2904.476033] skb_copy_datagram_iter+0x88/0x190 [ 2904.476450] tcp_recvmsg+0x13b5/0x2930 [ 2904.476822] ? tcp_splice_read+0x8c0/0x8c0 [ 2904.477714] ? sock_has_perm+0x1ea/0x280 [ 2904.478492] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2904.479530] ? tcp_splice_read+0x8c0/0x8c0 [ 2904.480339] inet6_recvmsg+0x13b/0x6e0 [ 2904.480941] ? inet6_bind+0x120/0x120 [ 2904.481277] ? security_socket_recvmsg+0x95/0xc0 [ 2904.481691] ? inet6_bind+0x120/0x120 [ 2904.482017] sock_recvmsg+0xff/0x180 [ 2904.482361] __sys_recvfrom+0x1be/0x2f0 [ 2904.482718] ? __ia32_sys_send+0x100/0x100 [ 2904.483082] ? lock_downgrade+0x6d0/0x6d0 [ 2904.483474] ? wait_for_completion_io+0x270/0x270 [ 2904.484019] ? rcu_read_lock_any_held+0x75/0xa0 [ 2904.484414] ? vfs_write+0x354/0xa70 [ 2904.484733] ? fput_many+0x2f/0x1a0 [ 2904.485155] ? ksys_write+0x1a9/0x260 [ 2904.485508] ? __ia32_sys_read+0xb0/0xb0 [ 2904.485926] __x64_sys_recvfrom+0xdd/0x1b0 [ 2904.486297] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2904.486806] do_syscall_64+0x33/0x40 [ 2904.487147] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2904.487585] RIP: 0033:0x7f7abd046b19 [ 2904.487962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2904.489996] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2904.490653] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2904.491314] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2904.491967] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2904.492572] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2904.493298] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:00:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 11:00:44 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 5) 11:00:44 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 63) 11:00:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000040)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:00:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x770, 0xcd08, 0x0, 0x0) 11:00:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x9) [ 2905.663680] FAULT_INJECTION: forcing a failure. [ 2905.663680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2905.665103] CPU: 0 PID: 13099 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2905.665777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2905.666581] Call Trace: [ 2905.666853] dump_stack+0x107/0x167 [ 2905.667222] should_fail.cold+0x5/0xa [ 2905.667611] _copy_to_iter+0x264/0x12d0 [ 2905.668014] ? mark_lock+0xf5/0x2df0 [ 2905.668396] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2905.668893] ? __virt_addr_valid+0x170/0x5c0 [ 2905.669337] ? __check_object_size+0x319/0x440 [ 2905.669783] simple_copy_to_iter+0x4c/0x70 [ 2905.670178] __skb_datagram_iter+0x4f7/0x880 [ 2905.670585] ? zerocopy_sg_from_iter+0x110/0x110 [ 2905.671024] skb_copy_datagram_iter+0x88/0x190 [ 2905.671484] tcp_recvmsg+0x13b5/0x2930 [ 2905.671891] ? tcp_splice_read+0x8c0/0x8c0 [ 2905.672324] ? sock_has_perm+0x1ea/0x280 [ 2905.672732] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2905.673267] ? lock_downgrade+0x6d0/0x6d0 [ 2905.673684] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2905.674200] ? tcp_splice_read+0x8c0/0x8c0 [ 2905.674630] inet6_recvmsg+0x13b/0x6e0 [ 2905.675024] ? inet6_bind+0x120/0x120 [ 2905.675427] ? security_socket_recvmsg+0x95/0xc0 [ 2905.675861] ? inet6_bind+0x120/0x120 [ 2905.676231] sock_recvmsg+0xff/0x180 [ 2905.676594] __sys_recvfrom+0x1be/0x2f0 [ 2905.681050] ? __ia32_sys_send+0x100/0x100 [ 2905.681464] ? lock_downgrade+0x6d0/0x6d0 [ 2905.681904] ? wait_for_completion_io+0x270/0x270 [ 2905.682389] ? rcu_read_lock_any_held+0x75/0xa0 [ 2905.682849] ? vfs_write+0x354/0xa70 [ 2905.683217] ? fput_many+0x2f/0x1a0 [ 2905.683581] ? ksys_write+0x1a9/0x260 [ 2905.683958] ? __ia32_sys_read+0xb0/0xb0 [ 2905.684367] __x64_sys_recvfrom+0xdd/0x1b0 [ 2905.684778] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2905.685289] do_syscall_64+0x33/0x40 [ 2905.685653] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2905.686151] RIP: 0033:0x7f083c71fb19 [ 2905.686518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2905.688260] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2905.689019] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2905.689708] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2905.690366] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2905.691026] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2905.691721] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2906.025472] FAULT_INJECTION: forcing a failure. [ 2906.025472] name failslab, interval 1, probability 0, space 0, times 0 [ 2906.027536] CPU: 1 PID: 13094 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2906.028882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2906.030389] Call Trace: [ 2906.030868] dump_stack+0x107/0x167 [ 2906.031525] should_fail.cold+0x5/0xa [ 2906.032203] ? create_object.isra.0+0x3a/0xa20 [ 2906.033084] should_failslab+0x5/0x20 [ 2906.033761] kmem_cache_alloc+0x5b/0x310 [ 2906.034483] ? lock_acquire+0x197/0x470 [ 2906.035215] create_object.isra.0+0x3a/0xa20 [ 2906.035972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2906.036929] kmem_cache_alloc+0x159/0x310 [ 2906.037650] skb_clone+0x14f/0x3d0 [ 2906.038284] dev_queue_xmit_nit+0x3a7/0xb00 [ 2906.039041] dev_hard_start_xmit+0xab/0x6f0 [ 2906.039802] __dev_queue_xmit+0x17ec/0x2710 [ 2906.040553] ? find_held_lock+0x2c/0x110 [ 2906.041048] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2906.041458] ? mark_held_locks+0x9e/0xe0 [ 2906.041806] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2906.042251] ip6_finish_output2+0x17b4/0x1fe0 [ 2906.042634] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2906.043071] ip6_output+0x3aa/0x7e0 [ 2906.043389] ip6_xmit+0x10a1/0x1c40 [ 2906.043722] ? ip6_append_data+0x330/0x330 [ 2906.044075] ? inet6_csk_xmit+0xc6/0x680 [ 2906.044416] ? lock_release+0x680/0x680 [ 2906.044824] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2906.056997] ? inet6_csk_route_req+0x850/0x850 [ 2906.057426] ? md5_transform+0x19/0xde0 [ 2906.057798] inet6_csk_xmit+0x315/0x680 [ 2906.058175] ? inet6_csk_update_pmtu+0x190/0x190 [ 2906.058633] ? __local_bh_enable_ip+0x9d/0x100 [ 2906.059063] ? csum_ipv6_magic+0x1e/0x70 [ 2906.059449] ? inet6_csk_update_pmtu+0x190/0x190 [ 2906.059894] __tcp_transmit_skb+0x18ef/0x35d0 [ 2906.060330] ? __tcp_select_window+0x900/0x900 [ 2906.060769] ? tcp_trim_head+0x470/0x470 [ 2906.065158] ? lock_acquire+0x197/0x470 [ 2906.065519] ? find_held_lock+0x2c/0x110 [ 2906.065889] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2906.066321] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2906.066702] ? tcp_push_one+0x100/0x100 [ 2906.067077] ? tcp_current_mss+0x1f8/0x370 [ 2906.067453] ? tcp_trim_head+0x470/0x470 [ 2906.067817] ? __mod_timer+0x7fb/0xd10 [ 2906.068198] tcp_retransmit_skb+0x28/0x240 [ 2906.068592] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2906.069128] tcp_xmit_retransmit_queue+0x57/0x70 [ 2906.069570] tcp_xmit_recovery+0x86/0x180 [ 2906.069963] tcp_ack+0x25d9/0x5690 [ 2906.070334] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2906.070791] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2906.071279] ? tcp_validate_incoming+0x431/0x16a0 [ 2906.071718] tcp_rcv_established+0x57e/0x1e30 [ 2906.072141] ? tcp_check_space+0x6c0/0x6c0 [ 2906.072544] tcp_v6_do_rcv+0x7b3/0x1520 [ 2906.072943] __release_sock+0x139/0x3b0 [ 2906.073327] release_sock+0x54/0x1b0 [ 2906.073679] sk_wait_data+0x1a7/0x4d0 [ 2906.074043] ? sock_set_mark+0x130/0x130 [ 2906.074432] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2906.074911] ? tcp_send_ack+0x7d/0xa0 [ 2906.075273] tcp_recvmsg+0x17b2/0x2930 [ 2906.075661] ? tcp_splice_read+0x8c0/0x8c0 [ 2906.076064] ? sock_has_perm+0x1ea/0x280 [ 2906.076461] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2906.076965] ? tcp_splice_read+0x8c0/0x8c0 [ 2906.077359] inet6_recvmsg+0x13b/0x6e0 [ 2906.077724] ? inet6_bind+0x120/0x120 [ 2906.078085] ? security_socket_recvmsg+0x95/0xc0 [ 2906.078643] ? inet6_bind+0x120/0x120 [ 2906.079002] sock_recvmsg+0xff/0x180 [ 2906.079363] __sys_recvfrom+0x1be/0x2f0 [ 2906.079722] ? __ia32_sys_send+0x100/0x100 [ 2906.080096] ? lock_downgrade+0x6d0/0x6d0 [ 2906.080480] ? wait_for_completion_io+0x270/0x270 [ 2906.080918] ? rcu_read_lock_any_held+0x75/0xa0 [ 2906.081342] ? vfs_write+0x354/0xa70 [ 2906.081695] ? fput_many+0x2f/0x1a0 [ 2906.082044] ? ksys_write+0x1a9/0x260 [ 2906.082408] ? __ia32_sys_read+0xb0/0xb0 [ 2906.082795] __x64_sys_recvfrom+0xdd/0x1b0 [ 2906.083193] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2906.083676] do_syscall_64+0x33/0x40 [ 2906.084033] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2906.084512] RIP: 0033:0x7fd4b1105b19 [ 2906.084889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2906.086537] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2906.087196] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2906.087799] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2906.088406] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2906.089020] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2906.089635] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2906.111107] FAULT_INJECTION: forcing a failure. [ 2906.111107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.112214] CPU: 1 PID: 13098 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2906.117182] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2906.117885] Call Trace: [ 2906.118129] dump_stack+0x107/0x167 [ 2906.118480] should_fail.cold+0x5/0xa [ 2906.118839] _copy_to_iter+0x264/0x12d0 [ 2906.119222] ? sk_wait_data+0x353/0x4d0 [ 2906.119594] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2906.120055] ? __virt_addr_valid+0x170/0x5c0 [ 2906.120460] ? __check_object_size+0x319/0x440 [ 2906.124880] simple_copy_to_iter+0x4c/0x70 [ 2906.125267] __skb_datagram_iter+0x4f7/0x880 [ 2906.125665] ? zerocopy_sg_from_iter+0x110/0x110 [ 2906.126109] skb_copy_datagram_iter+0x88/0x190 [ 2906.133162] tcp_recvmsg+0x13b5/0x2930 [ 2906.133535] ? tcp_splice_read+0x8c0/0x8c0 [ 2906.133917] ? sock_has_perm+0x1ea/0x280 [ 2906.134295] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2906.134775] ? tcp_splice_read+0x8c0/0x8c0 [ 2906.135148] inet6_recvmsg+0x13b/0x6e0 [ 2906.135514] ? inet6_bind+0x120/0x120 [ 2906.135861] ? security_socket_recvmsg+0x95/0xc0 [ 2906.136284] ? inet6_bind+0x120/0x120 [ 2906.136644] sock_recvmsg+0xff/0x180 [ 2906.141009] __sys_recvfrom+0x1be/0x2f0 [ 2906.141374] ? __ia32_sys_send+0x100/0x100 [ 2906.141744] ? lock_downgrade+0x6d0/0x6d0 [ 2906.142140] ? wait_for_completion_io+0x270/0x270 [ 2906.142589] ? rcu_read_lock_any_held+0x75/0xa0 [ 2906.143018] ? vfs_write+0x354/0xa70 [ 2906.143365] ? fput_many+0x2f/0x1a0 [ 2906.143708] ? ksys_write+0x1a9/0x260 [ 2906.144043] ? __ia32_sys_read+0xb0/0xb0 [ 2906.144389] __x64_sys_recvfrom+0xdd/0x1b0 [ 2906.144743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2906.145194] do_syscall_64+0x33/0x40 [ 2906.145541] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2906.146006] RIP: 0033:0x7f7abd046b19 [ 2906.146355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2906.147922] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2906.148564] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2906.149213] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2906.149855] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2906.150480] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2906.151100] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:01:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xa) 11:01:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)="35d77573f37bb3ee31", 0x9}, {&(0x7f0000000240)="e4513a31cd057c47557bbd509f05edb26a8701e89bd167d8c01a41106922cf0545045d36cfff9591ef3bc4b181", 0x2d}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000280)="63ad3f19f2cf3b3483d839546682bb4b4bff9a1886f272e9074195738b1beb272317efde34d48b7b1b3e90b4f2ad15dda9f2762e5b1af50389b78ff2ea2a6357017d0abf28da7a974066c6af319f19ecbf6ffef43da237eea116e43d213354412b700c42a862a4cc8ba40b3bdc8c75932033586a4621d02531b1", 0x7a}, {&(0x7f0000000440)="f0c6b164e3ed1d8c2d247b054846a292945cb0475dbceeb17616a59a6db119da6644f9f0e080ec73b4460bc5fa4220c162abca787ca1b66e2c3562fa62234dacea765540dc8c30cbfe1f31395befb140fd0397122d39b82c81843f3a09a0dde1adb9703b2a2c9f55909d3f68780b0eee09b930b1262a1c08552913abe2da78b6349bf9fc63e12ea91144b8526ff8cc45e60c73f46518d693bd2347030d588a6a62bf4944dccecdf3eee47a2257b42be3b7d228d3edc082a0b1c9fff2467373805b3a267661f25fb2ea84767f2062b9a0c20db97d558660359b8da20d0f32399c96206ead50211f33033a803c452749956de451e0bb3b3ba9ee", 0xf9}], 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="2400000000000000293dfc660000003200f8ffffffa6086d9095030000000000", @ANYRES32=0x0, @ANYBLOB="0000000028000000008801000000000000000100c2040000001a00000000000000"], 0x50}, 0x80) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000040)={0x8, 'ipvlan1\x00', {'ip6erspan0\x00'}, 0x99}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:02 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 64) 11:01:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x3f0, 0xcd08, 0x0, 0x0) 11:01:02 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 11:01:02 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 6) 11:01:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xa10, 0xcd08, 0x0, 0x0) 11:01:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0xcd08, 0x0, 0x0) [ 2922.704065] FAULT_INJECTION: forcing a failure. [ 2922.704065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2922.710047] CPU: 1 PID: 13131 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2922.710660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2922.711370] Call Trace: [ 2922.711615] dump_stack+0x107/0x167 [ 2922.711938] should_fail.cold+0x5/0xa [ 2922.712293] _copy_to_iter+0x264/0x12d0 [ 2922.712659] ? mark_lock+0xf5/0x2df0 [ 2922.713013] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2922.714163] ? __virt_addr_valid+0x170/0x5c0 [ 2922.714990] ? __check_object_size+0x319/0x440 [ 2922.715816] simple_copy_to_iter+0x4c/0x70 [ 2922.716578] __skb_datagram_iter+0x4f7/0x880 [ 2922.717663] ? zerocopy_sg_from_iter+0x110/0x110 [ 2922.718480] skb_copy_datagram_iter+0x88/0x190 [ 2922.719427] tcp_recvmsg+0x13b5/0x2930 [ 2922.720165] ? tcp_splice_read+0x8c0/0x8c0 [ 2922.720921] ? sock_has_perm+0x1ea/0x280 [ 2922.721667] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2922.722606] ? lock_downgrade+0x6d0/0x6d0 [ 2922.723390] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2922.724394] ? tcp_splice_read+0x8c0/0x8c0 [ 2922.725300] inet6_recvmsg+0x13b/0x6e0 [ 2922.726081] ? inet6_bind+0x120/0x120 [ 2922.726845] ? security_socket_recvmsg+0x95/0xc0 [ 2922.727782] ? inet6_bind+0x120/0x120 [ 2922.728538] sock_recvmsg+0xff/0x180 [ 2922.729879] __sys_recvfrom+0x1be/0x2f0 [ 2922.730256] ? __ia32_sys_send+0x100/0x100 [ 2922.730652] ? lock_downgrade+0x6d0/0x6d0 [ 2922.731062] ? wait_for_completion_io+0x270/0x270 [ 2922.731515] ? rcu_read_lock_any_held+0x75/0xa0 [ 2922.731948] ? vfs_write+0x354/0xa70 [ 2922.732296] ? fput_many+0x2f/0x1a0 [ 2922.732639] ? ksys_write+0x1a9/0x260 [ 2922.733003] ? __ia32_sys_read+0xb0/0xb0 [ 2922.733397] __x64_sys_recvfrom+0xdd/0x1b0 [ 2922.733797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2922.734279] do_syscall_64+0x33/0x40 [ 2922.734634] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2922.735109] RIP: 0033:0x7f083c71fb19 [ 2922.735463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2922.737144] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2922.737836] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2922.738485] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2922.739134] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2922.739779] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2922.740428] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:01:02 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0xcd08, 0x0, 0x0) [ 2923.089646] FAULT_INJECTION: forcing a failure. [ 2923.089646] name failslab, interval 1, probability 0, space 0, times 0 [ 2923.090950] CPU: 1 PID: 13128 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2923.091522] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2923.092203] Call Trace: [ 2923.092437] dump_stack+0x107/0x167 [ 2923.092746] should_fail.cold+0x5/0xa [ 2923.093095] ? ___slab_alloc+0x360/0x700 [ 2923.093460] ? create_object.isra.0+0x3a/0xa20 [ 2923.093854] should_failslab+0x5/0x20 [ 2923.094201] kmem_cache_alloc+0x5b/0x310 [ 2923.094583] create_object.isra.0+0x3a/0xa20 [ 2923.094989] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2923.095459] kmem_cache_alloc_node+0x169/0x330 [ 2923.095890] __alloc_skb+0x6d/0x5b0 [ 2923.096233] ? ktime_get+0x158/0x1f0 [ 2923.096586] __tcp_send_ack.part.0+0x67/0x650 [ 2923.097016] tcp_send_ack+0x7d/0xa0 [ 2923.097356] tcp_cleanup_rbuf+0x468/0x5a0 [ 2923.097708] tcp_recvmsg+0xb85/0x2930 [ 2923.098050] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.098412] ? sock_has_perm+0x1ea/0x280 [ 2923.098768] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2923.099210] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.099570] inet6_recvmsg+0x13b/0x6e0 [ 2923.099908] ? inet6_bind+0x120/0x120 [ 2923.100258] ? security_socket_recvmsg+0x95/0xc0 [ 2923.100678] ? inet6_bind+0x120/0x120 [ 2923.101380] sock_recvmsg+0xff/0x180 [ 2923.101728] __sys_recvfrom+0x1be/0x2f0 [ 2923.102087] ? __ia32_sys_send+0x100/0x100 [ 2923.102457] ? lock_downgrade+0x6d0/0x6d0 [ 2923.102835] ? wait_for_completion_io+0x270/0x270 [ 2923.103244] ? rcu_read_lock_any_held+0x75/0xa0 [ 2923.103629] ? vfs_write+0x354/0xa70 [ 2923.103941] ? fput_many+0x2f/0x1a0 [ 2923.104245] ? ksys_write+0x1a9/0x260 [ 2923.104562] ? __ia32_sys_read+0xb0/0xb0 [ 2923.104908] __x64_sys_recvfrom+0xdd/0x1b0 [ 2923.105320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2923.105789] do_syscall_64+0x33/0x40 [ 2923.106133] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2923.106602] RIP: 0033:0x7f7abd046b19 [ 2923.106943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.108568] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2923.109286] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2923.109909] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2923.110552] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.111202] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2923.111845] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2923.124636] FAULT_INJECTION: forcing a failure. [ 2923.124636] name failslab, interval 1, probability 0, space 0, times 0 [ 2923.125830] CPU: 1 PID: 13129 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2923.133372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2923.134107] Call Trace: [ 2923.134361] dump_stack+0x107/0x167 [ 2923.134699] should_fail.cold+0x5/0xa [ 2923.135055] ? create_object.isra.0+0x3a/0xa20 [ 2923.135477] should_failslab+0x5/0x20 [ 2923.135832] kmem_cache_alloc+0x5b/0x310 [ 2923.136211] create_object.isra.0+0x3a/0xa20 [ 2923.136613] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2923.137212] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2923.137674] ? tcp_collapse+0x42c/0xf20 [ 2923.138046] __alloc_skb+0xb1/0x5b0 [ 2923.138385] tcp_collapse+0x42c/0xf20 [ 2923.138750] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2923.139127] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2923.139574] ? tcp_xmit_recovery+0x86/0x180 [ 2923.139971] ? tcp_ack+0xeef/0x5690 [ 2923.140319] tcp_try_rmem_schedule+0xa6c/0x1690 [ 2923.140761] tcp_data_queue+0x16ba/0x47f0 [ 2923.145187] ? tcp_data_ready+0x500/0x500 [ 2923.145558] ? tcp_urg.part.0+0x157/0x2e0 [ 2923.145929] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2923.146332] ? tcp_validate_incoming+0x431/0x16a0 [ 2923.146771] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2923.147198] tcp_rcv_established+0x868/0x1e30 [ 2923.147613] ? tcp_check_space+0x6c0/0x6c0 [ 2923.148012] tcp_v6_do_rcv+0x7b3/0x1520 [ 2923.148386] __release_sock+0x139/0x3b0 [ 2923.148762] release_sock+0x54/0x1b0 [ 2923.149140] sk_wait_data+0x1a7/0x4d0 [ 2923.149604] ? sock_set_mark+0x130/0x130 [ 2923.149985] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2923.150470] tcp_recvmsg+0x17b2/0x2930 [ 2923.150848] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.151251] ? sock_has_perm+0x1ea/0x280 [ 2923.151645] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2923.152139] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.152532] inet6_recvmsg+0x13b/0x6e0 [ 2923.152894] ? inet6_bind+0x120/0x120 [ 2923.153284] ? security_socket_recvmsg+0x95/0xc0 [ 2923.153724] ? inet6_bind+0x120/0x120 [ 2923.154076] sock_recvmsg+0xff/0x180 [ 2923.154424] __sys_recvfrom+0x1be/0x2f0 [ 2923.154792] ? __ia32_sys_send+0x100/0x100 [ 2923.155178] ? lock_downgrade+0x6d0/0x6d0 [ 2923.155581] ? wait_for_completion_io+0x270/0x270 [ 2923.156021] ? rcu_read_lock_any_held+0x75/0xa0 [ 2923.156447] ? vfs_write+0x354/0xa70 [ 2923.156791] ? fput_many+0x2f/0x1a0 [ 2923.157154] ? ksys_write+0x1a9/0x260 [ 2923.157523] ? __ia32_sys_read+0xb0/0xb0 [ 2923.157907] __x64_sys_recvfrom+0xdd/0x1b0 [ 2923.158305] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2923.158735] do_syscall_64+0x33/0x40 [ 2923.159054] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2923.159493] RIP: 0033:0x7fd4b1105b19 [ 2923.159821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.169463] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2923.170130] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2923.170750] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2923.171379] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.171999] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2923.172629] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:01:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 65) 11:01:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xc) 11:01:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x460, 0xcd08, 0x0, 0x0) 11:01:03 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 11:01:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="06000000e49275f884a726acbbdeca0cfb2e1448b4941d3dc8296f0105d1b7d4f9ae7bdc648004769e45bdb307a06be56e0f44016a797c07fe43734192423fa96a8f1095255343938eb8ba7be576e1162481a7e26b8f264c4a7f3454fe3e793812e2a14d9e7c92a6574ec8108e983f1cb14660f6e6fb671c3b2bd739ca1cd7a169b3b1ea065521517575f0c1e95fdf0c42545c958f7d44da31c8c1f47a00000000000000797c669e36d43b3ff009a609f23854bac10173c9ff1e194b321101352d0ef14448b4e676df1891d48c56d0a0b96f12ac889bd4aa86c1e58c2ae8585a50d6fb68123e00000000", @ANYRES16=r3, @ANYBLOB="00002abd7000fcdbdf2542000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f70730000000005008300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000500830001000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000500830001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x50}, 0xc1) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000240)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="cf", 0x1}, {&(0x7f0000000280)="9c231b7b30b08094f694c48338b660cd877f8fd274a69a66c494003e0151d2e446c8a1f81ff604c2dfc15cc7a4f55677f3db7d276f13adc7822294477a9152ff0865a91a51ff257436d6edf4dbf49f82e9b8ab3992946f5fd5b7fea73659894d5b494591fbcd193382cf7f7fe0663e3a46a5134be7570f11e02dfa97a234670de13075d8f0276ab34eca2be5bc159956a243f0c501f8f2b0cc615ee6804f760da6ad56d195a966", 0xa7}], 0x10000000000002bf}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:03 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 7) 11:01:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xa80, 0xcd08, 0x0, 0x0) [ 2923.959929] FAULT_INJECTION: forcing a failure. [ 2923.959929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2923.961078] CPU: 1 PID: 13166 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2923.961705] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2923.962458] Call Trace: [ 2923.962710] dump_stack+0x107/0x167 [ 2923.963065] should_fail.cold+0x5/0xa [ 2923.963429] _copy_to_iter+0x264/0x12d0 [ 2923.963813] ? lock_acquire+0x1b/0x470 [ 2923.964192] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2923.964649] ? __virt_addr_valid+0x170/0x5c0 [ 2923.965087] ? __check_object_size+0x319/0x440 [ 2923.965528] simple_copy_to_iter+0x4c/0x70 [ 2923.965922] __skb_datagram_iter+0x4f7/0x880 [ 2923.966350] ? zerocopy_sg_from_iter+0x110/0x110 [ 2923.966798] skb_copy_datagram_iter+0x88/0x190 [ 2923.967225] tcp_recvmsg+0x13b5/0x2930 [ 2923.967618] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.968017] ? sock_has_perm+0x1ea/0x280 [ 2923.968407] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2923.968882] ? lock_downgrade+0x6d0/0x6d0 [ 2923.973325] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2923.973825] ? tcp_splice_read+0x8c0/0x8c0 [ 2923.974218] inet6_recvmsg+0x13b/0x6e0 [ 2923.974577] ? inet6_bind+0x120/0x120 [ 2923.974950] ? security_socket_recvmsg+0x95/0xc0 [ 2923.975377] ? inet6_bind+0x120/0x120 [ 2923.975712] sock_recvmsg+0xff/0x180 [ 2923.976045] __sys_recvfrom+0x1be/0x2f0 [ 2923.976425] ? __ia32_sys_send+0x100/0x100 [ 2923.976814] ? lock_downgrade+0x6d0/0x6d0 [ 2923.977269] ? wait_for_completion_io+0x270/0x270 [ 2923.977716] ? rcu_read_lock_any_held+0x75/0xa0 [ 2923.978147] ? vfs_write+0x354/0xa70 [ 2923.978507] ? fput_many+0x2f/0x1a0 [ 2923.978847] ? ksys_write+0x1a9/0x260 [ 2923.979199] ? __ia32_sys_read+0xb0/0xb0 [ 2923.979597] __x64_sys_recvfrom+0xdd/0x1b0 [ 2923.979991] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2923.980478] do_syscall_64+0x33/0x40 [ 2923.980827] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2923.981313] RIP: 0033:0x7f083c71fb19 [ 2923.981673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2923.983324] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2923.984033] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2923.984676] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2923.985347] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2923.986001] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2923.986642] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2924.412193] FAULT_INJECTION: forcing a failure. [ 2924.412193] name failslab, interval 1, probability 0, space 0, times 0 [ 2924.413315] CPU: 0 PID: 13168 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2924.413905] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2924.414606] Call Trace: [ 2924.414846] dump_stack+0x107/0x167 [ 2924.415167] should_fail.cold+0x5/0xa [ 2924.415496] ? lock_release+0x680/0x680 [ 2924.415847] ? skb_clone+0x14f/0x3d0 [ 2924.416177] should_failslab+0x5/0x20 [ 2924.416508] kmem_cache_alloc+0x5b/0x310 [ 2924.416869] skb_clone+0x14f/0x3d0 [ 2924.417220] dev_queue_xmit_nit+0x3a7/0xb00 [ 2924.417639] dev_hard_start_xmit+0xab/0x6f0 [ 2924.418051] __dev_queue_xmit+0x17ec/0x2710 [ 2924.418445] ? find_held_lock+0x2c/0x110 [ 2924.418813] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2924.419218] ? mark_held_locks+0x9e/0xe0 [ 2924.419572] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2924.420028] ip6_finish_output2+0x17b4/0x1fe0 [ 2924.420425] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2924.420859] ip6_output+0x3aa/0x7e0 [ 2924.421222] ip6_xmit+0x10a1/0x1c40 [ 2924.421592] ? ip6_append_data+0x330/0x330 [ 2924.421996] ? inet6_csk_xmit+0xc6/0x680 [ 2924.422390] ? lock_release+0x680/0x680 [ 2924.422780] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2924.423249] ? inet6_csk_route_req+0x850/0x850 [ 2924.423688] ? md5_transform+0x19/0xde0 [ 2924.424084] inet6_csk_xmit+0x315/0x680 [ 2924.424470] ? inet6_csk_update_pmtu+0x190/0x190 [ 2924.424934] ? __local_bh_enable_ip+0x9d/0x100 [ 2924.425710] ? csum_ipv6_magic+0x1e/0x70 [ 2924.426102] ? inet6_csk_update_pmtu+0x190/0x190 [ 2924.426563] __tcp_transmit_skb+0x18ef/0x35d0 [ 2924.427018] ? __tcp_select_window+0x900/0x900 [ 2924.427452] ? tcp_trim_head+0x470/0x470 [ 2924.427859] ? lock_acquire+0x197/0x470 [ 2924.427948] FAULT_INJECTION: forcing a failure. [ 2924.427948] name failslab, interval 1, probability 0, space 0, times 0 [ 2924.428217] ? find_held_lock+0x2c/0x110 [ 2924.428239] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2924.429957] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2924.430338] ? tcp_push_one+0x100/0x100 [ 2924.430697] ? tcp_current_mss+0x1f8/0x370 [ 2924.431087] ? tcp_trim_head+0x470/0x470 [ 2924.431449] ? __mod_timer+0x7fb/0xd10 [ 2924.431814] tcp_retransmit_skb+0x28/0x240 [ 2924.432200] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2924.432696] tcp_xmit_retransmit_queue+0x57/0x70 [ 2924.437165] tcp_xmit_recovery+0x86/0x180 [ 2924.437531] tcp_ack+0x25d9/0x5690 [ 2924.437893] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2924.438336] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2924.438823] ? tcp_validate_incoming+0x431/0x16a0 [ 2924.439267] tcp_rcv_established+0x57e/0x1e30 [ 2924.439674] ? tcp_check_space+0x6c0/0x6c0 [ 2924.440075] tcp_v6_do_rcv+0x7b3/0x1520 [ 2924.440431] __release_sock+0x139/0x3b0 [ 2924.440801] release_sock+0x54/0x1b0 [ 2924.441165] sk_wait_data+0x1a7/0x4d0 [ 2924.441505] ? sock_set_mark+0x130/0x130 [ 2924.441888] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2924.442348] ? tcp_send_ack+0x7d/0xa0 [ 2924.442693] tcp_recvmsg+0x17b2/0x2930 [ 2924.443078] ? tcp_splice_read+0x8c0/0x8c0 [ 2924.443455] ? sock_has_perm+0x1ea/0x280 [ 2924.443835] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2924.444304] ? tcp_splice_read+0x8c0/0x8c0 [ 2924.444675] inet6_recvmsg+0x13b/0x6e0 [ 2924.445055] ? inet6_bind+0x120/0x120 [ 2924.445400] ? security_socket_recvmsg+0x95/0xc0 [ 2924.445825] ? inet6_bind+0x120/0x120 [ 2924.446158] sock_recvmsg+0xff/0x180 [ 2924.446484] __sys_recvfrom+0x1be/0x2f0 [ 2924.446827] ? __ia32_sys_send+0x100/0x100 [ 2924.447192] ? lock_downgrade+0x6d0/0x6d0 [ 2924.447577] ? wait_for_completion_io+0x270/0x270 [ 2924.447993] ? rcu_read_lock_any_held+0x75/0xa0 [ 2924.448389] ? vfs_write+0x354/0xa70 [ 2924.448710] ? fput_many+0x2f/0x1a0 [ 2924.449050] ? ksys_write+0x1a9/0x260 [ 2924.449412] ? __ia32_sys_read+0xb0/0xb0 [ 2924.449790] __x64_sys_recvfrom+0xdd/0x1b0 [ 2924.450177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2924.450638] do_syscall_64+0x33/0x40 [ 2924.450988] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2924.451434] RIP: 0033:0x7f7abd046b19 [ 2924.451772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2924.453401] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2924.454081] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2924.454701] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2924.455337] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2924.455972] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2924.456590] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2924.457398] CPU: 1 PID: 13167 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2924.458034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2924.458763] Call Trace: [ 2924.459016] dump_stack+0x107/0x167 [ 2924.459353] should_fail.cold+0x5/0xa [ 2924.459702] ? create_object.isra.0+0x3a/0xa20 [ 2924.460120] should_failslab+0x5/0x20 [ 2924.460475] kmem_cache_alloc+0x5b/0x310 [ 2924.460861] ? lock_acquire+0x197/0x470 [ 2924.461238] create_object.isra.0+0x3a/0xa20 [ 2924.461620] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2924.462078] kmem_cache_alloc+0x159/0x310 [ 2924.462461] skb_clone+0x14f/0x3d0 [ 2924.469343] dev_queue_xmit_nit+0x3a7/0xb00 [ 2924.469749] dev_hard_start_xmit+0xab/0x6f0 [ 2924.470154] __dev_queue_xmit+0x17ec/0x2710 [ 2924.470558] ? find_held_lock+0x2c/0x110 [ 2924.470933] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2924.471369] ? mark_held_locks+0x9e/0xe0 [ 2924.471750] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2924.472246] ip6_finish_output2+0x17b4/0x1fe0 [ 2924.472670] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2924.473158] ip6_output+0x3aa/0x7e0 [ 2924.473501] ip6_xmit+0x10a1/0x1c40 [ 2924.473858] ? ip6_append_data+0x330/0x330 [ 2924.474263] ? inet6_csk_xmit+0xc6/0x680 [ 2924.474642] ? lock_release+0x680/0x680 [ 2924.475010] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2924.475485] ? inet6_csk_route_req+0x850/0x850 [ 2924.475901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2924.476391] inet6_csk_xmit+0x315/0x680 [ 2924.476761] ? inet6_csk_update_pmtu+0x190/0x190 [ 2924.477226] ? csum_ipv6_magic+0x1e/0x70 [ 2924.477605] ? inet6_csk_update_pmtu+0x190/0x190 [ 2924.478026] __tcp_transmit_skb+0x18ef/0x35d0 [ 2924.478460] ? __tcp_select_window+0x900/0x900 [ 2924.478889] ? tcp_trim_head+0x470/0x470 [ 2924.479271] ? lock_acquire+0x197/0x470 [ 2924.479645] ? find_held_lock+0x2c/0x110 [ 2924.480020] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2924.480445] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2924.480866] ? tcp_push_one+0x100/0x100 [ 2924.482390] ? tcp_current_mss+0x1f8/0x370 [ 2924.482775] ? tcp_trim_head+0x470/0x470 [ 2924.483159] ? __mod_timer+0x7fb/0xd10 [ 2924.483528] tcp_retransmit_skb+0x28/0x240 [ 2924.483928] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2924.484441] tcp_xmit_retransmit_queue+0x57/0x70 [ 2924.484877] tcp_xmit_recovery+0x86/0x180 [ 2924.485298] tcp_ack+0x25d9/0x5690 [ 2924.485660] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2924.486123] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2924.486625] ? tcp_validate_incoming+0x431/0x16a0 [ 2924.487075] tcp_rcv_established+0x57e/0x1e30 [ 2924.487515] ? tcp_check_space+0x6c0/0x6c0 [ 2924.487923] tcp_v6_do_rcv+0x7b3/0x1520 [ 2924.488294] __release_sock+0x139/0x3b0 [ 2924.488699] release_sock+0x54/0x1b0 [ 2924.489179] sk_wait_data+0x1a7/0x4d0 [ 2924.489542] ? sock_set_mark+0x130/0x130 [ 2924.489957] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2924.490424] ? tcp_send_ack+0x7d/0xa0 [ 2924.490800] tcp_recvmsg+0x17b2/0x2930 [ 2924.491185] ? tcp_splice_read+0x8c0/0x8c0 [ 2924.491579] ? sock_has_perm+0x1ea/0x280 [ 2924.491987] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2924.492467] ? tcp_splice_read+0x8c0/0x8c0 [ 2924.492867] inet6_recvmsg+0x13b/0x6e0 [ 2924.493650] ? inet6_bind+0x120/0x120 [ 2924.494010] ? security_socket_recvmsg+0x95/0xc0 [ 2924.494438] ? inet6_bind+0x120/0x120 [ 2924.494779] sock_recvmsg+0xff/0x180 [ 2924.495123] __sys_recvfrom+0x1be/0x2f0 [ 2924.495480] ? __ia32_sys_send+0x100/0x100 [ 2924.495844] ? lock_downgrade+0x6d0/0x6d0 [ 2924.496216] ? wait_for_completion_io+0x270/0x270 [ 2924.496648] ? rcu_read_lock_any_held+0x75/0xa0 [ 2924.497095] ? vfs_write+0x354/0xa70 [ 2924.497451] ? fput_many+0x2f/0x1a0 [ 2924.497789] ? ksys_write+0x1a9/0x260 [ 2924.498146] ? __ia32_sys_read+0xb0/0xb0 [ 2924.498540] __x64_sys_recvfrom+0xdd/0x1b0 [ 2924.498931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2924.499411] do_syscall_64+0x33/0x40 [ 2924.499761] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2924.500230] RIP: 0033:0x7fd4b1105b19 [ 2924.500597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2924.502260] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2924.502983] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2924.503618] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2924.504277] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2924.504927] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2924.505601] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:01:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0xcd08, 0x0, 0x0) 11:01:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="140000a1000000001c000000000800000000e70405763a6f00000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) listen(r0, 0x8) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@empty, 0x3, r4}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xe) 11:01:19 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 8) 11:01:19 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 66) 11:01:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x4d0, 0xcd08, 0x0, 0x0) 11:01:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 25) 11:01:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xaf0, 0xcd08, 0x0, 0x0) 11:01:19 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 2940.095446] FAULT_INJECTION: forcing a failure. [ 2940.095446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2940.097067] CPU: 0 PID: 13199 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2940.101749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.102442] Call Trace: [ 2940.102679] dump_stack+0x107/0x167 [ 2940.103016] should_fail.cold+0x5/0xa [ 2940.103351] _copy_to_iter+0x264/0x12d0 [ 2940.103705] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2940.104129] ? __virt_addr_valid+0x170/0x5c0 [ 2940.104529] ? __check_object_size+0x319/0x440 [ 2940.104931] simple_copy_to_iter+0x4c/0x70 [ 2940.105337] __skb_datagram_iter+0x4f7/0x880 [ 2940.105735] ? zerocopy_sg_from_iter+0x110/0x110 [ 2940.106164] skb_copy_datagram_iter+0x88/0x190 [ 2940.106593] tcp_recvmsg+0x13b5/0x2930 [ 2940.106950] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.107313] ? sock_has_perm+0x1ea/0x280 [ 2940.107663] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2940.108095] ? lock_downgrade+0x6d0/0x6d0 [ 2940.113399] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.113864] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.114248] inet6_recvmsg+0x13b/0x6e0 [ 2940.114590] ? inet6_bind+0x120/0x120 [ 2940.114948] ? security_socket_recvmsg+0x95/0xc0 [ 2940.115355] ? inet6_bind+0x120/0x120 [ 2940.115705] sock_recvmsg+0xff/0x180 [ 2940.116059] __sys_recvfrom+0x1be/0x2f0 [ 2940.116436] ? __ia32_sys_send+0x100/0x100 [ 2940.116837] ? lock_downgrade+0x6d0/0x6d0 [ 2940.117246] ? wait_for_completion_io+0x270/0x270 [ 2940.117682] ? rcu_read_lock_any_held+0x75/0xa0 [ 2940.118125] ? vfs_write+0x354/0xa70 [ 2940.118472] ? fput_many+0x2f/0x1a0 [ 2940.118814] ? ksys_write+0x1a9/0x260 [ 2940.119175] ? __ia32_sys_read+0xb0/0xb0 [ 2940.119564] __x64_sys_recvfrom+0xdd/0x1b0 [ 2940.119960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.120428] do_syscall_64+0x33/0x40 [ 2940.120755] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2940.121187] RIP: 0033:0x7f083c71fb19 [ 2940.121546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.123091] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2940.123731] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2940.124351] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2940.124957] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.125608] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2940.126231] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:01:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close(r1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000006440)={'ip6tnl0\x00', &(0x7f00000063c0)={'ip6tnl0\x00', 0x0, 0x2f, 0xfe, 0x3f, 0x6, 0x47, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, 0x7800, 0x400, 0x5}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f0000000680)={0xa, 0x4e23, 0x9, @private1, 0xa}, 0x1c, &(0x7f0000001d00)=[{&(0x7f0000001a80)="432b6535f6f63391d85b1c2933fb48fa4ce9d7ec7005e4468e21810e49d45f74eac991fe1eb9038d8ebfd8bda30b12a8469f71ee2262b56f26bbe2db168aaac909d85f4cc656b4b2f2478cf5404ea05161176033941603aa3261bd775889053e3e6ff0b34f14cc37ed68971b1000120509f9045c8fa5a726de9af1329c933a94e3739579f7c66516c797093a3283fe411bbb11652863f11bcba6d5e932ee7ccc05920030cb8273b6c4330e19d8d80000000000", 0xb3}, {&(0x7f0000001b40)="8712c076473034f0db1483a41b7e5183765c8f8532b7657e8443c6401fe6d40d878e38396770c345ce0589852bb02f911a18fcff09527ebc14f7da06d0e0e1bac5a703be04222cf8e89658f006e7a3d93692edc73f5ba839a1", 0x59}, {&(0x7f0000000140)="a28c6dae2fde82233511bd7f10041a82ce79a170cf385742ab0a65b9a29fc5818bc22122738fec42cb5bffae384eb5e25edb3ac85d5a11c01c313e717512c253d0550ebf0023371270450c873344cfc048df5bb90ce7cf979962e130", 0x5c}, {&(0x7f0000001c00)="ccfc6689e057629616f2bd9b0212f7da6c514aaf111765c382a94e942a3dd5ab1aba73898eccaf5fa7b9966fb43e744332a5268646db0aa5329c83f24073001515083d5a0462d9d4d946a17fc5bad35dee6b90692c3c20bc8fe166d6346cb252bbd2f7d9cf14c89ff4aacf05220caab8b13dfbd5c907acb5d3cc0b0b9b02979246b7d8cd49e52187be9929356f0631679da0cd183889868d5ef0d387e62d5041b2d07b2b82ac2628b8dfd12eb76d4241c0222ca908af79e31d9db1ba6b802b85145100d5356d1d1213076ba5861793431e96f15b527f088d2c89c29bba8dfcdd0750fbcac051bfae2d01e1707f3cbf7877222435305d6e81a8c3", 0xfa}], 0x4, &(0x7f0000002e80)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}, {{&(0x7f0000002f00)={0xa, 0x4e23, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fff}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="5b985b43e6fb31c937c6b08cab1bacb673c2899d489c20bb5fa71a58014ce9a3e9f35e170b615fe8cbba2057a08df80b6fa60d9181674c56be7bc787ee97e640554aacd4d7bb2853113fcbe99555960833735cb6663eec230f5d156417d0321735c046d5ff1651282f783b6b5dc052be692d50856e28571108bdf80b35527e", 0x7f}], 0x1}}, {{&(0x7f0000003000)={0xa, 0x4e23, 0x0, @private0, 0x6}, 0x1c, &(0x7f0000004040)=[{&(0x7f0000003040)="63c81bf61a5f7c4365ec18037fc0426abacc246acb53c6b9ac374045b6f4b225f2447f8f33e0df3aab57ebbae9f8bf08df474e5420bfe1986b4a68194866b5b0c3ac34910497c92b6ced1da1c3c9ba33368772adaef6812da05c122196c9c2c074869a91670ea6eea8c2579ae3e5624feb99150ce4d2b2ab9070f15d2040ea90efe918e80fe324a6c6edfb2b0d98744cffb8f230b91c6d3b34c2125b9f1c5b6155fada3677bdbe8809e5a0e19ebc5b4a38fb274285a4eb83c748bb0ed00ba2ff4fb9716e32806eeaa1f6db6921ff1968c55eec98131ee438d8e6c9a170da63f1b95b09fb68bdf8aee570f9917ff163a3bf73db720aab93f84290b140d20080e7b1d8f627c546530097f168c2e86197597c771a1ccb4fcc995579f483a906d7d6aed86316c61ed3ce47d9c002e07081ae02f9957b59f4319ee9d859cd2a69357f8056697389511c4f19130ec7e1c1453b067aa7ad393975280b36066d20e9b681ce1b281644d688a072e609b454fea70f65fdea9a8fe7f456d6a4a72e2df3dc13464fb3ec49a3076a26e279fb6a9762bfb9774723448c203342447bb4d833d42fc246dc085a8326b45c97bcd90a68b675a99cb2d7c5ffa2fe3655345a0618fcdaa5d1576b2881d6b4bb8ef847baecb8597211430eb7cea029494910336a6de9bd52b8bd04a4757ecd0492062041fed36f615f699b7cd00a4e6d6037808016d8a3f90a1fb049c5d3e609825b9ad62796881a2435ac8e0432760ff506ccd9b994af8e3dbdef1be2a0f5c9ceb45fe06958953fdb29e884ee75e4d704d1cb3833ef42baf9d9be622b0e0970587ca1e0cfd94d537c72a7171005f01a294104de0fb7a8032270c10db67cdb14233a862e6354714ef285f4690b8f34d7b22bc0a807249a53e58c1d7a6e229faec25e9026ecfbbb5a95a3d4ab2a3b72b58ffbc2622047266ced094bba0eb88c2160e63e7e93670bb734f48afedbb1c7106eb853a2cc282afc442e19e66bee4bc08def18406868e874badd3c3dda2d6725acec1888a47ca8438bfa52f2db75661645741dccdfb9e87544e9762112b0b28f16eda63d9c6028693c95e0583a5814330d42d53ddb60109f204ca45435489b2ec5902ca67926e6428c93672dfcefd36dea5e28cbf322590e7bd5d00eff1b79dc936f253a445b12f149d792a57c9d5a55d19650bc9bd6aeb5956ce36af523519a21994ea260b68a264aa438ed6b109ce282ec2a657669341f1e3e3c11da50d25409a7e38c06390249b1084c123ddad60d98b50c312ab52694e960e511ac0d0b77078f89fa5c6b7b12c3082d25c87a5586c357dd83a75b4da0139b43852f37c3c327ce072734143526e04b3860877c23ad1a220d524adc8e28e6debd01dbc1c5ef67bb1c0b1c7bae3827a727df444553499fa856afea63361f8aaf3fdf120eb7aa91f94c51a10e7c2e514c43fa48c60d4a4ceff80ef41209c51b145be0fb398e69686748ee39b606e2f68c75262be9032a260d4b185ed299f8859a4a36cd26381d7d1ec895b5b07411cb7f7a468ccc1f0be3b3b1240db3bd725be45462b0cb0aba8c521667943fcfb9d446b5a93edc2cd3f6bc6f7539e9d0ae5bf7323c20e21f91e94fc5e3f926f771dd0e591fb1cf19a00969884de59c79de73998d3a8822b1dbde63ed3f206c70206da7c31020b57e63f4a97058d3aabff7846b203d2ab8947fc7c735ed3b4f5f7011d5a8f9020b4be7fdadfc6a7ba56328acd4b443f0bc53d6d9dbcb1476e42f73b404592c237a70884ef8e20906d8d543dcfc53521bb7fae345610a76f711cf2328d6694e979e2f1891d078dfb8acc6b123dc4b1fab0fd77b039f92c4371e0e4ef335fbc6ce46f91b5881a7b056222ac0c032c94f53920fb0163f95ef94061525f2d88c26ab333c7e919beba84f9d25b8fb42a08cf73e5b35f989f14d84361cf9083b3d8fbac4ff17fd628ff1c8a5def006799aebf2d90af1642262e89c1f2b5d42c2242f2bf44f0aef111bb90552347246ae1c583a2bacac102fa3cca8f78ec2b5053f0ad8e37783712f208916cf21058c5011b9337150a0fc424bd00e5dd0099cbc588c4dc79a176bf12cac566f6f7dae4ee68249d45f558ee03903a47eef1431f8e7f21dc6c9eb8ce50cf5ca9d7918d4991605392ef17718d8f23e7582ea994c09211bcc703dbe3a22e5b1d245b1e3be6b5b99855a6257e698f8acf4eed3a6fc5c3dd29bcfbdf19d11f1dca1c646f52cb037d688943660d7748cc42b055a5268e7120e95a7dbae586def8053cb25a0d432b79f3563dece78deed8cb6cbcc77043f3ce8520489a725f198e5608efc380e631b38c8482d677f4551c9a8ce88d57d7b9fc6d4f60431ffaf3ac0bb3517b0f78df9f1556411cd29b8a6d0697a6300f2c1f4a82559378f60c153b1806669e9a60967f0d5e29e04d58896b5c8e588f64b42fa50956045465c6cb884b9df0c2b00cef9796e6d59836631d526d34de04c8b086d9852637569be162d1e9f1d5d63aebe336f14cfa2a84f79242c613abee6c097aa36bbb892e6218830c5e9347a6f046d474cd461ef05857010200131b5c2b866655da4d1425f04e303735257167f7ab09f2d8eefa696cc692568c1d039fbf985dc5a50f81c8458b97d939d0149364ebc392dc6908a211063e4e79123ee4e763d804f3d657b6f9ff0bda6397d7cef544f5ee8f82a7f8c47b7b6d0046edcef6d0929ea7fc16485e827f5a7ebd28f480846cbf358e4a61b71949fcfc7d05b0a8884b3a42592e3a2691460f56d8f325e43924debe7818f3019510fd7e89c607124e39921b4d4fa9b67647a5e5aa7d68f6fe62dec29a052a969bf5455a4e43c4fee24fe256dbd78499481eadb7807c027faa861a8c3ff0f869862e3d6162ddf1368eec80b538b5314d86f033afb83404b37d250dea80b588f286d583f23b93d162c5df995146f785af7b21c668f70ae64109fe9ae320426d0403ee6a7f2426c477862a3bdf458db327cd95ef0053ae90d940f8b16894270345d4af8f215889a96406fd8069d044ec444f514b62c4206acb9d2d705aaa0bc6208979db2940c23784b9122fab8b61c1d9d389457964a6408a0a4dfb17fb5223bfa75ec21ad4624f7301a55609b3493ff886014f29aec712f3c4023e80703615b8056a017c03a07379e7f7ba0ef7028b422b1366f66e4d56ed5401c616ae23c7ae0b82d222ce37d530a0fac02e22ed15159a380108abb9534dce71553897e8ba1023b515455dc08b3e8ee508602fa8e7047eb13633d7f16861dcfde9eeef190289c6e24cb2084798b8d3122e53eed52b4fbe1f2111f30e43de425d668026df2de8ccdd8efb470bc3a6c7e373c11a86de4e76e5c86c54fa51b06abd2b78d96012aaca105c02bc321aaa43f4546ce1c2891bc8d10e1278ff79f0487bcac678d0ad434541616e7e205bf131e307cd6ecffc0450b0bf00aaa8b9e29ebbeb0ea5e4de986c3a05528d0465d8e7dff30aa9b3a7af578088922f77d72b36a481cf12555a3626c47a615893be76dbc90614d8273004b3efcd9943c2a5b87fc6874ca6efc706cd9823ade42d44277fe2b9b22ce6825a2d66019f4bc2b859ad50205e7894942e6f87347e0e5c51eb98f8b3ae66c21f4b66230bfe3883b4b4536d93707912ba8c157c3fb009df13b69b6f19372e98df78c16cd7f73f713e872bb1e4c859197bb73503696f65c7fd362e34b44257bb7876076a951f77597b7e2cd27fa3b212e0647ca4572b4a4630d09cfb72543e0aad999afdb00446b0e597cf51eee5127ab51ff14cd339b64a523fcfd1cd11be0e8028751bba6869647165efdcd6281fdbd3ffe2cb3fd3276f20400cca9b308c591c9c2e5b4a69012dedb6c199489731acf97c5ee6b1d11bd8dbde28c70e5203fea9a99772374e91c35f4b944c23a0109e57c98e9f090e6b8b575eda9f7202ae78b9aa900311985434b74e757b0aa51440a629a8ef80d5f19b35ca0f0369e397a88d2a3faea0e335215015edd78933e47c8a14a577af1f9ebc0d9cbc1d6c9a830464e5af8c72ae0d50bc67c86175b75af636dafba39fa62f04a1df81fbe007b57e2f15ff360c1528b915bbb7836d4c2b11db9c2b2caff2d002880a6335429f5ca9276f25b2e82f2cb2a80dde86da516d3094747be7bfc85bdf79c8b9fdb5cdca3dba732f126ed647fa28a49d3651f3f0ebf74cf60406f1643d1b395963adf0befe2a4ad5bb3784dd892f9afd283374909ef3e6ac7a5df6ab2bc831ab25f63a59bac8c25d6d092ac095c91459f38d8732a141feeaf8d0a57eedc4913e9c1992701ca2a87a3d9fa3b7256de61ac5ae27f77d0125e495659e9cba0daf2e6885a458bbfffdba2181b04dc8b67c6e80c27c48f1dea3eeaa100976f3982beee3fc516b24814e047310f2e234747d63335a137a5a0b327dc33a66cb41883c5a721392addd4054410d32db68e76e5f3fb24a589c49ac8e9d23b41a717a94aeb46b21d41e4a5d31cf371ae87694b6eb77f6b5bbb217353cdb6562f1fe4069436ce7be08ea3cb955e153deef398a66a58a9eb60ee735f4ff869871d4ae353046d94178b9af6961feb78b138e4aefab481bc90760139f5296ff2ce671cb0e69bc866f8c717f4e289ed46c8e94b780b397838a1b18a51edaba0f30a6bf7522c598f627054b85b2d9b70a95613a19e043b47e14c4296e441c9573ba10c712e7657aa0a5f62a7104192f712f0e76bc7a60df3866ffb75152385ed46c029d8929a6ef337ce2d67ae29b761615f8a1dcd63f3c6802941cffb2ee0fdd0d717c7e39934f1ce536088c33f49b358f5b8e9b729ffdb7651727e34406e943d1d334769ea17d52a995e1f12963dc3d4e06f93bc19082763daf1640a85f02a96e46b994842172f8e49138c026fcd4c94e037052bab821a4d2af18ff1117b50970fa0df3eb69e8916aa67b8d164be43582ad9a8db3f0e7ca469da3cb8af58d1b678df380c2fa0e7d5e6864093afe7849e75c0324731c484360c0e9b213b2a4869434da7431597d853957d5566f81f9cc7e06eea99dd762df581af6277cffcfbb1196c5672529ad181c057317888ee240ab3efe40327262a2e41a96c974eab599df25a99284ac1c053e9159721a1485bbed96d323523df0d2c0f41587bce1867ef6cb678f91777dd881950429a26b683d7cb13891ec2fae04bb0d3d758d69d930ab2df8489911be663d097fe3e341b11ac582210d2d1b100e1525ded3dfcd52865d578decd3ed8f76729f0a3ac1e65375ba6128fe090194a652f80b82db596aa7f3a4ceb1dae702a3c8754ce64f7568b24c5c52f5523a999aebc342b539a4e917f9ad1f152252a552fc1abbee28bcc4b43640048847be6205231a1a8b4e77c9ddbcd95a538dc679200169ab267b6993f865737e54dad6e40c4b483f0b5b6f08823e42a513e9e4a0b45811ca6f997bb75aceafd1b5126d45662f7c19126a2f8e1f371d09fcb9ff08d22f6599d4e213cf222863ed3a561c2fa6105736684cd423c6629d0bf5f8fb3427d80c89d85173fc1bd020e547d355e5929cab03583647df125e33d41ff756d0540ae58e318ebcdb084f11da62b9785a2565e46ad22c32261d1d631b4aa41c5e8ce0eb90c16f55e3788eff24542c0055921a8f9ebd28d1c360e726df5281581e79ec5b844f87769efa0382304151d89e67cae06880ed28b93a9570c2f196cf9d3330cdc46c2905d2272ee2e8e0b5b4d8e2f2126b544d2b56330aefe488b9baa746966bea4178133117e12d2c050bbf6b5bcf1a68cc4e207304e2637759cec", 0x1000}], 0x1, &(0x7f0000004080)}}, {{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f00000040c0)="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", 0xfa}, {&(0x7f00000041c0)="841b6e2bf614568c9945", 0xa}, {&(0x7f0000004200)="1f57bfefa30579e484efe02bbca14ab11fde9f5f229dacd6edd4a785301261dbde91ed3bbdac0263ec59dcf33822233d34e4f83172b8f0fd6c557b2e577dfeca13", 0x41}, {&(0x7f0000004280)="502d8ded47265207e7e10129e0d3dcd728f7bfdad845aba77b6e68d8dc1222cbb6547cf974b493df59b2c192a18669116eb667f1e1b130a7b4e6b8deffd27a3490a785090bfe68f68ccccc71c0aeec4c19f01a51b293e521ba13c75823a76ef88f7936d73f64fb012428377cf055b5fce8468f65bf26e8441cd35b4bfdc1cf08de8bb60e1d801220c6b33be9df9d100f", 0x90}], 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f00000044c0)={0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000004600)=[{&(0x7f0000004500)="848a99e08a7b4db79f22d65521e7b4292e4099e44bfde3909db625ab5110315330f24cab", 0x24}, {&(0x7f0000004540)="8523037f4cf3231c5fe27b14ebd61f629a6de1ca76973ad9311f9e9ac45a1d749b3eb23590f955001b6e5e0acb44aa333afd279a2d49544c65e081171e4aa07fce21a1c0702096e087794153e96df00517d59cf55fc641650f3a27bec6f51684599d6eb7ac4c5014783f6bf073801ad78cc85a60afe648461d1f71e4e33a7f03f089eb2724f7726e4aad6d37", 0x8c}], 0x2, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x73, 0x4, 0x1, 0x2, 0x0, [@remote, @empty]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x2c, 0x6, 0x0, 0xd6, 0x0, [@local, @mcast2, @empty]}}}, @pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @hopopts={{0x260, 0x29, 0x36, {0x33, 0x48, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @calipso={0x7, 0x40, {0x1, 0xe, 0x5, 0x6c40, [0x8000, 0x4, 0x1, 0xbbfe, 0x9, 0x8, 0x9]}}, @generic={0x1, 0xfe, "345f27d3635311a700f2f630a844cb1f20adcbbb54d45e99bc9aa0e2adc8d1f47f7ae6693b296cfa3d6192308641251300f947db22b9d28db63fad99a7bc229e7a0515b222a4154d286b32f4fd9cfe71906282176d315c375f8f34847856b963fd020befa2571ee7fb464c7f4bc2a99241c9b31a028cb5fdc70b9aae93aa0548feaa6891af16a595fee8a0f5660d8bc427341411e1fe6e89a3cc557360e79b5fddbb0d50a83c3bee9a47a58e016a8f787496f3be12d85f4a23f92ad09947440880e799662cdf9b0c8a6cdce0070be64433136bab243ba0417ff78674a283463a1e03f7ce520accf38bcef41b2db6035a390e9f5a75d64625f56017dd4969"}, @jumbo={0xc2, 0x4, 0x6}, @pad1, @ra={0x5, 0x2, 0x7}, @generic={0x7f, 0xa7, "1f56762d06e36e0a1c7f642dba8e8f9632eb0e38cbdb393aa607e54690be2d1bfa347e6c15abc09cfccbec584efe21e2096b0d1ff397c1c4b8f15ca26d9ca7d622433bf6d4a2ac85de6a8c048965fe78763473c24799b7f34b6e6d3ebd9a71c29beea833603bb23cf2cbdd801f0a2313cae8d4fc1be77c7f91cd290938889690b6a68914dfac56d734b1b6a82a6b47fa70588ef6df9c8e9e0f43d17ea418217b90f22773974b52"}, @calipso={0x7, 0x40, {0x1, 0xe, 0xdd, 0x9, [0x2, 0x2, 0x40, 0x7, 0x9, 0x80, 0x0]}}, @ra={0x5, 0x2, 0x7f}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x400}}], 0x338}}, {{0x0, 0x0, &(0x7f0000005ac0), 0x0, &(0x7f0000005b00)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x5e, 0x1c, '\x00', [@generic={0x9, 0xb8, "9ab5ab2c927fe5278342373a52c8ad9e5c60e4c15cdb12412f4c5a01e56c777ce7c46c59ef6f31875b2251857a49e5f7b0b7a7e7fd965158ba319f2a324624b3f9b659154794e077cfa02a9544f34faefda49cc993fe18d2db55562a40c5e0abc9411a013c8997a0b603bc03210fa2c1f623d2d68f788412c120cfa64d2d3a4bb36aa51e8ad073f0922cc75a03a48de0a865bbb84139a0378ea333ca7297ec0bc5939fb013c77cf5b3c704732dc4f007f296c67fe9d6b805"}, @jumbo={0xc2, 0x4, 0xbc}, @enc_lim, @enc_lim={0x4, 0x1, 0xb2}, @pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x400}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0xf8, 0x29, 0x37, {0x32, 0x1b, '\x00', [@generic={0x61, 0xd7, "8fdfec31e6fad35fe4ecd7a2178f439432d27ad3ac4bf848ab74f37e906c0b08bac4ca5a0728bb222c8387c9ecca65e481dad1c098148c3813e70f51e0763cc6fb71d9aede1235442c4bc6327d5e16126457f71dcd037527d36c49f464bfd8fd27d0774aa4f6c4b50ceb7cdca51f6f888738b7f4310444e6f0290b3ecaef643a2201a6f8280facb5ef197f78398a07088939fd113c41491d21e67f29a55f5a36f1d14f9324060fbc96815d14ae8f75d4380966288e79ad66ebb14597c311fe35eb95c327562113e4d2bb5cb2b6a04ca1f30991593dc1c1"}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x17, 0x2, 0x0, 0xaf, 0x0, [@mcast1]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x32, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x2c8}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000005e00)="8dbeb2cefd25951c3802f46f2e821588e81d403c0ad6bea8c69892f73d32a92cf694e7bca86bd2003ad5fac57b8d7ce918d2e5e9725977b71a535642a73ada30667c6ae05ce53db7d498c539467a0c3baec384422cc7d4b9b4521fbab09bb6c18622773775aadd8f2db416f8e81d27e3989bb68ee057271f75663faf5bdcb609c51352177edd3c4b3bd1fdb4d4ed003af0a5f939d79b75db171f53d7a57feaea87a8a86b9bef33662288a9f382c58235ae03f12178c538c6079bc203d7dee1b5d6dd2992aaab8588be19b5d7afee63e92c6430cd3a461a2e95225ceaf20947e410a0e9fa703e3484eecfefdd549f36153b", 0xf1}, {&(0x7f0000005f00)="df4d6ccbd86ef594c19b9f7ccf4e33ddae03ebfa3c01f8591db8a0fa87543d9ba4b62b9a822a28e3f224c36c60b8af965f81006dd91aae3af7c8c5eebc3ac7ceb7ca67d7c034e069d508dfb779489311d9b9b94f3e94efd31a361ac7624c763e4041d1145aeb2808ce794c870e5a0f7c8ad73cc83845bf2bc26b5f801b8d4b335aa22d64581a7e7cdc69f8f8a331af43c6f43e377155dc7c76574d90b7a425875cab29037eb92f14c63844f857bda96f61ab07bfd07cde2cd5cd5061352c9e6d20a7dab042c8a7197b0afd392ae008360868ef4405d18a263df9df87adfeecd6", 0xe0}, {&(0x7f0000006000)="0500f8a3bde0392760fb69a57aea5b2c9a573b82b621e4da967734a6f8b606c091999c5f65b18ca99d3ec92d4e46cbffb1629b7ff4caac3062a4257047c180be47adf2a244fb11c23154c516ffa3102b7e4f1feff7df23cabe37d0577ada51430802b3cac091659dbed65be07503f3fea102e35e8ffd8d438e3a432f1a07202eb6d46bedb76c2227a785141b7463d65e09174f5a568ae30235a54f971a5249800261ca3cfd5d6b975514034af49e2ca3683a53e0fa0a585310ca891a219d3eac588ac897", 0xc4}, {&(0x7f0000006100)="88b40d2284826d9963fe9b43f3768ed374f2bbdb00d5363664bc12f0378fc78b8ed684ad631318fd37086459c09037a2ed96d5e06ee88d308864aa4581e603f403a59aff166bb384e500d6feac78aae1", 0x50}, {&(0x7f0000006180)="f4a37c156037", 0x6}, {&(0x7f00000061c0)="1328360bcf613e20a041e8ea6de21a438fe22b34c258a030eba5147f91064d259e56d2ab61073fcdb81bf247097c6062ca51335efbef9585925045be3ec1a1ab0ae2002607db5e21cbc7b90fd632d8f2901f60c77ad871773bc0c36fbfd70ff8771f2b9c0912dd6e20dd1df21b6ab8ccc50b6f0c1caffcc3b0bf2a8f70e03340324d7a4e5062ed54e6f69b53b7591c0f0534c523595490dcd101be0604639d1abdb602e910cc595e9bf4db", 0xab}], 0x6, &(0x7f0000006480)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xffff}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r3}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x20}}, @flowinfo={{0x14, 0x29, 0xb, 0x200}}], 0x70}}], 0x7, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2940.541959] FAULT_INJECTION: forcing a failure. [ 2940.541959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2940.543217] CPU: 1 PID: 13203 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2940.543814] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.544506] Call Trace: [ 2940.544746] dump_stack+0x107/0x167 [ 2940.545074] should_fail.cold+0x5/0xa [ 2940.545459] _copy_to_iter+0x264/0x12d0 [ 2940.545839] ? sk_wait_data+0x353/0x4d0 [ 2940.546217] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2940.546677] ? __virt_addr_valid+0x170/0x5c0 [ 2940.547091] ? __check_object_size+0x319/0x440 [ 2940.547524] simple_copy_to_iter+0x4c/0x70 [ 2940.547921] __skb_datagram_iter+0x4f7/0x880 [ 2940.548344] ? zerocopy_sg_from_iter+0x110/0x110 [ 2940.548795] skb_copy_datagram_iter+0x88/0x190 [ 2940.549258] tcp_recvmsg+0x13b5/0x2930 [ 2940.549619] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.549999] ? sock_has_perm+0x1ea/0x280 [ 2940.550378] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.550842] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.551213] inet6_recvmsg+0x13b/0x6e0 [ 2940.551560] ? inet6_bind+0x120/0x120 [ 2940.551900] ? security_socket_recvmsg+0x95/0xc0 [ 2940.552313] ? inet6_bind+0x120/0x120 [ 2940.552649] sock_recvmsg+0xff/0x180 [ 2940.552981] __sys_recvfrom+0x1be/0x2f0 [ 2940.553370] ? __ia32_sys_send+0x100/0x100 [ 2940.553752] ? lock_downgrade+0x6d0/0x6d0 [ 2940.554153] ? wait_for_completion_io+0x270/0x270 [ 2940.554587] ? rcu_read_lock_any_held+0x75/0xa0 [ 2940.555007] ? vfs_write+0x354/0xa70 [ 2940.555335] ? fput_many+0x2f/0x1a0 [ 2940.555657] ? ksys_write+0x1a9/0x260 [ 2940.556008] ? __ia32_sys_read+0xb0/0xb0 [ 2940.556380] __x64_sys_recvfrom+0xdd/0x1b0 [ 2940.556752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.557225] do_syscall_64+0x33/0x40 [ 2940.557564] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2940.558011] RIP: 0033:0x7fd4b1105b19 [ 2940.558343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.559938] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2940.560595] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2940.561239] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2940.561898] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.562546] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2940.569361] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 2940.589239] FAULT_INJECTION: forcing a failure. [ 2940.589239] name failslab, interval 1, probability 0, space 0, times 0 [ 2940.590577] CPU: 0 PID: 13201 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2940.591186] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2940.591903] Call Trace: [ 2940.592145] dump_stack+0x107/0x167 [ 2940.592471] should_fail.cold+0x5/0xa [ 2940.592811] ? __tcp_md5_do_lookup+0x1ab/0x750 [ 2940.593224] ? create_object.isra.0+0x3a/0xa20 [ 2940.593637] should_failslab+0x5/0x20 [ 2940.593978] kmem_cache_alloc+0x5b/0x310 [ 2940.594343] create_object.isra.0+0x3a/0xa20 [ 2940.594730] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2940.595182] kmem_cache_alloc_node+0x169/0x330 [ 2940.595590] __alloc_skb+0x6d/0x5b0 [ 2940.595916] tcp_collapse+0x42c/0xf20 [ 2940.596269] ? tcp_queue_rcv+0x7c0/0x7c0 [ 2940.596640] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 2940.597080] ? tcp_xmit_recovery+0x86/0x180 [ 2940.597476] ? tcp_ack+0xeef/0x5690 [ 2940.597812] tcp_try_rmem_schedule+0xb8a/0x1690 [ 2940.598251] tcp_data_queue+0x16ba/0x47f0 [ 2940.598647] ? tcp_data_ready+0x500/0x500 [ 2940.599012] ? tcp_urg.part.0+0x157/0x2e0 [ 2940.599391] ? tcp_try_keep_open+0x2f0/0x2f0 [ 2940.599783] ? tcp_validate_incoming+0x431/0x16a0 [ 2940.600209] ? tcp_check_urg.isra.0+0x1db/0x720 [ 2940.600624] tcp_rcv_established+0x868/0x1e30 [ 2940.601024] ? tcp_check_space+0x6c0/0x6c0 [ 2940.601430] tcp_v6_do_rcv+0x7b3/0x1520 [ 2940.601796] __release_sock+0x139/0x3b0 [ 2940.602161] release_sock+0x54/0x1b0 [ 2940.602490] sk_wait_data+0x1a7/0x4d0 [ 2940.602830] ? sock_set_mark+0x130/0x130 [ 2940.603200] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2940.603648] ? tcp_send_ack+0x7d/0xa0 [ 2940.603991] tcp_recvmsg+0x17b2/0x2930 [ 2940.604360] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.604740] ? sock_has_perm+0x1ea/0x280 [ 2940.605112] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2940.605600] ? tcp_splice_read+0x8c0/0x8c0 [ 2940.605973] inet6_recvmsg+0x13b/0x6e0 [ 2940.606321] ? inet6_bind+0x120/0x120 [ 2940.606664] ? security_socket_recvmsg+0x95/0xc0 [ 2940.607077] ? inet6_bind+0x120/0x120 [ 2940.607418] sock_recvmsg+0xff/0x180 [ 2940.607751] __sys_recvfrom+0x1be/0x2f0 [ 2940.608102] ? __ia32_sys_send+0x100/0x100 [ 2940.608480] ? lock_downgrade+0x6d0/0x6d0 [ 2940.608871] ? wait_for_completion_io+0x270/0x270 [ 2940.609322] ? rcu_read_lock_any_held+0x75/0xa0 [ 2940.609733] ? vfs_write+0x354/0xa70 [ 2940.610061] ? fput_many+0x2f/0x1a0 [ 2940.610390] ? ksys_write+0x1a9/0x260 [ 2940.610725] ? __ia32_sys_read+0xb0/0xb0 [ 2940.611086] __x64_sys_recvfrom+0xdd/0x1b0 [ 2940.611462] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2940.611914] do_syscall_64+0x33/0x40 [ 2940.612243] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2940.612691] RIP: 0033:0x7f7abd046b19 [ 2940.613021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2940.614617] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2940.615279] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2940.615897] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2940.616514] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.617140] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2940.617786] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 11:01:34 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) 11:01:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xb60, 0xcd08, 0x0, 0x0) 11:01:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000002c0)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xc4, 0x7, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88be}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88e7}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008800) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000580)={0xa, 0x4e21, 0x7, @remote, 0x2}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000005c0)="a090f719b0d9535d95801ef3e10f47af2abc3a8dd04cb62f6d592fb5e2fe09ac7a6c406279e3115a41b626657d2519ed0d3bf1228716ec44352d1e3b063994debc7dff8cd2b3588d4dd93a6cc8dd605359e3b218fc27b06f1e2cd46b53c9cac6492d06207a69f8012d386cf2f04ad6a4c2fb085815279dd177cc040bbf4002aec3e6a9d1784a8dd14e65020a37c1af903edb31142bc66047a44e1c1cc0ab9bd47a3c112487e5200e1154ad905ca527117ea159", 0xb3}, {&(0x7f0000001700)="192b3aa791939a1e191c1d0525475f20a4a332f2f8c61d38c524d1ccf6407fd4fad5b648eb0e19f0306d11cebad32b1b861b14152bfa132d409874ecd75bc87e965bb972d4450c10f5d59d3078cde5783fa3bd43c42bb3fca37774e6d6eea44d1a246cd0e785a82f5aec6b307584f31546faf2d226817830dd33b015e4ca372cffc2664a35107ee42a9825656b9f4e1e22b6f63e827c93e61f7a087b7e44dd584be354d845a762b52f03d211f120bb6bf0311e971aa5f0", 0xb7}, {&(0x7f0000000680)="e7b4afae57c706be43bf1b519281ffe13d1f25e7d3cbf3d67a7d996c28804bfbb59831ef1627b7f3b3fde89daa49fef32d1c9045b75d49", 0x37}, {&(0x7f0000002e00)="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", 0x1000}], 0x5, &(0x7f0000001840)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}, 0x40000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) r3 = fork() perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x61, 0x84a20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x10) 11:01:34 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 9) 11:01:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 26) 11:01:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x540, 0xcd08, 0x0, 0x0) 11:01:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 67) 11:01:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 2955.499625] FAULT_INJECTION: forcing a failure. [ 2955.499625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.500809] CPU: 0 PID: 13246 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2955.501487] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.502286] Call Trace: [ 2955.502557] dump_stack+0x107/0x167 [ 2955.502919] should_fail.cold+0x5/0xa [ 2955.503306] _copy_to_iter+0x264/0x12d0 [ 2955.503706] ? mark_lock+0xf5/0x2df0 [ 2955.504081] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2955.504565] ? __virt_addr_valid+0x170/0x5c0 [ 2955.505001] ? __check_object_size+0x319/0x440 [ 2955.505724] simple_copy_to_iter+0x4c/0x70 [ 2955.506142] __skb_datagram_iter+0x4f7/0x880 [ 2955.506585] ? zerocopy_sg_from_iter+0x110/0x110 [ 2955.507059] skb_copy_datagram_iter+0x88/0x190 [ 2955.507512] tcp_recvmsg+0x13b5/0x2930 [ 2955.507917] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.508338] ? sock_has_perm+0x1ea/0x280 [ 2955.508740] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2955.509242] ? lock_downgrade+0x6d0/0x6d0 [ 2955.509667] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2955.510179] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.510596] inet6_recvmsg+0x13b/0x6e0 [ 2955.510980] ? inet6_bind+0x120/0x120 [ 2955.511361] ? security_socket_recvmsg+0x95/0xc0 [ 2955.511825] ? inet6_bind+0x120/0x120 [ 2955.512206] sock_recvmsg+0xff/0x180 [ 2955.512582] __sys_recvfrom+0x1be/0x2f0 [ 2955.512984] ? __ia32_sys_send+0x100/0x100 [ 2955.513408] ? lock_downgrade+0x6d0/0x6d0 [ 2955.513855] ? wait_for_completion_io+0x270/0x270 [ 2955.514328] ? rcu_read_lock_any_held+0x75/0xa0 [ 2955.514778] ? vfs_write+0x354/0xa70 [ 2955.515143] ? fput_many+0x2f/0x1a0 [ 2955.515502] ? ksys_write+0x1a9/0x260 [ 2955.515875] ? __ia32_sys_read+0xb0/0xb0 [ 2955.516277] __x64_sys_recvfrom+0xdd/0x1b0 [ 2955.516692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2955.517195] do_syscall_64+0x33/0x40 [ 2955.517574] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2955.518077] RIP: 0033:0x7f083c71fb19 [ 2955.518443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.520200] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2955.520945] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2955.521667] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2955.522360] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.523047] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000001 [ 2955.523735] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:01:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100), 0x1000000000000073) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)=r2) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000180)=r2) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000700)={{r1}, r2, 0x4, @unused=[0x0, 0x3, 0x3, 0x6], @devid}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:35 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000000700)=""/4111, 0x100f, 0xcd08, 0x0, 0x0) 11:01:35 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2955.939944] FAULT_INJECTION: forcing a failure. [ 2955.939944] name failslab, interval 1, probability 0, space 0, times 0 [ 2955.941130] CPU: 0 PID: 13241 Comm: syz-executor.4 Not tainted 5.10.211 #1 [ 2955.945771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.946033] FAULT_INJECTION: forcing a failure. [ 2955.946033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2955.946514] Call Trace: [ 2955.947747] dump_stack+0x107/0x167 [ 2955.948100] should_fail.cold+0x5/0xa [ 2955.948439] ? create_object.isra.0+0x3a/0xa20 [ 2955.948873] should_failslab+0x5/0x20 [ 2955.949217] kmem_cache_alloc+0x5b/0x310 [ 2955.949605] create_object.isra.0+0x3a/0xa20 [ 2955.950026] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2955.950480] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2955.950967] ? __tcp_send_ack.part.0+0x67/0x650 [ 2955.951386] __alloc_skb+0xb1/0x5b0 [ 2955.951726] __tcp_send_ack.part.0+0x67/0x650 [ 2955.952157] tcp_send_ack+0x7d/0xa0 [ 2955.952486] tcp_cleanup_rbuf+0x468/0x5a0 [ 2955.952886] tcp_recvmsg+0xb85/0x2930 [ 2955.953252] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.953665] ? sock_has_perm+0x1ea/0x280 [ 2955.954065] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2955.954538] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.954949] inet6_recvmsg+0x13b/0x6e0 [ 2955.955299] ? inet6_bind+0x120/0x120 [ 2955.955645] ? security_socket_recvmsg+0x95/0xc0 [ 2955.956100] ? inet6_bind+0x120/0x120 [ 2955.956439] sock_recvmsg+0xff/0x180 [ 2955.956776] __sys_recvfrom+0x1be/0x2f0 [ 2955.957166] ? __ia32_sys_send+0x100/0x100 [ 2955.957747] ? lock_downgrade+0x6d0/0x6d0 [ 2955.958166] ? wait_for_completion_io+0x270/0x270 [ 2955.958597] ? rcu_read_lock_any_held+0x75/0xa0 [ 2955.959047] ? vfs_write+0x354/0xa70 [ 2955.959380] ? fput_many+0x2f/0x1a0 [ 2955.959713] ? ksys_write+0x1a9/0x260 [ 2955.960082] ? __ia32_sys_read+0xb0/0xb0 [ 2955.960446] __x64_sys_recvfrom+0xdd/0x1b0 [ 2955.960837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2955.961309] do_syscall_64+0x33/0x40 [ 2955.961659] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2955.962144] RIP: 0033:0x7f7abd046b19 [ 2955.962478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.964133] RSP: 002b:00007f7aba59b188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2955.964805] RAX: ffffffffffffffda RBX: 00007f7abd15a020 RCX: 00007f7abd046b19 [ 2955.965461] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2955.966124] RBP: 00007f7aba59b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.966796] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2955.967452] R13: 00007fff3522982f R14: 00007f7aba59b300 R15: 0000000000022000 [ 2955.968152] CPU: 1 PID: 13245 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2955.968893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.969627] Call Trace: [ 2955.969973] dump_stack+0x107/0x167 [ 2955.970309] should_fail.cold+0x5/0xa [ 2955.971516] _copy_to_iter+0x264/0x12d0 [ 2955.971998] ? find_held_lock+0x2c/0x110 [ 2955.972371] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2955.972916] ? __virt_addr_valid+0x170/0x5c0 [ 2955.973319] ? __check_object_size+0x319/0x440 [ 2955.973900] simple_copy_to_iter+0x4c/0x70 [ 2955.974289] __skb_datagram_iter+0x4f7/0x880 [ 2955.974696] ? zerocopy_sg_from_iter+0x110/0x110 [ 2955.975232] skb_copy_datagram_iter+0x88/0x190 [ 2955.975673] tcp_recvmsg+0x13b5/0x2930 [ 2955.976115] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.976454] ? sock_has_perm+0x1ea/0x280 [ 2955.976878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2955.977293] ? tcp_splice_read+0x8c0/0x8c0 [ 2955.977693] inet6_recvmsg+0x13b/0x6e0 [ 2955.978131] ? inet6_bind+0x120/0x120 [ 2955.978443] ? security_socket_recvmsg+0x95/0xc0 [ 2955.978914] ? inet6_bind+0x120/0x120 [ 2955.979217] sock_recvmsg+0xff/0x180 [ 2955.979515] __sys_recvfrom+0x1be/0x2f0 [ 2955.979955] ? __ia32_sys_send+0x100/0x100 [ 2955.980294] ? lock_downgrade+0x6d0/0x6d0 [ 2955.980632] ? wait_for_completion_io+0x270/0x270 [ 2955.981120] ? rcu_read_lock_any_held+0x75/0xa0 [ 2955.981556] ? vfs_write+0x354/0xa70 [ 2955.982021] ? fput_many+0x2f/0x1a0 [ 2955.982320] ? ksys_write+0x1a9/0x260 [ 2955.982636] ? __ia32_sys_read+0xb0/0xb0 [ 2955.983034] __x64_sys_recvfrom+0xdd/0x1b0 [ 2955.983396] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2955.983903] do_syscall_64+0x33/0x40 [ 2955.984247] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2955.984892] RIP: 0033:0x7fd4b1105b19 [ 2955.985323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.987699] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2955.988440] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2955.989137] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2955.989959] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.990556] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2955.991247] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:01:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 68) 11:01:36 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 10) 11:01:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x14) 11:01:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 27) 11:01:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x5b0, 0xcd08, 0x0, 0x0) 11:01:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xbd0, 0xcd08, 0x0, 0x0) 11:01:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) (fail_nth: 1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:36 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x40, 0x80, 0x10001, 0x100, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xc1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@empty, r2}, 0x14) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2957.115245] FAULT_INJECTION: forcing a failure. [ 2957.115245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.116319] CPU: 1 PID: 13276 Comm: syz-executor.7 Not tainted 5.10.211 #1 [ 2957.116914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2957.117652] Call Trace: [ 2957.117899] dump_stack+0x107/0x167 [ 2957.118225] should_fail.cold+0x5/0xa [ 2957.118569] _copy_to_user+0x2e/0x180 [ 2957.118914] simple_read_from_buffer+0xcc/0x160 [ 2957.119331] proc_fail_nth_read+0x198/0x230 [ 2957.119713] ? proc_sessionid_read+0x230/0x230 [ 2957.120116] ? security_file_permission+0x24e/0x570 [ 2957.120553] ? perf_trace_initcall_start+0x101/0x380 [ 2957.121006] ? proc_sessionid_read+0x230/0x230 [ 2957.125448] vfs_read+0x228/0x580 [ 2957.125806] ksys_read+0x12d/0x260 [ 2957.126126] ? vfs_write+0xa70/0xa70 [ 2957.126462] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2957.126923] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2957.127381] do_syscall_64+0x33/0x40 [ 2957.127715] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2957.128172] RIP: 0033:0x7f1d27d1469c [ 2957.128507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2957.130094] RSP: 002b:00007f1d252d7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2957.130717] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1d27d1469c [ 2957.131341] RDX: 000000000000000f RSI: 00007f1d252d71e0 RDI: 0000000000000004 [ 2957.131971] RBP: 00007f1d252d71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.132588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2957.133208] R13: 00007fff020695bf R14: 00007f1d252d7300 R15: 0000000000022000 11:01:36 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2957.226525] FAULT_INJECTION: forcing a failure. [ 2957.226525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2957.234562] CPU: 1 PID: 13287 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2957.235161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2957.235862] Call Trace: [ 2957.236108] dump_stack+0x107/0x167 [ 2957.236432] should_fail.cold+0x5/0xa [ 2957.236771] _copy_to_iter+0x264/0x12d0 [ 2957.237129] ? mark_lock+0xf5/0x2df0 [ 2957.237479] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2957.237934] ? __virt_addr_valid+0x170/0x5c0 [ 2957.238326] ? __check_object_size+0x319/0x440 [ 2957.238733] simple_copy_to_iter+0x4c/0x70 [ 2957.239110] __skb_datagram_iter+0x4f7/0x880 [ 2957.239508] ? zerocopy_sg_from_iter+0x110/0x110 [ 2957.239935] skb_copy_datagram_iter+0x88/0x190 [ 2957.240341] tcp_recvmsg+0x13b5/0x2930 [ 2957.240704] ? tcp_splice_read+0x8c0/0x8c0 [ 2957.241085] ? sock_has_perm+0x1ea/0x280 [ 2957.245461] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2957.250652] ? lock_downgrade+0x6d0/0x6d0 [ 2957.251020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2957.251477] ? tcp_splice_read+0x8c0/0x8c0 [ 2957.251857] inet6_recvmsg+0x13b/0x6e0 [ 2957.252209] ? inet6_bind+0x120/0x120 [ 2957.252559] ? security_socket_recvmsg+0x95/0xc0 [ 2957.252981] ? inet6_bind+0x120/0x120 [ 2957.253323] sock_recvmsg+0xff/0x180 [ 2957.256846] __sys_recvfrom+0x1be/0x2f0 [ 2957.257200] ? __ia32_sys_send+0x100/0x100 [ 2957.257620] ? lock_downgrade+0x6d0/0x6d0 [ 2957.258068] ? wait_for_completion_io+0x270/0x270 [ 2957.258561] ? rcu_read_lock_any_held+0x75/0xa0 [ 2957.259031] ? vfs_write+0x354/0xa70 [ 2957.259897] ? fput_many+0x2f/0x1a0 [ 2957.260697] ? ksys_write+0x1a9/0x260 [ 2957.261684] ? __ia32_sys_read+0xb0/0xb0 [ 2957.262779] __x64_sys_recvfrom+0xdd/0x1b0 [ 2957.263803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2957.265053] do_syscall_64+0x33/0x40 [ 2957.265951] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2957.267189] RIP: 0033:0x7f083c71fb19 [ 2957.268068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2957.280413] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2957.286125] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2957.287837] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2957.289586] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.291286] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2957.292985] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:01:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f00000007c0)={0x0, 0x3}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="7f454c4641080000ff0000000000000003000300020000002a000000380000001201000007000000ff00200001000000020000020000000003"], 0x31b) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) [ 2957.626958] FAULT_INJECTION: forcing a failure. [ 2957.626958] name failslab, interval 1, probability 0, space 0, times 0 [ 2957.628260] CPU: 0 PID: 13286 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2957.629026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2957.629954] Call Trace: [ 2957.630617] dump_stack+0x107/0x167 [ 2957.631195] should_fail.cold+0x5/0xa [ 2957.637899] ? lock_release+0x680/0x680 [ 2957.638867] ? skb_clone+0x14f/0x3d0 [ 2957.639679] should_failslab+0x5/0x20 [ 2957.640625] kmem_cache_alloc+0x5b/0x310 [ 2957.641112] skb_clone+0x14f/0x3d0 [ 2957.642034] dev_queue_xmit_nit+0x3a7/0xb00 [ 2957.643054] dev_hard_start_xmit+0xab/0x6f0 [ 2957.644080] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2957.644700] __dev_queue_xmit+0x17ec/0x2710 [ 2957.645209] ? find_held_lock+0x2c/0x110 [ 2957.645677] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2957.646184] ? mark_held_locks+0x9e/0xe0 [ 2957.646607] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2957.647143] ip6_finish_output2+0x17b4/0x1fe0 [ 2957.647617] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2957.648135] ip6_output+0x3aa/0x7e0 [ 2957.648530] ip6_xmit+0x10a1/0x1c40 [ 2957.648916] ? ip6_append_data+0x330/0x330 [ 2957.649344] ? inet6_csk_xmit+0xc6/0x680 [ 2957.650335] ? lock_release+0x680/0x680 [ 2957.650778] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2957.651908] ? inet6_csk_route_req+0x850/0x850 [ 2957.652983] ? md5_transform+0x19/0xde0 [ 2957.654094] inet6_csk_xmit+0x315/0x680 [ 2957.655031] ? inet6_csk_update_pmtu+0x190/0x190 [ 2957.656171] ? __local_bh_enable_ip+0x9d/0x100 [ 2957.657246] ? csum_ipv6_magic+0x1e/0x70 [ 2957.658230] ? inet6_csk_update_pmtu+0x190/0x190 [ 2957.659364] __tcp_transmit_skb+0x18ef/0x35d0 [ 2957.660472] ? __tcp_select_window+0x900/0x900 [ 2957.661621] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2957.662941] ? __tcp_send_ack.part.0+0x67/0x650 [ 2957.664085] ? memset+0x20/0x50 [ 2957.664897] ? __alloc_skb+0x388/0x5b0 [ 2957.665867] __tcp_send_ack.part.0+0x3e0/0x650 [ 2957.666991] tcp_send_ack+0x7d/0xa0 [ 2957.667871] tcp_cleanup_rbuf+0x468/0x5a0 [ 2957.668883] tcp_recvmsg+0xb85/0x2930 [ 2957.669811] ? tcp_splice_read+0x8c0/0x8c0 [ 2957.670823] ? sock_has_perm+0x1ea/0x280 [ 2957.671890] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2957.673211] ? tcp_splice_read+0x8c0/0x8c0 [ 2957.674459] inet6_recvmsg+0x13b/0x6e0 [ 2957.675429] ? inet6_bind+0x120/0x120 [ 2957.676384] ? security_socket_recvmsg+0x95/0xc0 [ 2957.677571] ? inet6_bind+0x120/0x120 [ 2957.678442] sock_recvmsg+0xff/0x180 [ 2957.679298] __sys_recvfrom+0x1be/0x2f0 [ 2957.680196] ? __ia32_sys_send+0x100/0x100 [ 2957.681117] ? lock_downgrade+0x6d0/0x6d0 [ 2957.682073] ? wait_for_completion_io+0x270/0x270 [ 2957.683143] ? rcu_read_lock_any_held+0x75/0xa0 [ 2957.684172] ? vfs_write+0x354/0xa70 [ 2957.685008] ? fput_many+0x2f/0x1a0 [ 2957.685823] ? ksys_write+0x1a9/0x260 [ 2957.686650] ? __ia32_sys_read+0xb0/0xb0 [ 2957.687537] __x64_sys_recvfrom+0xdd/0x1b0 [ 2957.688445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2957.689591] do_syscall_64+0x33/0x40 [ 2957.690430] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2957.691632] RIP: 0033:0x7fd4b1105b19 [ 2957.692528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2957.696559] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2957.698368] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2957.700185] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2957.701974] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2957.703671] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2957.705267] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:01:37 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 28) [ 2959.184920] FAULT_INJECTION: forcing a failure. [ 2959.184920] name failslab, interval 1, probability 0, space 0, times 0 [ 2959.188025] CPU: 0 PID: 13305 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2959.189730] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2959.191733] Call Trace: [ 2959.192384] dump_stack+0x107/0x167 [ 2959.193270] should_fail.cold+0x5/0xa [ 2959.194133] ? create_object.isra.0+0x3a/0xa20 [ 2959.195241] should_failslab+0x5/0x20 [ 2959.196172] kmem_cache_alloc+0x5b/0x310 [ 2959.197163] create_object.isra.0+0x3a/0xa20 [ 2959.198233] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2959.199467] kmem_cache_alloc_node+0x169/0x330 [ 2959.200495] __alloc_skb+0x6d/0x5b0 [ 2959.201335] ? ktime_get+0x158/0x1f0 [ 2959.202298] __tcp_send_ack.part.0+0x67/0x650 [ 2959.203287] tcp_send_ack+0x7d/0xa0 [ 2959.204093] tcp_cleanup_rbuf+0x468/0x5a0 [ 2959.205006] tcp_recvmsg+0xb85/0x2930 [ 2959.205890] ? tcp_splice_read+0x8c0/0x8c0 [ 2959.206820] ? sock_has_perm+0x1ea/0x280 [ 2959.207724] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2959.208872] ? tcp_splice_read+0x8c0/0x8c0 [ 2959.209821] inet6_recvmsg+0x13b/0x6e0 [ 2959.210672] ? inet6_bind+0x120/0x120 [ 2959.211530] ? security_socket_recvmsg+0x95/0xc0 [ 2959.212561] ? inet6_bind+0x120/0x120 [ 2959.213389] sock_recvmsg+0xff/0x180 [ 2959.214294] __sys_recvfrom+0x1be/0x2f0 [ 2959.215258] ? __ia32_sys_send+0x100/0x100 [ 2959.216274] ? lock_downgrade+0x6d0/0x6d0 [ 2959.217298] ? wait_for_completion_io+0x270/0x270 [ 2959.218483] ? rcu_read_lock_any_held+0x75/0xa0 [ 2959.219526] ? vfs_write+0x354/0xa70 [ 2959.220382] ? fput_many+0x2f/0x1a0 [ 2959.221271] ? ksys_write+0x1a9/0x260 [ 2959.222220] ? __ia32_sys_read+0xb0/0xb0 [ 2959.223210] __x64_sys_recvfrom+0xdd/0x1b0 [ 2959.224230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2959.225476] do_syscall_64+0x33/0x40 [ 2959.226340] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2959.227520] RIP: 0033:0x7fd4b1105b19 [ 2959.228388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2959.232447] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2959.234107] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2959.235669] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2959.237222] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2959.238925] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2959.240483] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:01:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x24) 11:01:55 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 11) 11:01:55 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x2a0, 0xcd08, 0x0, 0x0) 11:01:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 29) 11:01:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x620, 0xcd08, 0x0, 0x0) 11:01:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:01:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000100)=0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1a, 0x69844ea0a6ddcd11, 0x0, 0x0, {}, [@typed={0x8, 0x100, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 11:01:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xc40, 0xcd08, 0x0, 0x0) 11:01:55 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 2976.009508] FAULT_INJECTION: forcing a failure. [ 2976.009508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2976.010767] CPU: 1 PID: 13332 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2976.011409] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.012168] Call Trace: [ 2976.012426] dump_stack+0x107/0x167 [ 2976.012773] should_fail.cold+0x5/0xa [ 2976.013141] _copy_to_iter+0x264/0x12d0 [ 2976.013526] ? mark_lock+0xf5/0x2df0 [ 2976.017908] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2976.018322] ? __virt_addr_valid+0x170/0x5c0 [ 2976.018714] ? __check_object_size+0x319/0x440 [ 2976.019103] simple_copy_to_iter+0x4c/0x70 [ 2976.019454] __skb_datagram_iter+0x4f7/0x880 [ 2976.019835] ? zerocopy_sg_from_iter+0x110/0x110 [ 2976.020236] skb_copy_datagram_iter+0x88/0x190 [ 2976.020619] tcp_recvmsg+0x13b5/0x2930 [ 2976.020964] ? tcp_splice_read+0x8c0/0x8c0 [ 2976.021342] ? sock_has_perm+0x1ea/0x280 [ 2976.025719] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2976.026156] ? lock_downgrade+0x6d0/0x6d0 [ 2976.026500] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2976.026927] ? tcp_splice_read+0x8c0/0x8c0 [ 2976.027274] inet6_recvmsg+0x13b/0x6e0 [ 2976.027600] ? inet6_bind+0x120/0x120 [ 2976.027922] ? security_socket_recvmsg+0x95/0xc0 [ 2976.028316] ? inet6_bind+0x120/0x120 [ 2976.028629] sock_recvmsg+0xff/0x180 [ 2976.028941] __sys_recvfrom+0x1be/0x2f0 [ 2976.029269] ? __ia32_sys_send+0x100/0x100 [ 2976.029615] ? lock_downgrade+0x6d0/0x6d0 [ 2976.041818] ? wait_for_completion_io+0x270/0x270 [ 2976.042225] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.042621] ? vfs_write+0x354/0xa70 [ 2976.042944] ? fput_many+0x2f/0x1a0 [ 2976.043254] ? ksys_write+0x1a9/0x260 [ 2976.043568] ? __ia32_sys_read+0xb0/0xb0 [ 2976.043916] __x64_sys_recvfrom+0xdd/0x1b0 [ 2976.044266] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.044689] do_syscall_64+0x33/0x40 [ 2976.045003] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2976.045429] RIP: 0033:0x7f083c71fb19 [ 2976.045993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.047625] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2976.048315] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2976.048958] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2976.049600] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.054281] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2976.054918] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2976.387187] FAULT_INJECTION: forcing a failure. [ 2976.387187] name failslab, interval 1, probability 0, space 0, times 0 [ 2976.388346] CPU: 0 PID: 13329 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2976.389013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.389810] Call Trace: [ 2976.393980] dump_stack+0x107/0x167 [ 2976.394345] should_fail.cold+0x5/0xa [ 2976.394714] should_failslab+0x5/0x20 [ 2976.395079] __kmalloc_node_track_caller+0x74/0x3b0 [ 2976.395549] ? __tcp_send_ack.part.0+0x67/0x650 [ 2976.396000] __alloc_skb+0xb1/0x5b0 [ 2976.396368] __tcp_send_ack.part.0+0x67/0x650 [ 2976.396822] tcp_send_ack+0x7d/0xa0 [ 2976.397176] tcp_cleanup_rbuf+0x468/0x5a0 [ 2976.397585] tcp_recvmsg+0xb85/0x2930 [ 2976.398410] ? tcp_splice_read+0x8c0/0x8c0 [ 2976.399330] ? sock_has_perm+0x1ea/0x280 [ 2976.400235] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2976.401468] ? tcp_splice_read+0x8c0/0x8c0 [ 2976.402501] inet6_recvmsg+0x13b/0x6e0 [ 2976.403437] ? inet6_bind+0x120/0x120 [ 2976.404366] ? security_socket_recvmsg+0x95/0xc0 [ 2976.405500] ? inet6_bind+0x120/0x120 [ 2976.406533] sock_recvmsg+0xff/0x180 [ 2976.407398] __sys_recvfrom+0x1be/0x2f0 [ 2976.408345] ? __ia32_sys_send+0x100/0x100 [ 2976.409366] ? lock_downgrade+0x6d0/0x6d0 [ 2976.410417] ? wait_for_completion_io+0x270/0x270 [ 2976.411572] ? rcu_read_lock_any_held+0x75/0xa0 [ 2976.412703] ? vfs_write+0x354/0xa70 [ 2976.413597] ? fput_many+0x2f/0x1a0 [ 2976.414505] ? ksys_write+0x1a9/0x260 [ 2976.415397] ? __ia32_sys_read+0xb0/0xb0 [ 2976.416352] __x64_sys_recvfrom+0xdd/0x1b0 [ 2976.417387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2976.418045] do_syscall_64+0x33/0x40 [ 2976.418394] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2976.418875] RIP: 0033:0x7fd4b1105b19 [ 2976.419228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.420921] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2976.421634] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2976.423334] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2976.424701] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.425889] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2976.426577] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:11 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$9p(r0, &(0x7f0000000080)="f4", 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) ioctl$FS_IOC_GETFLAGS(r0, 0x40086602, &(0x7f0000001200)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x0, 0x20000000000}) 11:02:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 30) 11:02:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xcb0, 0xcd08, 0x0, 0x0) 11:02:11 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 12) 11:02:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x690, 0xcd08, 0x0, 0x0) 11:02:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x28) 11:02:11 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r3 = fork() ptrace(0x8, r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) kcmp(0x0, r3, 0x5, r4, r1) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x310, 0xcd08, 0x0, 0x0) 11:02:11 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x2}, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) dup(0xffffffffffffffff) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x50) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:11 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x100]}, 0x8, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/tcp_cubic', 0x105c00, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f0000000200)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r2, &(0x7f00000000c0)=0x56cb, r4, &(0x7f0000000100), 0x2, 0x0) lseek(r2, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x0, 0x290}) copy_file_range(r5, 0x0, r2, 0x0, 0x200f5ef, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x400000, 0x60) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1000) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syncfs(r0) [ 2991.934573] FAULT_INJECTION: forcing a failure. [ 2991.934573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2991.935738] CPU: 1 PID: 13371 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2991.936330] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2991.937041] Call Trace: [ 2991.937295] dump_stack+0x107/0x167 [ 2991.937628] should_fail.cold+0x5/0xa [ 2991.937981] ? _copy_to_iter+0x121/0x12d0 [ 2991.938366] _copy_to_iter+0x264/0x12d0 [ 2991.938756] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2991.939214] ? __virt_addr_valid+0x170/0x5c0 [ 2991.939630] ? __check_object_size+0x319/0x440 [ 2991.940064] simple_copy_to_iter+0x4c/0x70 [ 2991.940465] __skb_datagram_iter+0x4f7/0x880 [ 2991.940883] ? zerocopy_sg_from_iter+0x110/0x110 [ 2991.941332] skb_copy_datagram_iter+0x88/0x190 [ 2991.941762] tcp_recvmsg+0x13b5/0x2930 [ 2991.942167] ? tcp_splice_read+0x8c0/0x8c0 [ 2991.942570] ? sock_has_perm+0x1ea/0x280 [ 2991.942967] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2991.943451] ? tcp_splice_read+0x8c0/0x8c0 [ 2991.943847] inet6_recvmsg+0x13b/0x6e0 [ 2991.944213] ? inet6_bind+0x120/0x120 [ 2991.944575] ? security_socket_recvmsg+0x95/0xc0 [ 2991.945024] ? inet6_bind+0x120/0x120 [ 2991.945384] sock_recvmsg+0xff/0x180 [ 2991.945736] __sys_recvfrom+0x1be/0x2f0 [ 2991.946108] ? __ia32_sys_send+0x100/0x100 [ 2991.946502] ? lock_downgrade+0x6d0/0x6d0 [ 2991.946915] ? wait_for_completion_io+0x270/0x270 [ 2991.947365] ? rcu_read_lock_any_held+0x75/0xa0 [ 2991.947796] ? vfs_write+0x354/0xa70 [ 2991.948147] ? fput_many+0x2f/0x1a0 [ 2991.948486] ? ksys_write+0x1a9/0x260 [ 2991.948844] ? __ia32_sys_read+0xb0/0xb0 [ 2991.949226] __x64_sys_recvfrom+0xdd/0x1b0 [ 2991.949623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2991.950121] do_syscall_64+0x33/0x40 [ 2991.950474] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2991.950948] RIP: 0033:0x7f083c71fb19 [ 2991.951300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2991.952952] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2991.953648] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2991.954327] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2991.958320] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2991.958947] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2991.959593] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 2992.194056] FAULT_INJECTION: forcing a failure. [ 2992.194056] name failslab, interval 1, probability 0, space 0, times 0 [ 2992.195239] CPU: 1 PID: 13368 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2992.195880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2992.196637] Call Trace: [ 2992.196900] dump_stack+0x107/0x167 [ 2992.197247] should_fail.cold+0x5/0xa [ 2992.197618] ? create_object.isra.0+0x3a/0xa20 [ 2992.198276] should_failslab+0x5/0x20 [ 2992.199012] kmem_cache_alloc+0x5b/0x310 [ 2992.199787] ? lock_acquire+0x197/0x470 [ 2992.200556] create_object.isra.0+0x3a/0xa20 [ 2992.201395] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2992.202171] kmem_cache_alloc+0x159/0x310 [ 2992.202577] skb_clone+0x14f/0x3d0 [ 2992.202926] dev_queue_xmit_nit+0x3a7/0xb00 [ 2992.203347] dev_hard_start_xmit+0xab/0x6f0 [ 2992.203766] __dev_queue_xmit+0x17ec/0x2710 [ 2992.204179] ? find_held_lock+0x2c/0x110 [ 2992.204572] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2992.205017] ? mark_held_locks+0x9e/0xe0 [ 2992.205409] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2992.205907] ip6_finish_output2+0x17b4/0x1fe0 [ 2992.214801] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2992.215836] ip6_output+0x3aa/0x7e0 [ 2992.216669] ip6_xmit+0x10a1/0x1c40 [ 2992.217488] ? ip6_append_data+0x330/0x330 [ 2992.222454] ? inet6_csk_xmit+0xc6/0x680 [ 2992.223358] ? lock_release+0x680/0x680 [ 2992.224282] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2992.225461] ? inet6_csk_route_req+0x850/0x850 [ 2992.230588] ? md5_transform+0x19/0xde0 [ 2992.231472] inet6_csk_xmit+0x315/0x680 [ 2992.232321] ? inet6_csk_update_pmtu+0x190/0x190 [ 2992.233344] ? __local_bh_enable_ip+0x9d/0x100 [ 2992.234460] ? csum_ipv6_magic+0x1e/0x70 [ 2992.235342] ? inet6_csk_update_pmtu+0x190/0x190 [ 2992.236485] __tcp_transmit_skb+0x18ef/0x35d0 [ 2992.237573] ? __tcp_select_window+0x900/0x900 [ 2992.238648] ? tcp_trim_head+0x470/0x470 [ 2992.239665] ? lock_acquire+0x197/0x470 [ 2992.240654] ? find_held_lock+0x2c/0x110 [ 2992.241667] __tcp_retransmit_skb+0x7f6/0x27d0 [ 2992.246845] ? tcp_v6_md5_lookup+0x4d/0x60 [ 2992.247871] ? tcp_push_one+0x100/0x100 [ 2992.248839] ? tcp_current_mss+0x1f8/0x370 [ 2992.249860] ? tcp_trim_head+0x470/0x470 [ 2992.254925] ? __mod_timer+0x7fb/0xd10 [ 2992.255889] tcp_retransmit_skb+0x28/0x240 [ 2992.256915] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 2992.258271] tcp_xmit_retransmit_queue+0x57/0x70 [ 2992.259424] tcp_xmit_recovery+0x86/0x180 [ 2992.260432] tcp_ack+0x25d9/0x5690 [ 2992.261322] ? tcp_fastretrans_alert+0x3060/0x3060 [ 2992.262544] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2992.263804] ? tcp_validate_incoming+0x431/0x16a0 [ 2992.264972] tcp_rcv_established+0x57e/0x1e30 [ 2992.274082] ? tcp_check_space+0x6c0/0x6c0 [ 2992.275138] tcp_v6_do_rcv+0x7b3/0x1520 [ 2992.276125] __release_sock+0x139/0x3b0 [ 2992.277121] release_sock+0x54/0x1b0 [ 2992.278048] sk_wait_data+0x1a7/0x4d0 [ 2992.278981] ? sock_set_mark+0x130/0x130 [ 2992.279982] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 2992.281209] ? tcp_send_ack+0x7d/0xa0 [ 2992.282159] tcp_recvmsg+0x17b2/0x2930 [ 2992.283116] ? tcp_splice_read+0x8c0/0x8c0 [ 2992.284137] ? sock_has_perm+0x1ea/0x280 [ 2992.285128] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2992.286389] ? tcp_splice_read+0x8c0/0x8c0 [ 2992.287428] inet6_recvmsg+0x13b/0x6e0 [ 2992.288387] ? inet6_bind+0x120/0x120 [ 2992.289290] ? security_socket_recvmsg+0x95/0xc0 [ 2992.290442] ? inet6_bind+0x120/0x120 [ 2992.291392] sock_recvmsg+0xff/0x180 [ 2992.292310] __sys_recvfrom+0x1be/0x2f0 [ 2992.293254] ? __ia32_sys_send+0x100/0x100 [ 2992.294221] ? lock_downgrade+0x6d0/0x6d0 [ 2992.295198] ? wait_for_completion_io+0x270/0x270 [ 2992.296360] ? rcu_read_lock_any_held+0x75/0xa0 [ 2992.297496] ? vfs_write+0x354/0xa70 [ 2992.298443] ? fput_many+0x2f/0x1a0 [ 2992.299331] ? ksys_write+0x1a9/0x260 [ 2992.300235] ? __ia32_sys_read+0xb0/0xb0 [ 2992.301209] __x64_sys_recvfrom+0xdd/0x1b0 [ 2992.302263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2992.303509] do_syscall_64+0x33/0x40 [ 2992.304412] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2992.305610] RIP: 0033:0x7fd4b1105b19 [ 2992.306507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2992.310862] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2992.312586] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2992.314284] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2992.315908] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2992.317636] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2992.319373] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 31) 11:02:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xd20, 0xcd08, 0x0, 0x0) 11:02:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x700, 0xcd08, 0x0, 0x0) 11:02:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x380, 0xcd08, 0x0, 0x0) 11:02:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x1ff, @remote, 0xfffffbff}, 0x1c) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) lseek(r4, 0x6, 0x0) 11:02:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x5c) 11:02:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 13) [ 2994.325997] FAULT_INJECTION: forcing a failure. [ 2994.325997] name failslab, interval 1, probability 0, space 0, times 0 [ 2994.327920] CPU: 1 PID: 13396 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2994.329435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2994.331242] Call Trace: [ 2994.331703] dump_stack+0x107/0x167 [ 2994.332347] should_fail.cold+0x5/0xa [ 2994.333024] ? lock_release+0x680/0x680 [ 2994.333721] ? skb_clone+0x14f/0x3d0 [ 2994.334150] should_failslab+0x5/0x20 [ 2994.334487] kmem_cache_alloc+0x5b/0x310 [ 2994.334845] skb_clone+0x14f/0x3d0 [ 2994.335163] dev_queue_xmit_nit+0x3a7/0xb00 [ 2994.335546] dev_hard_start_xmit+0xab/0x6f0 [ 2994.335921] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2994.336375] __dev_queue_xmit+0x17ec/0x2710 [ 2994.336758] ? find_held_lock+0x2c/0x110 [ 2994.337113] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2994.338169] ? mark_held_locks+0x9e/0xe0 [ 2994.338910] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2994.339944] ip6_finish_output2+0x17b4/0x1fe0 [ 2994.340757] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2994.341648] ip6_output+0x3aa/0x7e0 [ 2994.342394] ip6_xmit+0x10a1/0x1c40 [ 2994.343114] ? ip6_append_data+0x330/0x330 [ 2994.343924] ? inet6_csk_xmit+0xc6/0x680 [ 2994.344712] ? lock_release+0x680/0x680 [ 2994.345477] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2994.346155] ? inet6_csk_route_req+0x850/0x850 [ 2994.346583] ? md5_transform+0x19/0xde0 [ 2994.346967] inet6_csk_xmit+0x315/0x680 [ 2994.347342] ? inet6_csk_update_pmtu+0x190/0x190 [ 2994.347792] ? __local_bh_enable_ip+0x9d/0x100 [ 2994.348218] ? csum_ipv6_magic+0x1e/0x70 [ 2994.348602] ? inet6_csk_update_pmtu+0x190/0x190 [ 2994.349046] __tcp_transmit_skb+0x18ef/0x35d0 [ 2994.349479] ? __tcp_select_window+0x900/0x900 [ 2994.353960] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2994.354446] ? __tcp_send_ack.part.0+0x67/0x650 [ 2994.354877] ? memset+0x20/0x50 [ 2994.355192] ? __alloc_skb+0x388/0x5b0 [ 2994.355562] __tcp_send_ack.part.0+0x3e0/0x650 [ 2994.355989] tcp_send_ack+0x7d/0xa0 [ 2994.356332] tcp_cleanup_rbuf+0x468/0x5a0 [ 2994.356720] tcp_recvmsg+0xb85/0x2930 [ 2994.357099] ? tcp_splice_read+0x8c0/0x8c0 [ 2994.357497] ? sock_has_perm+0x1ea/0x280 [ 2994.357900] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2994.359172] ? tcp_splice_read+0x8c0/0x8c0 [ 2994.359982] inet6_recvmsg+0x13b/0x6e0 [ 2994.360726] ? inet6_bind+0x120/0x120 [ 2994.361461] ? security_socket_recvmsg+0x95/0xc0 [ 2994.362476] ? inet6_bind+0x120/0x120 [ 2994.363157] sock_recvmsg+0xff/0x180 [ 2994.363823] __sys_recvfrom+0x1be/0x2f0 [ 2994.364510] ? __ia32_sys_send+0x100/0x100 [ 2994.365244] ? lock_downgrade+0x6d0/0x6d0 [ 2994.366009] ? wait_for_completion_io+0x270/0x270 [ 2994.367196] ? rcu_read_lock_any_held+0x75/0xa0 [ 2994.368079] ? vfs_write+0x354/0xa70 [ 2994.368783] ? fput_many+0x2f/0x1a0 [ 2994.369482] ? ksys_write+0x1a9/0x260 [ 2994.370305] ? __ia32_sys_read+0xb0/0xb0 [ 2994.371084] __x64_sys_recvfrom+0xdd/0x1b0 [ 2994.371888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2994.372857] do_syscall_64+0x33/0x40 [ 2994.373570] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2994.374232] RIP: 0033:0x7fd4b1105b19 [ 2994.374584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2994.376219] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2994.376911] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2994.377553] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2994.378649] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2994.379878] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2994.381118] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x245e, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e22, 0x400, @local, 0x6}, 0x1c) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x8000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 32) [ 2994.890258] FAULT_INJECTION: forcing a failure. [ 2994.890258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2994.899089] CPU: 0 PID: 13407 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 2994.899707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2994.900442] Call Trace: [ 2994.900697] dump_stack+0x107/0x167 [ 2994.901036] should_fail.cold+0x5/0xa [ 2994.901388] _copy_to_iter+0x264/0x12d0 [ 2994.901767] ? zerocopy_sg_from_iter+0x110/0x110 [ 2994.910026] ? __check_object_size+0xae/0x440 [ 2994.910435] ? _copy_from_iter_nocache+0xd60/0xd60 [ 2994.910888] ? __virt_addr_valid+0x170/0x5c0 [ 2994.911296] ? __check_object_size+0x319/0x440 [ 2994.911719] simple_copy_to_iter+0x4c/0x70 [ 2994.912108] __skb_datagram_iter+0x122/0x880 [ 2994.912516] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2994.913006] ? zerocopy_sg_from_iter+0x110/0x110 [ 2994.913441] skb_copy_datagram_iter+0x88/0x190 [ 2994.913863] tcp_recvmsg+0x13b5/0x2930 [ 2994.914280] ? tcp_splice_read+0x8c0/0x8c0 [ 2994.914696] ? sock_has_perm+0x1ea/0x280 [ 2994.915092] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2994.915592] ? tcp_splice_read+0x8c0/0x8c0 [ 2994.915997] inet6_recvmsg+0x13b/0x6e0 [ 2994.916369] ? inet6_bind+0x120/0x120 [ 2994.916738] ? security_socket_recvmsg+0x95/0xc0 [ 2994.917186] ? inet6_bind+0x120/0x120 [ 2994.917558] sock_recvmsg+0xff/0x180 [ 2994.917940] __sys_recvfrom+0x1be/0x2f0 [ 2994.918310] ? __ia32_sys_send+0x100/0x100 [ 2994.918691] ? lock_downgrade+0x6d0/0x6d0 [ 2994.919095] ? wait_for_completion_io+0x270/0x270 [ 2994.919539] ? rcu_read_lock_any_held+0x75/0xa0 [ 2994.919964] ? vfs_write+0x354/0xa70 [ 2994.920300] ? fput_many+0x2f/0x1a0 [ 2994.920643] ? ksys_write+0x1a9/0x260 [ 2994.920995] ? __ia32_sys_read+0xb0/0xb0 [ 2994.921375] __x64_sys_recvfrom+0xdd/0x1b0 [ 2994.921760] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2994.922244] do_syscall_64+0x33/0x40 [ 2994.922572] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2994.923032] RIP: 0033:0x7f083c71fb19 [ 2994.923375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2994.924996] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2994.925678] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 2994.926358] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2994.927018] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 2994.927675] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2994.928324] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:02:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x770, 0xcd08, 0x0, 0x0) [ 2995.755021] FAULT_INJECTION: forcing a failure. [ 2995.755021] name failslab, interval 1, probability 0, space 0, times 0 [ 2995.756275] CPU: 0 PID: 13425 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 2995.756899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2995.757645] Call Trace: [ 2995.758086] dump_stack+0x107/0x167 [ 2995.758449] should_fail.cold+0x5/0xa [ 2995.758820] ? create_object.isra.0+0x3a/0xa20 [ 2995.759256] should_failslab+0x5/0x20 [ 2995.759624] kmem_cache_alloc+0x5b/0x310 [ 2995.760012] ? lock_acquire+0x197/0x470 [ 2995.760370] create_object.isra.0+0x3a/0xa20 [ 2995.760788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2995.761245] kmem_cache_alloc+0x159/0x310 [ 2995.761621] skb_clone+0x14f/0x3d0 [ 2995.761949] dev_queue_xmit_nit+0x3a7/0xb00 [ 2995.762343] dev_hard_start_xmit+0xab/0x6f0 [ 2995.762751] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.763254] __dev_queue_xmit+0x17ec/0x2710 [ 2995.763673] ? find_held_lock+0x2c/0x110 [ 2995.764065] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2995.764508] ? mark_held_locks+0x9e/0xe0 [ 2995.764896] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2995.765358] ip6_finish_output2+0x17b4/0x1fe0 [ 2995.765785] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 2995.766322] ip6_output+0x3aa/0x7e0 [ 2995.766665] ip6_xmit+0x10a1/0x1c40 [ 2995.766993] ? ip6_append_data+0x330/0x330 [ 2995.767392] ? inet6_csk_xmit+0xc6/0x680 [ 2995.767777] ? lock_release+0x680/0x680 [ 2995.768153] ? inet6_csk_route_socket+0x6a5/0x1000 [ 2995.768603] ? inet6_csk_route_req+0x850/0x850 [ 2995.769044] ? md5_transform+0x19/0xde0 [ 2995.769436] inet6_csk_xmit+0x315/0x680 [ 2995.769816] ? inet6_csk_update_pmtu+0x190/0x190 [ 2995.770773] ? __local_bh_enable_ip+0x9d/0x100 [ 2995.771558] ? csum_ipv6_magic+0x1e/0x70 [ 2995.772259] ? inet6_csk_update_pmtu+0x190/0x190 [ 2995.773089] __tcp_transmit_skb+0x18ef/0x35d0 [ 2995.774110] ? __tcp_select_window+0x900/0x900 [ 2995.774544] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 2995.775029] ? __tcp_send_ack.part.0+0x67/0x650 [ 2995.775469] ? memset+0x20/0x50 [ 2995.775790] ? __alloc_skb+0x388/0x5b0 [ 2995.776158] __tcp_send_ack.part.0+0x3e0/0x650 [ 2995.776575] tcp_send_ack+0x7d/0xa0 [ 2995.776916] tcp_cleanup_rbuf+0x468/0x5a0 [ 2995.777301] tcp_recvmsg+0xb85/0x2930 [ 2995.777679] ? tcp_splice_read+0x8c0/0x8c0 [ 2995.778100] ? sock_has_perm+0x1ea/0x280 [ 2995.778496] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2995.778994] ? tcp_splice_read+0x8c0/0x8c0 [ 2995.779395] inet6_recvmsg+0x13b/0x6e0 [ 2995.779773] ? inet6_bind+0x120/0x120 [ 2995.780143] ? security_socket_recvmsg+0x95/0xc0 [ 2995.780591] ? inet6_bind+0x120/0x120 [ 2995.780960] sock_recvmsg+0xff/0x180 [ 2995.781328] __sys_recvfrom+0x1be/0x2f0 [ 2995.781719] ? __ia32_sys_send+0x100/0x100 [ 2995.782141] ? lock_downgrade+0x6d0/0x6d0 [ 2995.782563] ? wait_for_completion_io+0x270/0x270 [ 2995.783029] ? rcu_read_lock_any_held+0x75/0xa0 [ 2995.783491] ? vfs_write+0x354/0xa70 [ 2995.783867] ? fput_many+0x2f/0x1a0 [ 2995.784234] ? ksys_write+0x1a9/0x260 [ 2995.784607] ? __ia32_sys_read+0xb0/0xb0 [ 2995.785006] __x64_sys_recvfrom+0xdd/0x1b0 [ 2995.785402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2995.785855] do_syscall_64+0x33/0x40 [ 2995.786197] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2995.786636] RIP: 0033:0x7fd4b1105b19 [ 2995.786960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2995.788497] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 2995.789138] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 2995.789741] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 2995.790372] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2995.790964] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 2995.791554] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x3f0, 0xcd08, 0x0, 0x0) 11:02:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xd90, 0xcd08, 0x0, 0x0) 11:02:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x7e0, 0xcd08, 0x0, 0x0) 11:02:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 33) 11:02:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x6a) 11:02:30 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 14) 11:02:30 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, @in_args={0x4}}, './file0\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000440)={{r2}, r3, 0x8, @unused=[0x3, 0xdc8, 0x7, 0x5], @name="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"}) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:30 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mlockall(0x3) r0 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x60084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 11:02:31 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0xfffffffffffffffc, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266afb8d0ada105da30df30fe7bf42444a1948f422c8d8d2d8bdd069588783e32b71300"}, 0xd8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) sendmsg$inet6(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xc6, @mcast2, 0x7}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="ef47e802319711456c238d3638141f0e7405df17df198811adaa71e2f25a4d6b6e75ad4bc142654d94975f59290a176ee4346b4b3cca68665bd389236ff8225f1747ca0cfbeb334fa514ee61f4b93f8790d11b3264d35e4a33e143c0c89687a2ff7e00c40b98643c501f72c38d38c7cf666610c4b358e9e4753a81aecf706e66351d6dd66fdb22e9111fa1895f8c8937560c4af8a9afa66a7739ceee45", 0x9d}, {&(0x7f0000000440)="a1796ca775766ccc9f044409d60b967afd064406941c284684cfe78e65a4a0a6ae24d49ca80f64a4d8ce7188c3057be9096233e3f912c36656793c89cc59ce4ea83e3f59ef4f4c5a42debe3d396abf306a74685bb1c675c52ed8d20f4489287a70d734a1cb4cdd76b9976626b953e6d6f4b8fe247a73db5cfd99ecf00649a3906cc059d9f6ac7ee9c24417cf10e15efe8bbdc2df19ab820ef6e62663ef1e8dff04c3a219c34be06cf9e8f5d424d7592ca5303bbf07bc4110e3a1bf66d88154e624c78be5b5c20d0c3ab29ce000dd456d09e0", 0xd2}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="2b2fe14ae4596599b2a5af4d80bcee8bd8ff1fabdd979c69b17ed4fdcb484268c39bc15d7d4c09676b5976663180e4419cb91d5a061bda0858318d2b2755c29311972b92359846c0ee112373963d300c864997562af3bffb5f8425aaa50737656aba78b39200d4b4b86ad566cd1c853011947bb7a3b52f5a81311b0de12e5d06b821709b280cd66d6f44d46f75c37760b7d861899f6ddd8efbf5ae51b28bf5b5a2e20ef3a5a88f3e2b8a2327715f808341e64eec9f3e6e95f838275585fe818395cfa4", 0xc3}], 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="1400000092ad866e65a69d39080000009653ce9ee1da24d1469453e2e6000000000000001400000000000000290000003e0000000400000000000000c759845e122fd6bb29950c63ac9e24e65f745926d97fa3f78b2f76a02ea3595cd1a0c7f426eb78c33af4dacf088aaa8e578b17064aa80d889a5db8dbff3ab44643afaab83843834453a47366906ddb5de9fd87a599725f0eed9701e7d244ed9306d190275701d8ae66"], 0x30}, 0x80800) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3011.656904] FAULT_INJECTION: forcing a failure. [ 3011.656904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3011.658055] CPU: 0 PID: 13448 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3011.658690] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3011.659404] Call Trace: [ 3011.659642] dump_stack+0x107/0x167 [ 3011.659959] should_fail.cold+0x5/0xa [ 3011.660296] _copy_to_iter+0x264/0x12d0 [ 3011.660648] ? sk_wait_data+0x353/0x4d0 [ 3011.660992] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3011.661418] ? __virt_addr_valid+0x170/0x5c0 [ 3011.661798] ? __check_object_size+0x319/0x440 [ 3011.662215] simple_copy_to_iter+0x4c/0x70 [ 3011.662575] __skb_datagram_iter+0x4f7/0x880 [ 3011.662952] ? zerocopy_sg_from_iter+0x110/0x110 [ 3011.663357] skb_copy_datagram_iter+0x88/0x190 [ 3011.663746] tcp_recvmsg+0x13b5/0x2930 [ 3011.664093] ? tcp_splice_read+0x8c0/0x8c0 [ 3011.664460] ? sock_has_perm+0x1ea/0x280 [ 3011.664816] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3011.665259] ? tcp_splice_read+0x8c0/0x8c0 [ 3011.665617] inet6_recvmsg+0x13b/0x6e0 [ 3011.665949] ? inet6_bind+0x120/0x120 [ 3011.666297] ? security_socket_recvmsg+0x95/0xc0 [ 3011.666700] ? inet6_bind+0x120/0x120 [ 3011.667034] sock_recvmsg+0xff/0x180 [ 3011.667373] __sys_recvfrom+0x1be/0x2f0 [ 3011.667731] ? __ia32_sys_send+0x100/0x100 [ 3011.668105] ? lock_downgrade+0x6d0/0x6d0 [ 3011.668512] ? wait_for_completion_io+0x270/0x270 [ 3011.668972] ? rcu_read_lock_any_held+0x75/0xa0 [ 3011.669422] ? vfs_write+0x354/0xa70 [ 3011.669785] ? fput_many+0x2f/0x1a0 [ 3011.670154] ? ksys_write+0x1a9/0x260 [ 3011.670484] ? __ia32_sys_read+0xb0/0xb0 [ 3011.670831] __x64_sys_recvfrom+0xdd/0x1b0 [ 3011.671197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3011.671629] do_syscall_64+0x33/0x40 [ 3011.671945] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3011.672377] RIP: 0033:0x7f083c71fb19 [ 3011.672695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3011.674218] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3011.674954] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3011.675641] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3011.676316] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3011.676990] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3011.677665] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 3011.740446] FAULT_INJECTION: forcing a failure. [ 3011.740446] name failslab, interval 1, probability 0, space 0, times 0 [ 3011.742523] CPU: 0 PID: 13447 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3011.743112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3011.743814] Call Trace: [ 3011.744052] dump_stack+0x107/0x167 [ 3011.744365] should_fail.cold+0x5/0xa [ 3011.744696] ? lock_release+0x680/0x680 [ 3011.745041] ? skb_clone+0x14f/0x3d0 [ 3011.745373] should_failslab+0x5/0x20 [ 3011.745705] kmem_cache_alloc+0x5b/0x310 [ 3011.746064] skb_clone+0x14f/0x3d0 [ 3011.746424] dev_queue_xmit_nit+0x3a7/0xb00 [ 3011.746801] dev_hard_start_xmit+0xab/0x6f0 [ 3011.747170] __dev_queue_xmit+0x17ec/0x2710 [ 3011.747538] ? find_held_lock+0x2c/0x110 [ 3011.747882] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3011.748278] ? mark_held_locks+0x9e/0xe0 [ 3011.748626] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3011.749071] ip6_finish_output2+0x17b4/0x1fe0 [ 3011.749465] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3011.749890] ip6_output+0x3aa/0x7e0 [ 3011.750240] ip6_xmit+0x10a1/0x1c40 [ 3011.750575] ? ip6_append_data+0x330/0x330 [ 3011.750935] ? inet6_csk_xmit+0xc6/0x680 [ 3011.751282] ? lock_release+0x680/0x680 [ 3011.751620] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3011.752034] ? inet6_csk_route_req+0x850/0x850 [ 3011.752423] ? md5_transform+0x19/0xde0 [ 3011.752774] inet6_csk_xmit+0x315/0x680 [ 3011.753117] ? inet6_csk_update_pmtu+0x190/0x190 [ 3011.753533] ? __local_bh_enable_ip+0x9d/0x100 [ 3011.753922] ? csum_ipv6_magic+0x1e/0x70 [ 3011.754323] ? inet6_csk_update_pmtu+0x190/0x190 [ 3011.754737] __tcp_transmit_skb+0x18ef/0x35d0 [ 3011.755131] ? __tcp_select_window+0x900/0x900 [ 3011.755517] ? tcp_trim_head+0x470/0x470 [ 3011.755863] ? slab_free_freelist_hook+0xa9/0x180 [ 3011.756271] ? kmem_cache_free+0xa7/0x2d0 [ 3011.756630] ? lock_acquire+0x197/0x470 [ 3011.756967] ? find_held_lock+0x2c/0x110 [ 3011.757320] __tcp_retransmit_skb+0x7f6/0x27d0 [ 3011.757726] ? tcp_v6_md5_lookup+0x4d/0x60 [ 3011.758089] ? tcp_push_one+0x100/0x100 [ 3011.769703] ? tcp_current_mss+0x1f8/0x370 [ 3011.770063] ? tcp_trim_head+0x470/0x470 [ 3011.770448] ? tcp_rack_mark_lost+0xa9/0x270 [ 3011.770825] ? __mod_timer+0x7fb/0xd10 [ 3011.786343] tcp_retransmit_skb+0x28/0x240 [ 3011.786749] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 3011.787280] tcp_xmit_retransmit_queue+0x57/0x70 [ 3011.787728] tcp_xmit_recovery+0x86/0x180 [ 3011.788125] tcp_ack+0x25d9/0x5690 [ 3011.788510] ? tcp_fastretrans_alert+0x3060/0x3060 [ 3011.788989] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3011.789499] ? tcp_validate_incoming+0x431/0x16a0 [ 3011.789963] tcp_rcv_established+0x57e/0x1e30 [ 3011.790475] ? tcp_check_space+0x6c0/0x6c0 [ 3011.790891] tcp_v6_do_rcv+0x7b3/0x1520 [ 3011.791282] __release_sock+0x139/0x3b0 [ 3011.791682] release_sock+0x54/0x1b0 [ 3011.792047] sk_wait_data+0x1a7/0x4d0 [ 3011.792427] ? sock_set_mark+0x130/0x130 [ 3011.792828] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3011.793327] ? tcp_send_ack+0x7d/0xa0 [ 3011.793708] tcp_recvmsg+0x17b2/0x2930 [ 3011.794223] ? tcp_splice_read+0x8c0/0x8c0 [ 3011.794671] ? sock_has_perm+0x1ea/0x280 [ 3011.795082] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3011.795600] ? tcp_splice_read+0x8c0/0x8c0 [ 3011.796015] inet6_recvmsg+0x13b/0x6e0 [ 3011.796396] ? inet6_bind+0x120/0x120 [ 3011.796773] ? security_socket_recvmsg+0x95/0xc0 [ 3011.797227] ? inet6_bind+0x120/0x120 [ 3011.797597] sock_recvmsg+0xff/0x180 [ 3011.797962] __sys_recvfrom+0x1be/0x2f0 [ 3011.798403] ? __ia32_sys_send+0x100/0x100 [ 3011.798812] ? lock_downgrade+0x6d0/0x6d0 [ 3011.799249] ? wait_for_completion_io+0x270/0x270 [ 3011.799959] ? rcu_read_lock_any_held+0x75/0xa0 [ 3011.800416] ? vfs_write+0x354/0xa70 [ 3011.800780] ? fput_many+0x2f/0x1a0 [ 3011.801133] ? ksys_write+0x1a9/0x260 [ 3011.801505] ? __ia32_sys_read+0xb0/0xb0 [ 3011.801907] __x64_sys_recvfrom+0xdd/0x1b0 [ 3011.802326] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3011.802818] do_syscall_64+0x33/0x40 [ 3011.803175] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3011.803657] RIP: 0033:0x7fd4b1105b19 [ 3011.804019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3011.805723] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3011.806490] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3011.807155] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3011.807819] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3011.808477] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3011.809148] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 15) 11:02:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x850, 0xcd08, 0x0, 0x0) 11:02:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe00, 0xcd08, 0x0, 0x0) 11:02:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 34) 11:02:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x70) 11:02:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x460, 0xcd08, 0x0, 0x0) 11:02:31 executing program 0: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) setpriority(0x0, 0x0, 0x200) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) close(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="502d6d6d69743d010af054e5ec1498303030303030303031302c01"]) r2 = fork() ptrace(0x8, r2) syz_open_procfs(r2, &(0x7f0000000080)='smaps_rollup\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000204) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x1) 11:02:32 executing program 7: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4}, 0x7) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x2004, @fd_index=0x6, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="5b53a6e6a19a86d905c5bd822b37d4dcb65dc254fcf625a1584f78bd8e7239bc03fd896bc4df8797792ea9403c1d3a6988916d984d9038327be312ec45ee45b43fe3eb03ed62249f6a1367", 0x4b}, {&(0x7f00000001c0)="275678ae373571cf15ac58", 0xb}, {&(0x7f0000000240)="f3a5747e4d76e978d2539b92dfa374d7063b0641d45a5f0a8015bd2362d5c89458c92b393ea894a1b807fefeeeb6e3477b91f6c65e3afa9dbfee", 0x3a}, {&(0x7f0000000280)="56f8b7f537731109da818c4f636b3bdf5fec6fadd87a1dd31c457bf8332b8e01d3f38c3a2b2f25c0a4a8c6efd62cc49dbb754321c146962b405d311b0f4f097c3b8b55e6388eea619f3f38d7e4246d6961aaf022deb5baed6bba277f3c8eee85cc69cc53c65b2c97d7", 0x69}], 0x5, 0xa, 0x1, {0x2}}, 0x800) 11:02:32 executing program 0: r0 = syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) setpriority(0x0, 0x0, 0x200) write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) close(r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="502d6d6d69743d010af054e5ec1498303030303030303031302c01"]) r2 = fork() ptrace(0x8, r2) syz_open_procfs(r2, &(0x7f0000000080)='smaps_rollup\x00') inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000204) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000040)=0x1) [ 3013.321594] FAULT_INJECTION: forcing a failure. [ 3013.321594] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.322661] CPU: 1 PID: 13478 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3013.323256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.323980] Call Trace: [ 3013.324223] dump_stack+0x107/0x167 [ 3013.324547] should_fail.cold+0x5/0xa [ 3013.324885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3013.325346] ? __alloc_skb+0x6d/0x5b0 [ 3013.325687] should_failslab+0x5/0x20 [ 3013.326023] kmem_cache_alloc_node+0x55/0x330 [ 3013.326941] ? kmem_cache_free+0xa7/0x2d0 [ 3013.327679] __alloc_skb+0x6d/0x5b0 [ 3013.328330] __tcp_send_ack.part.0+0x67/0x650 [ 3013.329114] ? kmem_cache_free+0x249/0x2d0 [ 3013.329852] tcp_send_ack+0x7d/0xa0 [ 3013.330632] tcp_cleanup_rbuf+0x468/0x5a0 [ 3013.331542] tcp_recvmsg+0xb85/0x2930 [ 3013.332436] ? tcp_splice_read+0x8c0/0x8c0 [ 3013.333385] ? sock_has_perm+0x1ea/0x280 [ 3013.334321] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3013.335481] ? tcp_splice_read+0x8c0/0x8c0 [ 3013.336426] inet6_recvmsg+0x13b/0x6e0 [ 3013.337298] ? inet6_bind+0x120/0x120 [ 3013.338177] ? security_socket_recvmsg+0x95/0xc0 [ 3013.339202] ? inet6_bind+0x120/0x120 [ 3013.340010] sock_recvmsg+0xff/0x180 [ 3013.340800] __sys_recvfrom+0x1be/0x2f0 [ 3013.341650] ? __ia32_sys_send+0x100/0x100 [ 3013.342549] ? lock_downgrade+0x6d0/0x6d0 [ 3013.343446] ? wait_for_completion_io+0x270/0x270 [ 3013.344457] ? rcu_read_lock_any_held+0x75/0xa0 [ 3013.345427] ? vfs_write+0x354/0xa70 [ 3013.346247] ? fput_many+0x2f/0x1a0 [ 3013.347049] ? ksys_write+0x1a9/0x260 [ 3013.347883] ? __ia32_sys_read+0xb0/0xb0 [ 3013.348794] __x64_sys_recvfrom+0xdd/0x1b0 [ 3013.349737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.350894] do_syscall_64+0x33/0x40 [ 3013.351721] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3013.352861] RIP: 0033:0x7f083c71fb19 [ 3013.353704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.358477] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3013.367129] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3013.368736] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3013.370334] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.371097] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3013.371850] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:02:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000180)="f3f7a92140adc2c3cf89cf480ecad49a7aa601f5f879b2793ae18841a96727d705620e739aa219d71672600f6d9e461cbf6e997d7d1d5656ae3e8744e203efeb26a72e82f7809124c6d3d6aedb2011bc3138ae8e35066a9033fd4c041cf0d535b622a2921d363a25f5a2e74ea61b3e6535d2b1c8", 0x74}, {&(0x7f0000000240)="34ae9d8254808af66918b8456f191039021a7e936636c746eaf14e7b065fa288b55077e44794efc048924c12f49b0bea409c637a44ffc2e8b9c89efa9ac63492fcbae0157b21e1bafd4a26f694fab1fb6145a600db8cd019689055687c12d8792b3fe6815863ace59fe3184627799b9e9da88720a6c8a07ca4c3ad3e88f43d19bc9c0605bebe6242fe3f7fe3976bb688541f99498948850ee8a6af2ce89efd5850d3d9bdd7a8210a8b7e014b3cae38e95a8c", 0xb2}], 0x2}, 0x0) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) copy_file_range(r1, &(0x7f00000000c0)=0x56cb, r2, &(0x7f0000000100), 0x2, 0x0) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x40010, r3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a319bd4364a9af1115cba42f08e3ae7e01b42a31a3634047bafe0ecfc2e96b650e884c6d511e532975ae4f8ef68ecbddb65863fcff53ab1e911badc84f325c2021644faef8b65aa1a06be72fd004bda281ed57a2da718fd6e27a76a7826cc523489a8a362ab2e9b3f81ebcd1c0853d54b2b6f8eba8b23b39e5b91489a2096aa5a185bb2f20c783468e480d0a600893e1619b473e80549758916b906b4386b8d18a5dd97e9d5a3cf10f48469540e57bf064f288f4e8ec09f9c0c48799737369004bc03697183aeca4f83aeab83394a457bb4e05ccfe71f86a8e8e7b94d8ce1403205e95bae9c93f570"], 0xeb) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) dup2(r4, r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000440)) pwritev2(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="8b088b42201858996811c1d296d146a0b9c11e42fcbbbb46d487cf22c9a4cc743c42e05f74aacae7b58e3523347351bd00835e331bcb497539b6", 0x3a}, {&(0x7f0000000200)="c2ccc796758ef892825f9eacb3e446fea5250b11695879db58b13fba653ab5ac9b1794c74f048d32f5bccfc90c3b6d9fd0229b3a0d7bdedeca6c39e210bdffeb917d0f326c4e43b034289e9d1214d9ebd2519caba3aa85a6060ee8a10f1e9dfa27c24451af37a65e9ab0fc6bf334", 0x6e}, {&(0x7f0000000280)="128c8ead5c05cfd26d64bf3cf3bd5d1fba438555b139d9936f91d1e954d2a2f6a5f519797e8d9f445a76b201630d3b61bc5d5fe29e1a050cbb402746e0af19f4b74175709da6c84042830a8e06e5329d3a16c592447083e7f98315c9aeea19575640889bbf1bc1292cd75d5559c5c54234947d5797aa34e0be68c5c9f9454e94025506bfab21ae89aea73affa3db231b09e7590f676b524ddfbcc2204951a50094214231cdac592e0ae7a5a1e197e605618edc173d732314483a89fda3b72960e71c16e78dbc2d170ec87d0c61bdb0344aad64f6b4290e67", 0xd8}, {&(0x7f0000000380)="c9c22486a3b52bb72dd90f9a8c2ec6545214a22d824ef17ccc14d9224e2ca2ff6366add50d2a204f45630d704582d754cb9f4b9df209dac26f6a776fe53ad71b9263e8d3681c77e7449d98ffefce4e9f1dbee781cee9254681b068d4d16c9e191736472bc28920d772b0211ab0df6e0daab3bd1cf302bd69e8fb", 0x7a}], 0x4, 0x3, 0x1, 0x1) [ 3013.484150] FAULT_INJECTION: forcing a failure. [ 3013.484150] name failslab, interval 1, probability 0, space 0, times 0 [ 3013.485386] CPU: 0 PID: 13487 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3013.486143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3013.486945] Call Trace: [ 3013.487202] dump_stack+0x107/0x167 [ 3013.487601] should_fail.cold+0x5/0xa [ 3013.488017] ? lock_release+0x680/0x680 [ 3013.488451] ? skb_clone+0x14f/0x3d0 [ 3013.488869] should_failslab+0x5/0x20 [ 3013.489285] kmem_cache_alloc+0x5b/0x310 [ 3013.489737] skb_clone+0x14f/0x3d0 [ 3013.490150] dev_queue_xmit_nit+0x3a7/0xb00 [ 3013.490613] dev_hard_start_xmit+0xab/0x6f0 [ 3013.491089] __dev_queue_xmit+0x17ec/0x2710 [ 3013.491565] ? find_held_lock+0x2c/0x110 [ 3013.492010] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3013.492518] ? mark_held_locks+0x9e/0xe0 [ 3013.492967] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3013.493524] ip6_finish_output2+0x17b4/0x1fe0 [ 3013.494032] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3013.494599] ip6_output+0x3aa/0x7e0 [ 3013.495004] ip6_xmit+0x10a1/0x1c40 [ 3013.495417] ? ip6_append_data+0x330/0x330 [ 3013.495880] ? inet6_csk_xmit+0xc6/0x680 [ 3013.496327] ? lock_release+0x680/0x680 [ 3013.496761] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3013.497292] ? inet6_csk_route_req+0x850/0x850 [ 3013.497795] ? md5_transform+0x19/0xde0 [ 3013.498252] inet6_csk_xmit+0x315/0x680 [ 3013.498638] ? inet6_csk_update_pmtu+0x190/0x190 [ 3013.499074] ? __local_bh_enable_ip+0x9d/0x100 [ 3013.499492] ? csum_ipv6_magic+0x1e/0x70 [ 3013.499875] ? inet6_csk_update_pmtu+0x190/0x190 [ 3013.500319] __tcp_transmit_skb+0x18ef/0x35d0 [ 3013.500754] ? __tcp_select_window+0x900/0x900 [ 3013.501174] ? tcp_trim_head+0x470/0x470 [ 3013.501562] ? lock_acquire+0x197/0x470 [ 3013.501934] ? find_held_lock+0x2c/0x110 [ 3013.502338] __tcp_retransmit_skb+0x7f6/0x27d0 [ 3013.502772] ? tcp_v6_md5_lookup+0x4d/0x60 [ 3013.503193] ? tcp_push_one+0x100/0x100 [ 3013.503622] ? tcp_current_mss+0x1f8/0x370 [ 3013.504074] ? tcp_trim_head+0x470/0x470 [ 3013.504512] ? __mod_timer+0x7fb/0xd10 [ 3013.504935] tcp_retransmit_skb+0x28/0x240 [ 3013.505389] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 3013.505978] tcp_xmit_retransmit_queue+0x57/0x70 [ 3013.506439] tcp_xmit_recovery+0x86/0x180 [ 3013.506818] tcp_ack+0x25d9/0x5690 [ 3013.507184] ? tcp_fastretrans_alert+0x3060/0x3060 [ 3013.507641] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3013.508132] ? tcp_validate_incoming+0x431/0x16a0 [ 3013.508586] tcp_rcv_established+0x57e/0x1e30 [ 3013.509008] ? tcp_check_space+0x6c0/0x6c0 [ 3013.509410] tcp_v6_do_rcv+0x7b3/0x1520 [ 3013.509781] __release_sock+0x139/0x3b0 [ 3013.510174] release_sock+0x54/0x1b0 [ 3013.510558] sk_wait_data+0x1a7/0x4d0 [ 3013.510978] ? sock_set_mark+0x130/0x130 [ 3013.511408] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3013.511955] tcp_recvmsg+0x17b2/0x2930 [ 3013.512388] ? tcp_splice_read+0x8c0/0x8c0 [ 3013.512844] ? sock_has_perm+0x1ea/0x280 [ 3013.513308] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3013.513861] ? tcp_splice_read+0x8c0/0x8c0 [ 3013.514315] inet6_recvmsg+0x13b/0x6e0 [ 3013.514730] ? inet6_bind+0x120/0x120 [ 3013.515138] ? security_socket_recvmsg+0x95/0xc0 [ 3013.515630] ? inet6_bind+0x120/0x120 [ 3013.516038] sock_recvmsg+0xff/0x180 [ 3013.516434] __sys_recvfrom+0x1be/0x2f0 [ 3013.516865] ? __ia32_sys_send+0x100/0x100 [ 3013.517301] ? lock_downgrade+0x6d0/0x6d0 [ 3013.517766] ? wait_for_completion_io+0x270/0x270 [ 3013.518486] ? rcu_read_lock_any_held+0x75/0xa0 [ 3013.518980] ? vfs_write+0x354/0xa70 [ 3013.519374] ? fput_many+0x2f/0x1a0 [ 3013.519767] ? ksys_write+0x1a9/0x260 [ 3013.520172] ? __ia32_sys_read+0xb0/0xb0 [ 3013.520605] __x64_sys_recvfrom+0xdd/0x1b0 [ 3013.521067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3013.521614] do_syscall_64+0x33/0x40 [ 3013.522011] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3013.522565] RIP: 0033:0x7fd4b1105b19 [ 3013.522959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3013.524866] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3013.525668] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3013.526432] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3013.527166] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3013.527915] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3013.528649] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:33 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) r4 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltgid}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}], [{@fowner_eq={'fowner', 0x3d, r6}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000240)="a0e443bf6942f4032e04ba5912d7985e4ec6f20ce815138610e0ea684de662c14cb185d2ffb605210bccdc7b6ab41042ec48c5c806dfd72a2ce12d3100b2bd9988744645aa2139", 0x47}, {&(0x7f0000000440)="dbbde0c5418e8f94a71448abdf3899b6c5998537d499047a8c76a8eea73b87ec7033a9574794a8c1d70aae9f95b0f916b9f46eaec6b4934736248853e8ff766c68bac8556cb3f7f01e15e5e47ea24bce03eeea076f7dd9454546235b7f005a30df3e5ac12de77050a97466d869ebd04790cebcf2573f85759d60220d37ed046d99e70cd0823cafbf1dcd527a8b4a30da9e9d905fcf17c9e562ffc814ca418acc67c8c6038ebf37827a9e9a857dd0afee23e75c0eaed25e6055650999eaa411e2fe10e3fb344855147ee6d9405967643e7259a02e9706", 0xd6}, {&(0x7f0000000540)="10623fc4520d54c3ed58390d0af0cfa90663247dd8f8b9a7fc8d26e549f07b7ecc339612d47730fd1e073568e03c1a917d7fcf17db9fb57cf7fb45fb1440573934c67c5a", 0x44}, {&(0x7f00000005c0)="364f90ee508dde74949cb0aa0826ceed23377a94499610ae217a9363f00d9441aaa8b5b64112c787e2410fc8ef4c79bb6b2ba2821d0bae91b752a7e29f5eb7c6efe5a8e85295746d3ff64284a1260136bdaf58c252834fed6382ee9217506c28ab3cb35cd57085acef38febfb5be0dab363963b1942f7a37b35be70e16924fef9900df8e9f4efa605018881c33638a1314edd6aeaa3eeb1f2077f7eb59568d869744f2e88cb01d9a0f8d4f6326c69cdae561c1e3e2674a5897f21dc94269ebd333e2b9d9d94ab169d9eb16f436a45b5b21528920c66d43e1a76bb4a90423ed15421c30b88350a5dcd29e7cf61f", 0xed}, {&(0x7f0000000040)="ec214ded7c09c480dafac074d345e0590e8ecf94a34adb32632249da036a5ca5", 0x20}], 0x5, 0x0, 0x0, 0x24040005}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001d80)="27596a8e1ceec273aa5b7350c9860dcd8d634880552255784cf1e411aca055a5fffe861b38147d60741d7d81571000e4e8e5eac0281371696607a057fa4426f8112283421166251d19eb7a1068b7bbd1778be7bf2c2b7665ff8ecf658b20994c993f65b1626053dd83074e0c789440a77374071d8e946a", 0x77}, {&(0x7f00000007c0)="03961b8e9594875060d62a9e1e5453374a271126bafb329b86502a3435c1f232431f91276726e96ca81373438970c34289f1a3301369a200e035c170c323e75517e0fef0bd8042f13179b31210fd9e2adf8be2b1fb42db37679b30962830cf1c8236d21e4366b33b19dc388452b2afbd679b9b161f43c6610e2d10bf2093aebd43fda06ce86aa9b8d08dc4ce9aa7f6b4d1d3c7b15da2aabd6b3f054dece07ae0c4538ce4188a4d5c7a24200b9e4c74", 0xaf}, {&(0x7f0000000880)="5104d9896c7b5803d6264bccf0636e0b5fcba59d9492ee108f1536a9e4fb503667a965a18b751291d75211ced2cf2d8dd7ef9afde1407a3339e797a10882acdb131cd7ecf47bdec469294f38866b59e481e5d437eaf8152e1fc4511aaa320187e508f218821967b04353495a08af0cbbadbe15f2faf251455ed66a6f24a4c6739ac9dac20df8833b6362dc895051e1d8eb04802cf1bf3444c0d485b1fa960055cc1e1035772e4a880739a955f087b78fa87cc089913f5d2d370b7b8af2b3ffe9812ab535847d7d83c70bb7356c8997b14c05f00b59ba98b3886ce0721ccf84b0408113531f52bcf47ada10b6d7af372279a484fb1ea1dc1e69", 0xf9}, {&(0x7f00000001c0)="2e685cce170dbf134bc130bf05", 0xd}, {&(0x7f00000002c0)="1c083437d48468fcd3477ec3607c7ccf02e3130b4ac41139f0495e02033a7fc3956fd186153d218cfaf6032e7f", 0x2d}, {&(0x7f0000000980)="2a4620f714e5bd27602ac1d0568e60e393ed93587b69c2d7ea7b9616d8e689c45604ecb0f481c9bc1cd4b93d41912eb8214a89fccc0c01033a065c78176970624683c0757268908d7ee1b17e71d43b6afef40952933316730273a9e59bb64060919e5e5a6c2babf4a0f9dcc2d82a27f561fe2c1be461b29785d7057427258efd8c3bafc9b66378f324189088616ccc6ebd36d29110e8519fa22d91f1c6507b7a77f57a3ae25f6f920c3af059234c90c8c834af82a0fe01564451cc6f", 0xbc}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000002f00)="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", 0x1000}], 0x8, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r3, r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}], 0xa0, 0x48044}}, {{&(0x7f0000001bc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000001c40)="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", 0xfc}, {&(0x7f0000002e00)="5730e2cc5bab374b539e3438b009dac00b767e3cd5f57f021ab9751bc187f15a4953dd9546f4357f359992df949997a4f116bc48310c261825b963347a8265b79a904e876034cfe2926aa2df7a02171c", 0x50}, {&(0x7f0000001d40)="7cdcb7ec5ac2a8a6fdf4f883fb21064129d90e3e0215b0e83e64fca545db06ab6f1d94054e", 0x25}, {&(0x7f0000003f00)="7d3e94de0428aaf475f7ab85cf9a89d041c7a58b9e491a2cf56bc2de80ca82d83770be4d53a674137eb002d5046cf830060d6c33cdf55fd61be49624895432c581d4399eb600999d923f4c8899524d9f702b351f1638dc7ffc7044657b92299cd69825d50d0f45ef07825736d6", 0x6d}, {&(0x7f0000003f80)="5c6c966a109e3b8b271dfe57be9ae8a0e487a90c8fbcdb24cf4f27b146ca4bc0a0604595ca6af2c7b4a7cba89d1bb876aebf816c7e59ac452785790a352fbdc61efef3fef8", 0x45}, {&(0x7f0000004000)="42c6129fd58c920005dc85cbcb85c9965364bc950589121021d23cd6fe39c703470928763aad429ca998588713f5ba32ebfc0add70396ec2788aedc27aac91e30c042f34c6cb6df4ff744aacbb27c64f9fac2443468335766981489c1d41e714f90717be11ec691660373fa6453358b3223b1ebb20b383e0ba7ae168a358c4e8b0a7883bd99fad378f8a15af08418f3e89289e5789", 0x95}, {&(0x7f00000040c0)="1dea5c7bced48554bfd7764ff16b38c59c33023b6efcde23601ab71a737115acdfab3ee7aaef20b55a4654b8eba8f2f5d30d4403c2218b0ef3956e813425a37be3a7c8d3da57363582c0a964a19850c77a735cc65498c5ccd22ef658c4f73b7970cdef633a599c57e2f80d05", 0x6c}, {&(0x7f0000001ac0)="0f0ef29a0b3331076a77e1baa3d304abbc1575", 0x13}], 0x8, 0x0, 0x0, 0x8000}}], 0x3, 0x40040) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3013.757587] audit: type=1326 audit(1709636553.440:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13504 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7adc98fb19 code=0x0 [ 3013.911270] audit: type=1326 audit(1709636553.598:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13504 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7adc98fb19 code=0x0 11:02:48 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 16) 11:02:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000240)="746c6158fe3c93776117c6a570c1bca1639300294d4562ad5db8d301729ec778d173727c21c41a79c47bdeca30ba5fcdd885b472da83684ca3a91ec0751883bc08cf5fb9b1165951907aa17e0708455efe57b1ed9c454c80119027d5e2d9b7c9c1632814bd9a31381d79f8f20dd156524c9647d429759afe995d2bbf52018a3413f0c5a8ba2f2aa9c072074741c6c774ef39c6b4c748736fe5aec90896459848e3d02a866c347278827b93ac99110a15ed196cbae85faef6f585ef9c41", 0xbd}, {&(0x7f0000000040)="4c411b66fb837ca92c317cb961b7aeb59a65", 0x12}, {&(0x7f00000001c0)="20c84cd4f247ba7b49b0a51d562dfa9414a08ef28c89aacea66c8f7fcad800796cb44f09c86dac5b58ef17a0969984feb371b8fd9e41359c18d9ded078", 0x3d}], 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000000010000000100001c", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x80}, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000500)=0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7fff, 0xfffe}, r4, 0x1, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x2c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff], 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x3, 0x1, 'queue1\x00', 0x1}) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0xa) unshare(0x48020200) 11:02:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe70, 0xcd08, 0x0, 0x0) 11:02:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x4d0, 0xcd08, 0x0, 0x0) 11:02:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 35) 11:02:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x8c0, 0xcd08, 0x0, 0x0) 11:02:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x84) 11:02:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) r1 = signalfd(r0, &(0x7f0000000040)={[0x7]}, 0x8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @private2, 0x1f7a}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0xa0) syz_mount_image$vfat(0x0, 0x0, 0x9, 0x0, 0x0, 0x8c, &(0x7f0000000280)=ANY=[@ANYBLOB='euid<', @ANYRESDEC=0xee01, @ANYBLOB="2c736d61636b6673666c6f6f723d002c66a7964b1d69633d30789c868cafee3473ef6a303030303000003030303030303030322c6d6561737572652c73657f6c61625c6c2c0036d393ef1a369db2d6ca42b0272e39a9ebc9bb0ab55f269ad0e0b7302ce090b30956854cadfd53604ac8ea568dcc477396d6fb7ff13620f842d7644edcfbf6f683ac408e4ecc950113bb8b9d4febb776f2e82a0118e152ab4b0f5399f16078969368498a223039a280274b2c2db3a0d1441d36b20a7e"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x200000, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) openat(r1, &(0x7f0000000080)='./file1\x00', 0x20200, 0x4) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x100000001) r3 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close(r3) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) 11:02:48 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r3 = fork() ptrace(0x8, r3) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xde, 0xa3, 0x6, 0x30, 0x0, 0x80, 0x1, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x2, 0xffffffff, 0x5d6800, 0x9, 0x5, 0x3b, 0x0, 0x0, 0xf936, 0x0, 0xadb}, r3, 0x8, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3029.352015] FAULT_INJECTION: forcing a failure. [ 3029.352015] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.353129] CPU: 0 PID: 13543 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3029.353794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.354603] Call Trace: [ 3029.354853] dump_stack+0x107/0x167 [ 3029.355197] should_fail.cold+0x5/0xa [ 3029.355557] should_failslab+0x5/0x20 [ 3029.355911] __kmalloc_node_track_caller+0x74/0x3b0 [ 3029.362772] ? __tcp_send_ack.part.0+0x67/0x650 [ 3029.363217] __alloc_skb+0xb1/0x5b0 [ 3029.363575] __tcp_send_ack.part.0+0x67/0x650 [ 3029.364005] tcp_send_ack+0x7d/0xa0 [ 3029.364343] __tcp_ack_snd_check+0x156/0x9f0 [ 3029.364760] tcp_rcv_established+0x955/0x1e30 [ 3029.365184] ? tcp_check_space+0x6c0/0x6c0 [ 3029.365597] tcp_v6_do_rcv+0x7b3/0x1520 [ 3029.365973] __release_sock+0x139/0x3b0 [ 3029.366371] release_sock+0x54/0x1b0 [ 3029.366731] sk_wait_data+0x1a7/0x4d0 [ 3029.367097] ? sock_set_mark+0x130/0x130 [ 3029.367490] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3029.367977] tcp_recvmsg+0x17b2/0x2930 [ 3029.368352] ? tcp_splice_read+0x8c0/0x8c0 [ 3029.368757] ? sock_has_perm+0x1ea/0x280 [ 3029.369153] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.369664] ? tcp_splice_read+0x8c0/0x8c0 [ 3029.370055] inet6_recvmsg+0x13b/0x6e0 [ 3029.370462] ? inet6_bind+0x120/0x120 [ 3029.370817] ? security_socket_recvmsg+0x95/0xc0 [ 3029.371252] ? inet6_bind+0x120/0x120 [ 3029.371611] sock_recvmsg+0xff/0x180 [ 3029.371970] __sys_recvfrom+0x1be/0x2f0 [ 3029.372356] ? __ia32_sys_send+0x100/0x100 [ 3029.372758] ? lock_downgrade+0x6d0/0x6d0 [ 3029.373173] ? wait_for_completion_io+0x270/0x270 [ 3029.373636] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.374075] ? vfs_write+0x354/0xa70 [ 3029.374455] ? fput_many+0x2f/0x1a0 [ 3029.374817] ? ksys_write+0x1a9/0x260 [ 3029.375194] ? __ia32_sys_read+0xb0/0xb0 [ 3029.375579] __x64_sys_recvfrom+0xdd/0x1b0 [ 3029.376002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.376498] do_syscall_64+0x33/0x40 [ 3029.376860] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3029.377338] RIP: 0033:0x7f083c71fb19 [ 3029.377689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.379393] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3029.380082] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3029.380734] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3029.381373] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.382024] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3029.382693] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 3029.406533] FAULT_INJECTION: forcing a failure. [ 3029.406533] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.407624] CPU: 1 PID: 13542 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3029.408233] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.408974] Call Trace: [ 3029.409231] dump_stack+0x107/0x167 [ 3029.409571] should_fail.cold+0x5/0xa [ 3029.409915] ? lock_release+0x680/0x680 [ 3029.410275] ? skb_clone+0x14f/0x3d0 [ 3029.410651] should_failslab+0x5/0x20 [ 3029.410998] kmem_cache_alloc+0x5b/0x310 [ 3029.411389] skb_clone+0x14f/0x3d0 [ 3029.411729] dev_queue_xmit_nit+0x3a7/0xb00 [ 3029.412136] dev_hard_start_xmit+0xab/0x6f0 [ 3029.412534] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.413025] __dev_queue_xmit+0x17ec/0x2710 [ 3029.413425] ? find_held_lock+0x2c/0x110 [ 3029.413802] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3029.414245] ? mark_held_locks+0x9e/0xe0 [ 3029.415416] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3029.416810] ip6_finish_output2+0x17b4/0x1fe0 [ 3029.418000] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3029.419405] ip6_output+0x3aa/0x7e0 [ 3029.420432] ip6_xmit+0x10a1/0x1c40 [ 3029.421628] ? ip6_append_data+0x330/0x330 [ 3029.422838] ? inet6_csk_xmit+0xc6/0x680 [ 3029.423956] ? lock_release+0x680/0x680 [ 3029.425007] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3029.426392] ? inet6_csk_route_req+0x850/0x850 [ 3029.427667] ? md5_transform+0x19/0xde0 [ 3029.428704] inet6_csk_xmit+0x315/0x680 [ 3029.429756] ? inet6_csk_update_pmtu+0x190/0x190 [ 3029.431032] ? __local_bh_enable_ip+0x9d/0x100 [ 3029.432281] ? csum_ipv6_magic+0x1e/0x70 [ 3029.433405] ? inet6_csk_update_pmtu+0x190/0x190 [ 3029.434720] __tcp_transmit_skb+0x18ef/0x35d0 [ 3029.436019] ? __tcp_select_window+0x900/0x900 [ 3029.437319] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3029.438868] ? __tcp_send_ack.part.0+0x67/0x650 [ 3029.440130] ? memset+0x20/0x50 [ 3029.441071] ? __alloc_skb+0x388/0x5b0 [ 3029.442172] __tcp_send_ack.part.0+0x3e0/0x650 [ 3029.443459] tcp_send_ack+0x7d/0xa0 [ 3029.444400] tcp_cleanup_rbuf+0x468/0x5a0 [ 3029.445497] tcp_recvmsg+0xb85/0x2930 [ 3029.446609] ? tcp_splice_read+0x8c0/0x8c0 [ 3029.447851] ? sock_has_perm+0x1ea/0x280 [ 3029.449047] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3029.450504] ? tcp_splice_read+0x8c0/0x8c0 [ 3029.451698] inet6_recvmsg+0x13b/0x6e0 [ 3029.452752] ? inet6_bind+0x120/0x120 [ 3029.453731] ? security_socket_recvmsg+0x95/0xc0 [ 3029.455144] ? inet6_bind+0x120/0x120 [ 3029.456229] sock_recvmsg+0xff/0x180 [ 3029.457180] __sys_recvfrom+0x1be/0x2f0 [ 3029.458181] ? __ia32_sys_send+0x100/0x100 [ 3029.459383] ? lock_downgrade+0x6d0/0x6d0 [ 3029.460610] ? wait_for_completion_io+0x270/0x270 [ 3029.461871] ? rcu_read_lock_any_held+0x75/0xa0 [ 3029.463117] ? vfs_write+0x354/0xa70 [ 3029.464073] ? fput_many+0x2f/0x1a0 [ 3029.465031] ? ksys_write+0x1a9/0x260 [ 3029.466000] ? __ia32_sys_read+0xb0/0xb0 [ 3029.467056] __x64_sys_recvfrom+0xdd/0x1b0 [ 3029.468152] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3029.469487] do_syscall_64+0x33/0x40 [ 3029.470526] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3029.471850] RIP: 0033:0x7fd4b1105b19 [ 3029.472822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.477858] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3029.479806] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3029.481823] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3029.483931] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.485808] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3029.487643] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:02:49 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4ea0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) r1 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000040)={@loopback, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:02:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000080)={0x1, 0x401, 0x2}) preadv(r0, 0x0, 0x0, 0x7f, 0x7) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000100)) epoll_create(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000003e00)={{}, 0x0, 0xa, @unused=[0x6, 0x8, 0x8, 0x8], @subvolid=0x8}) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000001680)=ANY=[@ANYBLOB="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"]) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) 11:02:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xee0, 0xcd08, 0x0, 0x0) 11:02:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 36) 11:02:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xf7) 11:02:49 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 17) [ 3030.988148] FAULT_INJECTION: forcing a failure. [ 3030.988148] name failslab, interval 1, probability 0, space 0, times 0 [ 3030.990955] CPU: 0 PID: 13586 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3030.992307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3030.993920] Call Trace: [ 3030.994689] dump_stack+0x107/0x167 [ 3030.995451] should_fail.cold+0x5/0xa [ 3030.996270] ? create_object.isra.0+0x3a/0xa20 [ 3030.997240] should_failslab+0x5/0x20 [ 3030.998027] kmem_cache_alloc+0x5b/0x310 [ 3030.998891] create_object.isra.0+0x3a/0xa20 [ 3030.999574] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3031.000074] kmem_cache_alloc+0x159/0x310 [ 3031.000478] skb_clone+0x14f/0x3d0 [ 3031.000827] dev_queue_xmit_nit+0x3a7/0xb00 [ 3031.001246] dev_hard_start_xmit+0xab/0x6f0 [ 3031.001678] __dev_queue_xmit+0x17ec/0x2710 [ 3031.002101] ? find_held_lock+0x2c/0x110 [ 3031.002501] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3031.002939] ? mark_held_locks+0x9e/0xe0 [ 3031.003327] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3031.003829] ip6_finish_output2+0x17b4/0x1fe0 [ 3031.004278] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3031.004765] ip6_output+0x3aa/0x7e0 [ 3031.005124] ip6_xmit+0x10a1/0x1c40 [ 3031.005492] ? ip6_append_data+0x330/0x330 [ 3031.005902] ? inet6_csk_xmit+0xc6/0x680 [ 3031.006299] ? lock_release+0x680/0x680 [ 3031.007403] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3031.008521] ? inet6_csk_route_req+0x850/0x850 [ 3031.009059] FAULT_INJECTION: forcing a failure. [ 3031.009059] name failslab, interval 1, probability 0, space 0, times 0 [ 3031.009480] ? md5_transform+0x19/0xde0 [ 3031.012506] inet6_csk_xmit+0x315/0x680 [ 3031.013053] ? inet6_csk_update_pmtu+0x190/0x190 [ 3031.013703] ? __local_bh_enable_ip+0x9d/0x100 [ 3031.014320] ? csum_ipv6_magic+0x1e/0x70 [ 3031.014899] ? inet6_csk_update_pmtu+0x190/0x190 [ 3031.015573] __tcp_transmit_skb+0x18ef/0x35d0 [ 3031.016201] ? __tcp_select_window+0x900/0x900 [ 3031.016823] ? tcp_trim_head+0x470/0x470 [ 3031.017380] ? slab_free_freelist_hook+0xa9/0x180 [ 3031.018036] ? kmem_cache_free+0xa7/0x2d0 [ 3031.018630] ? lock_acquire+0x197/0x470 [ 3031.019132] ? find_held_lock+0x2c/0x110 [ 3031.019666] __tcp_retransmit_skb+0x7f6/0x27d0 [ 3031.020277] ? tcp_v6_md5_lookup+0x4d/0x60 [ 3031.020852] ? tcp_push_one+0x100/0x100 [ 3031.021397] ? tcp_current_mss+0x1f8/0x370 [ 3031.021993] ? tcp_trim_head+0x470/0x470 [ 3031.022545] ? tcp_rack_mark_lost+0xa9/0x270 [ 3031.023137] ? __mod_timer+0x7fb/0xd10 [ 3031.023671] tcp_retransmit_skb+0x28/0x240 [ 3031.024249] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 3031.025004] tcp_xmit_retransmit_queue+0x57/0x70 [ 3031.025651] tcp_xmit_recovery+0x86/0x180 [ 3031.026216] tcp_ack+0x25d9/0x5690 [ 3031.026770] ? tcp_fastretrans_alert+0x3060/0x3060 [ 3031.027466] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3031.028191] ? tcp_validate_incoming+0x431/0x16a0 [ 3031.028852] tcp_rcv_established+0x57e/0x1e30 [ 3031.029470] ? tcp_check_space+0x6c0/0x6c0 [ 3031.030057] tcp_v6_do_rcv+0x7b3/0x1520 [ 3031.030592] __release_sock+0x139/0x3b0 [ 3031.031154] release_sock+0x54/0x1b0 [ 3031.031676] sk_wait_data+0x1a7/0x4d0 [ 3031.032206] ? sock_set_mark+0x130/0x130 [ 3031.032756] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3031.033450] ? tcp_send_ack+0x7d/0xa0 [ 3031.033982] tcp_recvmsg+0x17b2/0x2930 [ 3031.034532] ? tcp_splice_read+0x8c0/0x8c0 [ 3031.035043] ? sock_has_perm+0x1ea/0x280 [ 3031.035536] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3031.036150] ? tcp_splice_read+0x8c0/0x8c0 [ 3031.036637] inet6_recvmsg+0x13b/0x6e0 [ 3031.037076] ? inet6_bind+0x120/0x120 [ 3031.037538] ? security_socket_recvmsg+0x95/0xc0 [ 3031.038066] ? inet6_bind+0x120/0x120 [ 3031.038532] sock_recvmsg+0xff/0x180 [ 3031.038967] __sys_recvfrom+0x1be/0x2f0 [ 3031.039430] ? __ia32_sys_send+0x100/0x100 [ 3031.039927] ? lock_downgrade+0x6d0/0x6d0 [ 3031.040433] ? wait_for_completion_io+0x270/0x270 [ 3031.040997] ? rcu_read_lock_any_held+0x75/0xa0 [ 3031.041527] ? vfs_write+0x354/0xa70 [ 3031.041945] ? fput_many+0x2f/0x1a0 [ 3031.042376] ? ksys_write+0x1a9/0x260 [ 3031.042796] ? __ia32_sys_read+0xb0/0xb0 [ 3031.043281] __x64_sys_recvfrom+0xdd/0x1b0 [ 3031.043764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3031.044343] do_syscall_64+0x33/0x40 [ 3031.044777] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3031.045397] RIP: 0033:0x7fd4b1105b19 [ 3031.045836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3031.047780] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3031.048574] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3031.049365] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3031.050179] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3031.050906] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3031.051579] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 3031.052309] CPU: 1 PID: 13587 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3031.052959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3031.053638] Call Trace: [ 3031.053892] dump_stack+0x107/0x167 [ 3031.054200] should_fail.cold+0x5/0xa [ 3031.054571] should_failslab+0x5/0x20 [ 3031.054920] __kmalloc_node_track_caller+0x74/0x3b0 [ 3031.055330] ? __tcp_send_ack.part.0+0x67/0x650 [ 3031.055712] ? kmem_cache_free+0xa7/0x2d0 [ 3031.056071] __alloc_skb+0xb1/0x5b0 [ 3031.056380] __tcp_send_ack.part.0+0x67/0x650 [ 3031.056758] ? kmem_cache_free+0x249/0x2d0 [ 3031.057119] tcp_send_ack+0x7d/0xa0 [ 3031.057423] tcp_cleanup_rbuf+0x468/0x5a0 [ 3031.057770] tcp_recvmsg+0xb85/0x2930 [ 3031.058106] ? tcp_splice_read+0x8c0/0x8c0 [ 3031.058518] ? sock_has_perm+0x1ea/0x280 [ 3031.058908] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3031.059394] ? tcp_splice_read+0x8c0/0x8c0 [ 3031.059785] inet6_recvmsg+0x13b/0x6e0 [ 3031.060150] ? inet6_bind+0x120/0x120 [ 3031.060515] ? security_socket_recvmsg+0x95/0xc0 [ 3031.060953] ? inet6_bind+0x120/0x120 [ 3031.061315] sock_recvmsg+0xff/0x180 [ 3031.061643] __sys_recvfrom+0x1be/0x2f0 [ 3031.061997] ? __ia32_sys_send+0x100/0x100 [ 3031.062365] ? lock_downgrade+0x6d0/0x6d0 [ 3031.062787] ? wait_for_completion_io+0x270/0x270 [ 3031.070443] ? rcu_read_lock_any_held+0x75/0xa0 [ 3031.070864] ? vfs_write+0x354/0xa70 [ 3031.071182] ? fput_many+0x2f/0x1a0 [ 3031.071522] ? ksys_write+0x1a9/0x260 [ 3031.071893] ? __ia32_sys_read+0xb0/0xb0 [ 3031.072276] __x64_sys_recvfrom+0xdd/0x1b0 [ 3031.072675] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3031.073126] do_syscall_64+0x33/0x40 [ 3031.073475] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3031.073955] RIP: 0033:0x7f083c71fb19 [ 3031.074295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3031.075887] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3031.076595] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3031.077247] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3031.077863] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3031.078488] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3031.079076] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:03:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xf8) 11:03:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xf50, 0xcd08, 0x0, 0x0) 11:03:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x540, 0xcd08, 0x0, 0x0) 11:03:06 executing program 0: syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x3bac, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x59f5ee0a7c70a1ba, 0x0, @fd_index, 0x3, 0x0, 0x1, 0x0, 0x1, {0x0, r6}}, 0x8000) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) pwrite64(r7, &(0x7f0000000200)="1eecd93735c44fb403292adf1183b1b37359fc5d952f72f57313fc71da00043824a7a91b66e3c15e690475706eacaa2a11516f6bdae1719641e9ca9ac07109a1c771750aea11c86edd4a2fe38badde5b051700e793ededbbc3e9658668347430b90c87a15deeaa274587570734535ff56936598d90b1bb184947987611e123040b62e1b5021d19c2e5c200"/150, 0x96, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r7, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x400e, @fd, 0x2, 0x1ee, 0x5, 0x4}, 0x7) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f00000005c0)=ANY=[@ANYBLOB="01a64f9f86dc817f3cb2ca8b2c5e707d543257a28a1e066d7ca35e071fa253e8b90321702da07548bd35f003622a945cd91cc05f88ccede752032094258443b0017f55859363981167bf248e8ceb6cac03b66c3054bd4fbab0237e96cd", @ANYRES32=r4, @ANYBLOB="00000000000000002e2f66696c65300014879a61e449abccb3952e39efa0cff64844d34b8cec2b5e33c5c50fb67cdc1b22e4c0f1db0548531053ce31ab153adb8ca80bb17d3e95128594e8dc1fc560e7ce72faea54c69571a2a553834673fe7b556921ef5252bbb7ca7a11c5dd2262a61064bc6d8432b0c8dc7feea5d9c3d758f3d35974be973876751e9eea3f126535fbb55ab0fd141e0a9f2106253eff7f4965c4914ce8dfd1f4442da45b746c71417563a38df144bd05917cec08f8e513b2077873615d987468bf9664f1acae559f2a9cd9b671d3f1fd"]) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7fff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:03:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xb60, 0xcd08, 0x0, 0x0) 11:03:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4200, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) pipe(&(0x7f00000006c0)={0xffffffffffffffff}) bind$inet6(r2, &(0x7f0000000700)={0xa, 0x4e23, 0x3ac, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x65}, 0x1c) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000300)) recvfrom$inet6(r1, &(0x7f0000000040)=""/52, 0x34, 0x160, &(0x7f0000000140)={0xa, 0x4e21, 0xcab, @loopback, 0x4}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xd0, 0x41, 0x100, 0x70bd2a, 0x25dfdbfb, {0x8}, [@generic="e869ffc10ba1d8dbbe77d156de34a9b766f51943dee42020edfd441c7ce8c32333aa75a5ff3b050442cc9aae859e14bb2f0da82ca2cf88dfc5c8d3fa0ca2d0ab3389d6b17f1f31c264a2b77bac960b2be5cb2e765985ff80c61284e3752dee6f36f85fee748093f0bcbd537f0bd4ed39994f451a658fb546d843af077314277b899728d09be8c70c10c3f896439f3d9a95113ace580cc734885c1aa4365875e8cb940e61de551656e0de26a25b987a31ec20816735d8ef6abb19"]}, 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x40011) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x2}, {0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x5, [0xdb, 0x4, 0xb744, 0x7, 0xe0000000, 0x4, 0x5, 0x4ea]}, 0x5c) 11:03:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 37) 11:03:06 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 18) 11:03:06 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={@mcast2, 0x17}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3047.476924] FAULT_INJECTION: forcing a failure. [ 3047.476924] name failslab, interval 1, probability 0, space 0, times 0 [ 3047.478564] CPU: 1 PID: 13612 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3047.479188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3047.486865] Call Trace: [ 3047.487108] dump_stack+0x107/0x167 [ 3047.487421] should_fail.cold+0x5/0xa [ 3047.487754] ? create_object.isra.0+0x3a/0xa20 [ 3047.488142] should_failslab+0x5/0x20 [ 3047.488462] kmem_cache_alloc+0x5b/0x310 [ 3047.488804] create_object.isra.0+0x3a/0xa20 [ 3047.489200] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3047.489649] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3047.490101] ? __tcp_send_ack.part.0+0x67/0x650 [ 3047.490516] ? kmem_cache_free+0xa7/0x2d0 [ 3047.490997] __alloc_skb+0xb1/0x5b0 [ 3047.491337] __tcp_send_ack.part.0+0x67/0x650 [ 3047.491744] ? kmem_cache_free+0x249/0x2d0 [ 3047.492114] tcp_send_ack+0x7d/0xa0 [ 3047.492440] tcp_cleanup_rbuf+0x468/0x5a0 [ 3047.492821] tcp_recvmsg+0xb85/0x2930 [ 3047.493168] ? tcp_splice_read+0x8c0/0x8c0 [ 3047.493553] ? sock_has_perm+0x1ea/0x280 [ 3047.493940] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3047.494415] ? tcp_splice_read+0x8c0/0x8c0 [ 3047.494806] inet6_recvmsg+0x13b/0x6e0 [ 3047.495158] ? inet6_bind+0x120/0x120 [ 3047.495511] ? security_socket_recvmsg+0x95/0xc0 [ 3047.495920] ? inet6_bind+0x120/0x120 [ 3047.496261] sock_recvmsg+0xff/0x180 [ 3047.496601] __sys_recvfrom+0x1be/0x2f0 [ 3047.496958] ? __ia32_sys_send+0x100/0x100 [ 3047.497339] ? lock_downgrade+0x6d0/0x6d0 [ 3047.497740] ? wait_for_completion_io+0x270/0x270 [ 3047.498174] ? rcu_read_lock_any_held+0x75/0xa0 [ 3047.498579] ? vfs_write+0x354/0xa70 [ 3047.498904] ? fput_many+0x2f/0x1a0 [ 3047.499209] ? ksys_write+0x1a9/0x260 [ 3047.499524] ? __ia32_sys_read+0xb0/0xb0 [ 3047.499865] __x64_sys_recvfrom+0xdd/0x1b0 [ 3047.500213] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3047.500638] do_syscall_64+0x33/0x40 [ 3047.500957] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3047.501392] RIP: 0033:0x7f083c71fb19 [ 3047.501699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3047.507286] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3047.511022] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3047.515010] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3047.515624] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3047.516264] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3047.516910] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 3047.580196] FAULT_INJECTION: forcing a failure. [ 3047.580196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3047.581452] CPU: 0 PID: 13616 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3047.582049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3047.582780] Call Trace: [ 3047.586825] dump_stack+0x107/0x167 [ 3047.587166] should_fail.cold+0x5/0xa [ 3047.587514] _copy_to_iter+0x264/0x12d0 [ 3047.587881] ? zerocopy_sg_from_iter+0x110/0x110 [ 3047.588309] ? __virt_addr_valid+0xff/0x5c0 [ 3047.588694] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3047.589135] ? __virt_addr_valid+0x170/0x5c0 [ 3047.589524] ? __check_object_size+0x319/0x440 [ 3047.589935] simple_copy_to_iter+0x4c/0x70 [ 3047.590316] __skb_datagram_iter+0x4f7/0x880 [ 3047.590740] ? zerocopy_sg_from_iter+0x110/0x110 [ 3047.591169] skb_copy_datagram_iter+0x88/0x190 [ 3047.591569] tcp_recvmsg+0x13b5/0x2930 [ 3047.591926] ? tcp_splice_read+0x8c0/0x8c0 [ 3047.592293] ? sock_has_perm+0x1ea/0x280 [ 3047.592657] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3047.593110] ? tcp_splice_read+0x8c0/0x8c0 [ 3047.593475] inet6_recvmsg+0x13b/0x6e0 [ 3047.593818] ? inet6_bind+0x120/0x120 [ 3047.594158] ? security_socket_recvmsg+0x95/0xc0 [ 3047.594582] ? inet6_bind+0x120/0x120 [ 3047.594939] sock_recvmsg+0xff/0x180 [ 3047.595285] __sys_recvfrom+0x1be/0x2f0 [ 3047.595640] ? __ia32_sys_send+0x100/0x100 [ 3047.596019] ? lock_downgrade+0x6d0/0x6d0 [ 3047.596411] ? wait_for_completion_io+0x270/0x270 [ 3047.596838] ? rcu_read_lock_any_held+0x75/0xa0 [ 3047.597240] ? vfs_write+0x354/0xa70 [ 3047.597571] ? fput_many+0x2f/0x1a0 [ 3047.597891] ? ksys_write+0x1a9/0x260 [ 3047.598227] ? __ia32_sys_read+0xb0/0xb0 [ 3047.598599] __x64_sys_recvfrom+0xdd/0x1b0 [ 3047.598987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3047.599441] do_syscall_64+0x33/0x40 [ 3047.599779] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3047.600235] RIP: 0033:0x7fd4b1105b19 [ 3047.600568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3047.602149] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3047.602837] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3047.603474] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3047.604106] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3047.604725] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3047.605341] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:03:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xfc0, 0xcd08, 0x0, 0x0) 11:03:22 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000540)={0x3c, 0x1a, '\x00', [@ra={0x5, 0x2, 0x2}, @generic={0x4, 0xab, "ffbd0fdd0dad3cca03d2a452cb78910fcded5a0176e39804de177e3389e9685cc59f7ca682d314d5dc26e52fa59f44d912d2e7eeb88468bd344e2b5f77a86b0e6b2692c91ddb3ad65e6037709c039c6d346d2db9b50b1f59c02fda626265764a2c7f1e1416d91ed180fab786122ed057b3bb73afd2e81d7052a14dda8108417feb4be45ff2b67725986bd7347da770b615b3ddf3f915777936611bc1d785754a6863a843d6d61b91c386d8"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @ra={0x5, 0x2, 0x7ff}]}, 0xe0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@empty, 0x4}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r4 = pidfd_getfd(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0x4a, 0x0, "c0dad61410f0ebab19eb1f150620c760cbd01e80e2d37bd25e5dd48dc6fde25d47c1f29bea3ea30a56c1b95246c29c9eea9c48a25a012d42d8360dd1c33a85e57455d71e857f42a5a57ac68a9e2d8b80"}, 0xd8) 11:03:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xbd0, 0xcd08, 0x0, 0x0) 11:03:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xf9) 11:03:22 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 19) 11:03:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 38) 11:03:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x5b0, 0xcd08, 0x0, 0x0) 11:03:22 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x18) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000080)) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) syz_io_uring_setup(0x4b14, &(0x7f00000000c0)={0x0, 0xe0d9, 0x30, 0x2, 0x334}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x4791, &(0x7f00000001c0)={0x0, 0x4a2f, 0x1, 0x2, 0x68}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300), 0x8) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x0, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x3ff, 0xff, 0x40, 0x1, 0x1f, "21343cec4d138bd2ec69dd600a45bd2afb61d3", 0xc332, 0x40}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 11:03:22 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000003c0)=ANY=[@ANYBLOB="004eacec960ffb88f61a07bfc3f3c1aa396415dd0a7f001ad8f12a0550226bd1e28d879881662de6e6455c10101413dd1af65629c18457a48018181c0886b1f44bfb08b4ddf9c7e2fe379d5decb37f7b439736147bf79fe0eb4803c5799422b638a525a1cb52d17f45d89e0200000011cc305f4594564657ec268301004b53e71166a303b4824dd8940676954b9f387670b4913b3d203df2f2bd754e3106bfa1863a6d5647ce2e64799d2b91be7c74dde94e3b520597"]) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=""/234, 0xea) setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x3) creat(&(0x7f00000000c0)='./file1\x00', 0x144) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) openat(r2, &(0x7f0000000180)='./file1\x00', 0x0, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0xa}, 0x15100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) 11:03:22 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="002080c800000002000000eb4086004000640000ab2f90787f000001ac1414bb442c6b417f0000010000000900000000000018440000000000000003ac1e000100000005e00000020685d597"]}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x0, 0x7, 0x7f, 0x0, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x7800, 0x8, 0xffffffff, 0x80}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)) [ 3063.071229] FAULT_INJECTION: forcing a failure. [ 3063.071229] name failslab, interval 1, probability 0, space 0, times 0 [ 3063.072414] CPU: 0 PID: 13654 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3063.073103] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.073926] Call Trace: [ 3063.074199] dump_stack+0x107/0x167 [ 3063.074554] should_fail.cold+0x5/0xa [ 3063.075212] ? lock_release+0x680/0x680 [ 3063.075998] ? skb_clone+0x14f/0x3d0 [ 3063.076730] should_failslab+0x5/0x20 [ 3063.077490] kmem_cache_alloc+0x5b/0x310 [ 3063.077970] FAULT_INJECTION: forcing a failure. [ 3063.077970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3063.078300] skb_clone+0x14f/0x3d0 [ 3063.080145] dev_queue_xmit_nit+0x3a7/0xb00 [ 3063.081005] dev_hard_start_xmit+0xab/0x6f0 [ 3063.081856] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3063.082909] __dev_queue_xmit+0x17ec/0x2710 [ 3063.083789] ? find_held_lock+0x2c/0x110 [ 3063.084648] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3063.085584] ? mark_held_locks+0x9e/0xe0 [ 3063.086387] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3063.087223] ip6_finish_output2+0x17b4/0x1fe0 [ 3063.087640] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3063.088098] ip6_output+0x3aa/0x7e0 [ 3063.088440] ip6_xmit+0x10a1/0x1c40 [ 3063.088792] ? ip6_append_data+0x330/0x330 [ 3063.089179] ? inet6_csk_xmit+0xc6/0x680 [ 3063.089553] ? lock_release+0x680/0x680 [ 3063.089921] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3063.090382] ? inet6_csk_route_req+0x850/0x850 [ 3063.090835] ? md5_transform+0x19/0xde0 [ 3063.091838] inet6_csk_xmit+0x315/0x680 [ 3063.092807] ? inet6_csk_update_pmtu+0x190/0x190 [ 3063.093974] ? __local_bh_enable_ip+0x9d/0x100 [ 3063.094491] ? csum_ipv6_magic+0x1e/0x70 [ 3063.094903] ? inet6_csk_update_pmtu+0x190/0x190 [ 3063.095347] __tcp_transmit_skb+0x18ef/0x35d0 [ 3063.095771] ? __tcp_select_window+0x900/0x900 [ 3063.096185] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3063.096651] ? __tcp_send_ack.part.0+0x67/0x650 [ 3063.097074] ? memset+0x20/0x50 [ 3063.097376] ? __alloc_skb+0x388/0x5b0 [ 3063.097731] __tcp_send_ack.part.0+0x3e0/0x650 [ 3063.098136] ? kmem_cache_free+0x249/0x2d0 [ 3063.098518] tcp_send_ack+0x7d/0xa0 [ 3063.098866] tcp_cleanup_rbuf+0x468/0x5a0 [ 3063.099243] tcp_recvmsg+0xb85/0x2930 [ 3063.099610] ? tcp_splice_read+0x8c0/0x8c0 [ 3063.099996] ? sock_has_perm+0x1ea/0x280 [ 3063.100372] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3063.100845] ? tcp_splice_read+0x8c0/0x8c0 [ 3063.101226] inet6_recvmsg+0x13b/0x6e0 [ 3063.101581] ? inet6_bind+0x120/0x120 [ 3063.101933] ? security_socket_recvmsg+0x95/0xc0 [ 3063.102368] ? inet6_bind+0x120/0x120 [ 3063.102721] sock_recvmsg+0xff/0x180 [ 3063.103096] __sys_recvfrom+0x1be/0x2f0 [ 3063.103467] ? __ia32_sys_send+0x100/0x100 [ 3063.103854] ? lock_downgrade+0x6d0/0x6d0 [ 3063.104250] ? wait_for_completion_io+0x270/0x270 [ 3063.104680] ? rcu_read_lock_any_held+0x75/0xa0 [ 3063.105101] ? vfs_write+0x354/0xa70 [ 3063.105441] ? fput_many+0x2f/0x1a0 [ 3063.105773] ? ksys_write+0x1a9/0x260 [ 3063.106126] ? __ia32_sys_read+0xb0/0xb0 [ 3063.106489] __x64_sys_recvfrom+0xdd/0x1b0 [ 3063.106890] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.107390] do_syscall_64+0x33/0x40 [ 3063.107748] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3063.108225] RIP: 0033:0x7f083c71fb19 [ 3063.108582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.110237] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3063.110950] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3063.111602] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3063.112234] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.112858] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3063.113483] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 3063.114125] CPU: 1 PID: 13656 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3063.114723] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3063.115463] Call Trace: [ 3063.115701] dump_stack+0x107/0x167 [ 3063.116022] should_fail.cold+0x5/0xa [ 3063.116356] _copy_to_iter+0x264/0x12d0 [ 3063.116713] ? find_held_lock+0x2c/0x110 [ 3063.117069] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3063.117494] ? __virt_addr_valid+0x170/0x5c0 [ 3063.117875] ? __check_object_size+0x319/0x440 [ 3063.118276] simple_copy_to_iter+0x4c/0x70 [ 3063.118643] __skb_datagram_iter+0x4f7/0x880 [ 3063.119049] ? zerocopy_sg_from_iter+0x110/0x110 [ 3063.119465] skb_copy_datagram_iter+0x88/0x190 [ 3063.119859] tcp_recvmsg+0x13b5/0x2930 [ 3063.120204] ? tcp_splice_read+0x8c0/0x8c0 [ 3063.120568] ? sock_has_perm+0x1ea/0x280 [ 3063.120927] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3063.121377] ? tcp_splice_read+0x8c0/0x8c0 [ 3063.121741] inet6_recvmsg+0x13b/0x6e0 [ 3063.122079] ? inet6_bind+0x120/0x120 [ 3063.122411] ? security_socket_recvmsg+0x95/0xc0 [ 3063.122828] ? inet6_bind+0x120/0x120 [ 3063.123167] sock_recvmsg+0xff/0x180 [ 3063.123506] __sys_recvfrom+0x1be/0x2f0 [ 3063.123881] ? __ia32_sys_send+0x100/0x100 [ 3063.124295] ? lock_downgrade+0x6d0/0x6d0 [ 3063.124672] ? wait_for_completion_io+0x270/0x270 [ 3063.125084] ? rcu_read_lock_any_held+0x75/0xa0 [ 3063.125498] ? vfs_write+0x354/0xa70 [ 3063.125841] ? fput_many+0x2f/0x1a0 [ 3063.126176] ? ksys_write+0x1a9/0x260 [ 3063.126526] ? __ia32_sys_read+0xb0/0xb0 [ 3063.126916] __x64_sys_recvfrom+0xdd/0x1b0 [ 3063.127309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3063.127768] do_syscall_64+0x33/0x40 [ 3063.128099] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3063.128564] RIP: 0033:0x7fd4b1105b19 [ 3063.128888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3063.130453] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3063.135104] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3063.135817] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3063.136397] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3063.136969] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3063.137545] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:03:23 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000280)=0xff) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) connect$inet(r1, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) getrandom(0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x198c, 0x10, 0x2, 0xd6}, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f00000001c0)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005800)=0x4, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)=0x0) r5 = fsopen(&(0x7f0000004500)='hfsplus\x00', 0x1) r6 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) kcmp(0xffffffffffffffff, r4, 0x2, r5, r6) 11:03:23 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 20) 11:03:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 39) 11:03:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xc40, 0xcd08, 0x0, 0x0) 11:03:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1002, 0xcd08, 0x0, 0x0) 11:03:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x620, 0xcd08, 0x0, 0x0) 11:03:23 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0xfa) 11:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10204, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) utimensat(r0, 0x0, &(0x7f0000000200), 0x0) syz_open_dev$vcsn(0x0, 0xef03, 0x240000) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) openat(0xffffffffffffffff, 0x0, 0x80000, 0x11b) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x762, &(0x7f0000000000)={0x0, 0xf65e, 0x4, 0x3, 0x1bd}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) writev(r2, &(0x7f0000000080)=[{&(0x7f0000001380)}], 0x1) [ 3064.767346] FAULT_INJECTION: forcing a failure. [ 3064.767346] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.775706] CPU: 0 PID: 13698 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3064.783095] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.783864] Call Trace: [ 3064.784126] dump_stack+0x107/0x167 [ 3064.784475] should_fail.cold+0x5/0xa [ 3064.784844] ? create_object.isra.0+0x3a/0xa20 [ 3064.785283] should_failslab+0x5/0x20 [ 3064.785650] kmem_cache_alloc+0x5b/0x310 [ 3064.786044] ? lock_acquire+0x197/0x470 [ 3064.786434] create_object.isra.0+0x3a/0xa20 [ 3064.786884] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3064.787377] kmem_cache_alloc+0x159/0x310 [ 3064.787799] skb_clone+0x14f/0x3d0 [ 3064.788161] dev_queue_xmit_nit+0x3a7/0xb00 [ 3064.788592] dev_hard_start_xmit+0xab/0x6f0 [ 3064.789007] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.789516] __dev_queue_xmit+0x17ec/0x2710 [ 3064.789941] ? find_held_lock+0x2c/0x110 [ 3064.790329] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3064.790784] ? mark_held_locks+0x9e/0xe0 [ 3064.791156] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3064.791613] ip6_finish_output2+0x17b4/0x1fe0 [ 3064.792006] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3064.792436] ip6_output+0x3aa/0x7e0 [ 3064.792758] ip6_xmit+0x10a1/0x1c40 [ 3064.793086] ? ip6_append_data+0x330/0x330 [ 3064.793456] ? inet6_csk_xmit+0xc6/0x680 [ 3064.793807] ? lock_release+0x680/0x680 [ 3064.794146] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3064.794563] ? inet6_csk_route_req+0x850/0x850 [ 3064.794980] ? md5_transform+0x19/0xde0 [ 3064.795341] inet6_csk_xmit+0x315/0x680 [ 3064.795727] ? inet6_csk_update_pmtu+0x190/0x190 [ 3064.796190] ? __local_bh_enable_ip+0x9d/0x100 [ 3064.796599] ? csum_ipv6_magic+0x1e/0x70 [ 3064.796955] ? inet6_csk_update_pmtu+0x190/0x190 [ 3064.797369] __tcp_transmit_skb+0x18ef/0x35d0 [ 3064.797774] ? __tcp_select_window+0x900/0x900 [ 3064.798169] ? __kmalloc_node_track_caller+0x2f8/0x3b0 [ 3064.798618] ? __tcp_send_ack.part.0+0x67/0x650 [ 3064.799047] ? memset+0x20/0x50 [ 3064.799335] ? __alloc_skb+0x388/0x5b0 [ 3064.799676] __tcp_send_ack.part.0+0x3e0/0x650 [ 3064.800066] ? kmem_cache_free+0x249/0x2d0 [ 3064.800436] tcp_send_ack+0x7d/0xa0 [ 3064.800761] tcp_cleanup_rbuf+0x468/0x5a0 [ 3064.801121] tcp_recvmsg+0xb85/0x2930 [ 3064.801472] ? tcp_splice_read+0x8c0/0x8c0 [ 3064.801839] ? sock_has_perm+0x1ea/0x280 [ 3064.802197] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.802648] ? tcp_splice_read+0x8c0/0x8c0 [ 3064.803029] inet6_recvmsg+0x13b/0x6e0 [ 3064.803362] ? inet6_bind+0x120/0x120 [ 3064.803697] ? security_socket_recvmsg+0x95/0xc0 [ 3064.804100] ? inet6_bind+0x120/0x120 [ 3064.804431] sock_recvmsg+0xff/0x180 [ 3064.804770] __sys_recvfrom+0x1be/0x2f0 [ 3064.805112] ? __ia32_sys_send+0x100/0x100 [ 3064.805474] ? lock_downgrade+0x6d0/0x6d0 [ 3064.805859] ? wait_for_completion_io+0x270/0x270 [ 3064.806269] ? rcu_read_lock_any_held+0x75/0xa0 [ 3064.806668] ? vfs_write+0x354/0xa70 [ 3064.807038] ? fput_many+0x2f/0x1a0 [ 3064.807392] ? ksys_write+0x1a9/0x260 [ 3064.807760] ? __ia32_sys_read+0xb0/0xb0 [ 3064.808155] __x64_sys_recvfrom+0xdd/0x1b0 [ 3064.808558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.809050] do_syscall_64+0x33/0x40 [ 3064.809420] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3064.809905] RIP: 0033:0x7f083c71fb19 [ 3064.810269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.811987] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3064.812704] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3064.813366] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3064.814030] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.814695] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3064.815376] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 [ 3064.825546] FAULT_INJECTION: forcing a failure. [ 3064.825546] name failslab, interval 1, probability 0, space 0, times 0 [ 3064.826563] CPU: 1 PID: 13702 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3064.827179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3064.827885] Call Trace: [ 3064.828121] dump_stack+0x107/0x167 [ 3064.828437] should_fail.cold+0x5/0xa [ 3064.828777] ? __alloc_skb+0x6d/0x5b0 [ 3064.829116] should_failslab+0x5/0x20 [ 3064.829448] kmem_cache_alloc_node+0x55/0x330 [ 3064.829851] __alloc_skb+0x6d/0x5b0 [ 3064.830175] __tcp_send_ack.part.0+0x67/0x650 [ 3064.830570] tcp_send_ack+0x7d/0xa0 [ 3064.831824] __tcp_ack_snd_check+0x156/0x9f0 [ 3064.832203] tcp_rcv_established+0x955/0x1e30 [ 3064.832590] ? tcp_check_space+0x6c0/0x6c0 [ 3064.832966] tcp_v6_do_rcv+0x7b3/0x1520 [ 3064.833310] __release_sock+0x139/0x3b0 [ 3064.833662] release_sock+0x54/0x1b0 [ 3064.833982] sk_wait_data+0x1a7/0x4d0 [ 3064.834311] ? sock_set_mark+0x130/0x130 [ 3064.834672] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3064.835287] ? tcp_mstamp_refresh+0x12/0xa0 [ 3064.835668] ? sock_rfree+0x107/0x170 [ 3064.836074] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3064.836525] tcp_recvmsg+0x17b2/0x2930 [ 3064.836941] ? tcp_splice_read+0x8c0/0x8c0 [ 3064.837307] ? sock_has_perm+0x1ea/0x280 [ 3064.837663] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3064.838179] ? tcp_splice_read+0x8c0/0x8c0 [ 3064.838541] inet6_recvmsg+0x13b/0x6e0 [ 3064.838972] ? inet6_bind+0x120/0x120 [ 3064.839303] ? security_socket_recvmsg+0x95/0xc0 [ 3064.839709] ? inet6_bind+0x120/0x120 [ 3064.840048] sock_recvmsg+0xff/0x180 [ 3064.840383] __sys_recvfrom+0x1be/0x2f0 [ 3064.840724] ? __ia32_sys_send+0x100/0x100 [ 3064.841094] ? lock_downgrade+0x6d0/0x6d0 [ 3064.841472] ? wait_for_completion_io+0x270/0x270 [ 3064.841897] ? rcu_read_lock_any_held+0x75/0xa0 [ 3064.842293] ? vfs_write+0x354/0xa70 [ 3064.842612] ? fput_many+0x2f/0x1a0 [ 3064.842959] ? ksys_write+0x1a9/0x260 [ 3064.843293] ? __ia32_sys_read+0xb0/0xb0 [ 3064.843646] __x64_sys_recvfrom+0xdd/0x1b0 [ 3064.844021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3064.844460] do_syscall_64+0x33/0x40 [ 3064.844785] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3064.845223] RIP: 0033:0x7fd4b1105b19 [ 3064.845545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3064.847107] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3064.847748] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3064.848347] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3064.848946] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3064.849544] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3064.850143] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 11:03:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xcb0, 0xcd08, 0x0, 0x0) 11:03:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000140)={{0x8, 0x401}, {0x7, 0x6}, 0x9db, 0x1}) shutdown(r0, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:03:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 40) 11:03:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x690, 0xcd08, 0x0, 0x0) 11:03:39 executing program 0: mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa, 0x9, 0x4, 0x76, 0x0, 0x0, 0x200, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0xedf0, 0x87b}, 0x208, 0x40, 0x4, 0x5, 0x6a3, 0x2, 0x8001, 0x0, 0x5, 0x0, 0x8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000002c0)={0x4a83, {{0xa, 0x4e24, 0x8, @remote}}, {{0xa, 0x4e24, 0x200, @remote, 0x7}}}, 0x108) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x4000000) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x2, 0x5, 0xff, 0xa3, 0x0, 0x7, 0xf010e, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2122, 0x1, @perf_config_ext={0x800, 0x3}, 0x2000, 0x41, 0x9, 0x9, 0x86b, 0x1ff, 0xd8fe, 0x0, 0xddb, 0x0, 0x81}, 0xffffffffffffffff, 0x2, r1, 0x3) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xff, 0x4, 0x6, 0x0, 0x0, 0x2e1, 0x42040, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1f, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0xc0, 0x5, 0x4, 0x9, 0x40, 0x101, 0x4, 0x0, 0x0, 0x0, 0xf71}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4) 11:03:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1003, 0xcd08, 0x0, 0x0) 11:03:39 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 21) 11:03:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x1f4) 11:03:39 executing program 0: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0xe2f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x800, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xca40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x800}, 0x51, 0x0, 0xfffffffb, 0x1, 0x0, 0x2, 0xffff, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESDEC=r3], 0x10}}], 0x2, 0x24000801) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0x0, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 11:03:39 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) flock(r1, 0x7) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3080.397203] FAULT_INJECTION: forcing a failure. [ 3080.397203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3080.403417] CPU: 0 PID: 13726 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3080.404222] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.405139] Call Trace: [ 3080.405440] dump_stack+0x107/0x167 [ 3080.405863] should_fail.cold+0x5/0xa [ 3080.406305] __alloc_pages_nodemask+0x182/0x600 [ 3080.406864] ? find_held_lock+0x2c/0x110 [ 3080.407363] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 3080.408017] ? kmem_cache_alloc_node+0x313/0x330 [ 3080.408553] alloc_pages_current+0x187/0x280 [ 3080.409072] allocate_slab+0x26f/0x380 [ 3080.409504] ___slab_alloc+0x470/0x700 [ 3080.409934] ? __alloc_skb+0x6d/0x5b0 [ 3080.410342] ? tcp_mstamp_refresh+0x12/0xa0 [ 3080.410807] ? __alloc_skb+0x6d/0x5b0 [ 3080.411248] ? kmem_cache_alloc_node+0x313/0x330 [ 3080.411776] kmem_cache_alloc_node+0x313/0x330 [ 3080.412301] __alloc_skb+0x6d/0x5b0 [ 3080.412751] ? ktime_get+0x158/0x1f0 [ 3080.413208] __tcp_send_ack.part.0+0x67/0x650 [ 3080.413746] tcp_send_ack+0x7d/0xa0 [ 3080.414192] tcp_cleanup_rbuf+0x468/0x5a0 [ 3080.414694] tcp_recvmsg+0xb85/0x2930 [ 3080.415205] ? tcp_splice_read+0x8c0/0x8c0 [ 3080.415716] ? sock_has_perm+0x1ea/0x280 [ 3080.416205] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3080.416765] ? tcp_splice_read+0x8c0/0x8c0 [ 3080.417222] inet6_recvmsg+0x13b/0x6e0 [ 3080.417647] ? inet6_bind+0x120/0x120 [ 3080.418067] ? security_socket_recvmsg+0x95/0xc0 [ 3080.418571] ? inet6_bind+0x120/0x120 [ 3080.418998] sock_recvmsg+0xff/0x180 [ 3080.419399] __sys_recvfrom+0x1be/0x2f0 [ 3080.419828] ? __ia32_sys_send+0x100/0x100 [ 3080.420215] ? lock_downgrade+0x6d0/0x6d0 [ 3080.420591] ? wait_for_completion_io+0x270/0x270 [ 3080.421035] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.421476] ? vfs_write+0x354/0xa70 [ 3080.421828] ? fput_many+0x2f/0x1a0 [ 3080.422147] ? ksys_write+0x1a9/0x260 [ 3080.422475] ? __ia32_sys_read+0xb0/0xb0 [ 3080.422822] __x64_sys_recvfrom+0xdd/0x1b0 [ 3080.423200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.423639] do_syscall_64+0x33/0x40 [ 3080.423958] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3080.424389] RIP: 0033:0x7fd4b1105b19 [ 3080.424707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.426211] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3080.426843] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3080.427442] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3080.428032] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.428619] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3080.429210] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 3080.477087] FAULT_INJECTION: forcing a failure. [ 3080.477087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3080.479880] CPU: 1 PID: 13734 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3080.481394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3080.483329] Call Trace: [ 3080.483919] dump_stack+0x107/0x167 [ 3080.484738] should_fail.cold+0x5/0xa [ 3080.485596] _copy_to_iter+0x264/0x12d0 [ 3080.486491] ? zerocopy_sg_from_iter+0x110/0x110 [ 3080.491580] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3080.492660] ? __virt_addr_valid+0x170/0x5c0 [ 3080.493639] ? __check_object_size+0x319/0x440 [ 3080.494666] simple_copy_to_iter+0x4c/0x70 [ 3080.495609] __skb_datagram_iter+0x4f7/0x880 [ 3080.496580] ? zerocopy_sg_from_iter+0x110/0x110 [ 3080.497628] skb_copy_datagram_iter+0x88/0x190 [ 3080.498630] tcp_recvmsg+0x13b5/0x2930 [ 3080.499503] ? tcp_splice_read+0x8c0/0x8c0 [ 3080.500438] ? sock_has_perm+0x1ea/0x280 [ 3080.501328] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3080.502464] ? tcp_splice_read+0x8c0/0x8c0 [ 3080.503413] inet6_recvmsg+0x13b/0x6e0 [ 3080.504278] ? inet6_bind+0x120/0x120 [ 3080.505133] ? security_socket_recvmsg+0x95/0xc0 [ 3080.506184] ? inet6_bind+0x120/0x120 [ 3080.507247] sock_recvmsg+0xff/0x180 [ 3080.508062] __sys_recvfrom+0x1be/0x2f0 [ 3080.508924] ? __ia32_sys_send+0x100/0x100 [ 3080.509836] ? lock_downgrade+0x6d0/0x6d0 [ 3080.510762] ? wait_for_completion_io+0x270/0x270 [ 3080.511921] ? rcu_read_lock_any_held+0x75/0xa0 [ 3080.513057] ? vfs_write+0x354/0xa70 [ 3080.513898] ? fput_many+0x2f/0x1a0 [ 3080.514327] ? ksys_write+0x1a9/0x260 [ 3080.514798] ? __ia32_sys_read+0xb0/0xb0 [ 3080.515315] __x64_sys_recvfrom+0xdd/0x1b0 [ 3080.515846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3080.516463] do_syscall_64+0x33/0x40 [ 3080.516922] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3080.517544] RIP: 0033:0x7f083c71fb19 [ 3080.517988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3080.520183] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3080.521086] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3080.521936] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3080.522794] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3080.523642] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3080.528670] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:03:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 41) 11:03:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x240) 11:03:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 22) 11:03:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x700, 0xcd08, 0x0, 0x0) 11:03:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xd20, 0xcd08, 0x0, 0x0) 11:03:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1004, 0xcd08, 0x0, 0x0) 11:03:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0xffffffff, @mcast1, 0xffffffff}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) r5 = accept$packet(r3, 0x0, &(0x7f0000000140)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000440)=""/4100, 0x1004, 0xcd08, 0x0, 0x0) [ 3081.991892] FAULT_INJECTION: forcing a failure. [ 3081.991892] name failslab, interval 1, probability 0, space 0, times 0 [ 3081.993212] CPU: 1 PID: 13763 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3081.993830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3081.994561] Call Trace: [ 3081.994808] dump_stack+0x107/0x167 [ 3081.995160] should_fail.cold+0x5/0xa [ 3081.995517] should_failslab+0x5/0x20 [ 3081.995865] __kmalloc_node_track_caller+0x74/0x3b0 [ 3081.996313] ? __tcp_send_ack.part.0+0x67/0x650 [ 3081.996730] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3081.997215] __alloc_skb+0xb1/0x5b0 [ 3081.997550] __tcp_send_ack.part.0+0x67/0x650 [ 3081.997951] ? tcp_cleanup_rbuf+0x460/0x5a0 [ 3081.998351] tcp_send_ack+0x7d/0xa0 [ 3081.998679] tcp_cleanup_rbuf+0x468/0x5a0 [ 3081.999077] tcp_recvmsg+0xb85/0x2930 [ 3081.999404] ? tcp_splice_read+0x8c0/0x8c0 [ 3081.999775] ? sock_has_perm+0x1ea/0x280 [ 3082.000165] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3082.000618] ? tcp_splice_read+0x8c0/0x8c0 [ 3082.000968] inet6_recvmsg+0x13b/0x6e0 [ 3082.001308] ? inet6_bind+0x120/0x120 [ 3082.001675] ? security_socket_recvmsg+0x95/0xc0 [ 3082.002107] ? inet6_bind+0x120/0x120 [ 3082.002438] sock_recvmsg+0xff/0x180 [ 3082.002748] __sys_recvfrom+0x1be/0x2f0 [ 3082.003086] ? __ia32_sys_send+0x100/0x100 [ 3082.003517] ? lock_downgrade+0x6d0/0x6d0 [ 3082.003923] ? wait_for_completion_io+0x270/0x270 [ 3082.004338] ? rcu_read_lock_any_held+0x75/0xa0 [ 3082.004716] ? vfs_write+0x354/0xa70 [ 3082.005036] ? fput_many+0x2f/0x1a0 [ 3082.005378] ? ksys_write+0x1a9/0x260 [ 3082.005721] ? __ia32_sys_read+0xb0/0xb0 [ 3082.006078] __x64_sys_recvfrom+0xdd/0x1b0 [ 3082.006428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.006862] do_syscall_64+0x33/0x40 [ 3082.007238] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3082.007700] RIP: 0033:0x7fd4b1105b19 [ 3082.008048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.009552] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3082.010181] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3082.010768] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3082.011605] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3082.013148] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3082.014663] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 3082.100067] FAULT_INJECTION: forcing a failure. [ 3082.100067] name failslab, interval 1, probability 0, space 0, times 0 [ 3082.101351] CPU: 1 PID: 13775 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3082.101978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3082.102713] Call Trace: [ 3082.102975] dump_stack+0x107/0x167 [ 3082.103330] should_fail.cold+0x5/0xa [ 3082.103700] should_failslab+0x5/0x20 [ 3082.104058] __kmalloc_node_track_caller+0x74/0x3b0 [ 3082.104516] ? tcp_collapse+0x42c/0xf20 [ 3082.104905] __alloc_skb+0xb1/0x5b0 [ 3082.105254] tcp_collapse+0x42c/0xf20 [ 3082.105623] ? tcp_queue_rcv+0x7c0/0x7c0 [ 3082.111235] ? tcp_xmit_retransmit_queue+0x57/0x70 [ 3082.111629] ? tcp_xmit_recovery+0x86/0x180 [ 3082.111993] ? tcp_ack+0xeef/0x5690 [ 3082.112337] tcp_try_rmem_schedule+0xa6c/0x1690 [ 3082.112738] tcp_data_queue+0x16ba/0x47f0 [ 3082.113090] ? tcp_data_ready+0x500/0x500 [ 3082.113448] ? tcp_urg.part.0+0x157/0x2e0 [ 3082.113785] ? tcp_try_keep_open+0x2f0/0x2f0 [ 3082.114141] ? tcp_validate_incoming+0x431/0x16a0 [ 3082.114534] ? tcp_check_urg.isra.0+0x1db/0x720 [ 3082.114920] tcp_rcv_established+0x868/0x1e30 [ 3082.115466] ? tcp_check_space+0x6c0/0x6c0 [ 3082.115823] tcp_v6_do_rcv+0x7b3/0x1520 [ 3082.116165] __release_sock+0x139/0x3b0 [ 3082.116531] release_sock+0x54/0x1b0 [ 3082.116867] sk_wait_data+0x1a7/0x4d0 [ 3082.117188] ? sock_set_mark+0x130/0x130 [ 3082.117531] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3082.117956] tcp_recvmsg+0x17b2/0x2930 [ 3082.118299] ? tcp_splice_read+0x8c0/0x8c0 [ 3082.118651] ? sock_has_perm+0x1ea/0x280 [ 3082.119025] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3082.119474] ? tcp_splice_read+0x8c0/0x8c0 [ 3082.119827] inet6_recvmsg+0x13b/0x6e0 [ 3082.120163] ? inet6_bind+0x120/0x120 [ 3082.120485] ? security_socket_recvmsg+0x95/0xc0 [ 3082.120882] ? inet6_bind+0x120/0x120 [ 3082.121202] sock_recvmsg+0xff/0x180 [ 3082.121514] __sys_recvfrom+0x1be/0x2f0 [ 3082.121846] ? __ia32_sys_send+0x100/0x100 [ 3082.122193] ? lock_downgrade+0x6d0/0x6d0 [ 3082.122558] ? wait_for_completion_io+0x270/0x270 [ 3082.122952] ? rcu_read_lock_any_held+0x75/0xa0 [ 3082.123354] ? vfs_write+0x354/0xa70 [ 3082.123662] ? fput_many+0x2f/0x1a0 [ 3082.123963] ? ksys_write+0x1a9/0x260 [ 3082.124275] ? __ia32_sys_read+0xb0/0xb0 [ 3082.124616] __x64_sys_recvfrom+0xdd/0x1b0 [ 3082.124963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3082.125384] do_syscall_64+0x33/0x40 [ 3082.125694] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3082.126121] RIP: 0033:0x7f083c71fb19 [ 3082.126433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3082.127949] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3082.128561] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3082.129130] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3082.129702] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3082.130275] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3082.130849] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:03:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xd90, 0xcd08, 0x0, 0x0) 11:03:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1006, 0xcd08, 0x0, 0x0) 11:03:56 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x21}) shutdown(r0, 0x1) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) accept4$inet(r3, &(0x7f0000000040), &(0x7f0000000140)=0x10, 0x80800) 11:03:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 42) 11:03:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x300) 11:03:56 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 23) 11:03:56 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x770, 0xcd08, 0x0, 0x0) 11:03:56 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000065008395006fb905454792d9f192427055b7010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000013b00)) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r0, 0x80000001) keyctl$invalidate(0x15, r0) keyctl$set_timeout(0xf, r0, 0x0) r1 = getegid() r2 = request_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='.]^#.*+,}%.(^.\x00', 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000000)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "0070404651fd796ab47483a46fbe26133a48d389342f53cbf96518c9ca6eb689bb56a2824f0f6fc85300", 0x3f}, 0x48, r3) keyctl$invalidate(0x15, r3) setgid(r1) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x2, 0x7, &(0x7f0000000a00)=[{&(0x7f0000000440)="bb616d4ed61a4654d9577b45264480b1a4dc4df4214e84383a0589fb56109edd838f5e3cc06f58ccf7252a95783ed5cfa38c90d11b8342e4922f", 0x3a, 0x1}, {&(0x7f0000000480)="7e94839a9dc88acb4d9ccd8f0b117899932c6b96f1bdbc8fe05c092978be7e65b7932f67283ca8ae88e156facf5cb19d8224162107d295f339d3150396a638a716d220ac5c1de9c4afd0c4747c73fb75a08e50ee68e44cf712eae68414f370f8b6e96bea72092e1f4a8c911234c581682db7df8f6a1349be5fced1dcba6bbb9ab87dde63", 0x84, 0x50c}, {&(0x7f0000000640)="60cb5f7e9159c481403c086af9edcf4905307a080818f8aa0ef9aa2d8bb6d966bb2b00f413fedde5f3b00fdbbef8dbf6ba4dc627bc357b8cc5a5049a8e965629a03d86f3d7e0f39ad4a2c0f08d21597766f06154b1d9d1e91711db4a746a4847ebc875720243aef4b3a716fc47951ab242f59e1156e4cca713f7111f12cb27a23beb8942210e8ea2500aadbeeb3dd1866dad17af5074e5e2eada7c62dfdd7c91a0143b737f868780af24038dc050b0cf27fc3610c2d51545a0f35a36c8329fa6ed7c988230eb584b8510e668d5302c137d8fb7fcfc01", 0xd6, 0x1}, {&(0x7f0000000740)="20d8c00ac0b6a7a2fdceec1e4fe1b4beb2bb5708a4117a4f248a019d3dfb57bd7b425716f9b88850669b3f38e9c20d7aef7f16efbccb9bc9170597597b378e5830a4ef9b19304f19027a9a2be56088201ef13ecb18e8d3ba2e6cdfd388fb5fd1fd09ea152cda78844d7da58d330a001633bf79165c4da4d368ae2184d17482fc75888e03771f48853948d903370ca35c079b72e40a0a8754595d9830d5be70697679fc087b", 0xa5, 0x47b}, {&(0x7f0000000800)="225868615e9d59d7193b55e37ba885f2e530be822a4afa0bd19ef91e1def6378b8f07b5a142f737833eede5378d54f9806fe268072b38d082b4517f9d7d0bbdb4874d2af2b6c111c1ccdb4e316d2adb4f8e142a5ad11bc2393edbf8afad2fe701d1ede5726c254e60ecb3a779aa73038af8e0e", 0x73, 0x9}, {&(0x7f0000000880)="f620f5d711115b54217bff2dccd934ad838503e8b98781f7637b8b904a1b8932fb528e6c651d126c2314e752029b398c0ba9b97571f19a55e373a6f9d0c8632441b69d3357cc3b8c68c485cda9b9dc92aa664107e548", 0x56, 0x68}, {&(0x7f0000000900)="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", 0xfd, 0x8000}], 0x100080, &(0x7f0000000ac0)={[{@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@init_itable}, {@acl}, {@barrier}, {@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}], [{@pcr={'pcr', 0x3d, 0x5}}, {@smackfshat={'smackfshat', 0x3d, 'root'}}, {@hash}, {@dont_hash}]}) keyctl$chown(0x4, r0, 0xee01, r1) mount$9p_unix(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x10002, &(0x7f0000000580)={'trans=unix,', {[{@posixacl}, {@cache_none}, {@mmap}, {@privport}, {@dfltgid={'dfltgid', 0x3d, r1}}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}, {@version_L}, {@version_9p2000}, {@version_u}], [{@obj_role={'obj_role', 0x3d, ']\x9f$'}}, {@defcontext={'defcontext', 0x3d, 'root'}}]}}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r4, &(0x7f0000000240)=""/83, 0x53, 0x200000048) [ 3097.640982] FAULT_INJECTION: forcing a failure. [ 3097.640982] name failslab, interval 1, probability 0, space 0, times 0 [ 3097.648281] CPU: 1 PID: 13807 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3097.649078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3097.649897] Call Trace: [ 3097.650212] dump_stack+0x107/0x167 [ 3097.650580] should_fail.cold+0x5/0xa [ 3097.651973] ? create_object.isra.0+0x3a/0xa20 [ 3097.652478] should_failslab+0x5/0x20 [ 3097.652852] kmem_cache_alloc+0x5b/0x310 [ 3097.653301] create_object.isra.0+0x3a/0xa20 [ 3097.653731] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3097.654529] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 3097.656096] ? __tcp_send_ack.part.0+0x67/0x650 [ 3097.657500] __alloc_skb+0xb1/0x5b0 [ 3097.657806] __tcp_send_ack.part.0+0x67/0x650 [ 3097.659522] tcp_send_ack+0x7d/0xa0 [ 3097.660574] tcp_cleanup_rbuf+0x468/0x5a0 [ 3097.661106] tcp_recvmsg+0xb85/0x2930 [ 3097.661440] ? tcp_splice_read+0x8c0/0x8c0 [ 3097.662896] ? sock_has_perm+0x1ea/0x280 [ 3097.664401] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3097.679070] ? tcp_splice_read+0x8c0/0x8c0 [ 3097.679435] inet6_recvmsg+0x13b/0x6e0 [ 3097.679756] ? inet6_bind+0x120/0x120 [ 3097.680069] ? security_socket_recvmsg+0x95/0xc0 [ 3097.680458] ? inet6_bind+0x120/0x120 [ 3097.680769] sock_recvmsg+0xff/0x180 [ 3097.681073] __sys_recvfrom+0x1be/0x2f0 [ 3097.681406] ? __ia32_sys_send+0x100/0x100 [ 3097.681749] ? lock_downgrade+0x6d0/0x6d0 [ 3097.682111] ? wait_for_completion_io+0x270/0x270 [ 3097.682513] ? rcu_read_lock_any_held+0x75/0xa0 [ 3097.682889] ? vfs_write+0x354/0xa70 [ 3097.683198] ? fput_many+0x2f/0x1a0 [ 3097.683519] ? ksys_write+0x1a9/0x260 [ 3097.683838] ? __ia32_sys_read+0xb0/0xb0 [ 3097.684180] __x64_sys_recvfrom+0xdd/0x1b0 [ 3097.684534] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3097.684964] do_syscall_64+0x33/0x40 [ 3097.685273] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3097.685699] RIP: 0033:0x7fd4b1105b19 [ 3097.686011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3097.699716] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3097.700405] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3097.701045] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3097.701619] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3097.702211] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3097.702733] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 3097.716979] FAULT_INJECTION: forcing a failure. [ 3097.716979] name failslab, interval 1, probability 0, space 0, times 0 [ 3097.718042] CPU: 1 PID: 13808 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3097.718686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3097.719449] Call Trace: [ 3097.719712] dump_stack+0x107/0x167 [ 3097.720074] should_fail.cold+0x5/0xa [ 3097.720428] ? lock_release+0x680/0x680 [ 3097.720823] ? skb_clone+0x14f/0x3d0 [ 3097.721188] should_failslab+0x5/0x20 [ 3097.721544] kmem_cache_alloc+0x5b/0x310 [ 3097.721953] skb_clone+0x14f/0x3d0 [ 3097.722305] dev_queue_xmit_nit+0x3a7/0xb00 [ 3097.722719] dev_hard_start_xmit+0xab/0x6f0 [ 3097.723173] __dev_queue_xmit+0x17ec/0x2710 [ 3097.723580] ? find_held_lock+0x2c/0x110 [ 3097.724251] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3097.725148] ? mark_held_locks+0x9e/0xe0 [ 3097.725871] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 3097.726360] ip6_finish_output2+0x17b4/0x1fe0 [ 3097.726797] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3097.728199] ip6_output+0x3aa/0x7e0 [ 3097.728889] ip6_xmit+0x10a1/0x1c40 [ 3097.729247] ? ip6_append_data+0x330/0x330 [ 3097.729638] ? inet6_csk_xmit+0xc6/0x680 [ 3097.730044] ? lock_release+0x680/0x680 [ 3097.730413] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3097.730870] ? inet6_csk_route_req+0x850/0x850 [ 3097.731291] ? md5_transform+0x19/0xde0 [ 3097.731675] inet6_csk_xmit+0x315/0x680 [ 3097.732055] ? inet6_csk_update_pmtu+0x190/0x190 [ 3097.732501] ? __local_bh_enable_ip+0x9d/0x100 [ 3097.732941] ? csum_ipv6_magic+0x1e/0x70 [ 3097.733325] ? inet6_csk_update_pmtu+0x190/0x190 [ 3097.733773] __tcp_transmit_skb+0x18ef/0x35d0 [ 3097.734213] ? __tcp_select_window+0x900/0x900 [ 3097.734635] ? tcp_trim_head+0x470/0x470 [ 3097.735032] ? lock_acquire+0x197/0x470 [ 3097.735415] ? find_held_lock+0x2c/0x110 [ 3097.735796] __tcp_retransmit_skb+0x7f6/0x27d0 [ 3097.736232] ? tcp_v6_md5_lookup+0x4d/0x60 [ 3097.736621] ? tcp_push_one+0x100/0x100 [ 3097.737013] ? tcp_current_mss+0x1f8/0x370 [ 3097.737404] ? tcp_trim_head+0x470/0x470 [ 3097.737784] ? __mod_timer+0x7fb/0xd10 [ 3097.738179] tcp_retransmit_skb+0x28/0x240 [ 3097.738574] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 3097.739104] tcp_xmit_retransmit_queue+0x57/0x70 [ 3097.739563] tcp_xmit_recovery+0x86/0x180 [ 3097.739942] tcp_ack+0x25d9/0x5690 [ 3097.740312] ? tcp_fastretrans_alert+0x3060/0x3060 [ 3097.740778] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3097.741276] ? tcp_validate_incoming+0x431/0x16a0 [ 3097.741734] tcp_rcv_established+0x57e/0x1e30 [ 3097.742160] ? tcp_check_space+0x6c0/0x6c0 [ 3097.742570] tcp_v6_do_rcv+0x7b3/0x1520 [ 3097.742950] __release_sock+0x139/0x3b0 [ 3097.751377] release_sock+0x54/0x1b0 [ 3097.751744] sk_wait_data+0x1a7/0x4d0 [ 3097.752126] ? sock_set_mark+0x130/0x130 [ 3097.752513] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3097.752990] ? tcp_send_ack+0x7d/0xa0 [ 3097.753367] tcp_recvmsg+0x17b2/0x2930 [ 3097.753751] ? tcp_splice_read+0x8c0/0x8c0 [ 3097.754156] ? sock_has_perm+0x1ea/0x280 [ 3097.754554] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3097.755037] ? tcp_splice_read+0x8c0/0x8c0 [ 3097.755640] inet6_recvmsg+0x13b/0x6e0 [ 3097.756006] ? inet6_bind+0x120/0x120 [ 3097.756377] ? security_socket_recvmsg+0x95/0xc0 [ 3097.756826] ? inet6_bind+0x120/0x120 [ 3097.757196] sock_recvmsg+0xff/0x180 [ 3097.757571] __sys_recvfrom+0x1be/0x2f0 [ 3097.757951] ? __ia32_sys_send+0x100/0x100 [ 3097.758359] ? lock_downgrade+0x6d0/0x6d0 [ 3097.758802] ? wait_for_completion_io+0x270/0x270 [ 3097.759286] ? rcu_read_lock_any_held+0x75/0xa0 [ 3097.759735] ? vfs_write+0x354/0xa70 [ 3097.760111] ? fput_many+0x2f/0x1a0 [ 3097.760456] ? ksys_write+0x1a9/0x260 [ 3097.760810] ? __ia32_sys_read+0xb0/0xb0 [ 3097.761219] __x64_sys_recvfrom+0xdd/0x1b0 [ 3097.761610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3097.762100] do_syscall_64+0x33/0x40 [ 3097.762467] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3097.762939] RIP: 0033:0x7f083c71fb19 [ 3097.763320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3097.765018] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3097.765748] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3097.766411] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3097.767101] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3097.767772] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3097.768462] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:04:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1f, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r1, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) 11:04:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe00, 0xcd08, 0x0, 0x0) 11:04:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1008, 0xcd08, 0x0, 0x0) 11:04:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xa10, 0xcd08, 0x0, 0x0) 11:04:12 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x310) 11:04:12 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 24) 11:04:12 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 43) 11:04:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xfffdfffffffffffd, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000007c0)=0x7be9, 0x4) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet6(r3, &(0x7f0000000780)={&(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x3f}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000140)}, {&(0x7f0000000240)="5b4f25621d69e1fb8a84eb62ab96433df5d9c989bce0f7ccb14ce8717e790794961979f9022c69758d7975e597a6677e388b95c34459472dd86bf36e44d21e266fa7cf4d1d652189a28f0aede53f5c7761dc0c20cb20b2eeb23ef12b51587acb87e814b45ce03b2886b6735ee4677c4c64a109a8b78c1ccbec613a03cb3a751d1b2559ade065ba7890844de082763680c05233b09ae9522127ef87ff1952bf271880ef054733843374e5e6b24b4246041e22951ad3576aa2c923", 0xba}, {&(0x7f0000000440)="22afb2e5814b61f2a4f1e0a43d5b0912098052d138f99140e5a8eef47319120e309460e51f1c54556e018cf1eba8aba7cdd6ac07a18c6b2dd714d712847138e4a18be910d840945b40e70b23f00ad934dbf5412b6458b2f332edfed2819147430b2f7b4e777ca7aaa7a32a7b5b67a45ea0539ec3f54bb837b9795882770e3d88928ff36548ac943a87015ea29d9df39e8526dfb9c012cc815f3a67c4d82cbb631e4ce4cf3d05bc8e9be46ec9232cf4d012ecb00657c76132b047fcdac0f11f46ec9cd8f3b7ee", 0xc6}, {&(0x7f0000000540)="5126849e9fbcb67222a1ce2ec052aa52b74a05584f5aecc2ca8b7eebe2be4ba43e9fec0e8d6675d01148597960f1d198de553199e74d975fe8a22b3cd380b6d88a9552f13104506ed231e62aa46cdeddf5178454fb5ac32e3232e7601a521dfde25107e3dde04a7ad2a18d600c6bf80396c19a6eb0fe127bfae2cc97f92127844cf7bde7e5fb240e2275e378cce34f85f577ca5fb11fc65c636b3b4a1dd0824a479e16d79799e4", 0xa7}, {&(0x7f0000000600)="38ae832745e223471a99e4f82c499d6a2c59004b00efac8989ec004a218aed7c87906732d120c2cc4dc7cf99373f40812fdf232f35625ac4ecaf3bd751a65c42be98c6c19d856796bab295ab6dd7a783ca7f51ca8d9c25d4754fa588c6ae6bd463897a32f61cd42a91780de48fd59891499e7cdeb8ccdc59da1046349a493a2b688a0baddffe93f0dddd39dfbff09b99316e2dbcd20dc0650ba4f8cbb413ab4c4335e48a0dd3a477f68cf5fd3fc68cee5640d785d19855859bd2347ed1f9aef2851a11b53b6f1f09418fe3", 0xcb}, {&(0x7f0000000180)="a2ea227c66539f7d37", 0x9}], 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000070000000000000b0000000000100000000000140000000000330000290000003400000000000080000000008841669ab5266935db5db52b383c1230e9a5c978b736eb5502d996466f1432c2448cc602f6a40cb9c52e2314c725e4ecac730cc272b92ce6bc57a104742c816ce68792176222612d467df67ee3815dfb4672686de478b0e3f12257f44cc1766b781638888306f4a84b848c2d1a55a1d11c101db4baf77b77642f6bac3df334a03206cba953e62d09696d479949c46d5c140ada0af2aba0a1f0f8cf606d19000000000000000000159649ac7061675a1c169382d788e35adeeb2d21419b852ddd67d95d0f0b18cff659"], 0x30}, 0x40000) [ 3112.633362] [ 3112.633534] ====================================================== [ 3112.634061] WARNING: possible circular locking dependency detected [ 3112.634590] 5.10.211 #1 Not tainted [ 3112.634895] ------------------------------------------------------ [ 3112.639594] syz-executor.0/13828 is trying to acquire lock: [ 3112.640060] ffff88800ba04b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 3112.640926] [ 3112.640926] but task is already holding lock: [ 3112.641406] ffffffff8561a828 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 3112.642148] [ 3112.642148] which lock already depends on the new lock. [ 3112.642148] [ 3112.642812] [ 3112.642812] the existing dependency chain (in reverse order) is: [ 3112.646909] [ 3112.646909] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 3112.651493] __mutex_lock+0x13d/0x10b0 [ 3112.671522] rfkill_register+0x36/0xa10 [ 3112.671920] hci_register_dev+0x42e/0xc00 [ 3112.672331] __vhci_create_device+0x2c8/0x5c0 [ 3112.672772] vhci_open_timeout+0x38/0x50 [ 3112.673185] process_one_work+0x9a9/0x14b0 [ 3112.673610] worker_thread+0x61d/0x1310 [ 3112.674010] kthread+0x38f/0x470 [ 3112.674361] ret_from_fork+0x22/0x30 [ 3112.674730] [ 3112.674730] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 3112.675320] __mutex_lock+0x13d/0x10b0 [ 3112.675738] vhci_send_frame+0x63/0xa0 [ 3112.676137] hci_send_frame+0x1b9/0x320 [ 3112.676534] hci_tx_work+0x10af/0x1660 [ 3112.676927] process_one_work+0x9a9/0x14b0 [ 3112.677349] worker_thread+0x61d/0x1310 [ 3112.677753] kthread+0x38f/0x470 [ 3112.678106] ret_from_fork+0x22/0x30 [ 3112.678484] [ 3112.678484] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 3112.679186] __flush_work+0x105/0xa90 [ 3112.684696] hci_dev_do_close+0x131/0x1240 [ 3112.685127] hci_unregister_dev+0x149/0x430 [ 3112.685567] vhci_release+0x70/0xf0 [ 3112.685948] __fput+0x285/0x980 [ 3112.686300] task_work_run+0xe2/0x1a0 [ 3112.686694] do_exit+0xb6f/0x2600 [ 3112.687054] do_group_exit+0x125/0x310 [ 3112.691762] get_signal+0x4bc/0x22e0 [ 3112.692176] arch_do_signal_or_restart+0x2b7/0x1990 [ 3112.692679] exit_to_user_mode_prepare+0x10f/0x190 [ 3112.693189] syscall_exit_to_user_mode+0x38/0x1e0 [ 3112.693685] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3112.694208] [ 3112.694208] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 3112.694781] __mutex_lock+0x13d/0x10b0 [ 3112.695176] bg_scan_update+0x82/0x500 [ 3112.696079] process_one_work+0x9a9/0x14b0 [ 3112.696518] worker_thread+0x61d/0x1310 [ 3112.696930] kthread+0x38f/0x470 [ 3112.697284] ret_from_fork+0x22/0x30 [ 3112.697668] [ 3112.697668] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 3112.698447] __lock_acquire+0x29e7/0x5b00 [ 3112.698871] lock_acquire+0x197/0x470 [ 3112.699267] __flush_work+0x105/0xa90 [ 3112.699700] __cancel_work_timer+0x368/0x4c0 [ 3112.700146] hci_request_cancel_all+0x73/0x230 [ 3112.700601] hci_dev_do_close+0xd9/0x1240 [ 3112.701032] hci_rfkill_set_block+0x166/0x1a0 [ 3112.701474] rfkill_set_block+0x1fd/0x540 [ 3112.701899] rfkill_fop_write+0x253/0x4b0 [ 3112.702342] vfs_write+0x29a/0xa70 [ 3112.702711] ksys_write+0x1f6/0x260 [ 3112.703090] do_syscall_64+0x33/0x40 [ 3112.704973] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3112.705531] [ 3112.705531] other info that might help us debug this: [ 3112.705531] [ 3112.706274] Chain exists of: [ 3112.706274] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 3112.706274] [ 3112.707520] Possible unsafe locking scenario: [ 3112.707520] [ 3112.708583] CPU0 CPU1 [ 3112.708985] ---- ---- [ 3112.709439] lock(rfkill_global_mutex); [ 3112.709802] lock(&data->open_mutex); [ 3112.710404] lock(rfkill_global_mutex); [ 3112.710972] lock((work_completion)(&hdev->bg_scan_update)); [ 3112.711551] [ 3112.711551] *** DEADLOCK *** [ 3112.711551] [ 3112.713484] 1 lock held by syz-executor.0/13828: [ 3112.713899] #0: ffffffff8561a828 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 3112.714789] [ 3112.714789] stack backtrace: [ 3112.715234] CPU: 1 PID: 13828 Comm: syz-executor.0 Not tainted 5.10.211 #1 [ 3112.716146] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3112.716870] Call Trace: [ 3112.717167] dump_stack+0x107/0x167 [ 3112.717501] check_noncircular+0x263/0x2e0 [ 3112.717884] ? register_lock_class+0xbb/0x17b0 [ 3112.718341] ? print_circular_bug+0x470/0x470 [ 3112.718750] ? find_first_zero_bit+0x94/0xb0 [ 3112.719194] ? alloc_chain_hlocks+0x342/0x5a0 [ 3112.719632] __lock_acquire+0x29e7/0x5b00 [ 3112.721116] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3112.721587] ? lock_acquire+0x197/0x470 [ 3112.721946] ? lock_chain_count+0x20/0x20 [ 3112.722366] ? mark_lock+0xf5/0x2df0 [ 3112.722703] lock_acquire+0x197/0x470 [ 3112.723094] ? __flush_work+0xdd/0xa90 [ 3112.723468] ? lock_release+0x680/0x680 [ 3112.724126] ? __flush_work+0x78c/0xa90 [ 3112.724485] ? lock_downgrade+0x6d0/0x6d0 [ 3112.724864] __flush_work+0x105/0xa90 [ 3112.725265] ? __flush_work+0xdd/0xa90 [ 3112.725615] ? lock_chain_count+0x20/0x20 [ 3112.725981] ? queue_delayed_work_on+0xe0/0xe0 [ 3112.726435] ? mark_lock+0xf5/0x2df0 [ 3112.726776] ? mark_lock+0xf5/0x2df0 [ 3112.727143] ? lock_chain_count+0x20/0x20 [ 3112.727528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3112.729265] ? lock_chain_count+0x20/0x20 [ 3112.729637] ? lock_acquire+0x197/0x470 [ 3112.730044] ? rfkill_send_events+0x1e8/0x390 [ 3112.730442] ? mark_held_locks+0x9e/0xe0 [ 3112.730803] __cancel_work_timer+0x368/0x4c0 [ 3112.731241] ? cancel_delayed_work+0x20/0x20 [ 3112.731654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3112.732436] ? __cancel_work+0x250/0x2b0 [ 3112.732801] ? trace_hardirqs_on+0x5b/0x180 [ 3112.733237] ? __cancel_work+0x1bb/0x2b0 [ 3112.733602] ? try_to_grab_pending+0xe0/0xe0 [ 3112.734038] hci_request_cancel_all+0x73/0x230 [ 3112.734455] hci_dev_do_close+0xd9/0x1240 [ 3112.734829] ? rfkill_set_block+0x18f/0x540 [ 3112.735263] ? hci_dev_open+0x350/0x350 [ 3112.735647] ? mark_held_locks+0x9e/0xe0 [ 3112.736056] hci_rfkill_set_block+0x166/0x1a0 [ 3112.736431] ? hci_power_off+0x20/0x20 [ 3112.736766] rfkill_set_block+0x1fd/0x540 [ 3112.737189] rfkill_fop_write+0x253/0x4b0 [ 3112.737563] ? rfkill_sync_work+0xa0/0xa0 [ 3112.737942] ? rfkill_sync_work+0xa0/0xa0 [ 3112.738368] vfs_write+0x29a/0xa70 [ 3112.738693] ksys_write+0x1f6/0x260 [ 3112.739073] ? __ia32_sys_read+0xb0/0xb0 [ 3112.739448] ? ksys_write+0x260/0x260 [ 3112.739797] do_syscall_64+0x33/0x40 [ 3112.740432] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3112.740885] RIP: 0033:0x7f7adc98fb19 [ 3112.741285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.742934] RSP: 002b:00007f7ad9f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3112.744833] RAX: ffffffffffffffda RBX: 00007f7adcaa2f60 RCX: 00007f7adc98fb19 [ 3112.745383] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000006 [ 3112.745892] RBP: 00007f7adc9e9f6d R08: 0000000000000000 R09: 0000000000000000 [ 3112.746430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3112.746943] R13: 00007ffea3b4b0ef R14: 00007f7ad9f05300 R15: 0000000000022000 11:04:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="74756e6c3000ffffc59d12db68901a77", @ANYRES32=0x0, @ANYBLOB="008080000000000800000006491a00240066000025049078ffffffff64010101070fc464010100ac141443ac14142200"]}) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@delpolicy={0x123c, 0x14, 0x10, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e23, 0x0, 0x4e22, 0x25, 0x2, 0x0, 0xe0, 0x67, r2, 0xee00}, 0x6e6bbd}, [@algo_auth_trunc={0xfa, 0x14, {{'sha1-asm\x00'}, 0x570, 0x60, "03e51eb0329fb00f0c3af291610e3f99e5d4a8ee83e0538d6a38af5c16f8cbc2a0bb8cc262e186348e375c8aa6844c3eee9d79ba30ba5a2b0725f08647b6a802638020e09b3ccf6d161d6cc38cedc4c2c5ff9e46ecc19e725ce226e2a19827cf944c4a659e02015805a78159ca4663f03b3a0376f8a0df8ef6425e46331ebf527e50ba0cd0e48e375b450d6497323f845415c336ce73ad9885305bff835e7dc9497ff6bb5ca161ea05cd7c38f1ac"}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x4e24, 0x9, 0x4e22, 0x2, 0x2, 0x90, 0x60, 0x2c, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d6, 0x2b}, @in6=@remote, {0x126, 0x83, 0x0, 0x9a68, 0x80000001, 0x4, 0x401, 0x7fffffff}, {0x9, 0x1, 0x8c60, 0xb6}, {0x80000001, 0x8, 0x6}, 0x70bd2d, 0x3502, 0x0, 0x0, 0x3, 0x1}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x3, 0x1000, "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"}}]}, 0x123c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) dup2(r3, r4) 11:04:12 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) r3 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x0, 0x0, 0x35, 0x0, "b54e6caaf76c608fd57c844a11550b978f157c63a6a74c706c426dfbe81acbcb497bc3e9b4dd3b76ef969d7d99f87b4d5440fc49d0a9b6ea578361c336a6f7ef9828899ee6d7355a7df4079a8bf7791e"}, 0xd8) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3113.128900] FAULT_INJECTION: forcing a failure. [ 3113.128900] name failslab, interval 1, probability 0, space 0, times 0 [ 3113.129922] CPU: 0 PID: 13837 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3113.130527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3113.131317] Call Trace: [ 3113.132105] dump_stack+0x107/0x167 [ 3113.132432] should_fail.cold+0x5/0xa [ 3113.132978] ? lock_release+0x680/0x680 [ 3113.133335] ? skb_clone+0x14f/0x3d0 [ 3113.133862] should_failslab+0x5/0x20 [ 3113.134198] kmem_cache_alloc+0x5b/0x310 [ 3113.134555] skb_clone+0x14f/0x3d0 [ 3113.135092] dev_queue_xmit_nit+0x3a7/0xb00 [ 3113.135494] dev_hard_start_xmit+0xab/0x6f0 [ 3113.136125] __dev_queue_xmit+0x17ec/0x2710 [ 3113.136518] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 3113.137139] ? lock_release+0x4d1/0x680 [ 3113.137489] ? lock_release+0x680/0x680 [ 3113.137881] ? lock_downgrade+0x6d0/0x6d0 [ 3113.138441] ? lock_acquire+0x3ef/0x470 [ 3113.138880] ? lock_release+0x4d1/0x680 [ 3113.139443] ? ip6_mtu+0x1bb/0x3d0 [ 3113.139952] ip6_finish_output2+0x17b4/0x1fe0 [ 3113.140547] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 3113.141064] ip6_output+0x3aa/0x7e0 [ 3113.141584] ip6_xmit+0x10a1/0x1c40 [ 3113.141959] ? ip6_append_data+0x330/0x330 [ 3113.142511] ? lock_release+0x680/0x680 [ 3113.142912] ? inet6_csk_route_socket+0x6a5/0x1000 [ 3113.143345] ? inet6_csk_route_req+0x850/0x850 [ 3113.143996] ? md5_transform+0x19/0xde0 [ 3113.144355] inet6_csk_xmit+0x315/0x680 [ 3113.144882] ? inet6_csk_update_pmtu+0x190/0x190 [ 3113.145298] ? __local_bh_enable_ip+0x9d/0x100 [ 3113.145924] ? csum_ipv6_magic+0x1e/0x70 [ 3113.146305] ? inet6_csk_update_pmtu+0x190/0x190 [ 3113.146965] __tcp_transmit_skb+0x18ef/0x35d0 [ 3113.147372] ? __tcp_select_window+0x900/0x900 [ 3113.148010] ? tcp_trim_head+0x470/0x470 [ 3113.148369] ? slab_free_freelist_hook+0xa9/0x180 [ 3113.148840] ? kmem_cache_free+0xa7/0x2d0 [ 3113.149389] ? __release_sock+0x139/0x3b0 [ 3113.149799] ? release_sock+0x54/0x1b0 [ 3113.150322] ? sk_wait_data+0x1a7/0x4d0 [ 3113.150811] __tcp_retransmit_skb+0x7f6/0x27d0 [ 3113.151416] ? tcp_v6_md5_lookup+0x4d/0x60 [ 3113.151858] ? tcp_push_one+0x100/0x100 [ 3113.152415] ? tcp_current_mss+0x1f8/0x370 [ 3113.152866] ? tcp_trim_head+0x470/0x470 [ 3113.153433] ? tcp_rack_mark_lost+0xa9/0x270 [ 3113.153867] ? __mod_timer+0x7fb/0xd10 [ 3113.154233] tcp_retransmit_skb+0x28/0x240 [ 3113.154835] tcp_xmit_retransmit_queue.part.0+0x54d/0xb40 [ 3113.155363] tcp_xmit_retransmit_queue+0x57/0x70 [ 3113.156046] tcp_xmit_recovery+0x86/0x180 [ 3113.156415] tcp_ack+0x25d9/0x5690 [ 3113.156934] ? tcp_fastretrans_alert+0x3060/0x3060 [ 3113.157363] ? lock_acquire+0x3ef/0x470 [ 3113.157913] ? lock_release+0x680/0x680 [ 3113.158267] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 3113.158945] ? tcp_validate_incoming+0x431/0x16a0 [ 3113.159375] tcp_rcv_established+0x57e/0x1e30 [ 3113.160021] ? tcp_check_space+0x6c0/0x6c0 [ 3113.160401] tcp_v6_do_rcv+0x7b3/0x1520 [ 3113.160826] __release_sock+0x139/0x3b0 [ 3113.161353] release_sock+0x54/0x1b0 [ 3113.161726] sk_wait_data+0x1a7/0x4d0 [ 3113.162974] ? sock_set_mark+0x130/0x130 [ 3113.163550] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3113.164217] ? tcp_send_ack+0x7d/0xa0 [ 3113.164767] tcp_recvmsg+0x17b2/0x2930 [ 3113.165219] ? tcp_splice_read+0x8c0/0x8c0 [ 3113.165900] ? lock_acquire+0x3ef/0x470 [ 3113.166421] ? lock_release+0x4d1/0x680 [ 3113.166947] ? sock_has_perm+0x1ea/0x280 [ 3113.167483] ? __might_fault+0xd3/0x180 [ 3113.168070] ? tcp_splice_read+0x8c0/0x8c0 [ 3113.168688] inet6_recvmsg+0x13b/0x6e0 [ 3113.169176] ? inet6_bind+0x120/0x120 [ 3113.169797] ? security_socket_recvmsg+0x95/0xc0 [ 3113.170457] ? inet6_bind+0x120/0x120 [ 3113.171038] sock_recvmsg+0xff/0x180 [ 3113.171593] __sys_recvfrom+0x1be/0x2f0 [ 3113.172179] ? __ia32_sys_send+0x100/0x100 [ 3113.172740] ? lock_downgrade+0x6d0/0x6d0 [ 3113.173300] ? lock_release+0x4d1/0x680 [ 3113.173821] ? wait_for_completion_io+0x270/0x270 [ 3113.174494] ? vfs_write+0x354/0xa70 [ 3113.174960] ? fput_many+0x2f/0x1a0 [ 3113.175553] ? ksys_write+0x1a9/0x260 [ 3113.176118] ? __ia32_sys_read+0xb0/0xb0 [ 3113.176699] __x64_sys_recvfrom+0xdd/0x1b0 [ 3113.177290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3113.177880] do_syscall_64+0x33/0x40 [ 3113.178433] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3113.179044] RIP: 0033:0x7fd4b1105b19 [ 3113.179619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3113.182131] RSP: 002b:00007fd4ae639188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3113.183148] RAX: ffffffffffffffda RBX: 00007fd4b12190e0 RCX: 00007fd4b1105b19 [ 3113.184148] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3113.185034] RBP: 00007fd4ae6391d0 R08: 0000000000000000 R09: 0000000000000000 [ 3113.186034] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3113.187050] R13: 00007fff31cb616f R14: 00007fd4ae639300 R15: 0000000000022000 [ 3113.278014] FAULT_INJECTION: forcing a failure. [ 3113.278014] name failslab, interval 1, probability 0, space 0, times 0 [ 3113.279223] CPU: 1 PID: 13845 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3113.279842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3113.280550] Call Trace: [ 3113.280781] dump_stack+0x107/0x167 [ 3113.281080] should_fail.cold+0x5/0xa [ 3113.281399] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3113.281895] ? create_object.isra.0+0x3a/0xa20 [ 3113.282277] should_failslab+0x5/0x20 [ 3113.282608] kmem_cache_alloc+0x5b/0x310 [ 3113.282955] create_object.isra.0+0x3a/0xa20 [ 3113.283350] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 3113.283825] kmem_cache_alloc_node+0x169/0x330 [ 3113.284213] ? kmem_cache_free+0xa7/0x2d0 [ 3113.284585] __alloc_skb+0x6d/0x5b0 [ 3113.284914] __tcp_send_ack.part.0+0x67/0x650 [ 3113.285305] ? kmem_cache_free+0x249/0x2d0 [ 3113.285679] tcp_send_ack+0x7d/0xa0 [ 3113.286011] tcp_cleanup_rbuf+0x468/0x5a0 [ 3113.286374] tcp_recvmsg+0xb85/0x2930 [ 3113.286720] ? tcp_splice_read+0x8c0/0x8c0 [ 3113.287089] ? lock_acquire+0x3ef/0x470 [ 3113.287918] ? lock_release+0x4d1/0x680 [ 3113.288273] ? sock_has_perm+0x1ea/0x280 [ 3113.288640] ? __might_fault+0xd3/0x180 [ 3113.289004] ? tcp_splice_read+0x8c0/0x8c0 [ 3113.289386] inet6_recvmsg+0x13b/0x6e0 [ 3113.289738] ? inet6_bind+0x120/0x120 [ 3113.290086] ? security_socket_recvmsg+0x95/0xc0 [ 3113.290511] ? inet6_bind+0x120/0x120 [ 3113.290864] sock_recvmsg+0xff/0x180 [ 3113.291204] __sys_recvfrom+0x1be/0x2f0 [ 3113.297989] ? __ia32_sys_send+0x100/0x100 [ 3113.298369] ? lock_downgrade+0x6d0/0x6d0 [ 3113.298758] ? lock_release+0x4d1/0x680 [ 3113.299122] ? wait_for_completion_io+0x270/0x270 [ 3113.307829] ? vfs_write+0x354/0xa70 [ 3113.308150] ? fput_many+0x2f/0x1a0 [ 3113.308466] ? ksys_write+0x1a9/0x260 [ 3113.308794] ? __ia32_sys_read+0xb0/0xb0 [ 3113.309138] __x64_sys_recvfrom+0xdd/0x1b0 [ 3113.309511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3113.309958] do_syscall_64+0x33/0x40 [ 3113.310283] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3113.310727] RIP: 0033:0x7f083c71fb19 [ 3113.311052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3113.324634] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3113.325293] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3113.325899] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3113.326504] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 [ 3113.327114] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3113.327752] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:04:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e1f, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000280)=0x56cb, 0xffffffffffffffff, &(0x7f00000002c0)=0x40000800, 0x2, 0x0) lseek(0xffffffffffffffff, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x200f5ef, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/151, 0x97, 0x40010103, &(0x7f0000000040)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7}, 0x1c) 11:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="74756e6c3000ffffc59d12db68901a77", @ANYRES32=0x0, @ANYBLOB="008080000000000800000006491a00240066000025049078ffffffff64010101070fc464010100ac141443ac14142200"]}) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@delpolicy={0x123c, 0x14, 0x10, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x4e23, 0x0, 0x4e22, 0x25, 0x2, 0x0, 0xe0, 0x67, r2, 0xee00}, 0x6e6bbd}, [@algo_auth_trunc={0xfa, 0x14, {{'sha1-asm\x00'}, 0x570, 0x60, "03e51eb0329fb00f0c3af291610e3f99e5d4a8ee83e0538d6a38af5c16f8cbc2a0bb8cc262e186348e375c8aa6844c3eee9d79ba30ba5a2b0725f08647b6a802638020e09b3ccf6d161d6cc38cedc4c2c5ff9e46ecc19e725ce226e2a19827cf944c4a659e02015805a78159ca4663f03b3a0376f8a0df8ef6425e46331ebf527e50ba0cd0e48e375b450d6497323f845415c336ce73ad9885305bff835e7dc9497ff6bb5ca161ea05cd7c38f1ac"}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in=@empty, 0x4e24, 0x9, 0x4e22, 0x2, 0x2, 0x90, 0x60, 0x2c, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x4d6, 0x2b}, @in6=@remote, {0x126, 0x83, 0x0, 0x9a68, 0x80000001, 0x4, 0x401, 0x7fffffff}, {0x9, 0x1, 0x8c60, 0xb6}, {0x80000001, 0x8, 0x6}, 0x70bd2d, 0x3502, 0x0, 0x0, 0x3, 0x1}}, @sec_ctx={0x100c, 0x8, {0x1008, 0x8, 0x1, 0x3, 0x1000, "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"}}]}, 0x123c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000010) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) dup2(r3, r4) 11:04:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xe70, 0xcd08, 0x0, 0x0) 11:04:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 44) 11:04:13 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x3e8) 11:04:13 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 25) 11:04:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x100a, 0xcd08, 0x0, 0x0) 11:04:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xa80, 0xcd08, 0x0, 0x0) 11:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1008, 0xcd08, 0x0, 0x0) 11:04:13 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) close(r3) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty, 0x9}, 0x1c) syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:04:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x310) 11:04:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) 11:04:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x310) [ 3114.596631] FAULT_INJECTION: forcing a failure. [ 3114.596631] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.597999] CPU: 0 PID: 13886 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3114.598627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.599378] Call Trace: [ 3114.603662] dump_stack+0x107/0x167 [ 3114.603970] should_fail.cold+0x5/0xa [ 3114.604303] should_failslab+0x5/0x20 [ 3114.604661] __kmalloc_node_track_caller+0x74/0x3b0 [ 3114.605124] ? __tcp_send_ack.part.0+0x67/0x650 [ 3114.605561] __alloc_skb+0xb1/0x5b0 [ 3114.605880] __tcp_send_ack.part.0+0x67/0x650 [ 3114.606263] tcp_send_ack+0x7d/0xa0 [ 3114.606572] __tcp_ack_snd_check+0x156/0x9f0 [ 3114.606939] tcp_rcv_established+0x955/0x1e30 [ 3114.607322] ? tcp_check_space+0x6c0/0x6c0 [ 3114.607706] tcp_v6_do_rcv+0x7b3/0x1520 [ 3114.608045] __release_sock+0x139/0x3b0 [ 3114.608385] release_sock+0x54/0x1b0 [ 3114.608713] sk_wait_data+0x1a7/0x4d0 [ 3114.609050] ? irqentry_enter+0x26/0x60 [ 3114.609385] ? sock_set_mark+0x130/0x130 [ 3114.609731] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3114.610189] ? prepare_to_wait_exclusive+0x2a0/0x2a0 [ 3114.610616] ? tcp_recvmsg+0x6e3/0x2930 [ 3114.610952] tcp_recvmsg+0x17b2/0x2930 [ 3114.611286] ? tcp_splice_read+0x8c0/0x8c0 [ 3114.611797] ? lock_acquire+0x3ef/0x470 [ 3114.612629] ? lock_release+0x4d1/0x680 [ 3114.613472] ? sock_has_perm+0x1ea/0x280 [ 3114.614326] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 3114.615494] ? __kthread_should_park+0x81/0xd0 [ 3114.616485] ? tcp_splice_read+0x8c0/0x8c0 [ 3114.617446] inet6_recvmsg+0x13b/0x6e0 [ 3114.618301] ? inet6_bind+0x120/0x120 [ 3114.619127] ? security_socket_recvmsg+0x95/0xc0 [ 3114.620255] ? inet6_bind+0x120/0x120 [ 3114.621202] sock_recvmsg+0xff/0x180 [ 3114.622112] __sys_recvfrom+0x1be/0x2f0 [ 3114.623053] ? __ia32_sys_send+0x100/0x100 [ 3114.624109] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 3114.625157] ? clockevents_program_event+0x131/0x360 [ 3114.626360] ? tick_program_event+0xa8/0x140 [ 3114.627407] ? hrtimer_interrupt+0x771/0x9b0 [ 3114.628488] __x64_sys_recvfrom+0xdd/0x1b0 [ 3114.629505] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.630738] do_syscall_64+0x33/0x40 [ 3114.631649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3114.632860] RIP: 0033:0x7fd4b1105b19 [ 3114.633740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.638061] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3114.639709] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3114.641363] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3114.642888] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.644623] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3114.646350] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 [ 3114.653623] FAULT_INJECTION: forcing a failure. [ 3114.653623] name failslab, interval 1, probability 0, space 0, times 0 [ 3114.655581] CPU: 1 PID: 13889 Comm: syz-executor.6 Not tainted 5.10.211 #1 [ 3114.657245] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3114.659321] Call Trace: [ 3114.663780] dump_stack+0x107/0x167 [ 3114.664106] should_fail.cold+0x5/0xa [ 3114.664453] should_failslab+0x5/0x20 [ 3114.664792] __kmalloc_node_track_caller+0x74/0x3b0 [ 3114.665228] ? __tcp_send_ack.part.0+0x67/0x650 [ 3114.665643] __alloc_skb+0xb1/0x5b0 [ 3114.665960] __tcp_send_ack.part.0+0x67/0x650 [ 3114.666350] tcp_send_ack+0x7d/0xa0 [ 3114.666664] tcp_cleanup_rbuf+0x468/0x5a0 [ 3114.667021] tcp_recvmsg+0xb85/0x2930 [ 3114.667353] ? tcp_splice_read+0x8c0/0x8c0 [ 3114.668265] ? lock_acquire+0x3ef/0x470 [ 3114.669148] ? lock_release+0x4d1/0x680 [ 3114.670028] ? sock_has_perm+0x1ea/0x280 [ 3114.670935] ? __might_fault+0xd3/0x180 [ 3114.671829] ? tcp_splice_read+0x8c0/0x8c0 [ 3114.672726] inet6_recvmsg+0x13b/0x6e0 [ 3114.673578] ? inet6_bind+0x120/0x120 [ 3114.674370] ? security_socket_recvmsg+0x95/0xc0 [ 3114.675354] ? inet6_bind+0x120/0x120 [ 3114.676175] sock_recvmsg+0xff/0x180 [ 3114.677008] __sys_recvfrom+0x1be/0x2f0 [ 3114.677846] ? __ia32_sys_send+0x100/0x100 [ 3114.678736] ? lock_downgrade+0x6d0/0x6d0 [ 3114.683461] ? lock_release+0x4d1/0x680 [ 3114.691781] ? wait_for_completion_io+0x270/0x270 [ 3114.692199] ? vfs_write+0x354/0xa70 [ 3114.692522] ? fput_many+0x2f/0x1a0 [ 3114.692829] ? ksys_write+0x1a9/0x260 [ 3114.693165] ? __ia32_sys_read+0xb0/0xb0 [ 3114.693513] __x64_sys_recvfrom+0xdd/0x1b0 [ 3114.693886] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3114.694327] do_syscall_64+0x33/0x40 [ 3114.694632] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3114.695073] RIP: 0033:0x7f083c71fb19 [ 3114.695379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.704875] RSP: 002b:00007f0839c74188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3114.705487] RAX: ffffffffffffffda RBX: 00007f083c833020 RCX: 00007f083c71fb19 [ 3114.706059] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3114.706630] RBP: 00007f0839c741d0 R08: 0000000000000000 R09: 0000000000000000 11:04:14 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) shutdown(r0, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) [ 3114.707205] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3114.711796] R13: 00007fff9855f06f R14: 00007f0839c74300 R15: 0000000000022000 11:04:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0xee0, 0xcd08, 0x0, 0x0) 11:04:14 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000700)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x81, 0x7ff, 0x80ca7114a2f0489f, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, 0x700, 0x7800, 0x8, 0xffffffff}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0x33}, 0x1, r2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000240)=""/89, 0x59}, {&(0x7f0000000480)=""/164, 0xa4}], 0x3, 0x0, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) (fail_nth: 45) 11:04:14 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0xffff, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x4205c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x600) [ 3116.287173] FAULT_INJECTION: forcing a failure. [ 3116.287173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3116.292252] CPU: 1 PID: 13920 Comm: syz-executor.2 Not tainted 5.10.211 #1 [ 3116.292804] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3116.293459] Call Trace: [ 3116.293682] dump_stack+0x107/0x167 [ 3116.293979] should_fail.cold+0x5/0xa [ 3116.294293] _copy_to_iter+0x264/0x12d0 [ 3116.294623] ? lock_release+0x4d1/0x680 [ 3116.294946] ? sk_wait_data+0x353/0x4d0 [ 3116.295271] ? lock_downgrade+0x6d0/0x6d0 [ 3116.295687] ? _copy_from_iter_nocache+0xd60/0xd60 [ 3116.296108] ? __virt_addr_valid+0x170/0x5c0 [ 3116.296488] ? __check_object_size+0x319/0x440 [ 3116.296889] simple_copy_to_iter+0x4c/0x70 [ 3116.297257] __skb_datagram_iter+0x4f7/0x880 [ 3116.297643] ? zerocopy_sg_from_iter+0x110/0x110 [ 3116.298059] skb_copy_datagram_iter+0x88/0x190 [ 3116.298457] tcp_recvmsg+0x13b5/0x2930 [ 3116.298801] ? tcp_splice_read+0x8c0/0x8c0 [ 3116.299173] ? lock_acquire+0x3ef/0x470 [ 3116.299538] ? lock_release+0x4d1/0x680 [ 3116.299888] ? sock_has_perm+0x1ea/0x280 [ 3116.300241] ? __might_fault+0xd3/0x180 [ 3116.300593] ? tcp_splice_read+0x8c0/0x8c0 [ 3116.300963] inet6_recvmsg+0x13b/0x6e0 [ 3116.301303] ? inet6_bind+0x120/0x120 [ 3116.301639] ? security_socket_recvmsg+0x95/0xc0 [ 3116.302049] ? inet6_bind+0x120/0x120 [ 3116.302381] sock_recvmsg+0xff/0x180 [ 3116.302706] __sys_recvfrom+0x1be/0x2f0 [ 3116.303053] ? __ia32_sys_send+0x100/0x100 [ 3116.303429] ? lock_downgrade+0x6d0/0x6d0 [ 3116.303807] ? lock_release+0x4d1/0x680 [ 3116.304167] ? wait_for_completion_io+0x270/0x270 [ 3116.304585] ? vfs_write+0x354/0xa70 [ 3116.304911] ? fput_many+0x2f/0x1a0 [ 3116.305235] ? ksys_write+0x1a9/0x260 [ 3116.305567] ? __ia32_sys_read+0xb0/0xb0 [ 3116.305922] __x64_sys_recvfrom+0xdd/0x1b0 [ 3116.306290] ? syscall_enter_from_user_mode+0x1d/0x50 [ 3116.306736] do_syscall_64+0x33/0x40 [ 3116.307060] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 3116.307702] RIP: 0033:0x7fd4b1105b19 [ 3116.308008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3116.309467] RSP: 002b:00007fd4ae65a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 3116.310079] RAX: ffffffffffffffda RBX: 00007fd4b1219020 RCX: 00007fd4b1105b19 [ 3116.310649] RDX: 0000000000001000 RSI: 0000000020001e00 RDI: 0000000000000003 [ 3116.311218] RBP: 00007fd4ae65a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3116.311824] R10: 000000000000cd08 R11: 0000000000000246 R12: 0000000000000002 [ 3116.312438] R13: 00007fff31cb616f R14: 00007fd4ae65a300 R15: 0000000000022000 VM DIAGNOSIS: 11:04:12 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff8114e586 RDX=0000000000000000 RSI=ffffffff8114e593 RDI=0000000000000005 RBP=ffff88804601fd24 RSP=ffff88804601fb28 R8 =0000000000000001 R9 =ffffffff84e0a083 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffff88800fb14ec0 R14=ffff88804829b480 R15=ffff88800fb15378 RIP=ffffffff8114e5b0 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555570e4400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f75baca7b80 CR3=00000000464e2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822d019c RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff8880536cf178 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d69d R14=fffffbfff0f3d652 R15=dffffc0000000000 RIP=ffffffff822d01f0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7ad9f05700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b32921000 CR3=00000000482a6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000ff00000000000000000000 XMM01=0000ff00000100000000000000000000 XMM02=7463656a6e695f31313230385f7a7973 XMM03=94a14424f4f6a4a38d0dcc99cb3a9711 XMM04=13b7323e78889506dd8b2d8d8d2c428f XMM05=94a14424f4f6a4a38d0dcc99cb3a9711 XMM06=0a141d9330da05a1acd0b8af94631666 XMM07=e2012ca63dd57f09c537cdbbbe232129 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000