0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3eef7c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000265501da6e8d4e109d467a348c21140f049c776235212c6a4de32b1d2ae523711a9601acad48e0e6e49107bb6f017351311994d6bc2ffab2e44c38b93ce067143474679bc0480ff90d8aed5719a38190f246d960263c7fc24193878844e896722b26f9dca108b0fc24b084854eb78a6348557cbd0f78d68e1d87fc071e0178bc358de5d011c616038de51eb3e7995a509fcf6440ab30577bf2138c02e8dd628183bde4853e5b4ebdda0c6ad8afcfe17e5efc0f77a3da0ae60d886b79f8addbfc85eb919033df76f422a921f401000000000000000000000000000000ca49764b2f00cb226dc9186b71e111d3126603fae64071505e89643da5cdf6323ffe7e4d51a72dee29fb24121239601fb43cc775324013574bd16c354f76ba159ca51c77ed164d7287565cbc7e9671511ecbb9cccd59f35066c17b18303dec1e9d1419bf85d4426e60752e2b0ffef6d2f8a574c7580d85ae6001023d1e3462a74e56206cd08b1a5ccca121128aff7e4b80a933476542715f1c7076675c0d09163be2e86dda5c8b71d792189a7e3f9373bdb22f0cb1dc506ef21158d2bd79d1f7e0568d935cd6c670dad79f389eea37dd7032d9031643de0de78e35681c57fb8acff668c3d4af543c9766b1ce5ebd7834c07321a57b0e9b6eebf3b5801aab7df12f9ce72d2d4a93c9fb3cd368d93b31cdbe72b4d3da39b18b974be4d8"]) 07:40:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000"], 0x38}}], 0x1, 0x0) 07:40:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 863.499688] device lo left promiscuous mode 07:40:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 3) [ 863.531565] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 07:40:57 executing program 6: rename(&(0x7f00000006c0)='./file0\x00', 0x0) rename(0x0, &(0x7f0000000080)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffbfffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040081, 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2641c2, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ftruncate(0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x17) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) unshare(0x48020200) 07:40:57 executing program 7: perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0x74000000, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_ts_info={0x9}}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000001e00)={{r5}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x100000000, {0x1, 0x2, 0x80000000, 0xc1, 0x7ff}, [0x100000001, 0x4, 0x5]}}, @devid}) process_vm_readv(r3, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x7, 0x1020, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x255, 0x7}, 0x61, 0xb6, 0x1, 0x4, 0x8, 0x7, 0x400, 0x0, 0x6, 0x0, 0x4}, r3, 0x2, 0xffffffffffffffff, 0xa) sendto(r1, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) process_vm_readv(r0, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[{&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/1, 0x1}], 0x4, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="48b451e36214382ce93dd10e354dd23f303f3ee9a004eb411d41599df4efe5a32d205cb5db60008adbe5bc2a3257b5351820d426509c882e5a8e09d35f792087619f5fca7dcc9b25039483d4e2269b67f5c1e7daaa275d3665036c31dcec34dde59bbc2ed661a8e6a378c377bff06829cbf0bf020e3518bfb2f890", 0x7b, 0x4000000, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 07:40:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000"], 0x38}}], 0x1, 0x0) 07:40:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000"], 0x38}}], 0x1, 0x0) 07:40:57 executing program 4: mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8001, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@sq={'sq', 0x3d, 0x44}}, {@rq}, {@sq={'sq', 0x3d, 0x3f}}, {@common=@nodevmap}, {@rq={'rq', 0x3d, 0x1f}}, {@timeout={'timeout', 0x3d, 0x9}}, {@sq={'sq', 0x3d, 0x16f}}, {@common=@dfltgid={'dfltgid', 0x3d, 0xee00}}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_appraise}, {@appraise_type}, {@dont_appraise}]}}) getpgid(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x4, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x2362, 0xfd0c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0xaa, 0x169200) accept$packet(0xffffffffffffffff, &(0x7f0000001880)={0x11, 0x0, 0x0}, &(0x7f00000018c0)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001900)={{{@in=@broadcast, @in=@remote, 0x4e20, 0x1, 0x4e24, 0xfffd, 0xa, 0x20, 0x80, 0x0, r2, 0xffffffffffffffff}, {0x7, 0x3, 0x5, 0x9, 0x6, 0x3, 0x7, 0x2}, {0x7, 0x3, 0xf000000000000000, 0x7f}, 0x674, 0x6e6bbc, 0x0, 0x1, 0x1, 0x3}, {{@in=@local, 0x4d6, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x3, 0x1, 0x4, 0x2108, 0x2, 0x7f}}, 0xe8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) [ 863.560801] device lo left promiscuous mode [ 863.573795] device lo entered promiscuous mode [ 863.575148] device lo left promiscuous mode [ 863.590322] FAULT_INJECTION: forcing a failure. [ 863.590322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.591587] CPU: 1 PID: 7508 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 863.592127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 863.592798] Call Trace: [ 863.593018] dump_stack+0x107/0x167 [ 863.593314] should_fail.cold+0x5/0xa [ 863.593633] _copy_from_user+0x2e/0x1b0 [ 863.593957] iovec_from_user+0x141/0x400 [ 863.594298] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 863.594709] __import_iovec+0x67/0x590 [ 863.595024] ? __ia32_sys_shutdown+0x80/0x80 [ 863.595393] import_iovec+0x83/0xb0 [ 863.595695] sendmsg_copy_msghdr+0x131/0x160 [ 863.596048] ? do_recvmmsg+0x6d0/0x6d0 [ 863.596367] ? perf_trace_lock+0xac/0x490 [ 863.596710] ? __lockdep_reset_lock+0x180/0x180 [ 863.597084] ? perf_trace_lock+0xac/0x490 [ 863.597428] ___sys_sendmsg+0xc6/0x170 [ 863.597745] ? sendmsg_copy_msghdr+0x160/0x160 [ 863.598111] ? __fget_files+0x26d/0x4c0 [ 863.598455] ? lock_downgrade+0x6d0/0x6d0 [ 863.598798] ? lock_downgrade+0x6d0/0x6d0 [ 863.599140] ? __fget_files+0x296/0x4c0 [ 863.599472] ? __fget_light+0xea/0x290 [ 863.599797] __sys_sendmmsg+0x195/0x470 [ 863.600119] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 863.600468] ? lock_downgrade+0x6d0/0x6d0 [ 863.600810] ? ksys_write+0x12d/0x260 [ 863.601122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 863.601517] ? wait_for_completion_io+0x270/0x270 [ 863.601904] ? rcu_read_lock_any_held+0x75/0xa0 [ 863.602288] ? vfs_write+0x354/0xa70 [ 863.602588] ? fput_many+0x2f/0x1a0 [ 863.602883] ? ksys_write+0x1a9/0x260 [ 863.603196] ? __ia32_sys_read+0xb0/0xb0 [ 863.603529] __x64_sys_sendmmsg+0x99/0x100 [ 863.603870] do_syscall_64+0x33/0x40 [ 863.604171] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 863.604571] RIP: 0033:0x7f24b3ae7b19 [ 863.604863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 863.606312] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 863.606929] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 863.607506] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 863.608079] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 863.608658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.609232] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:40:57 executing program 2: preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/143, 0x8f}], 0x2, 0x10000, 0x8, 0xa6651f1a67c618f5) ftruncate(0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, &(0x7f0000000500)=0x8) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000580)) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000a40), 0x0, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r2, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r1) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0x800) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000400)={'HL\x00'}, &(0x7f0000000600)=0x1e) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f0000000800)) 07:40:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) [ 863.650992] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 863.898889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.899431] print_req_error: 22 callbacks suppressed [ 863.899448] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.900754] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.901611] buffer_io_error: 6 callbacks suppressed [ 863.901618] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 863.911738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.912177] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.913051] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.913902] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 863.914869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.915306] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.916179] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.917026] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 863.918010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.918476] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.919667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.920106] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.921286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.921748] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.922617] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 863.923467] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 863.924071] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 863.924693] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 863.925760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.926280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 863.927015] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 863.927659] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:41:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 4) 07:41:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 07:41:10 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="28d4b812f255781bfea35ea61c88e0649bd0173247a6bf08c4b4415182410f0734f193d2f3a04112ec2dc7931bfa2286b4dce2544b31c091b200e722421872adc01bff00000000", @ANYRES16=r2, @ANYBLOB="0906000000000000000030000000"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)="288e3d1df7bda04e97f98efddd1e34a5cab788cb2a897f8f0cb9d7d65ee3c7e254df5810ae6fc5004eed82473614a8793987734da7e0e62d053e753c77fb2dfa47ead04ba1e8b433724839b607322c5848151ba505c3aa6f42f860cb556e10f6f92081d0484a75f2ecb24ee5", 0x6c}, {&(0x7f00000003c0)="5779f07d7e603f22fff83738f35af777a5e23f6087dae82a8def8e26b1842852ad3ba5c414efcca4cbf56e2c0e981d3f7598d4a733dcd6d9120390a7aab04305602858194d09fb3558614a949c096ec43b2364e3b3198dd649010b536f8ede9a6bf9c1d106e4d7e22d7f2d4411d543d6812fffbdf033f572ffa450f8a46933df15627bfe0366a15f1b1472a6d6ad4fe3fe47c3bd42db2e5c6e02ac27cb19fc2ea41184b4663fc30539d9b7240cbb07b949745ff135a84acf07154626b4db527602e6e9ccb0cc4bbbc2fcf197b8ea", 0xce}, {0x0}, {&(0x7f00000004c0)="6403f935358956f90fd150ccfa8043b87b87923b11892ee7814aa2ce307db63d78597e7b10e32514458821114a1bcd017f7aa0dfdfdff205d0d9f9f8588815042ade3de7da5cffaffc0bcb6a3659f0dbecdcea246c44919dae8a4a052135e56f", 0x60}], 0x4) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000380)) shmget(0x1, 0x3000, 0x4c731db58d4a8a10, &(0x7f0000ffd000/0x3000)=nil) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="91315ca4", @ANYRES16=r1, @ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x80010}, 0x24008004) r4 = shmget(0x1, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 07:41:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 07:41:10 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) ioctl$TIOCNXCL(r0, 0x540d) 07:41:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11881, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000002600)=ANY=[@ANYBLOB='(*\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2a28}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 07:41:10 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x1) r4 = gettid() rt_sigqueueinfo(0x0, 0x0, 0x0) r5 = getpid() tkill(r5, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe1, 0x0, 0xff, 0x5, 0x0, 0x970f, 0x40200, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x7ff}, 0x18000, 0x5, 0x81, 0x4, 0x1fffffffffffa, 0x0, 0x7, 0x0, 0x5, 0x0, 0x1}, r5, 0x8, r6, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r7, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) r8 = getpid() tkill(r4, 0x14) ptrace$cont(0x20, r8, 0x1ff, 0x80000000) tkill(0x0, 0x41) syz_open_procfs(0x0, &(0x7f0000000180)='oom_score\x00') write$binfmt_elf64(r0, 0x0, 0xa00) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 07:41:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 876.750906] device lo entered promiscuous mode 07:41:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) [ 876.760365] FAULT_INJECTION: forcing a failure. [ 876.760365] name failslab, interval 1, probability 0, space 0, times 1 [ 876.762641] CPU: 0 PID: 7544 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 876.763681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 876.764926] Call Trace: [ 876.765337] dump_stack+0x107/0x167 [ 876.765896] should_fail.cold+0x5/0xa [ 876.766486] ? sock_kmalloc+0xae/0x100 [ 876.767084] should_failslab+0x5/0x20 [ 876.767664] __kmalloc+0x72/0x390 [ 876.768199] sock_kmalloc+0xae/0x100 [ 876.768778] ____sys_sendmsg+0x665/0x870 [ 876.769373] ? sock_write_iter+0x3d0/0x3d0 [ 876.770012] ? do_recvmmsg+0x6d0/0x6d0 [ 876.770599] ? perf_trace_lock+0xac/0x490 [ 876.771235] ? __lockdep_reset_lock+0x180/0x180 [ 876.771916] ? perf_trace_lock+0xac/0x490 [ 876.772556] ___sys_sendmsg+0xf3/0x170 [ 876.773149] ? sendmsg_copy_msghdr+0x160/0x160 [ 876.773850] ? lock_downgrade+0x6d0/0x6d0 [ 876.774497] ? lock_downgrade+0x6d0/0x6d0 [ 876.775134] ? __fget_files+0x296/0x4c0 [ 876.775763] ? __fget_light+0xea/0x290 [ 876.776367] __sys_sendmmsg+0x195/0x470 [ 876.776994] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 876.777663] ? lock_downgrade+0x6d0/0x6d0 [ 876.778332] ? __mutex_unlock_slowpath+0xe1/0x600 [ 876.779073] ? wait_for_completion_io+0x270/0x270 [ 876.779808] ? rcu_read_lock_any_held+0x75/0xa0 [ 876.780530] ? vfs_write+0x354/0xa70 [ 876.781113] ? fput_many+0x2f/0x1a0 [ 876.781677] ? ksys_write+0x1a9/0x260 [ 876.782258] ? __ia32_sys_read+0xb0/0xb0 [ 876.782892] __x64_sys_sendmmsg+0x99/0x100 [ 876.783544] do_syscall_64+0x33/0x40 [ 876.784102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 876.784883] RIP: 0033:0x7f24b3ae7b19 [ 876.785453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 876.788233] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 876.789390] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 876.790476] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 876.791568] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 876.792660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.793756] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:41:10 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x20000000000000, 0x0, 0x0, 0x1114056, 0x0) mount(0x0, 0x0, &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x300b4e2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={@loopback}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x5, @private2, 0xfffffc01}, 0x1c) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000000)={'wlan0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYRES16=r2, @ANYRESHEX=r4, @ANYBLOB="6d6e0903044e459fc78ca27728297fa689f9108b8ef0c96627986bfb5fc2a2c2090000000000842f6d3cd6cc3f97cd895030adcb9295ade00853ef088e1fd6d3d8554bb81c3261e804728fab2b560d1d3c03b4b091ee783049522692e4355f36195c4460ff75b27bbe58174d253b5dc3132833e111f5df10e33644f9f2c600dae4eaa44eb576df5c3ba37cfdd33320a36026249f7abd214bfb050600000000000000079da0330ae1eed26ccbe1fb56d3d3a52d12e9a897dece3bd25a69ad38ccba3e8fb5000000000000000000000000000000ec8fdcb352ebc02d3d9102ba8b9092aadcdf6cd62526c727d690837c2b0aa12304051e0575d792b5e94e952a5f56a956d236fed8dac9db7f8694548f7c1b6da6f70e78beac0085a93c090c80db5336bafbd211ff2ba961a17e936eeed2f31ef6f6285c00707500000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24048010}, 0x0) [ 876.806234] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 876.812911] device lo left promiscuous mode 07:41:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) [ 879.787381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.788465] print_req_error: 6 callbacks suppressed [ 879.788487] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.791209] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.793049] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 879.802595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.803378] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.804923] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.806426] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 879.808198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.809022] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.810586] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.812074] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 879.813897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.814721] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.816243] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.817723] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 879.819567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.820332] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.821836] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 879.823312] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 879.825081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.826589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.828017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 879.833474] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 879.834644] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 879.835753] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:41:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) 07:41:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) dup2(r0, r1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'geneve0\x00'}, {0x20, '{'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, ':@@'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, 'veth1_vlan\x00'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, '(*'}, {0x20, 'veth1_vlan\x00'}], 0xa, "db74"}, 0xac) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x148, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbf}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x148}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/161, 0xa1}], 0x6, 0xee, 0x1000) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fcntl$addseals(r3, 0x409, 0x8) fcntl$addseals(r3, 0x409, 0xc) sendfile(r3, r1, &(0x7f0000000100)=0x9, 0x7) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001740)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) fadvise64(0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321200000000000000bfd"], 0xb) 07:41:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 5) 07:41:26 executing program 6: syz_mount_image$nfs4(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000000000)="92ea884ea1e017382b6924a5ce786802790303212a12770a0c107e7a76b764599538623beacb30cc32d304fad4f3645da2e7a2170b983b8532c5757aa7a74d94b0af8119f36cecd48c94b799e0472e901f72e234130b90110a4e8b1989a7242c9eb24906cdc2496daeabcef9eb31c6a64a325f212e431dca69a0a2fac311440082f379674a9b04de2876542f3155225cc8c95b0c97", 0x95, 0x9}, {&(0x7f00000000c0)="00943dc59dcc78360c78b91728ececc7d1ea0876e426b05c5aba13a5efc42dcc62862fb9aee98dd60ed6d2a72e0645229583f1f5820ff1ccf1d2e4c9079b45de8850fa2d44a1f21071b6c8a1ee93ae", 0x4f, 0x172b}, {&(0x7f0000000140)="d340977add1e3e560cf334d4f67aaaf636daa66051193936e9c8ffe1", 0x1c, 0x2}, {&(0x7f0000000180)="6c6d061502322ed22acab8502d1f8d0fd39421efe0e38b5ff09752a7dce9ee96c173ba34c088a4fd5f3be7a64e3d8be4bad537294607f81d80041089feaa2cfe0d501dc882a17c577927c16b0abf54bf1790f3072727c0e9bd2627214d82951a4dc443c7d7818e7d", 0x68, 0x2}], 0x1800, &(0x7f0000000980)) 07:41:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:26 executing program 2: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0x85) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000005c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) ioctl$TIOCNXCL(r0, 0x540d) 07:41:26 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r0, &(0x7f0000002400)=[{&(0x7f0000000440)=""/213, 0xd5}], 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'net/fib_triestat\x00'}, {0x20, '#! '}], 0xa, "aec6cd034fac9f9fef850dcc2697be70c4b8b926c7b112aa5746e0cc17a5789f025728223032800a23d348a5c712694da2539a30e30878ab"}, 0x59) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="0800050004000005000100000065746831993a"], 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x1, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0xed0, 0x9, 0x4cd, 0x400, 0x7fff, 0x8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x25}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1f}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xa05a8dd, 0x6]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc054}, 0x4004010) socketpair(0x29, 0x800, 0x80, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r4, 0x111, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) [ 892.743854] FAULT_INJECTION: forcing a failure. [ 892.743854] name failslab, interval 1, probability 0, space 0, times 0 [ 892.744939] CPU: 1 PID: 7579 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 892.745435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.746031] Call Trace: [ 892.746232] dump_stack+0x107/0x167 [ 892.746513] should_fail.cold+0x5/0xa [ 892.746797] ? create_object.isra.0+0x3a/0xa20 [ 892.747136] should_failslab+0x5/0x20 [ 892.747419] kmem_cache_alloc+0x5b/0x310 [ 892.747721] create_object.isra.0+0x3a/0xa20 [ 892.748043] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 892.748418] __kmalloc+0x16e/0x390 [ 892.748688] sock_kmalloc+0xae/0x100 [ 892.748972] ____sys_sendmsg+0x665/0x870 [ 892.749279] ? sock_write_iter+0x3d0/0x3d0 [ 892.749597] ? do_recvmmsg+0x6d0/0x6d0 [ 892.749889] ? perf_trace_lock+0xac/0x490 [ 892.750199] ? __lockdep_reset_lock+0x180/0x180 [ 892.750555] ? perf_trace_lock+0xac/0x490 [ 892.750872] ___sys_sendmsg+0xf3/0x170 [ 892.751159] ? sendmsg_copy_msghdr+0x160/0x160 [ 892.751497] ? lock_downgrade+0x6d0/0x6d0 [ 892.751806] ? lock_downgrade+0x6d0/0x6d0 [ 892.752116] ? __fget_files+0x296/0x4c0 [ 892.752416] ? __fget_light+0xea/0x290 [ 892.752708] __sys_sendmmsg+0x195/0x470 [ 892.753003] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 892.753322] ? lock_downgrade+0x6d0/0x6d0 [ 892.753645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 892.754000] ? wait_for_completion_io+0x270/0x270 [ 892.754355] ? rcu_read_lock_any_held+0x75/0xa0 [ 892.754707] ? vfs_write+0x354/0xa70 [ 892.754984] ? fput_many+0x2f/0x1a0 [ 892.755263] ? ksys_write+0x1a9/0x260 [ 892.755547] ? __ia32_sys_read+0xb0/0xb0 [ 892.755859] __x64_sys_sendmmsg+0x99/0x100 [ 892.756184] do_syscall_64+0x33/0x40 [ 892.756464] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 892.756837] RIP: 0033:0x7f24b3ae7b19 [ 892.757112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.758437] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 892.759001] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 892.759523] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 892.760052] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 892.760566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.761079] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 892.766931] device lo entered promiscuous mode [ 892.776572] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 892.783078] device lo left promiscuous mode 07:41:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:26 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f0000000340)="ed1fcf0200000000000000c142679ab89f41fdffffff0000d7f465", 0x1b, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) 07:41:26 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 892.876402] device lo entered promiscuous mode [ 892.881277] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 892.889754] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (11 blocks) [ 892.893221] device lo left promiscuous mode [ 892.908095] EXT4-fs (loop6): bad geometry: block count 256 exceeds size of device (11 blocks) [ 893.144563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.145466] print_req_error: 6 callbacks suppressed [ 893.145485] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.147900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.148744] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.150412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.151229] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.152875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.153705] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.155389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.156194] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.157825] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.159419] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 893.160582] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.162156] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 893.163345] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.164920] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 893.166095] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.167677] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 893.168838] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 893.170404] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 893.171658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.172590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.173518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 893.181441] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 893.182637] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 893.183805] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:41:41 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:41 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x6, 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040f0401fa1b0470d2b925be23bb7f6f7caad3fece37bce1e9035196da04a9457edb3cea364a66724be641e75dc39ab414bf2c846185bce05b7d7b617c77b77d7f73496d74536413648d9a5b387ebb24ad99a02b6a23"], 0x7) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="03c80099e3058442c01f27ce4c25cc65b3511aa9de8657e9001f5c5206b05716fcbd3d12c47e2b2f1ff4c5728a030810ed810c013afe9a810addf634e1c8bcda95a45c6e88dbb9588ad4329b2d0ef720faa2226975b27e59336de010c758fd2c676848bd5e59c3b3fbeb557840ad72ee4a000000000000000078731ec19b6c4f64db55237f18c86a8106ff40eab7cd"], 0x9d) r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x4, 0xc840) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x40, 0xfd, 0x1, 0x3f, 0x0, 0x3, 0x10, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x1082, 0x7, 0x400, 0x0, 0xdd56, 0x2a21, 0x401, 0x0, 0x5}, 0xffffffffffffffff, 0xf, r0, 0x2) 07:41:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040), 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000140)=0x8000, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r1, 0x307, 0x0, 0x0, {{}, {@val={0x8, 0x6}, @val={0xc}}}}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002200)=ANY=[@ANYBLOB, @ANYBLOB="210100000000000000c2060000000800030006b8ed225cb8e3554c6b8a4fc0a82d5918dd958bfc8f789d9073a0f637ef55088dc759704dc3281db0ab143a61f633cdb8073490404053111303c6e4b7d7575303fca90482a0147e8cbf96b4a42923df2561fd7ce2830d8ebcd26aa160e5e36ddb52182938b281cb8f613491e57e805f9dbdba90816f6adcfef1fc8996f335dac4a5860ea7afa9ba8f5ef580c8660073289fa36770fab3e0955385104a7147078663dc40951c780eabff206860620563f8e64c31a89aa8b999135d550941d37ade6a8d451ce6400cd62838d7b74f0f9464d148f2761b017a7e88421eb9a4de84b2095165012a8079478d41ebbc587053bccd874fba93fcfdd99460b68f1ec64232297a2ebff2e9629628e114237ffb17e3e10a1e3a75e3620722660e7d6fc8c1fb27c4c309d056b1f81447649d1ccd4ae0d24003c29d279a8e3f6f81a984bdd3a7cb7897aa740d4c258934827e6ae1472633274644a44953be8b3d91850c686dd79c6ab5ac4df148f3bcb1260363e2f8a2aa61b9e36180303bb6bfcd802a3fb1bc8c146c91efe94b005f94e15180646f5342236d6e0a59ff5eb066071490381d74fb1c48e258fbf2370068ac210dd6092ac95efd1ed9c124687d29ffd9915d6662d849f02863c7c68a4c39388c8d540836bc6c8e7ca251eb57aea803", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 07:41:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 6) 07:41:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:41 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) dup2(r0, r1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840)={'#! ', './file0', [{0x20, 'geneve0\x00'}, {0x20, '{'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, ':@@'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, 'veth1_vlan\x00'}, {0x20, '\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n'}, {0x20, '(*'}, {0x20, 'veth1_vlan\x00'}], 0xa, "db74"}, 0xac) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x148, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbf}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x148}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/161, 0xa1}], 0x6, 0xee, 0x1000) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fcntl$addseals(r3, 0x409, 0x8) fcntl$addseals(r3, 0x409, 0xc) sendfile(r3, r1, &(0x7f0000000100)=0x9, 0x7) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001740)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) fadvise64(0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321200000000000000bfd"], 0xb) [ 907.768500] FAULT_INJECTION: forcing a failure. [ 907.768500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.769729] CPU: 1 PID: 7618 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 907.770290] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.770964] Call Trace: [ 907.771183] dump_stack+0x107/0x167 [ 907.771480] should_fail.cold+0x5/0xa [ 907.771790] _copy_from_user+0x2e/0x1b0 [ 907.772114] ____sys_sendmsg+0x6c6/0x870 [ 907.772440] ? sock_write_iter+0x3d0/0x3d0 [ 907.772776] ? do_recvmmsg+0x6d0/0x6d0 [ 907.773097] ? ___sys_sendmsg+0x8b/0x170 [ 907.773429] ___sys_sendmsg+0xf3/0x170 [ 907.773746] ? sendmsg_copy_msghdr+0x160/0x160 [ 907.774116] ? lock_downgrade+0x6d0/0x6d0 [ 907.774451] ? lock_downgrade+0x6d0/0x6d0 [ 907.774795] ? __fget_files+0x296/0x4c0 [ 907.775120] ? __fget_light+0xea/0x290 [ 907.775438] __sys_sendmmsg+0x195/0x470 [ 907.775764] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 907.776106] ? lock_downgrade+0x6d0/0x6d0 [ 907.776453] ? __mutex_unlock_slowpath+0xe1/0x600 [ 907.776838] ? wait_for_completion_io+0x270/0x270 [ 907.777226] ? rcu_read_lock_any_held+0x75/0xa0 [ 907.777611] ? vfs_write+0x354/0xa70 [ 907.777909] ? fput_many+0x2f/0x1a0 [ 907.778203] ? ksys_write+0x1a9/0x260 [ 907.778514] ? __ia32_sys_read+0xb0/0xb0 [ 907.778853] __x64_sys_sendmmsg+0x99/0x100 [ 907.779193] do_syscall_64+0x33/0x40 [ 907.779490] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 907.779902] RIP: 0033:0x7f24b3ae7b19 07:41:41 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r0, &(0x7f0000000240)=[{&(0x7f00000015c0)=',', 0x1}], 0x10000000000002a3, 0x0) fstat(r0, &(0x7f0000000340)) umount2(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x7e, 0x4080000001, 0x7fffffff000) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0x0, 0x8000000000, 0x7}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@empty}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet(0xa, 0x3, 0xff) sendto(r2, &(0x7f0000000000)="d4f8dfaa394996add3afd1da13fac83014b8e5c45afa1a1f3ed44d2f6eaf6b5f9203bf69ab683862", 0x28, 0x0, &(0x7f0000000280)=@nl=@unspec={0x0, 0xff00, 0x0, 0xf5ffffff}, 0x80) 07:41:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 907.780202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.781854] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 907.781867] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 907.781872] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 907.781878] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.781883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.781889] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:41:41 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b071cd78f679ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35074f16b7cffdc900da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d000000"], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x1) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000440)=ANY=[], 0x2f) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x20]}, 0x8, 0x80000) r0 = fork() fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) ptrace(0x17, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@ctrl_frame=@cf_end_cf_ack={{}, {0x7ffb}, @device_a, @broadcast}, 0x10) fork() syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@deauth={@wo_ht={{}, {0x6}, @device_a, @device_b, @random="8a720416635f", {0x0, 0x5}}, 0x3d, @val={0x8c, 0x10, {0xec4, "80152fe3a2af", @short="03bc6ae6c9151e43"}}}, 0x2c) wait4(r0, &(0x7f0000000200), 0x1000000, &(0x7f0000000480)) [ 907.793751] device lo entered promiscuous mode [ 907.815081] device lo left promiscuous mode [ 907.824296] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 07:41:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 907.837763] EXT4-fs (loop6): re-mounted. Opts: (null) 07:41:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 7) 07:41:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x42, 0x3f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = creat(&(0x7f0000000000)='./file2\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001940)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="2001000000000000ffcf0391d3ec00000000000000027f00000100000000000002000000000000000000000000000a000000000000008be6f4c205da27eb509d1bc8b8a28e16ca95f123b08733269b3e1063226f44feb256e17ff303e42a5649dce7bb5b8c8378be5c06ae04d25aeafd5c888e8ed26cd0e22d29cf1bea54912223b71ed757b51480841287acbd1d3b325e046e21ae41098364fb076204cab2e5aeada8f1d0", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000800000bc150c330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000000000b7659a7e9bf9f7650ad8b6a9b387fc8a966537a8c3b25e20"], 0x134}}, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) close(r3) close_range(r3, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) r7 = fsopen(&(0x7f00000000c0)='fusectl\x00', 0x0) fcntl$dupfd(r5, 0x0, r7) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000540)={0x0, 0x7, 0x7, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000940)={{r2}, r8, 0x0, @inherit={0x68, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x1f, {0x18, 0x2000000000001f, 0xa07, 0x9, 0x20080}, [0x100, 0x6, 0xfffffffffffeffff, 0x7]}}, @name="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"}) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) 07:41:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x0, 0x8, 0x6}) umount2(&(0x7f0000000200)='./file0\x00', 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f00000001c0)='>') mq_open(&(0x7f0000000300)='.\x00', 0x80, 0x24, &(0x7f0000000340)={0x2, 0x0, 0x40, 0x10000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, 0x0) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='status\x00') r4 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x280040, 0x3d) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000240)=0x2) 07:41:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 907.925319] FAULT_INJECTION: forcing a failure. [ 907.925319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.926491] CPU: 1 PID: 7636 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 907.927045] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.927701] Call Trace: [ 907.927918] dump_stack+0x107/0x167 [ 907.928212] should_fail.cold+0x5/0xa [ 907.928524] _copy_from_iter_full+0x201/0xa60 [ 907.928895] raw_sendmsg+0x1d0f/0x29d0 [ 907.929220] ? dst_output+0x170/0x170 [ 907.929527] ? __lock_acquire+0x1657/0x5b00 [ 907.929883] ? perf_trace_lock+0xac/0x490 [ 907.930213] ? SOFTIRQ_verbose+0x10/0x10 [ 907.930544] ? __lockdep_reset_lock+0x180/0x180 [ 907.930929] ? selinux_socket_post_create+0x7f0/0x7f0 [ 907.931337] ? find_held_lock+0x2c/0x110 [ 907.931678] ? trace_hardirqs_on+0x5b/0x180 [ 907.932035] ? dst_output+0x170/0x170 [ 907.932351] inet_sendmsg+0x11d/0x140 [ 907.932662] ? inet_send_prepare+0x540/0x540 [ 907.933022] __sock_sendmsg+0x13c/0x190 [ 907.933352] ____sys_sendmsg+0x334/0x870 [ 907.933688] ? sock_write_iter+0x3d0/0x3d0 [ 907.934034] ? do_recvmmsg+0x6d0/0x6d0 [ 907.934354] ? perf_trace_lock+0xac/0x490 [ 907.934703] ? __lockdep_reset_lock+0x180/0x180 [ 907.935084] ? perf_trace_lock+0xac/0x490 [ 907.935425] ___sys_sendmsg+0xf3/0x170 [ 907.935746] ? sendmsg_copy_msghdr+0x160/0x160 [ 907.936118] ? lock_downgrade+0x6d0/0x6d0 [ 907.936457] ? lock_downgrade+0x6d0/0x6d0 [ 907.936794] ? __fget_files+0x296/0x4c0 [ 907.937122] ? __fget_light+0xea/0x290 [ 907.937441] __sys_sendmmsg+0x195/0x470 [ 907.937767] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 907.938115] ? lock_downgrade+0x6d0/0x6d0 [ 907.938462] ? __mutex_unlock_slowpath+0xe1/0x600 [ 907.938860] ? wait_for_completion_io+0x270/0x270 [ 907.939251] ? rcu_read_lock_any_held+0x75/0xa0 [ 907.939624] ? vfs_write+0x354/0xa70 [ 907.939924] ? fput_many+0x2f/0x1a0 [ 907.940218] ? ksys_write+0x1a9/0x260 [ 907.940525] ? __ia32_sys_read+0xb0/0xb0 [ 907.940857] __x64_sys_sendmmsg+0x99/0x100 [ 907.941203] do_syscall_64+0x33/0x40 [ 907.941507] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 907.941918] RIP: 0033:0x7f24b3ae7b19 [ 907.942221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.943690] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 907.944304] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 907.944872] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 907.945439] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 907.946005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.946578] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 907.953364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 907.981496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 07:41:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49e6ad33180243a, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c746d72000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000715e84d2964024a2acccb3a9000000000000000000000000000000007a0900000000000000000000000000000000003f6a9f137119c5e055036b9213b8f71f24d00ff5c10dc102bc9a"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5, 0x0, 0x0, 0x8000]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$dupfd(r3, 0x0, r3) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x44, &(0x7f00000007c0)="3f7623c0fd57e90000001d3cbce75250", 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000180)=0x30) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) 07:41:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 908.008567] device lo entered promiscuous mode [ 908.032905] device lo left promiscuous mode [ 908.047853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:42 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 908.063726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.136831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.263169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.264438] print_req_error: 6 callbacks suppressed [ 908.264457] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.266800] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.268361] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 908.270270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.271129] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.272738] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.274278] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 908.275994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.276963] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.278569] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.280112] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 908.281980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.282841] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.284453] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.285980] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 908.287962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.288788] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.290346] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 908.291915] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 908.293866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.294748] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 908.296501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.297343] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 908.299073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 908.299967] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 908.451607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 908.459671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 07:41:55 executing program 2: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f00000002c0)={0x15f, 0x401, 0x8, 0x80, 0x2, 0xff}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000008900000008000300806c335df852817c24cea63a2e082ff4d7b71f3b49c0621d0a55678ef882b8f446581397540de1f1e12fca985df55b", @ANYRES32, @ANYBLOB="18001d801400008005000c000100000006000500c1000000"], 0x34}}, 0x0) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f0000000900)) fchown(0xffffffffffffffff, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x200001) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x1b, 0x4, @tid=0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@delalloc}]}) 07:41:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b071cd78f679ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35074f16b7cffdc900da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d000000"], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x1) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000440)=ANY=[], 0x2f) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0x20]}, 0x8, 0x80000) r0 = fork() fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) ptrace(0x17, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=@ctrl_frame=@cf_end_cf_ack={{}, {0x7ffb}, @device_a, @broadcast}, 0x10) fork() syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@deauth={@wo_ht={{}, {0x6}, @device_a, @device_b, @random="8a720416635f", {0x0, 0x5}}, 0x3d, @val={0x8c, 0x10, {0xec4, "80152fe3a2af", @short="03bc6ae6c9151e43"}}}, 0x2c) wait4(r0, &(0x7f0000000200), 0x1000000, &(0x7f0000000480)) 07:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 921.516915] device lo entered promiscuous mode [ 921.529723] FAULT_INJECTION: forcing a failure. [ 921.529723] name failslab, interval 1, probability 0, space 0, times 0 [ 921.535971] CPU: 0 PID: 7682 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 921.537215] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 921.538671] Call Trace: [ 921.539191] dump_stack+0x107/0x167 [ 921.539842] should_fail.cold+0x5/0xa [ 921.540539] ? dst_alloc+0x9e/0x5d0 [ 921.541208] should_failslab+0x5/0x20 [ 921.541880] kmem_cache_alloc+0x5b/0x310 [ 921.542622] dst_alloc+0x9e/0x5d0 [ 921.543279] ? trace_hardirqs_on+0x5b/0x180 [ 921.544058] rt_dst_alloc+0x73/0x440 [ 921.544748] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 921.545701] ip_route_output_key_hash+0x18d/0x340 [ 921.546563] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 921.547598] ? _copy_from_iter_full+0x27c/0xa60 [ 921.548455] ip_route_output_flow+0x23/0x150 [ 921.549256] raw_sendmsg+0x930/0x29d0 [ 921.549943] ? dst_output+0x170/0x170 [ 921.550635] ? __lock_acquire+0x1657/0x5b00 [ 921.551650] ? perf_trace_lock+0xac/0x490 [ 921.552270] ? SOFTIRQ_verbose+0x10/0x10 [ 921.552868] ? __lockdep_reset_lock+0x180/0x180 [ 921.553566] ? selinux_socket_post_create+0x7f0/0x7f0 [ 921.554339] ? find_held_lock+0x2c/0x110 [ 921.554971] ? trace_hardirqs_on+0x5b/0x180 [ 921.555635] ? dst_output+0x170/0x170 [ 921.556213] inet_sendmsg+0x11d/0x140 [ 921.556775] ? inet_send_prepare+0x540/0x540 [ 921.557428] __sock_sendmsg+0x13c/0x190 [ 921.558013] ____sys_sendmsg+0x334/0x870 [ 921.558623] ? sock_write_iter+0x3d0/0x3d0 [ 921.559278] ? do_recvmmsg+0x6d0/0x6d0 [ 921.559847] ? perf_trace_lock+0xac/0x490 [ 921.560476] ? __lockdep_reset_lock+0x180/0x180 [ 921.561171] ? perf_trace_lock+0xac/0x490 [ 921.561788] ___sys_sendmsg+0xf3/0x170 [ 921.562376] ? sendmsg_copy_msghdr+0x160/0x160 [ 921.563064] ? lock_downgrade+0x6d0/0x6d0 [ 921.563703] ? lock_downgrade+0x6d0/0x6d0 [ 921.564335] ? __fget_files+0x296/0x4c0 [ 921.564931] ? __fget_light+0xea/0x290 [ 921.565524] __sys_sendmmsg+0x195/0x470 [ 921.566139] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 921.566773] ? lock_downgrade+0x6d0/0x6d0 [ 921.567443] ? __mutex_unlock_slowpath+0xe1/0x600 [ 921.568170] ? wait_for_completion_io+0x270/0x270 [ 921.568873] ? rcu_read_lock_any_held+0x75/0xa0 [ 921.569564] ? vfs_write+0x354/0xa70 [ 921.570126] ? fput_many+0x2f/0x1a0 [ 921.570668] ? ksys_write+0x1a9/0x260 [ 921.571268] ? __ia32_sys_read+0xb0/0xb0 [ 921.571880] __x64_sys_sendmmsg+0x99/0x100 [ 921.572523] do_syscall_64+0x33/0x40 [ 921.573067] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 921.573832] RIP: 0033:0x7f24b3ae7b19 [ 921.574395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 921.577119] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 921.578235] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 921.579319] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 921.580381] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 921.581112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.581432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.581445] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:41:55 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='aio\x00', 0x208001, 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x20001, 0x45) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='\x00sx/e\x00'], &(0x7f00000000c0)='\\@[\\}^.\x00', 0x8, 0x2) 07:41:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 8) 07:41:55 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="80000001000000020000001debdab932054321004c00640000812f9078ac1414bbac1414fd1d8e6475924715434b2ecbeeafd4bb4414b9816401010100000000e000000100000006070fe8e0000001ac1414bbac1414170144141711ffffffff00000006ac1414bb0c74008177264ffa89be6d276b09e219d3858073d840ac59c1eb797b7203f4338700c067ba03c5def10851f09aea9f642e5ac6c0379c0c402499a553eb5ed4c834f5a0296be90e48fc7fc82ab1d48c4f5d585574a954e59bf0b9eb312c459184cac737527215b4a6ff5cf1f70660deb94e5a7794b98d70af96bd6489af3b3109d14cd588c46f"]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84543, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x6, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x810, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r3 = syz_io_uring_complete(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x88, 0x2, 0x4, 0x0, 0x6842, 0x40080, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51354142, 0x4, @perf_bp={&(0x7f0000000000), 0xa}, 0x2040, 0xfffffffffffeffff, 0x80000000, 0x6, 0x3, 0xff, 0xa55, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x2) fallocate(r3, 0x20, 0x1f, 0x7fff) utime(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)) 07:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:55 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) [ 921.596720] device lo left promiscuous mode 07:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 921.670415] device lo entered promiscuous mode 07:41:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 921.706912] device lo left promiscuous mode 07:41:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:41:55 executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) r2 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x100000000, 0x1, &(0x7f0000000380)=[{&(0x7f0000000300)="4939ac170615ba5e8a4a605d671118295fced90687428281e8cddf1e6b5405dff60462de43eaf27a76149e9d74c64dcff67ca9659fc7f1872da7839c09500a68cbeb04bb1378fd6c05afb4fccabb08b83e055222a86b21b8e755faf1db6367fbdfdcc44f02072e8af5ad2964957e", 0x6e, 0x7}], 0x2003000, &(0x7f0000000440)={[{@uni_xlate}], [{@uid_gt={'uid>', r1}}, {@euid_eq={'euid', 0x3d, 0xee01}}]}) chmod(&(0x7f0000000480)='./file0\x00', 0x8) setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000500), 0x2, 0x1) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/96) copy_file_range(r2, &(0x7f00000006c0)=0xffffffffffffff14, r0, &(0x7f0000000700)=0x9477, 0x6, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000680)=@IORING_OP_STATX={0x15, 0x5, 0x0, r0, &(0x7f0000000540), &(0x7f0000000640)='./file0\x00', 0x1, 0x100, 0x0, {0x0, r5}}, 0xffff) [ 921.771927] device wlan1 entered promiscuous mode [ 921.791740] device lo entered promiscuous mode 07:41:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010400000000000000000000000005000000ff7f000000000000040014"], 0x24}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) r2 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) dup2(r2, r1) fallocate(r1, 0x3, 0x0, 0x30000000000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x40) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)}, {&(0x7f00000002c0)=""/146, 0x92}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}, 0x0) clock_gettime(0x0, &(0x7f00000004c0)) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000600)={{}, {r5, r6/1000+10000}}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0x6, 0x0, &(0x7f00000009c0), 0x4020, &(0x7f0000000b40)={[{@shortname_lower}, {@shortname_lower}, {@uni_xlateno}], [{@hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ']'}}, {@obj_type}]}) sendmsg$nl_generic(r0, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000003540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00g\x00', @ANYRES32=r8, @ANYBLOB="63f76042d5d44f6403bcaec08dd072c094fb4804fb9a93430b3456f5905cd2fdf058b616e6f25e366df1b70560716cd48f2c44f67fa9ceea52cd33851a13bde9381572eec247ba664dc994e22ce35a7b86c1762988876c7c8d281ef0f083e10c5847abfb85e647e2063c463a7afcaf964ea3f7ac77c6a7f7769bfe3c1f02ab70ef48d084215cece5e27dc4556ee1e764ce8eebba0c1299be02bdb2c47043f5e492edbe43c9bce85619ff946899624f7be7080019008100000000000008005800", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="000000a4010d8063d6d56f18df952dcc37923f12b5c1d29cdf3cbb150b53be0b1ba93617a9222026e1fd6fb0dcc9dbde61d31bde2cc82eb0f809dc328aa6ad17fe149726040019002a00920000272778e01caa006488c470b08960e4c64fca1d0836dddaac5142a78db70151c60f472ff90a000008004f00", @ANYRES32=r3, @ANYBLOB="f792841c1e2c8ca848368ab351f2c1f00eb45030d290709bea137b8fe5fdc9f395808f505433d31dfa42fd3be2f1907b0058065af7b1aa39b45d03491c0488a3cb92e37d513eafdc0207e4d7ea8cf4f6ecc91dd94f0214b5564377b8b8c227e7870e71e83858eab048dfdd66f1745c30d43963b77ea6baff8a86467512d07938485290a3602b62673d297dd5ad34f12be3c133214a134b6e0d7ca79495fb5e4f5b914ab8b0f259b68b0761170b02764d5a570312ca4024bb05296917d803e8170266b199bd104f474e059e04ad48f5e9a6109f57c87a396d6de32a96ce4ed4f22ef09b4f0d68393e3c25ceea6dc39aa2f8fac69a3ab9a8c5ad4c0d21f8da2aa687046f84872b4870308eb2d24b8161b862c0be4051e9a5b84d098bc25f799a48c14ae59cc99fb194ee62db0b25ea5732f7eff3ecca8594faa0246b80cf4b25078aca15b31fb14370ff74572269a7239548d5b0c71f1ca6f6a888183f21b378d28d6ceb8fe244ba7c67efd9665410c6fb911473d95bbdfded8cf9825976ea0b2117736bbf1db18321660720ace6e3121a8c49a78e87355d5700a23ca40ec0136817304aabff48fd68c5b2ac558c32e5cee0a8a3609b89a9f7b0643d229aba73d64a190e73b1606326de8c5a0eb5ef2ed34cbfbc72ccb12b8bbaef32054d032e9ee9524d0211f6ce608ee7a8f0c2382e4a2308003e00000000000000"], 0x16f0}, 0x1, 0x0, 0x0, 0x8000}, 0x24040051) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/254, 0xfe}], 0x1, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000105) io_setup(0x3e3, &(0x7f0000000580)=0x0) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r7, 0x0}]) 07:41:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:41:55 executing program 6: r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000080)=""/209) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="b7460f2921a88a86978990f8cbc381a11a984ed723c8c88a5bba2cf0c73d31734c90307e87744698a9996a51e1b79efab048d7370035733f", 0x38, 0x4000004, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @local, 0x665a}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) [ 921.821008] device lo left promiscuous mode [ 921.845897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.855785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.856635] print_req_error: 6 callbacks suppressed [ 921.856654] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.858986] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.860529] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 921.868223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.873032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.873874] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.875610] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.877152] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 921.878670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.879525] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.881090] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.882645] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 921.913200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.914496] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.916094] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.916154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.917002] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 921.917807] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.919916] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 921.919981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.920768] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 921.921672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.922142] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 921.923019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.923520] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 921.924890] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 921.941234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 921.981023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.981939] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 921.982000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.983492] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 921.983565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.985045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.986025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.986956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.987891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 921.988830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:42:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000400)=ANY=[@ANYBLOB="00fb2a0305e90a778c76633ed225f974ca1500fbf19f0d9ee601aec500000080ef2d82c109005c738a2a"], 0x2a, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000000c0)={'veth1_virt_wifi\x00'}) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfd, 0x3, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) fallocate(r3, 0x2, 0x2, 0x6985) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0xfffff4b7, 0xb6, 0x401]}, &(0x7f00000001c0)=0x44) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) close_range(0xffffffffffffffff, r4, 0x2) timerfd_create(0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020229bd70006a28b94b94ff52aedffffffffffff701110000000800a10004000000"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) open_tree(r1, &(0x7f0000000100)='./file1\x00', 0x100) timerfd_create(0x0, 0x0) unshare(0x48020200) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r6, &(0x7f0000000000), 0x1b4000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x3b, @remote, 0x4e23, 0x4, 'ovf\x00', 0x18, 0x8, 0xe}, 0x2c) 07:42:10 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa300, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40005}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x5, 0xfffffff7, 0x0, 0x8, 0xff, 0x100000000}, {0xfff, 0x2, 0x37, 0x8001, 0x9, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd_index=0x6}, 0x0) open(0x0, 0x0, 0x80) write(r2, &(0x7f0000000240)="01", 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) 07:42:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 9) 07:42:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:42:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "6d0008004eff0000000001000000008000"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) pread64(r0, &(0x7f0000000240)=""/186, 0xba, 0x0) r1 = io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1cf}) r2 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) syz_io_uring_setup(0x677b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x8a) 07:42:10 executing program 4: shmctl$SHM_LOCK(0x0, 0xb) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/246) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget(0x1, 0x4000, 0x1, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/146) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffb000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/44) r2 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffa000/0x1000)=nil) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x5000) r3 = shmget(0x3, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x8000) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000200)=""/162) r4 = shmget(0x3, 0x2000, 0x800, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000002c0)=""/4096) r5 = shmget(0x1, 0x4000, 0x9935e199d42ebd5d, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0xa000) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000012c0)=""/193) [ 936.486543] device lo entered promiscuous mode [ 936.494629] device lo left promiscuous mode 07:42:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @dev}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 936.527168] FAULT_INJECTION: forcing a failure. [ 936.527168] name failslab, interval 1, probability 0, space 0, times 0 [ 936.528172] CPU: 1 PID: 7748 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 936.528712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 936.529374] Call Trace: [ 936.529592] dump_stack+0x107/0x167 [ 936.529885] should_fail.cold+0x5/0xa [ 936.530195] ? create_object.isra.0+0x3a/0xa20 [ 936.530571] should_failslab+0x5/0x20 [ 936.530874] kmem_cache_alloc+0x5b/0x310 [ 936.531217] ? lock_acquire+0x197/0x470 [ 936.531541] create_object.isra.0+0x3a/0xa20 [ 936.531892] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 936.532299] kmem_cache_alloc+0x159/0x310 [ 936.532635] dst_alloc+0x9e/0x5d0 [ 936.532915] ? trace_hardirqs_on+0x5b/0x180 [ 936.533262] rt_dst_alloc+0x73/0x440 [ 936.533565] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 936.533983] ip_route_output_key_hash+0x18d/0x340 [ 936.534367] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 936.534813] ? _copy_from_iter_full+0x27c/0xa60 [ 936.535201] ip_route_output_flow+0x23/0x150 [ 936.535556] raw_sendmsg+0x930/0x29d0 [ 936.535876] ? dst_output+0x170/0x170 [ 936.536182] ? __lock_acquire+0x1657/0x5b00 [ 936.536539] ? perf_trace_lock+0xac/0x490 [ 936.536870] ? SOFTIRQ_verbose+0x10/0x10 [ 936.537198] ? __lockdep_reset_lock+0x180/0x180 [ 936.537585] ? selinux_socket_post_create+0x7f0/0x7f0 [ 936.537997] ? find_held_lock+0x2c/0x110 [ 936.538328] ? trace_hardirqs_on+0x5b/0x180 [ 936.538672] ? dst_output+0x170/0x170 [ 936.538981] inet_sendmsg+0x11d/0x140 [ 936.539291] ? inet_send_prepare+0x540/0x540 [ 936.539643] __sock_sendmsg+0x13c/0x190 [ 936.539960] ____sys_sendmsg+0x334/0x870 [ 936.540286] ? sock_write_iter+0x3d0/0x3d0 [ 936.540621] ? do_recvmmsg+0x6d0/0x6d0 [ 936.540932] ? perf_trace_lock+0xac/0x490 [ 936.541265] ? __lockdep_reset_lock+0x180/0x180 [ 936.541631] ? perf_trace_lock+0xac/0x490 [ 936.541967] ___sys_sendmsg+0xf3/0x170 [ 936.542277] ? sendmsg_copy_msghdr+0x160/0x160 [ 936.542649] ? lock_downgrade+0x6d0/0x6d0 [ 936.542985] ? lock_downgrade+0x6d0/0x6d0 [ 936.543335] ? __fget_files+0x296/0x4c0 [ 936.543659] ? __fget_light+0xea/0x290 [ 936.543979] __sys_sendmmsg+0x195/0x470 [ 936.544298] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 936.544651] ? lock_downgrade+0x6d0/0x6d0 [ 936.544996] ? __mutex_unlock_slowpath+0xe1/0x600 [ 936.545383] ? wait_for_completion_io+0x270/0x270 [ 936.545768] ? rcu_read_lock_any_held+0x75/0xa0 [ 936.546140] ? vfs_write+0x354/0xa70 [ 936.546443] ? fput_many+0x2f/0x1a0 [ 936.546732] ? ksys_write+0x1a9/0x260 [ 936.547051] ? __ia32_sys_read+0xb0/0xb0 [ 936.547379] __x64_sys_sendmmsg+0x99/0x100 [ 936.547719] do_syscall_64+0x33/0x40 [ 936.548018] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 936.548422] RIP: 0033:0x7f24b3ae7b19 [ 936.548722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 936.550172] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 936.550775] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 936.551338] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 936.551899] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.552458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.553019] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:42:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 4: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x3, 0x1, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match', 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r5, &(0x7f0000000000), 0x1b4000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0/file0\x00'}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(r4, 0x0, r6, 0x0, 0xa1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0xd8, 0x6, 0x2, 0x2, 0x0, 0xffffffff00000000, 0x13840, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000140)}, 0x105, 0x8, 0x1, 0x1, 0x7bd, 0x1, 0x101, 0x0, 0x4, 0x0, 0x2}) ioctl$FIONREAD(r3, 0x6801, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) unshare(0x48020200) [ 936.641584] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 07:42:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 936.693582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.694465] print_req_error: 22 callbacks suppressed [ 936.694484] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.696844] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.696903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.697750] buffer_io_error: 6 callbacks suppressed [ 936.697789] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 936.698551] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.701583] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.701656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.702464] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 936.703273] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.705471] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.705612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.706328] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 936.707329] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.709308] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.709412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.710272] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 936.710959] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.713111] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 936.713178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.713968] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 936.715979] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 936.716044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.717460] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 936.717559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 936.718931] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:42:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:10 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000030000000000000000", @ANYRES32=r3, @ANYBLOB="080026006c09000008002700000000000800a00000000000"], 0x34}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000140)=[r0, r1, r4], 0x3, 0x0, 0x1}, 0x9) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xc) fcntl$setlease(r0, 0x400, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xc0500, 0x80, 0x11}, 0x18) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e24, 0xe7, @mcast2, 0x4}, 0x1c) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r6, &(0x7f0000000000), 0x1b4000) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f00000000c0)=0x6, 0x4) [ 936.774136] device veth0_vlan entered promiscuous mode [ 936.792298] device lo entered promiscuous mode 07:42:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 936.861326] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 936.904138] device lo left promiscuous mode 07:42:11 executing program 2: mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2c932, 0xffffffffffffffff, 0x10000000) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000ff7000/0x1000)=nil) syz_io_uring_setup(0x401, &(0x7f0000000080), &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 07:42:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 10) 07:42:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x42, 0x5, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x50}}, 0x0) syz_io_uring_setup(0xb06, &(0x7f0000000080)={0x0, 0x4336, 0x2, 0x3, 0x233}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffffff) 07:42:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r9, 0x3, 0x6}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 937.028070] FAULT_INJECTION: forcing a failure. [ 937.028070] name failslab, interval 1, probability 0, space 0, times 0 [ 937.029259] CPU: 1 PID: 7791 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 937.029805] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.030474] Call Trace: [ 937.030695] dump_stack+0x107/0x167 [ 937.030996] should_fail.cold+0x5/0xa [ 937.031327] ? __alloc_skb+0x6d/0x5b0 [ 937.031643] should_failslab+0x5/0x20 [ 937.031954] kmem_cache_alloc_node+0x55/0x330 [ 937.032318] __alloc_skb+0x6d/0x5b0 [ 937.032616] __ip_append_data+0x2930/0x3310 [ 937.032970] ? lock_chain_count+0x20/0x20 [ 937.033305] ? raw_destroy+0x30/0x30 [ 937.033613] ? ip_finish_output+0x330/0x330 [ 937.033962] ? lock_release+0x680/0x680 [ 937.034281] ? ipv4_mtu+0x1ed/0x2c0 [ 937.034574] ? raw_destroy+0x30/0x30 [ 937.034871] ip_append_data+0x114/0x1a0 [ 937.035207] raw_sendmsg+0xaa6/0x29d0 [ 937.035527] ? dst_output+0x170/0x170 [ 937.035830] ? __lock_acquire+0x1657/0x5b00 [ 937.036181] ? perf_trace_lock+0xac/0x490 [ 937.036513] ? SOFTIRQ_verbose+0x10/0x10 [ 937.036841] ? __lockdep_reset_lock+0x180/0x180 [ 937.037220] ? selinux_socket_post_create+0x7f0/0x7f0 [ 937.037635] ? find_held_lock+0x2c/0x110 [ 937.037977] ? trace_hardirqs_on+0x5b/0x180 [ 937.038320] ? dst_output+0x170/0x170 [ 937.038624] inet_sendmsg+0x11d/0x140 [ 937.038926] ? inet_send_prepare+0x540/0x540 [ 937.039283] __sock_sendmsg+0x13c/0x190 [ 937.039600] ____sys_sendmsg+0x334/0x870 [ 937.039927] ? sock_write_iter+0x3d0/0x3d0 [ 937.040260] ? do_recvmmsg+0x6d0/0x6d0 [ 937.040569] ? perf_trace_lock+0xac/0x490 [ 937.040913] ? __lockdep_reset_lock+0x180/0x180 [ 937.041280] ? perf_trace_lock+0xac/0x490 [ 937.041616] ___sys_sendmsg+0xf3/0x170 [ 937.041931] ? sendmsg_copy_msghdr+0x160/0x160 [ 937.042298] ? lock_downgrade+0x6d0/0x6d0 [ 937.042632] ? lock_downgrade+0x6d0/0x6d0 [ 937.042971] ? __fget_files+0x296/0x4c0 [ 937.043303] ? __fget_light+0xea/0x290 [ 937.043617] __sys_sendmmsg+0x195/0x470 [ 937.043942] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 937.044284] ? lock_downgrade+0x6d0/0x6d0 [ 937.044627] ? __mutex_unlock_slowpath+0xe1/0x600 [ 937.045008] ? wait_for_completion_io+0x270/0x270 [ 937.045399] ? rcu_read_lock_any_held+0x75/0xa0 [ 937.045767] ? vfs_write+0x354/0xa70 [ 937.046068] ? fput_many+0x2f/0x1a0 [ 937.046357] ? ksys_write+0x1a9/0x260 [ 937.046663] ? __ia32_sys_read+0xb0/0xb0 [ 937.046993] __x64_sys_sendmmsg+0x99/0x100 [ 937.047337] do_syscall_64+0x33/0x40 [ 937.047637] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 937.048047] RIP: 0033:0x7f24b3ae7b19 [ 937.048340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.049791] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 937.050404] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 937.050973] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 937.051549] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.052112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.052678] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 937.076434] device veth0_vlan entered promiscuous mode [ 937.149609] device lo entered promiscuous mode [ 937.174709] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 937.176677] device lo left promiscuous mode 07:42:11 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000002600)=""/4112, 0x1010}], 0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400f026fa0000000000000000000000004234735166f98c18141d", @ANYRES16=r3, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="080026006c09000008002700000000000800a00000000000"], 0x34}}, 0x0) preadv2(r0, &(0x7f0000000140), 0x0, 0x7f, 0x101, 0x11) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, r2, 0xe2767000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="24020000", @ANYRES16=r5, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="080026006c09000008002700000000000800a60000000000"], 0x34}}, 0x0) dup2(r0, r1) 07:42:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:11 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000340)={0x7, 0xc1, 0x61, 0x3, 0x5, 0x8}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c63616368653d6d6d61702c63616368653d6e6f6e652c736d83636b6673666c6f6f723d3a2c7365636c6162656c2c00"]) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) syz_io_uring_setup(0x3560, &(0x7f00000001c0)={0x0, 0x3, 0x2, 0x2, 0x3a3, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000002c0)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x0, {0x0, r5}}, 0x40) r6 = fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r2, 0x0, 0x70) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYBLOB="1d0001"], 0x340}}, 0x0) fcntl$setown(r2, 0x8, r6) 07:42:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 11) [ 937.225739] 9pnet: Insufficient options for proto=fd [ 937.255688] FAULT_INJECTION: forcing a failure. [ 937.255688] name failslab, interval 1, probability 0, space 0, times 0 [ 937.257646] CPU: 0 PID: 7806 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 937.258640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.259857] Call Trace: [ 937.260263] dump_stack+0x107/0x167 [ 937.260795] should_fail.cold+0x5/0xa [ 937.261354] ? create_object.isra.0+0x3a/0xa20 [ 937.262017] should_failslab+0x5/0x20 [ 937.262575] kmem_cache_alloc+0x5b/0x310 [ 937.263178] create_object.isra.0+0x3a/0xa20 [ 937.263837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 937.264575] kmem_cache_alloc_node+0x169/0x330 [ 937.265265] __alloc_skb+0x6d/0x5b0 [ 937.265815] __ip_append_data+0x2930/0x3310 [ 937.266460] ? lock_chain_count+0x20/0x20 [ 937.267071] ? raw_destroy+0x30/0x30 [ 937.267448] 9pnet: Insufficient options for proto=fd [ 937.267647] ? ip_finish_output+0x330/0x330 [ 937.268680] ? lock_release+0x680/0x680 [ 937.269255] ? ipv4_mtu+0x1ed/0x2c0 [ 937.269795] ? raw_destroy+0x30/0x30 [ 937.270337] ip_append_data+0x114/0x1a0 [ 937.270929] raw_sendmsg+0xaa6/0x29d0 [ 937.271511] ? dst_output+0x170/0x170 [ 937.272061] ? __lock_acquire+0x1657/0x5b00 [ 937.272709] ? perf_trace_lock+0xac/0x490 [ 937.273309] ? SOFTIRQ_verbose+0x10/0x10 [ 937.273916] ? __lockdep_reset_lock+0x180/0x180 [ 937.274609] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 937.275393] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 937.276328] ? trace_hardirqs_on+0x5b/0x180 [ 937.276952] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 937.277756] ? inet_sendmsg+0x4a/0x140 [ 937.278315] ? inet_sendmsg+0x53/0x140 [ 937.278875] ? dst_output+0x170/0x170 [ 937.279447] inet_sendmsg+0x11d/0x140 [ 937.279997] ? inet_send_prepare+0x540/0x540 [ 937.280630] __sock_sendmsg+0x13c/0x190 [ 937.281202] ____sys_sendmsg+0x334/0x870 [ 937.281794] ? sock_write_iter+0x3d0/0x3d0 [ 937.282400] ? do_recvmmsg+0x6d0/0x6d0 [ 937.282961] ? perf_trace_lock+0xac/0x490 [ 937.283591] ? __lockdep_reset_lock+0x180/0x180 [ 937.284258] ? perf_trace_lock+0xac/0x490 [ 937.284866] ___sys_sendmsg+0xf3/0x170 [ 937.285431] ? sendmsg_copy_msghdr+0x160/0x160 [ 937.286094] ? lock_downgrade+0x6d0/0x6d0 [ 937.286706] ? lock_downgrade+0x6d0/0x6d0 [ 937.287320] ? __fget_files+0x296/0x4c0 [ 937.287914] ? __fget_light+0xea/0x290 [ 937.288487] __sys_sendmmsg+0x195/0x470 [ 937.289067] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 937.289691] ? lock_downgrade+0x6d0/0x6d0 [ 937.290313] ? __mutex_unlock_slowpath+0xe1/0x600 [ 937.291022] ? wait_for_completion_io+0x270/0x270 [ 937.291729] ? rcu_read_lock_any_held+0x75/0xa0 [ 937.292399] ? vfs_write+0x354/0xa70 [ 937.292936] ? fput_many+0x2f/0x1a0 [ 937.293465] ? ksys_write+0x1a9/0x260 [ 937.294016] ? __ia32_sys_read+0xb0/0xb0 [ 937.294612] __x64_sys_sendmmsg+0x99/0x100 [ 937.295234] do_syscall_64+0x33/0x40 [ 937.295771] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 937.296505] RIP: 0033:0x7f24b3ae7b19 [ 937.297040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 937.299659] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 937.300749] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 937.301768] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 937.302787] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.303814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 937.304836] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 937.452484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.453044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.453560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.454035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.454541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.455025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.455520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.456003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 937.456483] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 937.457095] Buffer I/O error on dev loop4, logical block 2096897, async page read 07:42:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8c0ff97db7ad35c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r1 = syz_io_uring_setup(0x457f, &(0x7f00000000c0)={0x0, 0x58c9, 0x2, 0x3, 0x8b}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = inotify_init1(0x0) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x182) inotify_rm_watch(r5, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r6, 0x0, &(0x7f0000001600)={&(0x7f00000002c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/218, 0xda}, {&(0x7f0000001440)=""/150, 0x96}], 0x3, &(0x7f0000001640)=""/242, 0xf2}, 0x0, 0x100, 0x0, {0x2, r7}}, 0x7) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x20010, r1, 0x10000000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f00000001c0)={0x0, 0x1319}) syz_io_uring_submit(r2, r8, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3ff, 0x8, 0x0, {0x0, r4, r9}}, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) 07:42:24 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x505103, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x41}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000008c0)={&(0x7f0000000240)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x404c008) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r2, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r3, &(0x7f0000000840)=[{&(0x7f0000000400)=""/180, 0xb4}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000a00)=""/236, 0xec}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000340), &(0x7f0000000200)='./file0/file1/file0\x00', 0x0, 0x0, 0x0, 0x100800, &(0x7f0000001c00)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="1bfdfbc8a3d0e6aed8cfb9f3a19ad296c8f30ad61980e2de2cff10fc43f274fe5fe7fb541dfa4268cb97b5d9e4e4429744fbeb0b027c648cefb35b8bb28c25c4318334a46becddb40b3370deb34c1db41a9536f9bf5e32d73177283c0f790b7f0c8e9c53b45ac0e3eea1d3d48c83fda3c3f505d7d7fd3f9c2f2172538c2d972cc633a7ffbef6af4920d8d2d919210c65ad95077ac8f67ad74503efcd1d93a8970a30cf22a772a817a317f7fc4e47dc9c98f9e138c242ff071f0907f6d2b2b8490ad915c21b5cb6e19ed3caf14a53eada7e", @ANYRESDEC]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)) mkdir(&(0x7f0000000600)='./file0/file1\x00', 0x10) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x2013c1a, 0x0) waitid$P_PIDFD(0x3, r3, &(0x7f0000000900), 0x8, &(0x7f0000000b00)) 07:42:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:42:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:24 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x400000000000005e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) pkey_alloc(0x0, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) get_mempolicy(&(0x7f0000000140), &(0x7f0000000180), 0x3, &(0x7f0000ffa000/0x4000)=nil, 0x5) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x9bbb) clone3(&(0x7f00000003c0)={0x8040100, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240), {0x3b}, &(0x7f0000000280)=""/176, 0xb0, &(0x7f0000000340)=""/42, &(0x7f0000000380)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000ff01000047ffffffffffffff04000000aebf0000030000000000000009000000000000000100000000000000050000000400000000000000000000000000000000000000080400000000000000000000000000001e4300000000000001000000000000000800000000000000000000000000000000000000000000008418000000000000000000000000000000020000000000000600000000000000900000cf00000000000000000000000000001e0000000000008226020000000000000000000000000018a602000000d9529e5c7b9446414a6d0ba8c43366dc79d401d43692927d39a8bd0afd09e11c39af2f3f70a79bceb4eaebed44bda5f1550d1a20375a0626a2df80fa5197d413a69480d0e30861d6b462bac7c4a1a033a5e970e134edc417257368a9f3a1b2bf69e5f3e1856918c65e6adfc23756efbd15b9823cd9d6e5e682c0434147d02546051e1c0c034f939a4c46ba7c080cc5cf99eee7657e47c8e9e8f7850fdb43d1a8650ef071cc20c106dadf058707fd2dcf23dbe3d3ed6d276124bb5c3b51c63724aa5d24954778794f7a73f0d7eab07b83bd2d0b1e9cb0d87a27bf334b98e0a579ac3c8638b472962e754219c00ab34e8733419ea47ac9d8bb240cee3c561df138e03ab6aa8c5667a2513557cc5db1a0493a98d66168e513e0c0c5022cd51fc1b9201d05f9a7f7da2b1583fe0067d957327fd1539f3076b1d023cc9076f985a1e9081a3d8ba4335671525aa4308bd73e74e2b26520aa4b805d772e319dee04dfa66d1d13e5022c5c8df85bd553fabe2b0c03807582eaec20085fc82451bae260ab376c5fa0598482b84433505e89b3aad85407acca9dff4c73fa152a2b50d4d9b734196b4af8bdc20252"]) mmap$usbmon(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x13, 0xffffffffffffffff, 0x0) 07:42:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 12) [ 950.619025] FAULT_INJECTION: forcing a failure. [ 950.619025] name failslab, interval 1, probability 0, space 0, times 0 [ 950.620119] CPU: 1 PID: 7827 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 950.620661] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.621319] Call Trace: [ 950.621541] dump_stack+0x107/0x167 [ 950.621835] should_fail.cold+0x5/0xa [ 950.622147] should_failslab+0x5/0x20 [ 950.622454] __kmalloc_node_track_caller+0x74/0x3b0 [ 950.622857] ? __ip_append_data+0x2930/0x3310 [ 950.623227] __alloc_skb+0xb1/0x5b0 [ 950.623523] __ip_append_data+0x2930/0x3310 [ 950.623879] ? lock_chain_count+0x20/0x20 [ 950.624216] ? raw_destroy+0x30/0x30 [ 950.624524] ? ip_finish_output+0x330/0x330 [ 950.624873] ? lock_release+0x680/0x680 07:42:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 950.625193] ? ipv4_mtu+0x1ed/0x2c0 [ 950.625677] ? raw_destroy+0x30/0x30 [ 950.625975] ip_append_data+0x114/0x1a0 [ 950.626299] raw_sendmsg+0xaa6/0x29d0 [ 950.626616] ? dst_output+0x170/0x170 [ 950.626918] ? __lock_acquire+0x1657/0x5b00 [ 950.627282] ? perf_trace_lock+0xac/0x490 [ 950.627612] ? SOFTIRQ_verbose+0x10/0x10 [ 950.627939] ? __lockdep_reset_lock+0x180/0x180 [ 950.628325] ? selinux_socket_post_create+0x7f0/0x7f0 [ 950.628735] ? find_held_lock+0x2c/0x110 [ 950.629068] ? trace_hardirqs_on+0x5b/0x180 [ 950.629413] ? dst_output+0x170/0x170 [ 950.629720] inet_sendmsg+0x11d/0x140 [ 950.629752] device lo entered promiscuous mode [ 950.630023] ? inet_send_prepare+0x540/0x540 [ 950.630045] __sock_sendmsg+0x13c/0x190 [ 950.631538] ____sys_sendmsg+0x334/0x870 [ 950.631867] ? sock_write_iter+0x3d0/0x3d0 [ 950.632204] ? do_recvmmsg+0x6d0/0x6d0 [ 950.632514] ? perf_trace_lock+0xac/0x490 [ 950.632851] ? __lockdep_reset_lock+0x180/0x180 [ 950.633223] ? perf_trace_lock+0xac/0x490 [ 950.633558] ___sys_sendmsg+0xf3/0x170 [ 950.633868] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.634235] ? lock_downgrade+0x6d0/0x6d0 [ 950.634569] ? lock_downgrade+0x6d0/0x6d0 [ 950.634906] ? __fget_files+0x296/0x4c0 [ 950.635237] ? __fget_light+0xea/0x290 [ 950.635351] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 950.635561] __sys_sendmmsg+0x195/0x470 [ 950.637144] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 950.637494] ? lock_downgrade+0x6d0/0x6d0 [ 950.637841] ? __mutex_unlock_slowpath+0xe1/0x600 [ 950.638232] ? wait_for_completion_io+0x270/0x270 [ 950.638617] ? rcu_read_lock_any_held+0x75/0xa0 [ 950.638986] ? vfs_write+0x354/0xa70 [ 950.639288] ? fput_many+0x2f/0x1a0 [ 950.639584] ? ksys_write+0x1a9/0x260 [ 950.639890] ? __ia32_sys_read+0xb0/0xb0 [ 950.640222] __x64_sys_sendmmsg+0x99/0x100 [ 950.640573] do_syscall_64+0x33/0x40 [ 950.640875] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 950.641286] RIP: 0033:0x7f24b3ae7b19 [ 950.641588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.643032] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 950.643643] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 950.644203] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 950.644763] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.644887] device lo left promiscuous mode [ 950.645329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.645336] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:42:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00"/35, @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:24 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 13) 07:42:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fstatfs(r0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x2b2b, 0x8000040, 0x2, 0x4, 0x5, "60100d0010006319000000f9ff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0xffffe8ba) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) dup3(r3, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x101300) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, r0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'batadv_slave_0\x00'}) dup3(r2, r1, 0x0) [ 950.760959] FAULT_INJECTION: forcing a failure. 07:42:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 950.760959] name failslab, interval 1, probability 0, space 0, times 0 [ 950.762278] CPU: 1 PID: 7841 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 950.762817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.763482] Call Trace: [ 950.763699] dump_stack+0x107/0x167 [ 950.763999] should_fail.cold+0x5/0xa [ 950.764305] ? create_object.isra.0+0x3a/0xa20 [ 950.764671] should_failslab+0x5/0x20 [ 950.764973] kmem_cache_alloc+0x5b/0x310 [ 950.765303] create_object.isra.0+0x3a/0xa20 [ 950.765654] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 950.766062] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 950.766464] ? __ip_append_data+0x2930/0x3310 07:42:24 executing program 4: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) eventfd(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x50004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x5, 0x7ff, 0x1000}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000440)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r2 = syz_io_uring_setup(0x3157, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="090600dc80d5b5bf389600000000000000000004b900000400000000", @ANYRES32=0x0, @ANYBLOB], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028000000000000000700000005003500ea00000008000200", @ANYRES32=0x0, @ANYBLOB="05003500070000000500330080000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r3, 0x0) [ 950.766836] __alloc_skb+0xb1/0x5b0 [ 950.767262] __ip_append_data+0x2930/0x3310 [ 950.767644] ? lock_chain_count+0x20/0x20 [ 950.767979] ? raw_destroy+0x30/0x30 [ 950.768284] ? ip_finish_output+0x330/0x330 [ 950.768629] ? lock_release+0x680/0x680 [ 950.768944] ? ipv4_mtu+0x1ed/0x2c0 [ 950.769239] ? raw_destroy+0x30/0x30 [ 950.769536] ip_append_data+0x114/0x1a0 [ 950.769859] raw_sendmsg+0xaa6/0x29d0 [ 950.770171] ? dst_output+0x170/0x170 [ 950.770472] ? __lock_acquire+0x1657/0x5b00 [ 950.770824] ? perf_trace_lock+0xac/0x490 [ 950.771152] ? SOFTIRQ_verbose+0x10/0x10 [ 950.771483] ? __lockdep_reset_lock+0x180/0x180 [ 950.771856] ? selinux_socket_post_create+0x7f0/0x7f0 [ 950.772263] ? find_held_lock+0x2c/0x110 [ 950.772599] ? trace_hardirqs_on+0x5b/0x180 [ 950.772942] ? dst_output+0x170/0x170 [ 950.773249] inet_sendmsg+0x11d/0x140 [ 950.773553] ? inet_send_prepare+0x540/0x540 [ 950.773903] __sock_sendmsg+0x13c/0x190 [ 950.774217] ____sys_sendmsg+0x334/0x870 [ 950.774542] ? sock_write_iter+0x3d0/0x3d0 [ 950.774877] ? do_recvmmsg+0x6d0/0x6d0 [ 950.775194] ? perf_trace_lock+0xac/0x490 [ 950.775524] ? lock_downgrade+0x6d0/0x6d0 [ 950.775857] ? __lockdep_reset_lock+0x180/0x180 [ 950.776228] ___sys_sendmsg+0xf3/0x170 [ 950.776538] ? sendmsg_copy_msghdr+0x160/0x160 [ 950.776902] ? lock_downgrade+0x6d0/0x6d0 [ 950.777242] ? __fget_files+0x296/0x4c0 [ 950.777568] ? __fget_light+0xea/0x290 [ 950.777883] __sys_sendmmsg+0x195/0x470 [ 950.778202] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 950.778562] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 950.778908] ? clockevents_program_event+0x131/0x360 [ 950.779329] ? tick_program_event+0xa8/0x140 [ 950.779682] ? hrtimer_interrupt+0x771/0x9b0 [ 950.780043] __x64_sys_sendmmsg+0x99/0x100 [ 950.780384] do_syscall_64+0x33/0x40 [ 950.780679] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 950.781080] RIP: 0033:0x7f24b3ae7b19 [ 950.781378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.782809] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 950.783420] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 950.783981] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 950.784533] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 950.785090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 950.785645] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:42:24 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 950.815320] device lo entered promiscuous mode [ 950.834340] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 950.844254] device lo left promiscuous mode [ 950.887940] audit: type=1326 audit(1712648545.042:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.892697] audit: type=1326 audit(1712648545.047:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.916774] audit: type=1326 audit(1712648545.069:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.927554] audit: type=1326 audit(1712648545.069:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.941053] audit: type=1326 audit(1712648545.069:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.956649] audit: type=1326 audit(1712648545.069:135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.970498] audit: type=1326 audit(1712648545.070:136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.979239] audit: type=1326 audit(1712648545.070:137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 950.986737] audit: type=1326 audit(1712648545.088:138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 951.028271] audit: type=1326 audit(1712648545.182:139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7845 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2dd46eb19 code=0x7ffc0000 [ 951.099966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.100493] print_req_error: 22 callbacks suppressed [ 951.100505] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.101798] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.101809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.101833] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.103406] buffer_io_error: 6 callbacks suppressed [ 951.103419] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 951.103850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.105404] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.105681] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.106761] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 951.107225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.108743] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.109522] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.110618] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 951.111071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.114364] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.115286] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.115478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.116848] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 951.117245] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 951.118376] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 951.119201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.120269] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 951.120711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.128416] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 951.129587] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 951.373791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.374407] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 951.374524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.376102] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 951.376125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.377773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.378272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.378797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.379312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.379832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.505527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.506516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.507440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.508341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.509240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.510168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.511096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 951.512033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:42:38 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xfe}}]}, 0x1c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa4, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x5000}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x1, 0x1f}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) 07:42:38 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x644e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, r0, 0x10000000) pkey_mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x6, 0xffffffffffffffff) 07:42:38 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x400801, 0x2) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21000, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x0, 0x0, 0x2044034, &(0x7f00000003c0)={[{@journal_async_commit}], [{@euid_lt={'euid<', r1}}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000200)="c0fa8481e4c41f8684007fd92007fc42c67bacbfa40ac40eea4225bc3b2671fb8602bd9143b5e9ce94bdfd65848f0aa3276e9c7dbad0d5188d3f8c52b4a9f5868a83389d465fbe310e2640", 0x4b}, {&(0x7f0000000300)="e3bfed40d92817027cadf8332f66ab7c8dd1a2a48d0f93870acc61a8035a1284fff851d92ebdba4977b16f49de93ee0a3f06e5e57f5364f9edd9bc6dfb7840cc077fa8d0d64822e218b963396432de", 0x4f}], 0x2) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='pstore\x00', 0x1000000, &(0x7f0000000180)='ext3\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @dev}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @dev}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fcdbdf2506000000280001800800030001000000080003000000000014000200677265300000000000000000000000004000018014000200776c616e3100000000000000000000001400020073797a6b616c6c657230000000000000140002006e6574706369300000000000000000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d7930000000000000000000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000007000018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300020000001400020076657468315f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="682116c146a81efb006fa757e4a55067c460e806e3964a37e29445c152665dbfa1e037944b74e6cd9627bba34d750991570699a36f818fa5e10b6a14d430ce0d05f4baed3645b177f910804e8f5c3b1bd7d5239fa23c45521e64288f44d96c01689c6f2e5e430efa63d5adaf8f9a4606270e4ac7cbdbff260c18daf4d4d2dd8e9eac2f7b89d7cef9bf792a2ed6ea6d864558c5dd4298748d22a2cb7a7009f2f2601ffafdb3a0451d387f555563f48e340eff", @ANYRES32=r5, @ANYBLOB="140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x14c}, 0x1, 0x0, 0x0, 0x8021}, 0x24048047) 07:42:38 executing program 7: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0xd6, 0x7, 0x0, 0x81, 0x5, 0x2, 0x3, 0xdcb6, 0x19d, 0x40, 0x39b, 0x10001, 0x3, 0x38, 0x2, 0x9, 0x3, 0x100}, [{0x5, 0x5, 0x98, 0x5, 0x1, 0x2, 0x1, 0x3}], "e6df8044c5d7bdda3a79227188b8f7abe8bf3655f8bf9fe4bd33e8e28c9a9cc49e2be1622f438a642e0add7cd6fbaad25722c6abddfa475ffea8b67dee7782bb205b914f588a8bd76d42f6742fafb526b1d4d5e035f7a206827a322d79b69a92cca2084a1e701914a7e61d1b1b830148724676c96da1378a2e0ca7899644ff89", ['\x00', '\x00']}, 0x2f8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000300)={0x0, 0x1000, 0x1, [0x3, 0x4, 0x1, 0x9d, 0x24a6], [0x5, 0x9, 0x6, 0x3c92, 0x7fffffff, 0x3f, 0x4000000000000000, 0x1f, 0x0, 0x3f, 0x1, 0x10000, 0x1, 0x71d6, 0x0, 0x3f, 0x0, 0x8, 0xfffffffffffffffb, 0x0, 0x400, 0x10000, 0xfff, 0xfff, 0x10001, 0x6, 0x7, 0x2, 0x9, 0x7d0, 0x82, 0x8, 0x8, 0x2, 0x5, 0x2, 0x5, 0xffffffffffff0001, 0xfff, 0x134, 0x8, 0x3, 0x100, 0x9, 0xb887, 0x28fb, 0x1, 0x81, 0xffffffff, 0xffff, 0x219, 0x718e, 0x1f, 0x1, 0x4, 0x101, 0x2, 0x7207, 0x9, 0x3, 0x5, 0x81, 0x7fff, 0x80000001, 0x7, 0x8, 0x6, 0x0, 0x5, 0x7fff, 0x4, 0xff, 0x4f, 0x8, 0xffffffffffffffff, 0x9, 0x9, 0x2, 0x0, 0x4, 0x3f, 0xffffffffffff18d6, 0x1ff, 0x8001, 0xd8b7, 0x8, 0x7, 0x9, 0x10000, 0x4, 0x400, 0x80000000, 0x1, 0xea8, 0x4, 0xfc, 0x0, 0x100, 0x400, 0x5, 0x72, 0x4, 0x100000000, 0x5cec44f0, 0x1, 0x6, 0x100, 0x1, 0x4, 0x10000, 0x39ac14a4, 0x3, 0x7ff, 0x6b, 0x1, 0x9, 0x1, 0xffff, 0x7ff]}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000740)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x8, 0x4, 0x1, 0xfff, 0x7dd3, 0x20}, {0x8, 0x1ff, 0x3, 0x3f, 0x9, 0x6}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lseek(r0, 0xadf, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x4000, 0x9d) copy_file_range(r1, &(0x7f0000000980)=0x1f, r2, &(0x7f0000000a00)=0xfffffffffffffff7, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000a80)={0x3, 0x80, 0x3, 0x7f, 0x8, 0x7, 0x0, 0x73, 0x10008, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x6, @perf_bp={&(0x7f0000000a40), 0x2}, 0x200, 0xfff, 0x0, 0x4, 0x64, 0x20000, 0x5, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = signalfd(r3, &(0x7f0000000b00)={[0x9]}, 0x8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000b40), 0x200, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000b80)={0x4, 0x1, 0x7, 0x401, 0x6}) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000bc0)="e6c8c7837b62ddf6a0997ea14f31ed76dd2c4c379df2cc9b6fc79df46b08d720fe4a8789343108b5a9e8075434739dc538871f8bb00d7ec9c63a9fae7e9933602cbefbd7513e1c1ae8753911efcd3994741bd961dc25d452afe079caae2887c3cf32a72f") r6 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000c40), &(0x7f0000000c80)=0x30) [ 964.514540] EXT4-fs (sda): Unrecognized mount option "euid<00000000000000016877" or missing value [ 964.515698] FAULT_INJECTION: forcing a failure. [ 964.515698] name failslab, interval 1, probability 0, space 0, times 0 [ 964.516678] CPU: 1 PID: 7871 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 964.517217] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 964.517868] Call Trace: [ 964.518085] dump_stack+0x107/0x167 [ 964.518378] should_fail.cold+0x5/0xa [ 964.518686] ? __alloc_skb+0x6d/0x5b0 [ 964.518994] should_failslab+0x5/0x20 [ 964.519302] kmem_cache_alloc_node+0x55/0x330 [ 964.519672] __alloc_skb+0x6d/0x5b0 [ 964.519970] __ip_append_data+0x2930/0x3310 [ 964.520323] ? lock_chain_count+0x20/0x20 [ 964.520655] ? raw_destroy+0x30/0x30 [ 964.520961] ? ip_finish_output+0x330/0x330 [ 964.521304] ? lock_release+0x680/0x680 [ 964.521620] ? ipv4_mtu+0x1ed/0x2c0 [ 964.521911] ? raw_destroy+0x30/0x30 [ 964.522207] ip_append_data+0x114/0x1a0 [ 964.522529] raw_sendmsg+0xaa6/0x29d0 [ 964.522843] ? dst_output+0x170/0x170 [ 964.523145] ? __lock_acquire+0x1657/0x5b00 [ 964.523509] ? perf_trace_lock+0xac/0x490 [ 964.523840] ? SOFTIRQ_verbose+0x10/0x10 [ 964.524169] ? __lockdep_reset_lock+0x180/0x180 [ 964.524546] ? selinux_socket_post_create+0x7f0/0x7f0 [ 964.524955] ? find_held_lock+0x2c/0x110 [ 964.525288] ? trace_hardirqs_on+0x5b/0x180 [ 964.525638] ? dst_output+0x170/0x170 [ 964.525946] inet_sendmsg+0x11d/0x140 [ 964.526250] ? inet_send_prepare+0x540/0x540 [ 964.526604] __sock_sendmsg+0x13c/0x190 [ 964.526926] ____sys_sendmsg+0x334/0x870 [ 964.527253] ? sock_write_iter+0x3d0/0x3d0 [ 964.527604] ? do_recvmmsg+0x6d0/0x6d0 [ 964.527930] ? perf_trace_lock+0xac/0x490 [ 964.528266] ? __lockdep_reset_lock+0x180/0x180 [ 964.528640] ? perf_trace_lock+0xac/0x490 [ 964.528974] ___sys_sendmsg+0xf3/0x170 [ 964.529289] ? sendmsg_copy_msghdr+0x160/0x160 [ 964.529658] ? lock_downgrade+0x6d0/0x6d0 [ 964.529993] ? lock_downgrade+0x6d0/0x6d0 [ 964.530334] ? __fget_files+0x296/0x4c0 [ 964.530660] ? __fget_light+0xea/0x290 [ 964.530976] __sys_sendmmsg+0x195/0x470 [ 964.531297] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 964.531651] ? lock_downgrade+0x6d0/0x6d0 [ 964.531994] ? __mutex_unlock_slowpath+0xe1/0x600 [ 964.532384] ? wait_for_completion_io+0x270/0x270 [ 964.532771] ? rcu_read_lock_any_held+0x75/0xa0 [ 964.533141] ? vfs_write+0x354/0xa70 [ 964.533437] ? fput_many+0x2f/0x1a0 [ 964.533729] ? ksys_write+0x1a9/0x260 [ 964.534035] ? __ia32_sys_read+0xb0/0xb0 [ 964.534363] __x64_sys_sendmmsg+0x99/0x100 [ 964.534706] do_syscall_64+0x33/0x40 [ 964.535004] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 964.535418] RIP: 0033:0x7f24b3ae7b19 [ 964.535717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 964.537164] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 964.537771] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 964.538335] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 964.538901] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 964.539467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 964.540026] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 964.546760] kauditd_printk_skb: 40 callbacks suppressed [ 964.546785] audit: type=1400 audit(1712648558.700:180): avc: denied { execmod } for pid=7873 comm="syz-executor.6" path="/syzkaller-testdir095714842/syzkaller.DiN0yD/104/file0" dev="sda" ino=16040 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 [ 964.574451] device lo entered promiscuous mode [ 964.575307] device lo left promiscuous mode [ 964.577071] device lo entered promiscuous mode [ 964.579770] EXT4-fs (sda): Unrecognized mount option "euid<00000000000000016877" or missing value r7 = syz_mount_image$msdos(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x8, 0xa, &(0x7f0000003140)=[{&(0x7f0000000d40)="32c6120b61ef4f54961f531a9dcc6badb8d1fde7d0b117a0fc3cd5341981274167dd4953717376fd9b983754ee3358e66c46ff7cc004cde66ade141ea6a092090367f01ac70f073158fb511914e198a79e8ee86284a6832a353bf3c1481dc15b2fc3d4335f16a04877a606bc26f89e885a6a6401d7c9249e6a89b6", 0x7b, 0x5}, {&(0x7f0000000dc0)="dc235f1053c784ee4104792d", 0xc, 0x4d}, {&(0x7f0000000e00)="fad8bef5be0562d044899829bb46a4cc5a230ef9abe11e1fdf6ce0cafb060e3e522d82d07ccb7d7b23ae9e01918a860da5a28f749a0b7fca12a4fc7ca8b9257b9e0b712c18ad4834313162", 0x4b, 0x100}, {&(0x7f0000000e80)="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", 0x1000, 0x7}, {&(0x7f0000001e80)="07b476c13086a42cedb0a7e30ad126d02754e06186abd0e6fbbbac88446f94", 0x1f, 0x80000000}, {&(0x7f0000001ec0)="5a18", 0x2, 0x6}, {&(0x7f0000001f00)="02f002a404313818124a2c36bbce3eaaca3611456824b9064c5714eff2600c80c777dbffbc451a10fe0b0cac350cae7191b527b1e1c290aa6e008ef99aae7e0be690ded2547f43a8ec2da508b2ca36a7827c3ee4ef60e18db513964d2917d622dab36f3356f6a826b48ce1880103edbabeb7e44adbfe2dd8ac0f1eb01adc8d429d126ba5f421d6e81f92ef776916e84f2b0c92f79e11b71a239e25e9c4742129cb3d1dafc23818271d1bc965", 0xac, 0x7}, {&(0x7f0000001fc0)="46434e4e19f46eaa4b43faeab304837733d2a80cdd536233b3b933e587618e639b50de5915fe7c78f355873d6338a31915ed38a92ff091598269dfb68306efa555070fa911bf1649d8bfbfec6cda015a3fc38f66bb969b9aaa547fb9c23cbfe13591cae154d0f36964218da604", 0x6d, 0x800000}, {&(0x7f0000002040)="e5f22d898454d2c8f70974ad10b34f7dd5302c9a8cc8f2172118cc948a6692c9ce8ec0c27d6a6a462f5f24c555ad950310aa266fae5b2a9f16a06e6c093c2fa1789dc9cfcecdf4161e488735da12b3e2e5f7e9a792299af11367eafc24046bc73c2a3089c65f7a534493e1eb6511e2ac48e16130be4453f33588de996a8411d32217d3ce88ee076d02dc9278e1417215733b13e7b2aa03d831558370ec5b2cfd9225aff1a5a2fcf2e317db852279b82cd2cbcf52ec9430884cdd8f36bb4c315ff6dd80e843a5cebe9ddf732a16c2de182c6e2ab9b83f622d18b6555afa321454b9237058c1adaf50ed1466e4002a7ac25018b93de2", 0xf5, 0x3ff}, {&(0x7f0000002140)="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", 0x1000, 0x80000000}], 0xa22002, &(0x7f0000003240)={[{@fat=@fmask}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0xffffffffffff3ae8}}, {@fat=@errors_remount}, {@dots}, {@dots}, {@nodots}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/loop-control\x00'}}, {@appraise_type}, {@uid_lt={'uid<', 0xee01}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000003340)={{0x1, 0x1, 0x18, r7, {0x7}}, './file0\x00'}) inotify_add_watch(r1, &(0x7f0000003380)='./file0\x00', 0x40000200) syz_io_uring_submit(0x0, 0x0, &(0x7f00000034c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r4, 0x0, &(0x7f00000033c0)="787289425e625f2ab1544b064a112ff1a7ef55a7ed9604a428eaa87ef8776942d2bab47236dc04ec20ce4173ad24c6c04275a535c33e0f8cf207a4c79442d99ee358a2fe0956992241a25958cd0aeffe5037720950bac15b2f480554e57faafbe78f628468c5560ae5c426b2cc738af3d71b7e3218417b9aae1e8129ab84f2609d7c48d593597a1bbfdc7edd214d6b0d0a22975b9cf03e561f5825ee3357f529270e05d192fc31218f5e7c98be42bde8a36103eae1ec609de2f1cf6be019f79acb132471cba83844ae230af025fe034e2c29c8d7b57eedc2dea48f8175d4b6f3a88b466d73e361c7e6040d8874a4c2f21a4033c7e16b64989af1ccef90cd54", 0xff, 0x40002002}, 0xbf02) 07:42:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:42:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 14) 07:42:38 executing program 6: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80}}, './file0\x00'}) r1 = inotify_init() fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x4, 0x1, 0x8001, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000100)={0xffffffffffffffff, 0x10, [0x2, 0x3, 0x400, 0xcda], &(0x7f00000000c0)=[0x0, 0x0]}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xd8, 0x1, 0x20, @private2, @mcast2, 0x40, 0x0, 0x5, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'syztnl1\x00', r5, 0x29, 0x0, 0x3f, 0x400, 0x3b, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x7, 0x8000, 0x9b0, 0x1000}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000003c0)=0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r4, @out_args}, './file0\x00'}) r8 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x3, 0x40, 0xf9, 0x0, 0x51e00000000000, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x8361}, 0x800, 0xc7, 0x1ff, 0x3, 0x4, 0x2, 0x9}, r6, 0xe, r7, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000440)={{0x0, 0x7}, 0x100, './file0\x00'}) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000580)={0x0, 0x100000000, 0x1, 0x0, 0x0, [{{r3}, 0x8}]}) bind(0xffffffffffffffff, &(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x1, @multicast, 'wg0\x00'}}, 0x80) pwritev2(r8, &(0x7f0000001980)=[{&(0x7f0000000640)="7113dc227264ad6faaf5be0505", 0xd}, {&(0x7f0000000680)="8b800079ae3d80a93103587a1317a524cda76ef64e8e9dd9cf4e862804bbd170abae0e7958ac0345e1cf5ab88f", 0x2d}, {&(0x7f00000006c0)="a4f09236a03452a31ed26079ea119aac025a8e90faf8a5e139116ace030f5ca0c0e4c3c2397c1c370d65f445cc75191d7a22f8096e56bc280d87831ad080bd587576148bd93f163d4065fb43abff4e68b9ae9c427d2d6b06b45dfc717ca678d7396b391c05cdaa1de976f149bea2b108fd0fae58781510a9560bcc70418f4d1b3087ac7cf829b3ca688e927bfb1d4855d6f8905b3b24bc21628b0404f80794880cd24cb8a284b215f969", 0xaa}, {&(0x7f0000000780)="1487d73dd4582152bd104458345e6804d2a38d6451acfc02b61231a65ab2e6e66f62972d7fdb930ccd1126f68021cf186c2d6b1e3f9e7b49af216e078e9651ad0e3e06f290986aee66e509d2e80e220b22f884e62d955bbacbcdf6ebad7c9d669cb0b0eac026840d4da689a728c432655225690d415f6a1f823d4fbe2a92f2399e710d79843efe4d938f1c773ae7aaf11d26d0cc2b16e70e3afccdd0eea5cd069e121880121127c9c9c8f1e488ea0d99230b4ece882b56ad040482e78077", 0xbe}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="bfb86b6ea8e8632a7a46c430efe10b2fdefa7165977207a1ebf48b7954dc34b93651eb9f0b7a5562b79f5302198f1b7bc64b0b3d7dd8a4180c4c081cb1e3d5c2989c6e619190df2733987bc99c24f29e68d6863e7d140294f8b0ece20ce1e0beb31a5ef23402f2a73c0901cbd1f7fc425b1c952735c85b", 0x77}, {&(0x7f00000018c0)="5b15d764658871a0f2adca29cc336c31df0d8c7b18a3e0580fd4c18745f48f8d485f6c32968fd7baa04fe0c762a3f488af222d85ce296b2346d11b669e2beb06186fd3de4099c1b928518aca94a0e4c91a57e108a58838afb1be5cb8467a29bd589c455142a7e55226c81b4f597ee195696d650133c165aa30e3e5622054ad55cb98fc6a672845831cfb875a63d25f5353994c9746d9e372ab", 0x99}], 0x7, 0x9, 0x4, 0x1) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a00), 0xc2102, 0x0) fcntl$dupfd(r3, 0x0, r10) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000001a40)=""/137, &(0x7f0000001b00)=0x89) [ 964.588541] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 964.592651] device lo left promiscuous mode 07:42:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 15) [ 964.637166] device lo entered promiscuous mode [ 964.638272] device lo left promiscuous mode [ 964.679699] FAULT_INJECTION: forcing a failure. [ 964.679699] name failslab, interval 1, probability 0, space 0, times 0 [ 964.680875] CPU: 1 PID: 7897 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 964.681438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 964.682117] Call Trace: [ 964.682336] dump_stack+0x107/0x167 [ 964.682636] should_fail.cold+0x5/0xa [ 964.682951] ? create_object.isra.0+0x3a/0xa20 [ 964.683326] should_failslab+0x5/0x20 [ 964.683648] kmem_cache_alloc+0x5b/0x310 [ 964.683989] create_object.isra.0+0x3a/0xa20 [ 964.684346] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 964.684755] kmem_cache_alloc_node+0x169/0x330 [ 964.685130] __alloc_skb+0x6d/0x5b0 [ 964.685432] __ip_append_data+0x2930/0x3310 [ 964.685798] ? lock_chain_count+0x20/0x20 [ 964.686129] ? raw_destroy+0x30/0x30 [ 964.686446] ? ip_finish_output+0x330/0x330 [ 964.686796] ? lock_release+0x680/0x680 [ 964.687118] ? ipv4_mtu+0x1ed/0x2c0 [ 964.687426] ? raw_destroy+0x30/0x30 [ 964.687723] ip_append_data+0x114/0x1a0 [ 964.688059] raw_sendmsg+0xaa6/0x29d0 [ 964.688379] ? dst_output+0x170/0x170 [ 964.688691] ? __lock_acquire+0x1657/0x5b00 [ 964.689055] ? perf_trace_lock+0xac/0x490 [ 964.689395] ? SOFTIRQ_verbose+0x10/0x10 [ 964.689721] ? __lockdep_reset_lock+0x180/0x180 [ 964.690095] ? selinux_socket_post_create+0x7f0/0x7f0 [ 964.690518] ? find_held_lock+0x2c/0x110 [ 964.690860] ? trace_hardirqs_on+0x5b/0x180 [ 964.691217] ? dst_output+0x170/0x170 [ 964.691540] inet_sendmsg+0x11d/0x140 [ 964.691848] ? inet_send_prepare+0x540/0x540 [ 964.692208] __sock_sendmsg+0x13c/0x190 [ 964.692537] ____sys_sendmsg+0x334/0x870 [ 964.692863] ? sock_write_iter+0x3d0/0x3d0 [ 964.693209] ? do_recvmmsg+0x6d0/0x6d0 [ 964.693524] ? perf_trace_lock+0xac/0x490 [ 964.693867] ? __lockdep_reset_lock+0x180/0x180 [ 964.694247] ? perf_trace_lock+0xac/0x490 [ 964.694589] ___sys_sendmsg+0xf3/0x170 [ 964.694902] ? sendmsg_copy_msghdr+0x160/0x160 [ 964.695281] ? lock_downgrade+0x6d0/0x6d0 [ 964.695625] ? lock_downgrade+0x6d0/0x6d0 [ 964.695969] ? __fget_files+0x296/0x4c0 [ 964.696301] ? __fget_light+0xea/0x290 [ 964.696618] __sys_sendmmsg+0x195/0x470 [ 964.696948] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 964.697289] ? lock_downgrade+0x6d0/0x6d0 [ 964.697642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 964.698027] ? wait_for_completion_io+0x270/0x270 [ 964.698422] ? rcu_read_lock_any_held+0x75/0xa0 [ 964.698792] ? vfs_write+0x354/0xa70 [ 964.699098] ? fput_many+0x2f/0x1a0 [ 964.699398] ? ksys_write+0x1a9/0x260 [ 964.699707] ? __ia32_sys_read+0xb0/0xb0 [ 964.700033] __x64_sys_sendmmsg+0x99/0x100 [ 964.700383] do_syscall_64+0x33/0x40 [ 964.700678] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 964.701092] RIP: 0033:0x7f24b3ae7b19 [ 964.701392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 964.702872] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 964.703489] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 964.704048] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 964.704608] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 964.705170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 964.705731] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:42:38 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000600)={0x0, {{0x2, 0x4e21, @private}}}, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800210c00000000000000000a00005bc1170008"], 0x28}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xa0]}, 0x8) getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x14e4, {{0x2, 0x4e21, @local}}}, 0x88) ioctl$CDROMRESET(0xffffffffffffffff, 0x5329) unshare(0x48020200) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]}) 07:42:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:38 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c00000000000000000000000800", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 964.743315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. [ 964.810165] device lo entered promiscuous mode [ 964.813641] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 964.814885] device lo left promiscuous mode [ 965.291919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.292798] print_req_error: 38 callbacks suppressed [ 965.292816] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.295949] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.296014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.296914] buffer_io_error: 14 callbacks suppressed [ 965.296922] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 965.297721] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.300722] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.300790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.301615] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 965.303518] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.305083] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.305238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.305970] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 965.308176] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.309750] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.309818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.310623] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 965.312527] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.314079] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 965.314143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.314948] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 965.316888] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 965.316952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.318391] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 965.318528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 965.319870] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:42:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000600)={0x0, {{0x2, 0x4e21, @private}}}, 0x88) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800210c00000000000000000a00005bc1170008"], 0x28}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xa0]}, 0x8) getpid() bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x14e4, {{0x2, 0x4e21, @local}}}, 0x88) ioctl$CDROMRESET(0xffffffffffffffff, 0x5329) unshare(0x48020200) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)={[{@gid}]}) 07:42:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 16) 07:42:52 executing program 2: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00') r1 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) unlink(&(0x7f00000007c0)='./file0/file1\x00') syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) openat(r0, &(0x7f00000001c0)='./file0/file1\x00', 0x4000c0, 0xa5) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r1, 0x80, &(0x7f0000000140)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}}, 0x0) [ 978.338656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.7'. 07:42:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:52 executing program 6: ftruncate(0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="280000000301010200000000000000000c00000008040001800800084000000000040018800000002d17f36cd5d178c1c69534536f640ec840b20dcc253997c3624c0e3071b3749581fa9cd1e02a908e1f6c3586e389c9237aca0e368a035761c242a4dced519a8ef3fa9ae3a2d86483e34501959fa915d652f361cbff50df5ff78f333fe31c38"], 0x28}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee00) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000540)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000300)="a3", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4, 0xa}) request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='dns_resolver\x00', r3) add_key$keyring(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0x0) request_key(&(0x7f00000008c0)='logon\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)='$*$\\^+\x00', 0x0) request_key(&(0x7f00000003c0)='id_legacy\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='HL\x00', r2) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6, 0x151180) preadv(r5, &(0x7f0000001c40)=[{&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000740)=""/20, 0x14}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/150, 0x96}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/219, 0xdb}], 0x6, 0x10000005, 0x4) syz_open_dev$usbmon(&(0x7f0000000400), 0x7, 0x600000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1f, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:42:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:42:52 executing program 4: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r4}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x20, 0x6, 0x9, 0x0, 0x100000001, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1c0d, 0x1, @perf_bp={&(0x7f0000000700), 0x8}, 0x20, 0x3, 0x8, 0xd39116f335a72801, 0x3ff, 0x6, 0xc7b, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000680)={{0x3, r5, r6, r2, 0x0, 0x20, 0x1ff}, 0x5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8}) io_setup(0x2d47, &(0x7f0000000000)) 07:42:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 978.387575] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 978.406081] device lo entered promiscuous mode 07:42:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 978.409998] FAULT_INJECTION: forcing a failure. [ 978.409998] name failslab, interval 1, probability 0, space 0, times 0 [ 978.411123] CPU: 1 PID: 7933 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 978.411670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.412341] Call Trace: [ 978.412562] dump_stack+0x107/0x167 [ 978.412862] should_fail.cold+0x5/0xa [ 978.413175] should_failslab+0x5/0x20 [ 978.413485] __kmalloc_node_track_caller+0x74/0x3b0 [ 978.413885] ? __ip_append_data+0x2930/0x3310 [ 978.414254] __alloc_skb+0xb1/0x5b0 [ 978.414549] __ip_append_data+0x2930/0x3310 [ 978.414912] ? lock_chain_count+0x20/0x20 [ 978.415246] ? raw_destroy+0x30/0x30 [ 978.415560] ? ip_finish_output+0x330/0x330 [ 978.415905] ? lock_release+0x680/0x680 [ 978.416229] ? ipv4_mtu+0x1ed/0x2c0 [ 978.416526] ? raw_destroy+0x30/0x30 [ 978.416827] ip_append_data+0x114/0x1a0 [ 978.417165] raw_sendmsg+0xaa6/0x29d0 [ 978.417480] ? dst_output+0x170/0x170 [ 978.417786] ? __lock_acquire+0x1657/0x5b00 [ 978.418143] ? perf_trace_lock+0xac/0x490 [ 978.418475] ? SOFTIRQ_verbose+0x10/0x10 [ 978.418807] ? __lockdep_reset_lock+0x180/0x180 [ 978.419183] ? selinux_socket_post_create+0x7f0/0x7f0 [ 978.419603] ? find_held_lock+0x2c/0x110 [ 978.419938] ? trace_hardirqs_on+0x5b/0x180 [ 978.420285] ? dst_output+0x170/0x170 [ 978.420601] inet_sendmsg+0x11d/0x140 [ 978.420904] ? inet_send_prepare+0x540/0x540 [ 978.421256] __sock_sendmsg+0x13c/0x190 [ 978.421580] ____sys_sendmsg+0x334/0x870 [ 978.421909] ? sock_write_iter+0x3d0/0x3d0 [ 978.422252] ? do_recvmmsg+0x6d0/0x6d0 [ 978.422567] ? perf_trace_lock+0xac/0x490 [ 978.422904] ? __lockdep_reset_lock+0x180/0x180 [ 978.423272] ? perf_trace_lock+0xac/0x490 [ 978.423616] ___sys_sendmsg+0xf3/0x170 [ 978.423938] ? sendmsg_copy_msghdr+0x160/0x160 [ 978.424304] ? lock_downgrade+0x6d0/0x6d0 [ 978.424645] ? lock_downgrade+0x6d0/0x6d0 [ 978.424986] ? __fget_files+0x296/0x4c0 [ 978.425315] ? __fget_light+0xea/0x290 [ 978.425632] __sys_sendmmsg+0x195/0x470 [ 978.425961] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 978.426301] ? lock_downgrade+0x6d0/0x6d0 [ 978.426648] ? __mutex_unlock_slowpath+0xe1/0x600 [ 978.427041] ? wait_for_completion_io+0x270/0x270 [ 978.427428] ? rcu_read_lock_any_held+0x75/0xa0 [ 978.427808] ? vfs_write+0x354/0xa70 [ 978.428109] ? fput_many+0x2f/0x1a0 [ 978.428408] ? ksys_write+0x1a9/0x260 [ 978.428719] ? __ia32_sys_read+0xb0/0xb0 [ 978.429056] __x64_sys_sendmmsg+0x99/0x100 [ 978.429407] do_syscall_64+0x33/0x40 [ 978.429705] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 978.430120] RIP: 0033:0x7f24b3ae7b19 [ 978.430422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 978.431887] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 978.432510] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 978.433086] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 978.433657] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 978.434229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 978.434804] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 978.441265] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 978.442922] device lo left promiscuous mode 07:42:52 executing program 4: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0xffffffffffffffff, 0xd, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r4}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f0000000040)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f0000000040), 0x0, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) fchown(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x20, 0x6, 0x9, 0x0, 0x100000001, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1c0d, 0x1, @perf_bp={&(0x7f0000000700), 0x8}, 0x20, 0x3, 0x8, 0xd39116f335a72801, 0x3ff, 0x6, 0xc7b, 0x0, 0x6, 0x0, 0x8}, 0x0, 0x10, 0xffffffffffffffff, 0x8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000680)={{0x3, r5, r6, r2, 0x0, 0x20, 0x1ff}, 0x5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8}) io_setup(0x2d47, &(0x7f0000000000)) 07:42:52 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001400)=""/53, 0x35) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@cache_mmap}, {@cache_loose}]}}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x108}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) fcntl$dupfd(r0, 0x0, r2) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) syz_io_uring_setup(0x205b, &(0x7f0000000100)={0x0, 0xd3f6, 0x1, 0x0, 0x2cd, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000080), &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3a24da7d83b60f84f60000000000000000000000000000000000000000000000000000e3"]}) 07:42:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:42:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c0000000000000000000000080000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:42:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 17) [ 978.579081] 9pnet: Insufficient options for proto=fd [ 978.613009] 9pnet: Insufficient options for proto=fd [ 978.658941] device lo entered promiscuous mode [ 978.660620] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 978.686965] FAULT_INJECTION: forcing a failure. [ 978.686965] name failslab, interval 1, probability 0, space 0, times 0 [ 978.687943] CPU: 1 PID: 7957 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 978.688488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.689165] Call Trace: [ 978.689389] dump_stack+0x107/0x167 [ 978.689688] should_fail.cold+0x5/0xa [ 978.689996] ? create_object.isra.0+0x3a/0xa20 [ 978.690370] should_failslab+0x5/0x20 [ 978.690687] kmem_cache_alloc+0x5b/0x310 [ 978.691016] create_object.isra.0+0x3a/0xa20 [ 978.691378] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 978.691808] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 978.692218] ? __ip_append_data+0x2930/0x3310 [ 978.692591] __alloc_skb+0xb1/0x5b0 [ 978.692886] __ip_append_data+0x2930/0x3310 [ 978.693241] ? lock_chain_count+0x20/0x20 [ 978.693577] ? raw_destroy+0x30/0x30 [ 978.693885] ? ip_finish_output+0x330/0x330 [ 978.694235] ? lock_release+0x680/0x680 [ 978.694552] ? ipv4_mtu+0x1ed/0x2c0 [ 978.694847] ? raw_destroy+0x30/0x30 [ 978.695149] ip_append_data+0x114/0x1a0 [ 978.695478] raw_sendmsg+0xaa6/0x29d0 [ 978.695806] ? dst_output+0x170/0x170 [ 978.696114] ? __lock_acquire+0x1657/0x5b00 [ 978.696474] ? perf_trace_lock+0xac/0x490 [ 978.696811] ? SOFTIRQ_verbose+0x10/0x10 [ 978.697141] ? __lockdep_reset_lock+0x180/0x180 [ 978.697527] ? selinux_socket_post_create+0x7f0/0x7f0 [ 978.697792] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 978.697943] ? find_held_lock+0x2c/0x110 [ 978.697965] ? trace_hardirqs_on+0x5b/0x180 [ 978.697978] ? dst_output+0x170/0x170 [ 978.697997] inet_sendmsg+0x11d/0x140 [ 978.700508] ? inet_send_prepare+0x540/0x540 [ 978.700867] __sock_sendmsg+0x13c/0x190 [ 978.701192] ____sys_sendmsg+0x334/0x870 [ 978.701523] ? sock_write_iter+0x3d0/0x3d0 [ 978.701868] ? do_recvmmsg+0x6d0/0x6d0 [ 978.702187] ? perf_trace_lock+0xac/0x490 [ 978.702532] ? __lockdep_reset_lock+0x180/0x180 [ 978.702907] ? perf_trace_lock+0xac/0x490 [ 978.703247] ___sys_sendmsg+0xf3/0x170 [ 978.703570] ? sendmsg_copy_msghdr+0x160/0x160 [ 978.703946] ? lock_downgrade+0x6d0/0x6d0 [ 978.704291] ? lock_downgrade+0x6d0/0x6d0 [ 978.704636] ? __fget_files+0x296/0x4c0 [ 978.704968] ? __fget_light+0xea/0x290 [ 978.705290] __sys_sendmmsg+0x195/0x470 [ 978.705617] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 978.705967] ? lock_downgrade+0x6d0/0x6d0 [ 978.706320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 978.706715] ? wait_for_completion_io+0x270/0x270 [ 978.707108] ? rcu_read_lock_any_held+0x75/0xa0 [ 978.707483] ? vfs_write+0x354/0xa70 [ 978.707797] ? fput_many+0x2f/0x1a0 [ 978.708094] ? ksys_write+0x1a9/0x260 [ 978.708403] ? __ia32_sys_read+0xb0/0xb0 [ 978.708740] __x64_sys_sendmmsg+0x99/0x100 [ 978.709088] do_syscall_64+0x33/0x40 [ 978.709393] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 978.709810] RIP: 0033:0x7f24b3ae7b19 [ 978.710104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 978.711591] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 978.712213] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 978.712783] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 978.713353] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 978.713927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 978.714507] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 978.715599] device lo left promiscuous mode [ 978.740864] FAULT_INJECTION: forcing a failure. [ 978.740864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.742045] CPU: 1 PID: 7959 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 978.742602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 978.743269] Call Trace: [ 978.743490] dump_stack+0x107/0x167 [ 978.743795] should_fail.cold+0x5/0xa [ 978.744112] _copy_from_user+0x2e/0x1b0 [ 978.744445] __copy_msghdr_from_user+0x91/0x4b0 [ 978.744827] ? __ia32_sys_shutdown+0x80/0x80 [ 978.745192] ? __lock_acquire+0xbb1/0x5b00 [ 978.745545] sendmsg_copy_msghdr+0xa1/0x160 [ 978.745900] ? do_recvmmsg+0x6d0/0x6d0 [ 978.746215] ? perf_trace_lock+0xac/0x490 [ 978.746555] ? SOFTIRQ_verbose+0x10/0x10 [ 978.746889] ? __lockdep_reset_lock+0x180/0x180 [ 978.747269] ? perf_trace_lock+0xac/0x490 [ 978.747623] ___sys_sendmsg+0xc6/0x170 [ 978.747947] ? sendmsg_copy_msghdr+0x160/0x160 [ 978.748321] ? __fget_files+0x26d/0x4c0 [ 978.748646] ? lock_downgrade+0x6d0/0x6d0 [ 978.748993] ? lock_downgrade+0x6d0/0x6d0 [ 978.749334] ? __fget_files+0x296/0x4c0 [ 978.749668] ? __fget_light+0xea/0x290 [ 978.749998] __sys_sendmmsg+0x195/0x470 [ 978.750328] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 978.750678] ? lock_downgrade+0x6d0/0x6d0 [ 978.751021] ? ksys_write+0x12d/0x260 [ 978.751333] ? __mutex_unlock_slowpath+0xe1/0x600 [ 978.751735] ? wait_for_completion_io+0x270/0x270 [ 978.752133] ? rcu_read_lock_any_held+0x75/0xa0 [ 978.752514] ? vfs_write+0x354/0xa70 [ 978.752818] ? fput_many+0x2f/0x1a0 [ 978.753119] ? ksys_write+0x1a9/0x260 [ 978.753434] ? __ia32_sys_read+0xb0/0xb0 [ 978.753770] __x64_sys_sendmmsg+0x99/0x100 [ 978.754116] do_syscall_64+0x33/0x40 [ 978.754425] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 978.754838] RIP: 0033:0x7f62f063ab19 [ 978.755138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 978.756634] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 978.757249] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 978.757827] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 978.758407] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 978.758985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.759572] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:42:52 executing program 7: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x1, 0x2, 0x101, 0x8, r2}) ptrace$getsig(0x4202, r2, 0x6, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) r3 = dup2(r0, r1) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000003c0)={{r3}, 0x0, 0xa, @unused=[0x398, 0x6, 0x400, 0x2], @subvolid=0x1}) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)=@md5={0x1, "6d6edc9db981cf5732af13cdee47fc76"}, 0x11, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x6, 0x2, 0x0, 0x0, 0x80000001}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 07:42:52 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 1) 07:42:52 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid}]}}) recvmmsg$unix(r0, &(0x7f0000003000)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)}, {&(0x7f0000000180)=""/30, 0x1e}], 0x2, &(0x7f0000000240)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f00000004c0)=""/31, 0x1f}], 0x3, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000001740)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/44, 0x2c}, {&(0x7f0000001640)=""/47, 0x2f}, {&(0x7f0000001680)=""/54, 0x36}, {&(0x7f00000016c0)=""/122, 0x7a}], 0x5, &(0x7f00000017c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000001880)=""/130, 0x82}, {&(0x7f0000001940)=""/4, 0x4}, {&(0x7f0000001980)=""/131, 0x83}], 0x3}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1, &(0x7f0000002ac0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x150}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002c40)=""/237, 0xed}, {&(0x7f0000002d40)=""/15, 0xf}, {&(0x7f0000002d80)=""/234, 0xea}, {&(0x7f0000002e80)=""/12, 0xc}], 0x4, &(0x7f0000002f00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x6, 0x40000001, &(0x7f0000003180)={0x77359400}) dup2(r4, r3) dup2(r2, 0xffffffffffffffff) [ 978.822823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.823822] print_req_error: 6 callbacks suppressed [ 978.823841] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.826200] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.827776] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 978.832428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.833227] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.835186] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.836794] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 978.838156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.839083] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.840725] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.842276] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 978.862603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.863459] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.865049] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.865108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.865981] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 978.867897] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.869446] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 978.869517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.870308] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 978.871209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.871780] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 978.872623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 978.873169] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 978.874521] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:43:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 18) 07:43:06 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 2) 07:43:06 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x4307, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0xffffffffffff7acd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x4, 0x0, 0x0, 0x21c}}) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x156}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000007f0700000000000000bdaa5659b2df971a5858eff73d51c51816dd24f39ea1214e80e1e97495942bc9661dca43108d795775595ba7b600"]) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 07:43:06 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept(r0, &(0x7f0000000040)=@caif=@dgm, &(0x7f0000000100)=0x80) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0xfffffff7, 0x4) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) 07:43:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 1) 07:43:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @dev}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:06 executing program 7: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) ftruncate(r0, 0x1000003) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r2 = getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000002c0)={0x1, 0x2, 0x101, 0x8, r2}) ptrace$getsig(0x4202, r2, 0x6, &(0x7f0000000340)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, 0x0) r3 = dup2(r0, r1) r4 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f00000003c0)={{r3}, 0x0, 0xa, @unused=[0x398, 0x6, 0x400, 0x2], @subvolid=0x1}) lsetxattr$security_ima(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), &(0x7f0000000240)=@md5={0x1, "6d6edc9db981cf5732af13cdee47fc76"}, 0x11, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)={0x6, 0x2, 0x0, 0x0, 0x80000001}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x10000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001600)={&(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 07:43:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x7d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x6ca00, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x1, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffe3) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x2, 0x6, 0x9, 0x0, 0x1002, 0x2200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x10001, 0x61a0, 0x6, 0x8, 0xffff, 0x10000, 0x7, 0x0, 0x6, 0x0, 0x101}, 0x0, 0x6, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8, 0x7) r2 = socket$packet(0x11, 0x3, 0x300) sendmmsg(r2, &(0x7f0000002380)=[{{&(0x7f0000000c40)=@caif=@rfm={0x25, 0x3, "c4ffb06eee0401618e3f1e65efa5b3f0"}, 0x80, &(0x7f0000000f40)}}, {{&(0x7f0000000fc0)=@ieee802154={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000005c0)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)) chdir(&(0x7f0000000040)='./file0\x00') ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000240)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x14d502, 0x2a) openat(r1, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r3) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000002400)={0x0, 0xd5fa}) [ 992.656806] FAULT_INJECTION: forcing a failure. [ 992.656806] name failslab, interval 1, probability 0, space 0, times 0 [ 992.657910] CPU: 1 PID: 7985 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 992.658466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.659118] Call Trace: [ 992.659337] dump_stack+0x107/0x167 [ 992.659631] should_fail.cold+0x5/0xa [ 992.659960] ? __alloc_skb+0x6d/0x5b0 [ 992.660278] should_failslab+0x5/0x20 [ 992.660588] kmem_cache_alloc_node+0x55/0x330 [ 992.660947] __alloc_skb+0x6d/0x5b0 [ 992.661254] __ip_append_data+0x2930/0x3310 [ 992.661610] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.662039] ? raw_destroy+0x30/0x30 [ 992.662349] ? ip_finish_output+0x330/0x330 [ 992.662697] ? ip_setup_cork+0x56a/0x930 [ 992.662992] FAULT_INJECTION: forcing a failure. [ 992.662992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.663031] ? __sanitizer_cov_trace_pc+0x30/0x60 [ 992.663052] ? raw_destroy+0x30/0x30 [ 992.665714] ip_append_data+0x114/0x1a0 [ 992.666043] raw_sendmsg+0xaa6/0x29d0 [ 992.666354] ? dst_output+0x170/0x170 [ 992.666657] ? __lock_acquire+0x1657/0x5b00 [ 992.667001] ? mark_held_locks+0x9e/0xe0 [ 992.667326] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.667751] ? perf_trace_lock+0xac/0x490 [ 992.668083] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 992.668516] ? __lockdep_reset_lock+0x180/0x180 [ 992.668893] ? selinux_socket_post_create+0x7f0/0x7f0 [ 992.669296] ? find_held_lock+0x2c/0x110 [ 992.669645] ? dst_output+0x170/0x170 [ 992.669948] inet_sendmsg+0x11d/0x140 [ 992.670249] ? inet_send_prepare+0x540/0x540 [ 992.670604] __sock_sendmsg+0x13c/0x190 [ 992.670921] ____sys_sendmsg+0x334/0x870 [ 992.671243] ? sock_write_iter+0x3d0/0x3d0 [ 992.671586] ? do_recvmmsg+0x6d0/0x6d0 [ 992.671914] ? perf_trace_lock+0xac/0x490 [ 992.672246] ? __lockdep_reset_lock+0x180/0x180 [ 992.672621] ? perf_trace_lock+0xac/0x490 [ 992.672953] ___sys_sendmsg+0xf3/0x170 [ 992.673260] ? sendmsg_copy_msghdr+0x160/0x160 [ 992.673630] ? lock_downgrade+0x6d0/0x6d0 [ 992.673961] ? mark_lock+0xf5/0x2df0 [ 992.674261] ? __fget_files+0x296/0x4c0 [ 992.674593] ? __fget_light+0xea/0x290 [ 992.674907] __sys_sendmmsg+0x195/0x470 [ 992.675225] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 992.675572] ? lock_downgrade+0x6d0/0x6d0 [ 992.675923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 992.676335] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 992.676763] ? trace_hardirqs_on+0x5b/0x180 [ 992.677104] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 992.677549] ? perf_trace_sys_enter+0x8/0x130 [ 992.677905] __x64_sys_sendmmsg+0x99/0x100 [ 992.678242] do_syscall_64+0x33/0x40 [ 992.678542] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 992.678948] RIP: 0033:0x7f24b3ae7b19 [ 992.679246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.680693] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.681287] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 992.681847] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 992.682408] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.682968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 992.683533] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 992.684131] CPU: 0 PID: 7975 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 992.685148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.686339] Call Trace: [ 992.686732] dump_stack+0x107/0x167 [ 992.687264] should_fail.cold+0x5/0xa [ 992.687864] _copy_from_user+0x2e/0x1b0 [ 992.688453] __copy_msghdr_from_user+0x91/0x4b0 [ 992.689127] ? __ia32_sys_shutdown+0x80/0x80 [ 992.689778] ? __lock_acquire+0xbb1/0x5b00 [ 992.690399] sendmsg_copy_msghdr+0xa1/0x160 [ 992.691028] ? do_recvmmsg+0x6d0/0x6d0 [ 992.691589] ? perf_trace_lock+0xac/0x490 [ 992.692194] ? SOFTIRQ_verbose+0x10/0x10 [ 992.692785] ? __lockdep_reset_lock+0x180/0x180 [ 992.693457] ? perf_trace_lock+0xac/0x490 [ 992.694067] ___sys_sendmsg+0xc6/0x170 [ 992.694635] ? sendmsg_copy_msghdr+0x160/0x160 [ 992.695298] ? __fget_files+0x26d/0x4c0 [ 992.695883] ? lock_downgrade+0x6d0/0x6d0 [ 992.696492] ? lock_downgrade+0x6d0/0x6d0 [ 992.697102] ? __fget_files+0x296/0x4c0 [ 992.697698] ? __fget_light+0xea/0x290 [ 992.698282] __sys_sendmmsg+0x195/0x470 [ 992.698874] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 992.699503] ? lock_downgrade+0x6d0/0x6d0 [ 992.700114] ? ksys_write+0x12d/0x260 [ 992.700676] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.701389] ? wait_for_completion_io+0x270/0x270 [ 992.702096] ? rcu_read_lock_any_held+0x75/0xa0 [ 992.702770] ? vfs_write+0x354/0xa70 [ 992.703309] ? fput_many+0x2f/0x1a0 [ 992.703846] ? ksys_write+0x1a9/0x260 [ 992.704398] ? __ia32_sys_read+0xb0/0xb0 [ 992.704996] __x64_sys_sendmmsg+0x99/0x100 [ 992.705611] do_syscall_64+0x33/0x40 [ 992.706156] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 992.706899] RIP: 0033:0x7fa5747bcb19 [ 992.707441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.710074] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.711172] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 992.712211] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 992.713234] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.714262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.715286] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 07:43:06 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x4) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r2 = syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x4000, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r0, 0x0, &(0x7f0000000300), 0x0, 0x8080, 0x1}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000200), &(0x7f00000002c0)=@v2={0x2000000, [{0x1ff, 0x6}, {0x1, 0xa91}]}, 0x14, 0x1) r5 = syz_io_uring_complete(r3) clock_gettime(0x0, &(0x7f0000000400)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)=""/149, 0x95}], 0x1, &(0x7f0000000640)=""/49, 0x31}, 0x0, 0x10000, 0x1, {0x2}}, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006300)=@IORING_OP_CLOSE={0x13, 0x3}, 0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x2514, &(0x7f0000000240)={0x0, 0xaa77, 0x1, 0x3, 0x30d}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, r2, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r5, 0x80, &(0x7f0000000440)=@generic={0x11, "1f607b8600ca6096a000334f62363a9695fff19d11ee010b8ead9fbfa9d736d6ad1fde1151fb551d5bf8fead3e720e52881f06edb0cfa27c26d7473b1a3dba1ace90654327ce0a92a6c4f7a5399067a41dfdb35fcf23bbf6f964a253e0e9b548341dede6e3cf762ad999708990632c1d4f9ecd2bdfafaa389535979a160d"}, 0x0, 0x0, 0x1}, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x18, &(0x7f00000001c0)=0x7, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f00000000c0)="bd5aea8b8c2fbe2d2d2ebd5b2689660c", 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r6, 0xffffffffffff56c0, 0x0, 0x1f}, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x32) [ 992.746181] device lo entered promiscuous mode [ 992.747940] FAULT_INJECTION: forcing a failure. [ 992.747940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.748958] CPU: 1 PID: 7990 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 992.749495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.750138] Call Trace: [ 992.750359] dump_stack+0x107/0x167 [ 992.750652] should_fail.cold+0x5/0xa [ 992.750963] _copy_from_user+0x2e/0x1b0 [ 992.751287] move_addr_to_kernel.part.0+0x31/0x110 [ 992.751678] __copy_msghdr_from_user+0x3e1/0x4b0 [ 992.752065] ? __ia32_sys_shutdown+0x80/0x80 [ 992.752422] ? __lock_acquire+0xbb1/0x5b00 [ 992.752766] sendmsg_copy_msghdr+0xa1/0x160 [ 992.753109] ? do_recvmmsg+0x6d0/0x6d0 [ 992.753419] ? perf_trace_lock+0xac/0x490 [ 992.753752] ? SOFTIRQ_verbose+0x10/0x10 [ 992.754080] ? __lockdep_reset_lock+0x180/0x180 [ 992.754448] ? perf_trace_lock+0xac/0x490 [ 992.754784] ___sys_sendmsg+0xc6/0x170 [ 992.755094] ? sendmsg_copy_msghdr+0x160/0x160 [ 992.755461] ? __fget_files+0x26d/0x4c0 [ 992.755781] ? lock_downgrade+0x6d0/0x6d0 [ 992.756115] ? lock_downgrade+0x6d0/0x6d0 [ 992.756447] ? __fget_files+0x296/0x4c0 [ 992.756769] ? __fget_light+0xea/0x290 [ 992.757089] __sys_sendmmsg+0x195/0x470 [ 992.757407] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 992.757749] ? lock_downgrade+0x6d0/0x6d0 [ 992.758086] ? ksys_write+0x12d/0x260 [ 992.758398] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.758785] ? wait_for_completion_io+0x270/0x270 [ 992.759173] ? rcu_read_lock_any_held+0x75/0xa0 [ 992.759537] ? vfs_write+0x354/0xa70 [ 992.759841] ? fput_many+0x2f/0x1a0 [ 992.760135] ? ksys_write+0x1a9/0x260 [ 992.760439] ? __ia32_sys_read+0xb0/0xb0 [ 992.760766] __x64_sys_sendmmsg+0x99/0x100 [ 992.761106] do_syscall_64+0x33/0x40 [ 992.761400] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 992.761805] RIP: 0033:0x7f62f063ab19 [ 992.762100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.763541] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.764151] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 992.764709] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 992.765264] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.765825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.766380] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 992.771062] netlink: 'syz-executor.1': attribute type 7 has an invalid length. 07:43:06 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x7ffffffff000, 0xf0ff1f00000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x41) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000000c0)=0x1000, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100001000000000000000000000000000500000024386a562b500000000c00008008000d00ac141400"], 0x28}}, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x7fffffff, 0x2d0401) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x95}, 0x40000) ioctl$FICLONE(r2, 0x40049409, r0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0ad8f0acb97034f0ff963200068d8f0eab28290b5dcb54e897c17344149078ae0d854728f3963c012306e34ab67bfb0fa465831c6270e47f8ca799dc7495a0a54423c7914719c803c4fb0fb7d003000000000000001643e4ec502d66192367e3f9143282018b903b8ec3fb7d75749c8e242f7f8b0b6954e08c157161951073d56d69f7f134e1af8b330b98015be17fdd2cb9214b024329", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008002700000000000800a00000000000"], 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES16, @ANYRES32, @ANYBLOB="3f9d0000e5bf9f00bfcd0a69d37755596f88b4eec3040b84351feffc2aa77f654e1916b72e8d9b39dfc7f819ad251aa9844e50144daa3ff0ad5a7d6d56d97a640567629218f691e481f371076ad48ac6a45d7d6d294edcfbe5444ca2eada465268cc13d02e", @ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="1b181c0d2295ae17d2facc1a89de317a0a88434d918ffb9b671aeaf0e7a3c0fa2a7d51a3050ad6f5a43d2b703e783e19b5906002b50a0254dd090d6c216095d98261752a51135a5352f58abdd9413b06aeedb70f01ea2647385b38b1ebbbc22b2d52eefab63205c4ca3b"]) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xffffffff81000002}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) pread64(r6, &(0x7f00000020c0)=""/4088, 0xff8, 0x0) [ 992.781647] device lo left promiscuous mode 07:43:06 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 19) 07:43:06 executing program 2: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb0}}, './file0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) flock(r0, 0x5) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) r2 = syz_io_uring_setup(0x3c1d, &(0x7f00000001c0)={0x0, 0x5890, 0x1, 0x3, 0x2e9, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000380)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, &(0x7f00000002c0)=0x80, &(0x7f0000000300)=@rc, 0x0, 0x0, 0x1}, 0x7f) r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80000, 0x155) poll(&(0x7f0000000400)=[{0xffffffffffffffff, 0x2}, {r0, 0x2000}, {r2, 0x6140}, {r1, 0x4160}, {r4, 0x2480}, {r0, 0x2008}], 0x6, 0x9) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/152, 0x98}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/107, 0x6b}], 0x3) r5 = open(&(0x7f0000000680)='./file0\x00', 0x8000, 0x2) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000700), r0) sendmsg$FOU_CMD_GET(r5, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000881}, 0x20000000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000800)) r7 = syz_io_uring_setup(0x3236, &(0x7f0000000880)={0x0, 0x65df, 0x20, 0x2, 0x3bf}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x0) syz_io_uring_submit(r8, r3, &(0x7f0000000980)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x80) lseek(r4, 0xb7, 0x4) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x2010, r7, 0x8000000) syz_io_uring_submit(r10, r9, &(0x7f00000009c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x4, 0x7, 0x0, 0xffff7bd7, 0x1}, 0x5) 07:43:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="50020000170001000000000000000000fc0200000000000000000000000000010000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000fc0000000000000000000000000000004e240000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb0000000000000000000000007f00000100000000000000000000000000000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"/424], 0x250}}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000640400042abd7000ffdbdf258e9226c74193feffb72b733726b6bb48808ba3cdd6a345917bdbb1c08f57e612c77a4b7928584e92dea2e5b7ebb96200000100000000001ea4411c09185e31369d8a3eb020ed00bd0348e4075cdba7fea8f658f39ce65cdee4450b834dc20952bf9b749651fd317bb6696de86bd28d24a86eafb340e5a960905deefa5ed9e5d1cb850a4e9752c96c15d92eeb8d33cb9a5c84db452fe200"/184], 0xb8}, 0x1, 0x0, 0x0, 0x20040}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x238040, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="eabf32afd39b5a17c597c2b88b34000000", @ANYRES16=r4, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008002700000000000800a00000000000"], 0x34}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r3, 0x40049421, 0x3) fcntl$setown(r2, 0x8, 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r6, 0xf505, 0x0) close(r2) sendfile(r2, r1, &(0x7f0000000000)=0x4, 0x0) unshare(0x42020900) 07:43:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 2) [ 992.846699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:43:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x6}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 992.890933] FAULT_INJECTION: forcing a failure. [ 992.890933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 992.892096] CPU: 1 PID: 8005 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 992.892627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.893279] Call Trace: [ 992.893498] dump_stack+0x107/0x167 [ 992.893795] should_fail.cold+0x5/0xa [ 992.894106] _copy_from_user+0x2e/0x1b0 [ 992.894430] move_addr_to_kernel.part.0+0x31/0x110 [ 992.894820] __copy_msghdr_from_user+0x3e1/0x4b0 [ 992.895194] ? __ia32_sys_shutdown+0x80/0x80 [ 992.895563] ? __lock_acquire+0xbb1/0x5b00 [ 992.895914] sendmsg_copy_msghdr+0xa1/0x160 [ 992.896258] ? do_recvmmsg+0x6d0/0x6d0 [ 992.896573] ? perf_trace_lock+0xac/0x490 [ 992.896902] ? SOFTIRQ_verbose+0x10/0x10 [ 992.897235] ? __lockdep_reset_lock+0x180/0x180 [ 992.897600] ? perf_trace_lock+0xac/0x490 [ 992.897942] ___sys_sendmsg+0xc6/0x170 [ 992.898254] ? sendmsg_copy_msghdr+0x160/0x160 [ 992.898631] ? __fget_files+0x26d/0x4c0 [ 992.898952] ? lock_downgrade+0x6d0/0x6d0 [ 992.899281] ? lock_downgrade+0x6d0/0x6d0 [ 992.899608] ? __fget_files+0x296/0x4c0 [ 992.899938] ? __fget_light+0xea/0x290 [ 992.900252] __sys_sendmmsg+0x195/0x470 [ 992.900572] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 992.900913] ? lock_downgrade+0x6d0/0x6d0 [ 992.901246] ? ksys_write+0x12d/0x260 [ 992.901553] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.901942] ? wait_for_completion_io+0x270/0x270 [ 992.902325] ? rcu_read_lock_any_held+0x75/0xa0 [ 992.902707] ? vfs_write+0x354/0xa70 [ 992.903004] ? fput_many+0x2f/0x1a0 [ 992.903291] ? ksys_write+0x1a9/0x260 [ 992.903597] ? __ia32_sys_read+0xb0/0xb0 [ 992.903936] __x64_sys_sendmmsg+0x99/0x100 [ 992.904278] do_syscall_64+0x33/0x40 [ 992.904580] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 992.904986] RIP: 0033:0x7fa5747bcb19 [ 992.905291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.906731] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.907344] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 992.907909] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 992.908468] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.909031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.909606] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 [ 992.919004] FAULT_INJECTION: forcing a failure. [ 992.919004] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 992.921104] CPU: 0 PID: 8003 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 992.922102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 992.923294] Call Trace: [ 992.923686] dump_stack+0x107/0x167 [ 992.924234] should_fail.cold+0x5/0xa [ 992.924803] __alloc_pages_nodemask+0x182/0x600 [ 992.925488] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 992.926383] alloc_pages_current+0x187/0x280 [ 992.927029] allocate_slab+0x26f/0x380 [ 992.927605] ___slab_alloc+0x470/0x700 [ 992.928185] ? create_object.isra.0+0x3a/0xa20 [ 992.928850] ? fs_reclaim_acquire+0xa5/0x100 [ 992.929498] ? create_object.isra.0+0x3a/0xa20 [ 992.930158] ? kmem_cache_alloc+0x301/0x310 [ 992.930782] kmem_cache_alloc+0x301/0x310 [ 992.931388] create_object.isra.0+0x3a/0xa20 [ 992.932033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 992.932776] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 992.933503] ? __ip_append_data+0x2930/0x3310 [ 992.934163] __alloc_skb+0xb1/0x5b0 [ 992.934708] __ip_append_data+0x2930/0x3310 [ 992.935370] ? lock_chain_count+0x20/0x20 [ 992.935984] ? raw_destroy+0x30/0x30 [ 992.936550] ? ip_finish_output+0x330/0x330 [ 992.937180] ? lock_release+0x680/0x680 [ 992.937776] ? ipv4_mtu+0x1ed/0x2c0 [ 992.938324] ? raw_destroy+0x30/0x30 [ 992.938887] ip_append_data+0x114/0x1a0 [ 992.939498] raw_sendmsg+0xaa6/0x29d0 [ 992.940103] ? dst_output+0x170/0x170 [ 992.940654] ? __lock_acquire+0x1657/0x5b00 [ 992.941304] ? perf_trace_lock+0xac/0x490 [ 992.941916] ? SOFTIRQ_verbose+0x10/0x10 [ 992.942527] ? __lockdep_reset_lock+0x180/0x180 [ 992.943217] ? selinux_socket_post_create+0x7f0/0x7f0 [ 992.943999] ? find_held_lock+0x2c/0x110 [ 992.944609] ? trace_hardirqs_on+0x5b/0x180 [ 992.945248] ? dst_output+0x170/0x170 [ 992.945817] inet_sendmsg+0x11d/0x140 [ 992.946367] ? inet_send_prepare+0x540/0x540 [ 992.947011] __sock_sendmsg+0x13c/0x190 [ 992.947589] ____sys_sendmsg+0x334/0x870 [ 992.948193] ? sock_write_iter+0x3d0/0x3d0 [ 992.948806] ? do_recvmmsg+0x6d0/0x6d0 [ 992.949371] ? perf_trace_lock+0xac/0x490 [ 992.949980] ? __lockdep_reset_lock+0x180/0x180 [ 992.950675] ? perf_trace_lock+0xac/0x490 [ 992.951292] ___sys_sendmsg+0xf3/0x170 [ 992.951870] ? sendmsg_copy_msghdr+0x160/0x160 [ 992.952542] ? lock_downgrade+0x6d0/0x6d0 [ 992.953154] ? lock_downgrade+0x6d0/0x6d0 [ 992.953765] ? __fget_files+0x296/0x4c0 [ 992.954354] ? __fget_light+0xea/0x290 [ 992.954931] __sys_sendmmsg+0x195/0x470 [ 992.955531] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 992.956165] ? lock_downgrade+0x6d0/0x6d0 [ 992.956791] ? __mutex_unlock_slowpath+0xe1/0x600 [ 992.957499] ? wait_for_completion_io+0x270/0x270 [ 992.958200] ? rcu_read_lock_any_held+0x75/0xa0 [ 992.958872] ? vfs_write+0x354/0xa70 [ 992.959414] ? fput_many+0x2f/0x1a0 [ 992.959958] ? ksys_write+0x1a9/0x260 [ 992.960519] ? __ia32_sys_read+0xb0/0xb0 [ 992.961117] __x64_sys_sendmmsg+0x99/0x100 [ 992.961738] do_syscall_64+0x33/0x40 [ 992.962277] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 992.963016] RIP: 0033:0x7f24b3ae7b19 [ 992.963556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 992.966200] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 992.967307] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 992.968330] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 992.969358] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 992.970379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 992.971412] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 992.974707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 992.995979] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 993.123330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.124212] print_req_error: 6 callbacks suppressed [ 993.124231] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.126567] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.128114] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 993.129597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.130431] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.132005] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.133529] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 993.134916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.135771] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.137330] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.138872] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 993.140263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.141124] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.142909] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.143744] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.145541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.146334] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.147917] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 993.149441] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 993.150556] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 993.151675] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 993.192550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.193434] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 993.195533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 993.196439] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:43:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 3) 07:43:19 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), &(0x7f0000000440)=@sha1={0x1, "b6d245ccc720951115b665f784bbb85d115b858b"}, 0x15, 0x0) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbfd, {0x7, 0x7, './file1', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44044}, 0x44) 07:43:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 20) 07:43:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x125342, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) r3 = mq_open(&(0x7f0000000140)='\x18\xb4Z\x1d\xc3\xc4\x82d\nc\xc6\xc2\xe8`\xec\xb6\xaal1\xc4\xf0\xdbN\x0f\xa8\xd8\xeaj|\x93\xca\xc7o\xe3\xcf\xa5Pr=\v\xa4\b@SD\xaf3\xe7r[\x98b\xed\x8ed % \x1bE!\x8a\xdb\xf2\xde\xcc\x7f\xb6\x00\xb7\xedk:\xab\x0f\xd5g$\xe1%\xa8G\xd6;\f\xe2\xa8\xa8\xb6\xaev\xd2\xc9\xfeA\xfb\x9d\xc2\xb1\x9d\xeaq\xdcXI4I\xb8\xc9\xfe6\xdf\x11\xc5\xeb\xb1.;\xd9\xd0\xe2\xe1:V\x8a', 0x40, 0x149, 0x0) mq_timedsend(r3, &(0x7f0000001e00)="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", 0x2000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0x7, 0xb4, 0x0, 0x3}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000340)=ANY=[]) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x842) r5 = socket$inet_udplite(0x2, 0x2, 0x88) mq_notify(r2, &(0x7f0000001c40)={0x0, 0x38, 0x4, @thr={&(0x7f0000000b40)="7b6bce581be8d10f7381004a5e43c2754d8d0d667f6f181f1627a2cf45afc17e0d23bfa3be7735b5c154a5c67b61eae16a9dc2cf61a2376c8f7430417875fe69b8107d0371f73eff3d72b47cf625ced92a5ea0ae913075441550bf4aa30650287455500a55cdf76cfe339c4afe353d0f336fdcc60a108e2cc66f5d924052d098450adaea27fdf0138f58f452e558a4c4d4198241d7034c1ac586f2e1ec4582f6dd8a10ed98ae10c424187715206999875b17067d189407868f7e98f03029d99437106d88123cfb376d9aa12221463650b4cc0869b6ea8968", &(0x7f0000000c40)="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"}}) r6 = getegid() setgid(r6) r7 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f0000000b00)) fsetxattr$system_posix_acl(r5, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xee01}], {0x4, 0x4}, [{0x8, 0x1, r6}], {0x10, 0x2}, {0x20, 0x2}}, 0x34, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file1\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./file1\x00', 0x0, 0x6, &(0x7f0000000780)=[{&(0x7f0000000240)="9e9735df12dac865f28a7974230e67899f400d777450b7514b49a55ad05db27d059bd3a7ab216d26bb37ec14a24cf6595352a0f1ba905480a5c38b677482e0a2106e58746e662667b29391eb6d93f22662", 0x51, 0x778}, {&(0x7f00000002c0)="db6eaa86e0053ffe7ebd6bbb7d136ee99c5b67c6a6457b52559fa8e7f9d75e25037c4c7a1d9dc16fa9ab3080b1fd9dd20e36da5ccf0fdbe4537eecb2ba689cc392f771254d9ab6891060ef9760e6b1fb3332fef9c0476a2057e08aa3e1fa7318249036df1517df7512ac7b763c0221c96394a594ef3469b745435018d5ca6410edd3708d5ceada636bae7a7ac0c2637fc8f7a562016ef7f31ea85d", 0x9b, 0xff}, {&(0x7f0000000380)="2de4c999e2656e5553d8916797f73b90882c629f99e4faa205f338596c5d3818210132181c55d2879ed94c3401e2d036f18b8877b623f36f7161048982fade7cdb96ea97de7d3994", 0x48, 0xffff}, {&(0x7f00000004c0)="edd7aa225bcfdccdbb90b3e45fc67fc0e1dc541c12f2acb64c9fe192a1f632c2655c5ec3472423df21003ce5e50346bfb6ec04871c963107a4729c467690df260d6c33dae975db898b9949340a5f312d19278f3f7042b0351e72ff8a54dfd112044423bad550cae5708e89e69dae91c388b74ef0fd30fde1ed9f7c5978d4e613fc8a3b0d759a0adb5c2841e5a9b5306fe2123636fc44070541051020c33a946f8193213aa7ba5d22697812f59bc1a3a4fc0cb9a4bb93cf62e25e2faec7e5437e0cf68f85ef6881d3f0581afadd60edbec305", 0xd2, 0x6}, {&(0x7f00000005c0)="7261eb3137091d36d7cf3fcf5576fc6676d0018f2a3782302f2070c1afed625cbd4aec78bb1a6f0baa85bd077e673da9576bffd5f812de6a23b6bcfc2435cf583405d7f2c6501e01ee54c86cca44f7fff1f9b1ef5373375d390409e4b54ade170d15de32dc5c991256debf177117d6cb30da10c85733ef9465e0a14110dc8e1d1c84b7c8fc86934f9400c16953e11050ba4e6e34dac0d75203c3e02690cede535a2be44d6454d73edb0dee99e52ad43f12a3f9a6f3f183d46b33e73ef54b07782e3677c005843f4ac765b523afff70a205970791e8882f250ba482293e1b43d364ac44f49481eb0f1d649a", 0xeb, 0x5}, {&(0x7f00000006c0)="c0e5a7fa5b5e82083c0165a584f4babcaea0715021287a4b77d394f41b91fc5f345bbf93f3f799427db94a163960e53fc7a6f22ba679244ec8ce4639025ec1cc6631c0e8ff39a48cea2c5cd240ce11ee623a65813f4109bc9bb79f292807b2a0620f0be751501a0aa99bf4681d4434f3db822545fec0d5f028fd5427ace3a0900fbdaf", 0x83, 0x8}], 0x0, &(0x7f0000000900)={[{@fat=@fmask={'fmask', 0x3d, 0x7}}, {@rodir}, {@fat=@gid={'gid', 0x3d, r6}}, {@uni_xlate}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@nonumtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp850'}}], [{@smackfsdef={'smackfsdef', 0x3d, '\x18\xb4Z\x1d\xc3\xc4\x82d\nc\xc6\xc2\xe8`\xec\xb6\xaal1\xc4\xf0\xdbN\x0f\xa8\xd8\xeaj|\x93\xca\xc7o\xe3\xcf\xa5Pr=\v\xa4\b@SD\xaf3\xe7r[\x98b\xed\x8ed % \x1bE!\x8a\xdb\xf2\xde\xcc\x7f\xb6\x00\xb7\xedk:\xab\x0f\xd5g$\xe1%\xa8G\xd6;\f\xe2\xa8\xa8\xb6\xaev\xd2\xc9\xfeA\xfb\x9d\xc2\xb1\x9d\xeaq\xdcXI4I\xb8\xc9\xfe6\xdf\x11\xc5\xeb\xb1.;\xd9\xd0\xe2\xe1:V\x8a'}}, {@uid_lt={'uid<', r8}}, {@subj_user={'subj_user', 0x3d, '\x18\xb4Z\x1d\xc3\xc4\x82d\nc\xc6\xc2\xe8`\xec\xb6\xaal1\xc4\xf0\xdbN\x0f\xa8\xd8\xeaj|\x93\xca\xc7o\xe3\xcf\xa5Pr=\v\xa4\b@SD\xaf3\xe7r[\x98b\xed\x8ed % \x1bE!\x8a\xdb\xf2\xde\xcc\x7f\xb6\x00\xb7\xedk:\xab\x0f\xd5g$\xe1%\xa8G\xd6;\f\xe2\xa8\xa8\xb6\xaev\xd2\xc9\xfeA\xfb\x9d\xc2\xb1\x9d\xeaq\xdcXI4I\xb8\xc9\xfe6\xdf\x11\xc5\xeb\xb1.;\xd9\xd0\xe2\xe1:V\x8a'}}, {@obj_role}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="2321202e2fa7318e10c48b28d28632eb4a643966696c653120212069736f39363630002069736f3936363000205b2e0a537458ebceba7a33a13ac082d3ac3fc7f6c5"], 0x42) 07:43:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 3) 07:43:19 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(r0, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x340) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file1'}, 0x3) 07:43:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r4, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:19 executing program 7: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f0000000180)=@caif=@dbg={0x25, 0x0, 0xfd}, 0x80, 0x0}}], 0x1, 0x0) pread64(r0, &(0x7f0000000240)=""/58, 0x3a, 0x3) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x501401, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x18400, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8880, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) [ 1005.540325] FAULT_INJECTION: forcing a failure. [ 1005.540325] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.541567] CPU: 1 PID: 8036 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1005.542073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1005.542767] Call Trace: [ 1005.543004] dump_stack+0x107/0x167 [ 1005.543317] should_fail.cold+0x5/0xa [ 1005.543651] should_failslab+0x5/0x20 [ 1005.543986] __kmalloc_node_track_caller+0x74/0x3b0 [ 1005.544407] ? __ip_append_data+0x2930/0x3310 [ 1005.544760] __alloc_skb+0xb1/0x5b0 [ 1005.545044] __ip_append_data+0x2930/0x3310 [ 1005.545379] ? lock_chain_count+0x20/0x20 [ 1005.545697] ? raw_destroy+0x30/0x30 [ 1005.545994] ? ip_finish_output+0x330/0x330 [ 1005.546360] ? lock_release+0x680/0x680 [ 1005.546672] ? ipv4_mtu+0x1ed/0x2c0 [ 1005.546955] ? raw_destroy+0x30/0x30 [ 1005.547272] ip_append_data+0x114/0x1a0 [ 1005.547587] raw_sendmsg+0xaa6/0x29d0 [ 1005.547926] ? dst_output+0x170/0x170 [ 1005.548248] ? __lock_acquire+0x1657/0x5b00 [ 1005.548591] ? perf_trace_lock+0xac/0x490 [ 1005.548910] ? SOFTIRQ_verbose+0x10/0x10 [ 1005.549230] ? __lockdep_reset_lock+0x180/0x180 [ 1005.549634] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1005.550028] ? find_held_lock+0x2c/0x110 [ 1005.550363] ? trace_hardirqs_on+0x5b/0x180 [ 1005.550693] ? dst_output+0x170/0x170 [ 1005.551013] inet_sendmsg+0x11d/0x140 [ 1005.551302] ? inet_send_prepare+0x540/0x540 [ 1005.551671] __sock_sendmsg+0x13c/0x190 [ 1005.551867] FAULT_INJECTION: forcing a failure. [ 1005.551867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.552001] ____sys_sendmsg+0x334/0x870 [ 1005.554327] ? sock_write_iter+0x3d0/0x3d0 [ 1005.554675] ? do_recvmmsg+0x6d0/0x6d0 [ 1005.555003] ? perf_trace_lock+0xac/0x490 [ 1005.555364] ? __lockdep_reset_lock+0x180/0x180 [ 1005.555752] ? perf_trace_lock+0xac/0x490 [ 1005.556112] ___sys_sendmsg+0xf3/0x170 [ 1005.556438] ? sendmsg_copy_msghdr+0x160/0x160 [ 1005.556814] ? lock_downgrade+0x6d0/0x6d0 [ 1005.557168] ? lock_downgrade+0x6d0/0x6d0 [ 1005.557532] ? __fget_files+0x296/0x4c0 [ 1005.557876] ? __fget_light+0xea/0x290 [ 1005.558201] __sys_sendmmsg+0x195/0x470 [ 1005.558533] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1005.558901] ? lock_downgrade+0x6d0/0x6d0 [ 1005.559256] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1005.559674] ? wait_for_completion_io+0x270/0x270 [ 1005.560086] ? rcu_read_lock_any_held+0x75/0xa0 [ 1005.560476] ? vfs_write+0x354/0xa70 [ 1005.560784] ? fput_many+0x2f/0x1a0 [ 1005.561103] ? ksys_write+0x1a9/0x260 [ 1005.561421] ? __ia32_sys_read+0xb0/0xb0 [ 1005.561778] __x64_sys_sendmmsg+0x99/0x100 [ 1005.562129] do_syscall_64+0x33/0x40 [ 1005.562442] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1005.562882] RIP: 0033:0x7f24b3ae7b19 [ 1005.563198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1005.564727] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1005.565359] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1005.565960] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1005.566559] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.567164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1005.567753] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1005.568546] CPU: 0 PID: 8033 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1005.569644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1005.570951] Call Trace: [ 1005.571389] dump_stack+0x107/0x167 [ 1005.571987] should_fail.cold+0x5/0xa [ 1005.572631] _copy_from_user+0x2e/0x1b0 [ 1005.573278] iovec_from_user+0x141/0x400 [ 1005.573915] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1005.574736] __import_iovec+0x67/0x590 [ 1005.575368] ? __ia32_sys_shutdown+0x80/0x80 [ 1005.576101] import_iovec+0x83/0xb0 [ 1005.576698] sendmsg_copy_msghdr+0x131/0x160 [ 1005.577406] ? do_recvmmsg+0x6d0/0x6d0 [ 1005.578017] ? perf_trace_lock+0xac/0x490 [ 1005.578721] ? __lockdep_reset_lock+0x180/0x180 [ 1005.579469] ? perf_trace_lock+0xac/0x490 [ 1005.580172] ___sys_sendmsg+0xc6/0x170 [ 1005.580793] ? sendmsg_copy_msghdr+0x160/0x160 [ 1005.581528] ? __fget_files+0x26d/0x4c0 [ 1005.582171] ? lock_downgrade+0x6d0/0x6d0 [ 1005.582833] ? lock_downgrade+0x6d0/0x6d0 [ 1005.583506] ? __fget_files+0x296/0x4c0 [ 1005.584190] ? __fget_light+0xea/0x290 [ 1005.584815] __sys_sendmmsg+0x195/0x470 [ 1005.585482] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1005.586204] ? lock_downgrade+0x6d0/0x6d0 [ 1005.587062] ? ksys_write+0x12d/0x260 [ 1005.587695] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1005.588491] ? wait_for_completion_io+0x270/0x270 [ 1005.589281] ? rcu_read_lock_any_held+0x75/0xa0 [ 1005.590010] ? vfs_write+0x354/0xa70 [ 1005.590614] ? fput_many+0x2f/0x1a0 [ 1005.591204] ? ksys_write+0x1a9/0x260 [ 1005.591809] ? __ia32_sys_read+0xb0/0xb0 [ 1005.592489] __x64_sys_sendmmsg+0x99/0x100 [ 1005.593186] do_syscall_64+0x33/0x40 [ 1005.593774] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1005.594594] RIP: 0033:0x7f62f063ab19 [ 1005.595194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1005.598091] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1005.599307] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1005.600437] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1005.601568] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.602685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.603805] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1005.613805] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1005.622033] FAULT_INJECTION: forcing a failure. [ 1005.622033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.623270] CPU: 1 PID: 8025 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1005.623832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1005.624529] Call Trace: [ 1005.624751] dump_stack+0x107/0x167 [ 1005.625061] should_fail.cold+0x5/0xa [ 1005.625388] _copy_from_user+0x2e/0x1b0 [ 1005.625729] iovec_from_user+0x141/0x400 [ 1005.626058] ? move_addr_to_kernel.part.0+0xc8/0x110 [ 1005.626493] __import_iovec+0x67/0x590 [ 1005.626819] ? __ia32_sys_shutdown+0x80/0x80 [ 1005.627195] import_iovec+0x83/0xb0 [ 1005.627516] sendmsg_copy_msghdr+0x131/0x160 [ 1005.627868] ? do_recvmmsg+0x6d0/0x6d0 [ 1005.628200] ? perf_trace_lock+0xac/0x490 [ 1005.628531] ? __lockdep_reset_lock+0x180/0x180 [ 1005.628922] ? perf_trace_lock+0xac/0x490 [ 1005.629278] ___sys_sendmsg+0xc6/0x170 [ 1005.629591] ? sendmsg_copy_msghdr+0x160/0x160 [ 1005.629978] ? __fget_files+0x26d/0x4c0 [ 1005.630310] ? lock_downgrade+0x6d0/0x6d0 [ 1005.630665] ? lock_downgrade+0x6d0/0x6d0 [ 1005.631015] ? __fget_files+0x296/0x4c0 [ 1005.631364] ? __fget_light+0xea/0x290 [ 1005.631668] __sys_sendmmsg+0x195/0x470 [ 1005.632024] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1005.632389] ? lock_downgrade+0x6d0/0x6d0 [ 1005.632737] ? ksys_write+0x12d/0x260 [ 1005.633061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1005.633481] ? wait_for_completion_io+0x270/0x270 [ 1005.633881] ? rcu_read_lock_any_held+0x75/0xa0 [ 1005.634234] ? vfs_write+0x354/0xa70 [ 1005.634522] ? fput_many+0x2f/0x1a0 [ 1005.634844] ? ksys_write+0x1a9/0x260 [ 1005.635141] ? __ia32_sys_read+0xb0/0xb0 [ 1005.635494] __x64_sys_sendmmsg+0x99/0x100 [ 1005.635827] do_syscall_64+0x33/0x40 [ 1005.636153] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1005.636546] RIP: 0033:0x7fa5747bcb19 [ 1005.636860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1005.638248] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1005.638881] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 1005.639483] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1005.640085] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1005.640677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.641291] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 07:43:19 executing program 7: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", ""]}, 0x10}}, 0x24008800) r0 = syz_open_dev$vcsn(&(0x7f0000000180), 0x8000, 0x228000) sendmsg$AUDIT_SET(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x3e9, 0x4, 0x70bd29, 0x25dfdbfd, {0x89, 0x1, 0x2, 0xffffffffffffffff, 0x0, 0x7, 0x1f, 0x6, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4040090) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x5fe, 0x0, 0x0, @u32}, @nested={0x8, 0x8, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x24}}, 0x0) 07:43:19 executing program 2: r0 = syz_io_uring_setup(0xd98, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x32c}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, {0x2}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 07:43:19 executing program 6: r0 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@gid={'gid', 0x3d, 0xee00}}]}) mknodat$loop(r0, &(0x7f0000000000)='./mnt\x00', 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) 07:43:19 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xb060e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0801050006000000"], 0x24}}, 0x0) r4 = syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c011900000000000019000000", 0x7b, 0xb800}], 0x0, &(0x7f0000011700)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x5, 0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000780)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000007c0)=0x2c) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001640)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='./file0\x00']) fstat(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x5}, [{0x2, 0x6}, {}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x5, r8}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x3, r9}, {0x8, 0x2, 0xee00}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6, r9}}, './file0\x00'}) [ 1005.705059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1005.731962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1005.765191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.765868] print_req_error: 6 callbacks suppressed [ 1005.765884] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.767628] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.767668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.768560] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1005.769136] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.770909] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.770953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.771813] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1005.772442] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.774202] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.774247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.775112] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1005.775715] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.777533] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.777622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.778436] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1005.780154] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.781368] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1005.781407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.782245] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1005.782923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.783504] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1005.784125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.784645] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1005.785858] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1005.988880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1005.989602] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1006.002365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.002992] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1006.003030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.004417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.005092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.005783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.006477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1006.007153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:43:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 21) 07:43:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 4) 07:43:33 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xb060e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0801050006000000"], 0x24}}, 0x0) r4 = syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000), 0x0, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701beef005252050181505824016d4100000000416d03000000000000030000000000000000000000000000000054461a010e7809140b2a3a087809140b2a3a087809140b2a3a0843451c011900000000000019000000", 0x7b, 0xb800}], 0x0, &(0x7f0000011700)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x5, 0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="c4010000", @ANYRES16=r3, @ANYBLOB="000328bd7000fedbdf25670000000800c400040000000400c500e000c50023380bbf961f370f2467157c2bc8c1619c1755381104f7667451b48593455b9b2bd7989a18ef6233be1174144da0b59fea8c496dea94e56883f0fd00a626d08ed678d293658563d7c39bbaa04bdb298ef5300200000000000000c480bc95d034b86deeaefd5e354fb6a3dbb68f58438807046b3b16d2f0c288a9b744b306479d7df8949a40ae445e8a01e55b3dbb0a788bdda48777e384b641d4037b6d3693077de98814ae0cae0ee8178b686bfeb1a6bdbe7f7060f75d3a41227ae273983bbc9f801965427c6544e10285570230955896f0ef0fb9bb5a46216225de0800c30000000000bb00c500815eb8e654cd85238f3866ab419deba85795ff143511c1a3839aa6417ee3f3194d9bac4da7eaa710a0458038e3a554a371196738f37e1d91157f6ce5ea568e24ef6c63f0e86be4b9e259dcaa0ec0d2dc88c05b4f9cef74b6269bf12272f13f4ee2171f2601c7a9ca2452dc55425cf62955bc51dc013ec7978e8d7d90aba6f47a4eb44436f70dafcd0018870254c89d320b1cd88da6fbc96da7b06f80498a01dc296ccef44a3076e8dd8988692f73d2cffc89b34509fe0300548ad93261b79e4b718395f38a54c1cfdf0117e167337a2cd7df4f879c41cbba59e9fd31dfa7a35767cdca724c5e58eb67a2ae0c4bf6124453cb3efc21305de141e9b06dae8b698fee8adeafaf1308135a081b4fbd03eb3009e56291f4bb36250b79a644b120ae0d7e68080d44"], 0x1c4}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000780)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f00000007c0)=0x2c) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r6, 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001640)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB='./file0\x00']) fstat(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {0x1, 0x5}, [{0x2, 0x6}, {}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x5, r8}, {0x8, 0x6}, {0x8, 0x1}, {0x8, 0x3, r9}, {0x8, 0x2, 0xee00}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x6}}, 0x74, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r6, r9}}, './file0\x00'}) 07:43:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:33 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001000210c000000000000000000000000080000000000000004000000"], 0x20}}, 0x0) 07:43:34 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000180)=""/241, &(0x7f0000000000)=0xf1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sync_file_range(r4, 0x2581f494, 0x1f, 0x1) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c0000000000000000000000080000004d4bd0368853b79e6aed706913de9bc125c9d0af52baae968e7d51d4ed818c6d90e6dc03a543f8e63eb6e92cec590e746a8ffe7f864dbc91c89fb6a20e6062f76e2a1dec04f3c58b9a53131b7196936e88ef68eaaaac6121268d04eb6ae6761ac1cdfdc8c3b549deed2c9b5dcd8d33c292ec99b9d2f99a64c8d0927f304dbe0b2c12ce", @ANYRES32=r5], 0x38}}], 0x1, 0x0) 07:43:34 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) dup2(0xffffffffffffffff, r4) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x1c, 0x1f0, &(0x7f0000000280)}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x1) 07:43:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 4) [ 1019.883808] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1019.891834] FAULT_INJECTION: forcing a failure. [ 1019.891834] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.893764] CPU: 0 PID: 8067 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1019.894275] FAULT_INJECTION: forcing a failure. [ 1019.894275] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.894752] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.894759] Call Trace: [ 1019.894783] dump_stack+0x107/0x167 [ 1019.894804] should_fail.cold+0x5/0xa [ 1019.894831] ? sock_kmalloc+0xae/0x100 [ 1019.899602] should_failslab+0x5/0x20 [ 1019.900153] __kmalloc+0x72/0x390 [ 1019.900665] sock_kmalloc+0xae/0x100 [ 1019.901197] ____sys_sendmsg+0x665/0x870 [ 1019.901789] ? sock_write_iter+0x3d0/0x3d0 [ 1019.902387] ? do_recvmmsg+0x6d0/0x6d0 [ 1019.902951] ? perf_trace_lock+0xac/0x490 [ 1019.903558] ? __lockdep_reset_lock+0x180/0x180 [ 1019.904247] ? perf_trace_lock+0xac/0x490 [ 1019.904844] ___sys_sendmsg+0xf3/0x170 [ 1019.905396] ? sendmsg_copy_msghdr+0x160/0x160 [ 1019.906055] ? lock_downgrade+0x6d0/0x6d0 [ 1019.906652] ? lock_downgrade+0x6d0/0x6d0 [ 1019.907245] ? __fget_files+0x296/0x4c0 [ 1019.907821] ? __fget_light+0xea/0x290 [ 1019.908409] __sys_sendmmsg+0x195/0x470 [ 1019.908990] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1019.909604] ? lock_downgrade+0x6d0/0x6d0 [ 1019.910202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1019.910894] ? wait_for_completion_io+0x270/0x270 [ 1019.911590] ? rcu_read_lock_any_held+0x75/0xa0 [ 1019.912253] ? vfs_write+0x354/0xa70 [ 1019.912785] ? fput_many+0x2f/0x1a0 [ 1019.913300] ? ksys_write+0x1a9/0x260 [ 1019.913841] ? __ia32_sys_read+0xb0/0xb0 [ 1019.914429] __x64_sys_sendmmsg+0x99/0x100 [ 1019.915045] do_syscall_64+0x33/0x40 [ 1019.915581] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1019.916305] RIP: 0033:0x7f62f063ab19 [ 1019.916836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.919386] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1019.920528] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1019.921531] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1019.922530] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.923518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.924520] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1019.925613] CPU: 1 PID: 8069 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1019.926694] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.927963] Call Trace: [ 1019.928405] dump_stack+0x107/0x167 [ 1019.928988] should_fail.cold+0x5/0xa [ 1019.929599] ? sock_kmalloc+0xae/0x100 [ 1019.930220] should_failslab+0x5/0x20 [ 1019.930818] __kmalloc+0x72/0x390 [ 1019.931379] sock_kmalloc+0xae/0x100 [ 1019.931972] ____sys_sendmsg+0x665/0x870 [ 1019.932610] ? sock_write_iter+0x3d0/0x3d0 [ 1019.933173] FAULT_INJECTION: forcing a failure. [ 1019.933173] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.933269] ? do_recvmmsg+0x6d0/0x6d0 [ 1019.933300] ? perf_trace_lock+0xac/0x490 [ 1019.936081] ? __lockdep_reset_lock+0x180/0x180 [ 1019.936776] ? perf_trace_lock+0xac/0x490 [ 1019.937396] ___sys_sendmsg+0xf3/0x170 [ 1019.938012] ? sendmsg_copy_msghdr+0x160/0x160 [ 1019.938702] ? lock_downgrade+0x6d0/0x6d0 [ 1019.939322] ? lock_downgrade+0x6d0/0x6d0 [ 1019.939951] ? __fget_files+0x296/0x4c0 [ 1019.940574] ? __fget_light+0xea/0x290 [ 1019.941160] __sys_sendmmsg+0x195/0x470 [ 1019.941767] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1019.942402] ? lock_downgrade+0x6d0/0x6d0 [ 1019.943049] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1019.943773] ? wait_for_completion_io+0x270/0x270 [ 1019.944501] ? rcu_read_lock_any_held+0x75/0xa0 [ 1019.945184] ? vfs_write+0x354/0xa70 [ 1019.945744] ? fput_many+0x2f/0x1a0 [ 1019.946289] ? ksys_write+0x1a9/0x260 [ 1019.946859] ? __ia32_sys_read+0xb0/0xb0 [ 1019.947480] __x64_sys_sendmmsg+0x99/0x100 [ 1019.948126] do_syscall_64+0x33/0x40 [ 1019.948686] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1019.949435] RIP: 0033:0x7fa5747bcb19 [ 1019.949994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.952656] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1019.953807] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 1019.954847] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1019.955886] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.956941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.957988] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 [ 1019.959074] CPU: 0 PID: 8073 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1019.960083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1019.961230] Call Trace: [ 1019.961611] dump_stack+0x107/0x167 [ 1019.962121] should_fail.cold+0x5/0xa [ 1019.962657] ? create_object.isra.0+0x3a/0xa20 [ 1019.963325] should_failslab+0x5/0x20 [ 1019.963874] kmem_cache_alloc+0x5b/0x310 [ 1019.964492] create_object.isra.0+0x3a/0xa20 [ 1019.965115] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1019.965834] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1019.966541] ? __ip_append_data+0x2930/0x3310 [ 1019.967176] __alloc_skb+0xb1/0x5b0 [ 1019.967693] __ip_append_data+0x2930/0x3310 [ 1019.968319] ? lock_chain_count+0x20/0x20 [ 1019.968902] ? raw_destroy+0x30/0x30 [ 1019.969448] ? ip_finish_output+0x330/0x330 [ 1019.970055] ? lock_release+0x680/0x680 [ 1019.970613] ? ipv4_mtu+0x1ed/0x2c0 07:43:34 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffb9, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r0, &(0x7f0000000000), 0x1b4000) mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x2) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') getdents64(r1, &(0x7f0000001200)=""/4081, 0x742) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x80) openat(r2, &(0x7f0000000200)='./file0\x00', 0x410400, 0x1) getdents(r1, &(0x7f00000003c0)=""/145, 0x18) getdents(r1, &(0x7f0000002200)=""/4096, 0x1000) 07:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:34 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) fcntl$dupfd(r1, 0x0, r0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000180)=""/241, &(0x7f0000000000)=0xf1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sync_file_range(r4, 0x2581f494, 0x1f, 0x1) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c0000000000000000000000080000004d4bd0368853b79e6aed706913de9bc125c9d0af52baae968e7d51d4ed818c6d90e6dc03a543f8e63eb6e92cec590e746a8ffe7f864dbc91c89fb6a20e6062f76e2a1dec04f3c58b9a53131b7196936e88ef68eaaaac6121268d04eb6ae6761ac1cdfdc8c3b549deed2c9b5dcd8d33c292ec99b9d2f99a64c8d0927f304dbe0b2c12ce", @ANYRES32=r5], 0x38}}], 0x1, 0x0) 07:43:34 executing program 4: open_tree(0xffffffffffffffff, 0x0, 0x80980) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x11) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) read(0xffffffffffffffff, &(0x7f0000000440)=""/56, 0x38) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) r2 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000700)={0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x1) syz_io_uring_setup(0x6805, &(0x7f0000000340)={0x0, 0xfd3c, 0x2, 0x1, 0x365, 0x0, r2}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_open_dev$vcsa(&(0x7f0000004700), 0xa8dc, 0x400) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4090) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYBLOB="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"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) 07:43:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 5) 07:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 22) 07:43:34 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(r0, &(0x7f00000000c0)=""/113, 0x71, 0x8) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 07:43:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 5) 07:43:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 6) 07:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 23) 07:43:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 6) [ 1019.971150] ? raw_destroy+0x30/0x30 [ 1019.971169] ip_append_data+0x114/0x1a0 [ 1019.971201] raw_sendmsg+0xaa6/0x29d0 [ 1019.971237] ? dst_output+0x170/0x170 [ 1019.971253] ? __lock_acquire+0x1657/0x5b00 [ 1019.971293] ? perf_trace_lock+0xac/0x490 [ 1019.971309] ? SOFTIRQ_verbose+0x10/0x10 [ 1019.971333] ? __lockdep_reset_lock+0x180/0x180 [ 1019.971363] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1019.971378] ? find_held_lock+0x2c/0x110 [ 1019.971416] ? trace_hardirqs_on+0x5b/0x180 [ 1019.971439] ? dst_output+0x170/0x170 [ 1019.971460] inet_sendmsg+0x11d/0x140 [ 1019.971478] ? inet_send_prepare+0x540/0x540 [ 1019.971494] __sock_sendmsg+0x13c/0x190 [ 1019.971514] ____sys_sendmsg+0x334/0x870 [ 1019.971536] ? sock_write_iter+0x3d0/0x3d0 [ 1019.971552] ? do_recvmmsg+0x6d0/0x6d0 [ 1019.971569] ? perf_trace_lock+0xac/0x490 [ 1019.971596] ? __lockdep_reset_lock+0x180/0x180 [ 1019.971613] ? perf_trace_lock+0xac/0x490 [ 1019.971638] ___sys_sendmsg+0xf3/0x170 [ 1019.971660] ? sendmsg_copy_msghdr+0x160/0x160 [ 1019.971686] ? lock_downgrade+0x6d0/0x6d0 [ 1019.971715] ? lock_downgrade+0x6d0/0x6d0 [ 1019.971740] ? __fget_files+0x296/0x4c0 [ 1019.971773] ? __fget_light+0xea/0x290 [ 1019.971802] __sys_sendmmsg+0x195/0x470 [ 1019.971829] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1019.971848] ? lock_downgrade+0x6d0/0x6d0 [ 1019.971890] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1019.971914] ? wait_for_completion_io+0x270/0x270 [ 1019.971936] ? rcu_read_lock_any_held+0x75/0xa0 [ 1019.971952] ? vfs_write+0x354/0xa70 [ 1019.971971] ? fput_many+0x2f/0x1a0 [ 1019.971991] ? ksys_write+0x1a9/0x260 [ 1019.972010] ? __ia32_sys_read+0xb0/0xb0 [ 1019.972049] __x64_sys_sendmmsg+0x99/0x100 [ 1019.972072] do_syscall_64+0x33/0x40 [ 1019.972089] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1019.972102] RIP: 0033:0x7f24b3ae7b19 [ 1019.972121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1019.972131] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1019.972152] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1019.972163] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1019.972173] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1019.972183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1019.972194] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1019.979808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1020.103292] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1020.209949] FAULT_INJECTION: forcing a failure. [ 1020.209949] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.209972] CPU: 0 PID: 8085 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1020.209982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.209988] Call Trace: [ 1020.210011] dump_stack+0x107/0x167 [ 1020.210031] should_fail.cold+0x5/0xa [ 1020.210054] ? create_object.isra.0+0x3a/0xa20 [ 1020.210076] should_failslab+0x5/0x20 [ 1020.210094] kmem_cache_alloc+0x5b/0x310 [ 1020.210119] create_object.isra.0+0x3a/0xa20 [ 1020.210138] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1020.210162] __kmalloc+0x16e/0x390 [ 1020.210190] sock_kmalloc+0xae/0x100 [ 1020.210219] ____sys_sendmsg+0x665/0x870 [ 1020.210241] ? sock_write_iter+0x3d0/0x3d0 [ 1020.210256] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.210276] ? perf_trace_lock+0xac/0x490 [ 1020.210301] ? __lockdep_reset_lock+0x180/0x180 [ 1020.210317] ? perf_trace_lock+0xac/0x490 [ 1020.210342] ___sys_sendmsg+0xf3/0x170 [ 1020.210363] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.210388] ? lock_downgrade+0x6d0/0x6d0 [ 1020.210415] ? lock_downgrade+0x6d0/0x6d0 [ 1020.210440] ? __fget_files+0x296/0x4c0 [ 1020.210471] ? __fget_light+0xea/0x290 [ 1020.210499] __sys_sendmmsg+0x195/0x470 [ 1020.210525] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.210542] ? lock_downgrade+0x6d0/0x6d0 [ 1020.210582] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.210606] ? wait_for_completion_io+0x270/0x270 [ 1020.210628] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.210644] ? vfs_write+0x354/0xa70 [ 1020.210663] ? fput_many+0x2f/0x1a0 [ 1020.210682] ? ksys_write+0x1a9/0x260 [ 1020.210701] ? __ia32_sys_read+0xb0/0xb0 [ 1020.210728] __x64_sys_sendmmsg+0x99/0x100 [ 1020.210751] do_syscall_64+0x33/0x40 [ 1020.210768] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.210779] RIP: 0033:0x7f62f063ab19 [ 1020.210796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.210807] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.210827] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1020.210837] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.210848] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.210858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.210869] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1020.301766] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1020.329065] FAULT_INJECTION: forcing a failure. [ 1020.329065] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.329088] CPU: 0 PID: 8092 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1020.329098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.329104] Call Trace: [ 1020.329127] dump_stack+0x107/0x167 [ 1020.329148] should_fail.cold+0x5/0xa [ 1020.329169] ? __alloc_skb+0x6d/0x5b0 [ 1020.329192] should_failslab+0x5/0x20 [ 1020.329211] kmem_cache_alloc_node+0x55/0x330 [ 1020.329236] __alloc_skb+0x6d/0x5b0 [ 1020.329263] __ip_append_data+0x2930/0x3310 [ 1020.329296] ? lock_chain_count+0x20/0x20 [ 1020.329320] ? raw_destroy+0x30/0x30 [ 1020.329353] ? ip_finish_output+0x330/0x330 [ 1020.329374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1020.329389] ? ipv4_mtu+0x1ed/0x2c0 [ 1020.329411] ? raw_destroy+0x30/0x30 [ 1020.329429] ip_append_data+0x114/0x1a0 [ 1020.329460] raw_sendmsg+0xaa6/0x29d0 [ 1020.329495] ? dst_output+0x170/0x170 [ 1020.329511] ? __lock_acquire+0x1657/0x5b00 [ 1020.329550] ? perf_trace_lock+0xac/0x490 [ 1020.329567] ? SOFTIRQ_verbose+0x10/0x10 [ 1020.329590] ? __lockdep_reset_lock+0x180/0x180 [ 1020.329620] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1020.329635] ? find_held_lock+0x2c/0x110 [ 1020.329671] ? trace_hardirqs_on+0x5b/0x180 [ 1020.329694] ? dst_output+0x170/0x170 [ 1020.329715] inet_sendmsg+0x11d/0x140 [ 1020.329732] ? inet_send_prepare+0x540/0x540 [ 1020.329749] __sock_sendmsg+0x13c/0x190 [ 1020.329768] ____sys_sendmsg+0x334/0x870 [ 1020.329791] ? sock_write_iter+0x3d0/0x3d0 [ 1020.329806] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.329823] ? perf_trace_lock+0xac/0x490 [ 1020.329849] ? __lockdep_reset_lock+0x180/0x180 [ 1020.329866] ? perf_trace_lock+0xac/0x490 [ 1020.329892] ___sys_sendmsg+0xf3/0x170 [ 1020.329913] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.329938] ? lock_downgrade+0x6d0/0x6d0 [ 1020.329967] ? lock_downgrade+0x6d0/0x6d0 [ 1020.329993] ? __fget_files+0x296/0x4c0 [ 1020.330025] ? __fget_light+0xea/0x290 [ 1020.330054] __sys_sendmmsg+0x195/0x470 [ 1020.330080] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.330098] ? lock_downgrade+0x6d0/0x6d0 [ 1020.330139] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.330163] ? wait_for_completion_io+0x270/0x270 [ 1020.330186] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.330203] ? vfs_write+0x354/0xa70 [ 1020.330222] ? fput_many+0x2f/0x1a0 [ 1020.330241] ? ksys_write+0x1a9/0x260 [ 1020.330261] ? __ia32_sys_read+0xb0/0xb0 [ 1020.330289] __x64_sys_sendmmsg+0x99/0x100 [ 1020.330311] do_syscall_64+0x33/0x40 [ 1020.330329] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.330341] RIP: 0033:0x7f24b3ae7b19 [ 1020.330359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.330369] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.330390] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1020.330401] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.330411] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.330421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.330432] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1020.383748] FAULT_INJECTION: forcing a failure. [ 1020.383748] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.383769] CPU: 0 PID: 8099 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1020.383779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.383784] Call Trace: [ 1020.383803] dump_stack+0x107/0x167 [ 1020.383822] should_fail.cold+0x5/0xa [ 1020.383843] ? create_object.isra.0+0x3a/0xa20 [ 1020.383864] should_failslab+0x5/0x20 [ 1020.383881] kmem_cache_alloc+0x5b/0x310 [ 1020.383906] create_object.isra.0+0x3a/0xa20 [ 1020.383931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1020.383954] __kmalloc+0x16e/0x390 [ 1020.383981] sock_kmalloc+0xae/0x100 [ 1020.384002] ____sys_sendmsg+0x665/0x870 [ 1020.384032] ? sock_write_iter+0x3d0/0x3d0 [ 1020.384048] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.384066] ? perf_trace_lock+0xac/0x490 [ 1020.384092] ? __lockdep_reset_lock+0x180/0x180 [ 1020.384109] ? perf_trace_lock+0xac/0x490 [ 1020.384133] ___sys_sendmsg+0xf3/0x170 [ 1020.384154] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.384179] ? lock_downgrade+0x6d0/0x6d0 [ 1020.384207] ? lock_downgrade+0x6d0/0x6d0 [ 1020.384231] ? __fget_files+0x296/0x4c0 [ 1020.384262] ? __fget_light+0xea/0x290 [ 1020.384290] __sys_sendmmsg+0x195/0x470 [ 1020.384315] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.384333] ? lock_downgrade+0x6d0/0x6d0 [ 1020.384372] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.384396] ? wait_for_completion_io+0x270/0x270 [ 1020.384417] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.384433] ? vfs_write+0x354/0xa70 [ 1020.384451] ? fput_many+0x2f/0x1a0 [ 1020.384471] ? ksys_write+0x1a9/0x260 [ 1020.384489] ? __ia32_sys_read+0xb0/0xb0 [ 1020.384517] __x64_sys_sendmmsg+0x99/0x100 [ 1020.384538] do_syscall_64+0x33/0x40 [ 1020.384555] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.384566] RIP: 0033:0x7fa5747bcb19 [ 1020.384583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.384593] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.384613] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 1020.384624] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.384634] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.384644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.384655] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 [ 1020.424916] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1020.440555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.440591] print_req_error: 22 callbacks suppressed [ 1020.440610] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.440698] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.440717] buffer_io_error: 6 callbacks suppressed [ 1020.440729] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1020.440737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.440774] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.440830] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.440844] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1020.440880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.440917] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441015] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.441034] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1020.441067] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441170] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441185] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1020.441221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.441258] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.441469] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1020.441576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.441669] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1020.441695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1020.441768] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1020.441800] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1020.441828] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1020.444304] FAULT_INJECTION: forcing a failure. [ 1020.444304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.444797] CPU: 0 PID: 8102 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1020.444808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.444813] Call Trace: [ 1020.444834] dump_stack+0x107/0x167 [ 1020.444854] should_fail.cold+0x5/0xa [ 1020.444881] _copy_from_user+0x2e/0x1b0 [ 1020.444903] ____sys_sendmsg+0x6c6/0x870 [ 1020.444926] ? sock_write_iter+0x3d0/0x3d0 [ 1020.444941] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.444960] ? perf_trace_lock+0xac/0x490 [ 1020.444986] ? __lockdep_reset_lock+0x180/0x180 [ 1020.445007] ? perf_trace_lock+0xac/0x490 [ 1020.445032] ___sys_sendmsg+0xf3/0x170 [ 1020.445053] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.445079] ? lock_downgrade+0x6d0/0x6d0 [ 1020.445106] ? lock_downgrade+0x6d0/0x6d0 [ 1020.445132] ? __fget_files+0x296/0x4c0 [ 1020.445162] ? __fget_light+0xea/0x290 [ 1020.445190] __sys_sendmmsg+0x195/0x470 [ 1020.445216] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.445235] ? lock_downgrade+0x6d0/0x6d0 [ 1020.445275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.445299] ? wait_for_completion_io+0x270/0x270 [ 1020.445321] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.445338] ? vfs_write+0x354/0xa70 [ 1020.445365] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1020.445384] ? ksys_write+0x1a9/0x260 [ 1020.445403] ? __ia32_sys_read+0xb0/0xb0 [ 1020.445431] __x64_sys_sendmmsg+0x99/0x100 [ 1020.445453] do_syscall_64+0x33/0x40 [ 1020.445471] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.445483] RIP: 0033:0x7f62f063ab19 [ 1020.445501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.445512] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.445532] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1020.445544] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.445554] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.445565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.445577] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1020.518985] FAULT_INJECTION: forcing a failure. [ 1020.518985] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.519007] CPU: 1 PID: 8105 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1020.519018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.519025] Call Trace: [ 1020.519055] dump_stack+0x107/0x167 [ 1020.519076] should_fail.cold+0x5/0xa [ 1020.519098] ? create_object.isra.0+0x3a/0xa20 [ 1020.519121] should_failslab+0x5/0x20 [ 1020.519141] kmem_cache_alloc+0x5b/0x310 [ 1020.519168] create_object.isra.0+0x3a/0xa20 [ 1020.519187] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1020.519213] kmem_cache_alloc_node+0x169/0x330 [ 1020.519242] __alloc_skb+0x6d/0x5b0 [ 1020.519270] __ip_append_data+0x2930/0x3310 [ 1020.519303] ? lock_chain_count+0x20/0x20 [ 1020.519324] ? raw_destroy+0x30/0x30 [ 1020.519358] ? ip_finish_output+0x330/0x330 [ 1020.519376] ? lock_release+0x680/0x680 [ 1020.519393] ? ipv4_mtu+0x1ed/0x2c0 [ 1020.519418] ? raw_destroy+0x30/0x30 [ 1020.519437] ip_append_data+0x114/0x1a0 [ 1020.519469] raw_sendmsg+0xaa6/0x29d0 [ 1020.519508] ? dst_output+0x170/0x170 [ 1020.519526] ? __lock_acquire+0x1657/0x5b00 [ 1020.519567] ? perf_trace_lock+0xac/0x490 [ 1020.519585] ? SOFTIRQ_verbose+0x10/0x10 [ 1020.519610] ? __lockdep_reset_lock+0x180/0x180 [ 1020.519642] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1020.519659] ? find_held_lock+0x2c/0x110 [ 1020.519700] ? trace_hardirqs_on+0x5b/0x180 [ 1020.519726] ? dst_output+0x170/0x170 [ 1020.519747] inet_sendmsg+0x11d/0x140 [ 1020.519765] ? inet_send_prepare+0x540/0x540 [ 1020.519782] __sock_sendmsg+0x13c/0x190 [ 1020.519803] ____sys_sendmsg+0x334/0x870 [ 1020.519825] ? sock_write_iter+0x3d0/0x3d0 [ 1020.519841] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.519860] ? perf_trace_lock+0xac/0x490 [ 1020.519886] ? __lockdep_reset_lock+0x180/0x180 [ 1020.519904] ? perf_trace_lock+0xac/0x490 [ 1020.519929] ___sys_sendmsg+0xf3/0x170 [ 1020.519952] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.519979] ? lock_downgrade+0x6d0/0x6d0 [ 1020.520009] ? lock_downgrade+0x6d0/0x6d0 [ 1020.520045] ? __fget_files+0x296/0x4c0 [ 1020.520079] ? __fget_light+0xea/0x290 [ 1020.520109] __sys_sendmmsg+0x195/0x470 [ 1020.520137] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.520158] ? lock_downgrade+0x6d0/0x6d0 [ 1020.520202] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.520227] ? wait_for_completion_io+0x270/0x270 [ 1020.520251] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.520268] ? vfs_write+0x354/0xa70 [ 1020.520289] ? fput_many+0x2f/0x1a0 [ 1020.520310] ? ksys_write+0x1a9/0x260 [ 1020.520330] ? __ia32_sys_read+0xb0/0xb0 [ 1020.520360] __x64_sys_sendmmsg+0x99/0x100 [ 1020.520383] do_syscall_64+0x33/0x40 [ 1020.520402] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.520415] RIP: 0033:0x7f24b3ae7b19 [ 1020.520434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.520445] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.520466] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1020.520477] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.520488] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.520499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.520511] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1020.558940] FAULT_INJECTION: forcing a failure. [ 1020.558940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.585553] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1020.585553] program syz-executor.2 not setting count and/or reply_len properly [ 1020.585908] CPU: 0 PID: 8109 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1020.802361] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1020.802369] Call Trace: [ 1020.802394] dump_stack+0x107/0x167 [ 1020.802416] should_fail.cold+0x5/0xa [ 1020.802443] _copy_from_user+0x2e/0x1b0 [ 1020.802467] ____sys_sendmsg+0x6c6/0x870 [ 1020.802491] ? sock_write_iter+0x3d0/0x3d0 [ 1020.802507] ? do_recvmmsg+0x6d0/0x6d0 [ 1020.802528] ? perf_trace_lock+0xac/0x490 [ 1020.802554] ? __lockdep_reset_lock+0x180/0x180 [ 1020.802572] ? perf_trace_lock+0xac/0x490 [ 1020.802597] ___sys_sendmsg+0xf3/0x170 [ 1020.802619] ? sendmsg_copy_msghdr+0x160/0x160 [ 1020.802646] ? lock_downgrade+0x6d0/0x6d0 [ 1020.802674] ? lock_downgrade+0x6d0/0x6d0 [ 1020.802700] ? __fget_files+0x296/0x4c0 [ 1020.802732] ? __fget_light+0xea/0x290 [ 1020.802761] __sys_sendmmsg+0x195/0x470 [ 1020.802787] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1020.802806] ? lock_downgrade+0x6d0/0x6d0 [ 1020.802847] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1020.802872] ? wait_for_completion_io+0x270/0x270 [ 1020.802894] ? rcu_read_lock_any_held+0x75/0xa0 [ 1020.802912] ? vfs_write+0x354/0xa70 [ 1020.802931] ? fput_many+0x2f/0x1a0 [ 1020.802952] ? ksys_write+0x1a9/0x260 [ 1020.802971] ? __ia32_sys_read+0xb0/0xb0 [ 1020.802999] __x64_sys_sendmmsg+0x99/0x100 [ 1020.803023] do_syscall_64+0x33/0x40 [ 1020.803040] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1020.803053] RIP: 0033:0x7fa5747bcb19 [ 1020.803071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1020.803081] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.803102] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 1020.803113] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1020.803125] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1020.803135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.803147] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 07:43:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) ioctl$PIO_FONTRESET(r3, 0x4b6d, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = fcntl$dupfd(r2, 0x0, r4) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x1) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) dup2(0xffffffffffffffff, r4) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1f, 0x1c, 0x1f0, &(0x7f0000000280)}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x1) 07:43:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:43:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 24) 07:43:47 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 7) 07:43:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "2903399b481303fbfbd7cc1a90f86828ec385a749e919359c605a154686d481ebffda4a710ff8ea35e41e76ecd9f98f56eba7d7c10cc369b93f3bd6f6a110804", 0x31}, 0x48, 0xfffffffffffffff8) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffff9, 0xfffffffffffffffa, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "a99d2e61a47cb0cedafb591d081fc583326ab9c0c877e840c403d1843468d59daeb8b4e387612a82335fdfe85629046562679bb90bb3ca00c1074e28e908c029", 0x33}, 0x48, r2) r4 = request_key(&(0x7f0000000580)='.dead\x00', &(0x7f00000005c0)={'syz', 0x0}, &(0x7f0000000600)='user\x00', r0) request_key(&(0x7f00000004c0)='id_legacy\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)='syz_tun\x00', r4) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000240)={0x0, "c2e2726bf6dacc4c02ffc0389e7fd1fb4dd379b8e83d152a32996bfb46ac6dad745e2e314b2e010a5d171c88f784ae39e084d3bea2226834ca62a8277723333a", 0x32}, 0x48, r3) r5 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f00000003c0)={'fscrypt:', @auto=[0x61, 0x38, 0x63, 0x65, 0x61, 0x65, 0x35, 0x30, 0x36, 0x35, 0x30, 0x39, 0x34, 0x64, 0x64, 0x61]}, &(0x7f0000000440)={0x0, "7c2a715d28f1ce9a09feedde56ca703fd69572d5d1904e028387a5ea7392f762b951008f05253d04a9048581f3e79e983fbc17b1387f5023eca81c08681b2be7", 0x31}, 0x48, 0xfffffffffffffffe) keyctl$negate(0xd, r3, 0x5, r5) r6 = gettid() r7 = gettid() kcmp(r6, r7, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0xa5, 0x3, 0x1, 0x0, 0x0, 0x7fff, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_config_ext={0x8001, 0x3000000000}, 0x1400, 0xc000000000, 0xfffffffe, 0x8, 0x2, 0x0, 0xeb54, 0x0, 0x20, 0x0, 0x5}, r6, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="03008824159121"]}) r8 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "a99d2e61a47cb0cedafb591d081fc583326ab9c0c877e840c403d1843468d59daeb8b4e387612a82335fdfe85629046562679bb90bb3ca00c1074e28e908c029", 0x33}, 0x48, r8) add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="866a62476923bdf91da1e93d0b4030520017767be5dc27299dfed2cc333719093fe55e08f14c2510289025f934af973e52f2cb1f630c8f7188b011d767dd8754ecbf9cc03a856b1a15d26e152d13356a70eac27856fdfd340a045475ec3a20685f41e384b7acb91ab3ff30e188075e0025ae4c247b52e9aa56b79caf4930163cef1315b8c001e97f23c8317f130e1da625a7069f9961bfb93545a1a70adf1cef4ddf540dd39b850e", 0xa8, r8) 07:43:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 7) 07:43:47 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(r0, &(0x7f00000000c0)=""/113, 0x71, 0x8) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 07:43:47 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x3}, {0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}], ['\x00']}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0x9, 0x8, 0xe9}) flock(r3, 0x6) r4 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000200)={0x3, 0x64f1, 0x858b, 0x370, 0xa3}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000300)={{}, "12852ee246b149ec4e0bc7bacf27cc444919aed26cef0ed88e61066a2602f8b898227884075400e6ab7a433f83d5130151c8dfae7fda7925d882d1bd49a816dbab08b93bc75cce1eda46d097976f4cc5f7cfe4dd50fbe285d8a564d752c42884c08f575250fcab04f62046484c523856295705a3047913d8c70f81ebe9a44583b3145d4883b5d8f4519f7bd1adba5a5fdf31732e2a606019faeb23344939796b3e16ccb29260de78997bc36cf68b66466bd25729dd0b7cde53f76be436e6bdc3bd6a575438acd24472bd98686376edad168e5c9a521d13390910b5093adc504ab0a0c63a5eda15bb29a3b805a6ddd7090f667725c83dd9bb290c2eabd26ca0a95bcd0770bbaeae50ae9dc5ec60a2db6e7d8ccf0cf11d86ab92e95c9859e57b7d6c77e4e80a4f5de84c49423d82065a91198987d5b28a2cf937a12ad1d16e21eba16e6f570b26c2fca9096f252b4ca6d594817141de6bc9ee612f89425037ee314296f7aaa6aa2eabcc3e3739ba934a7ed2f42651f9a3ad30a26b8bd96cac538d080741fafcfd3f384ed555e4b8690f92714a60526787b61756be8f7012d5fb6684b0176ec30eea403c5dde29a01465404a49f63fa29348bf2b125c5ae83e5c71eca9e1517a03c7a624702069d26e08ad61cbbe1098198eef3dbe0f4ab9b5fab5e80940054a62cfdcf624225fa414fbe9e13f5346fbdf9c289888d6e1b9d0dd2a6af4a58c9a466b8e1f3c394950ab04513e8e70bfbbecd5ca92eb58e5ca96c61817bdf3865fd87851da4bb522903939c2e667168cc4f45499db14e4400f984ebf141fbb324f0b1f79b10c352b870bb5230b5762f57562bdcc7e54e6ecbd0fa2b95ac263b7f3275717f928e958691d7c384bf169649ab482bd0dd2a85e3bb34ce3a04a782da6fa8a58abe6aa0fae7faea555e7b6c1d4762217bb1f929f8dcf45bb9b2a8627ae35a6905d275526df5e9bf336688d6769a594c3e6a13531edc89826d0a19c473c4e973fe0725ba9ac219586c8f24ce5cb8ddb8fb5a65c090e17f1bbc2bf1442c5710ee08eb88fbc041415dae75b376a66ab7ccac819596c991d7f39ffaef1e6a6d95735a35bf4cc6d201649fcc11e82981624be868a216f2f0e6fc1bc95e3a96b8e3148872b54bb5bb743dda6735846a3731282628f55effee084ea63aca27466d9af7e3c931a8b1de6a15e268c45846f28c74986e0b8089827b411f112c71da323b26c694441478f997d1f452ace55d47ad2e90156c1433ee49ae9af2fda73b3f89dce074f102a649545656c28202ab7d2f3c1fad6b77c7dd06b4f13c53ec2e79772cb212a45bdeb33a5d93d0c6c6493782407bfe669a55ece90dd8a2e133312985161011ddaf0c537476a1af6f396ebea7f39aa6b4bc75600ae9d8e09ed49e30ac62a640b8b15721eaa620622117bca7b89649e1e29a192ff7b998bffcafb7950ebb928a743fa80fe5eca83f6ee9479ef99834800b6dd0bca9103f2de13998560bd492fa6f4f4de37bcd18d7aa67bc3fa7d6f0696750e71566d2be7e779a2a9734f08a784eff904faca662ab7f39d53030247061375d35bfb110c52cb19dfcadab7e685bf2909b39c79f3a061d2820a79ed4557c2290bdd56b194dd38b02e2e4dcbad35b779517d77a78051c5bb9e68089178e2ec9020c2b3555985285b6f36d74ca5ce30013e8732f376a775bab324a463f020071703cc8eedff9ca0c45f8cea901e30a93fd3c2db06dbcef392aee894565f34aa7b15a3111ae8b59324999075432b1f557af94704a5048444cac1bf0622824af6ab18e4b8d9468d8d4abfb1700ce68bf34509002df3b101186734a00e14d15a5dd830c319242e6b1f3d2be2102e7af5a3a962ffa0505af53ec3de2761ef72f08baf030cd0f37f90a2bc6bedd1da0b2895537922863054871f51df4d253d182200f088178434c9141c9d9977ab39a5a3fadfe3f471440dcd714eb1f6ef993d71a72f5818225e3589830b3e113bc17570ab7d85c321335708357f54a140d02d3c8aa7783201610a2df33a22781786ce0cfd77ad0664117be6caaccb98fd20d285873899663c44e4896e935ed7d710cd35614fa79c4aad322a6af698d95ed49174f1ec7db75dc5b60ba86746a685625daf44d4e0abe8778711d5bedb6c84373e01d7d1f7cab254b8c9c306b25932d143ad90b4964c89911652f9f2dd38d577cbcdf599a4d8900b7ddf154c79ccf26f15ef344e9d680a843f255eb52815614ad9e5406b0062ad3ede64e287a7e8ee8b547e7ba12221b632f9a2a11e86e77635782a5136e6799d1fbb54511acb3039de65bf65fa7187754eb7bf02b01688112e81a559d8eaad867536ebe00bd411b339c9e3659b0d8fd5f3ecaf2fffce388eabc70ce6b9efdc304d1a3f81d828c7f14977b22c84ab72fc678cc120918e267a5f8de182d1d2a818706447ffaa77a650e4a692ae91eb36df2fe4465bf19ed7c41d688f5e6d2dfd4edf8b6adb9924e6a50c0a48ee4369f55edd167cc647cf4f37fe454a3f6497940042fdb06c45f4b3b929066e0315592abd29fb2e84772b56bc23f24bc493812439892db716597ec8c8f3a8750dc85b7fdf6cd97072c3350d2351a3bf6a4af1af83f339d349f8469e588c692f603ab20408b2c3222fa447ad0a70d54b299386dafafcc087ec61cff7f35dc16c6f5a37146c4f21d4bb85bad9440a38c39796be8baca4bad6fd2e9327b68b24254fbcd78bfde06a75afbf3235012529559369a7dd8354848e6c9aeca0139ad35c605fdc750d85d4399061264d05096b78a3b49b2fa6c67ca85eb908395f1f0288c165c544ed253ed696b0a0673f8d554dc206a90e9414b867519902da983a8e140de4314e31a6e8c0e92f3a64b6d34895ef66756b57690a0ab6e9c0e7d5050a43c1ec6bfca67c28c75c37ddf2d48baf8ea69d7c956fa1b36ac2e34e03678a58539a6c30cbd26bb498adaf33dd9c596899618b80b844957782d7b86abb708101e8944bf5da260b040f912564cad6968e410057046558c07c8629e1fd7a7f4e1d66ffc0e0106c104fb979c999a56fbf2bb6051332c71fe92e37213452ad485af96c1135ffc80febca188c2643f471907065904f1f85c9dc454dfd57a720c156a4a5f6b58a5e107df625acf38162d58cc4249346d97a95c9d926545c915f2c6bc8d173153c117e5d857f5975421968e1c55c60ac124cb923111fe16ac253a00971bbe9d0967e0281c4e76720d29185604774cefcc0619b4ce5699912f72bad2e8674199bd972d2e32a2a9b44103a4763e78c149495836c0ac42771d4dd2dd67a1e5d1f92d35cc553e80f5b60ba1320cf19b7c1c76a7faa5ed68f31d195d8e9a7a257ddcb81df965b113ec9a707a1b9b6cb404d2cdff61c23bb715485d81df4dc0491575a82c28e53ef01fe5438ba9e7199e2f981e5199a9ac86513f79261991734387e61931133f85aa1fa574275feec1a64b703e582bc48be1410d2c49c81dbbfd09f435327378cff74f24404b29097a1cd397c90845ad104e2867cea75c097f8347fca5a45c9b79e95ac0e35d56a642e606731a0e8b6383483adec9df9a58c0714183737102c2498c1de139fc479ca5e042490ae19d3860f318253c0e62c58bca7d4aa71cde7708676cbbf5ffc3519a72929b4ca7f384f8c89e4a37e6f5a4aeba8f2d9d982a9abe05ad8123b1dbb2bc8e064c9a068717ebb39a95e3b534eaee3269cf2169b25921ec0bf6c364cab323c92be5237d848a165c828898edda7c4f98d2db928857245eb18a93278ada9a36aab2fd3f0f16441bdb2e44c57a044f7c5344e2a4cb7854e32751546d52ebb02b196c4ff1ad8a7ab7b315a6512b3f7ffd4afb0acdd0c8ec0585039759d9a33101cc028a4a8ace8b4132955efbf8400aefda18d198cfc95aa8b7dac20215934eb4dfd47b1927a2ff8eebfc9ffbc7e2f63d1409666faafd48050c1a9f0e10e8915f2986337bc01ec727295198634611a1d6f55baaeeebf96c9acbc2404b69672f07d50eead240796c197dad25c1e8b67feea1a3f65c549ddbecee5ff26bde65120a64b54042693a6bbcbc1c49b65dc262de7b1b1fb47a3e93566225a7bf0c0b39523b1235d54b2e80afcb8d2b798e47a32a7552d97c50abc73cc000c38c4d5418f510d21c23d9590366d5ded87604e27c801893d022fb5454c5019129e60786f5eae86fbb8a9f7155bde6447aa1ebed65e598e6245deb033b8e945d96106cc6ac24021db90a2fa304a31add61293927738a2731aab673700d7b5117d8eaa5df59a90f622723326975d0f9e753e82bb716824cc5edbc3c6728999e9170c75ba6a4ac888447ce9b6f8929461946e8c63ea49e691dbb75ef48eece664da1e39c4f8bceaa8d14a3349909bab33380e79762d6a25fc1b49f3eebe345644e9073288f0965f524bdf4e7b8112417bd29c1f62735834be838c1553b73e7da9d5645fdea685320b415f151a29f966e8761a621c18703cf75c952a3c226f80c77732b4cdfd215bd00af717fd5948fdb0a48ba71f1f2c3743e7fa45e6407190466f28a41c7aefa96652de6ba0330085f9784df2ae2753854b791254ce89341c9ed07df7caf012f017e1991e2651998011cf673fae9064506dda031615401b63dbdf4ebf3d36e2e3d1470a9ccb78bd89995ed52eef55bbcedf216e2ab875cad325e44b6d3ebd22ffe8cb79b36a71eebbf34e29c06cba3ef978342288777651e3ced73109c073060a0f36846347a8a1153c549aa23a73f55d78c15e47c8f31b1958535a68ad617a686daeadc322e6adf42043a58562ecc1d7f5b9468f22fcd2d3eb6cb4aba97865f098f6408d02c52ad4963009c57afb16daedba301eace4d6b58bec2cb0d40d96c12aa4819cc1fdba49522495be1ccbe83c9a36cf40f5bc272efcd76172f83fc5788b480e8deba20c3355e1d405cb4961a05a619a8255d69923e075690ea6434a05a8a8cdc43dd986ecee55686172fd97671dafa6a3da991d998d49933d803de17271301798a64bad795062409ce705376b21d477c0e117c9d79c38bf4e9e4d0442ca98cb654014532e1acf0309439c16b1612ea929e6235b33945555f52b2ffb5fd409d71cb8c2a8feb9e16bc480f8157a24ba9dbb631e5db393cafef897d404ec7feaf585de2603b98f96d515d9168547c748717436ac7f970b2db860f0acb44a1b72a2fc88b590346759f91795f25ff7cb4f55341beeab8eafb469cebd36e5beac37ed79ae479009ee9965a2de3f3292dc73976f5bf653fe335a561daeb22a3a887a844bc207fea30198f6c4e5507484fb185d61452a20b508b941b2ac517c6ce2b977b5ac4e3d8299fad78527168041623ed30ae7ac594e642109365f9458687115c6a4fc2396ce3e19f1b35cad7525596c75fed918dcf3e879065c16d7ae9ebeff4018f4e29cc350ea2a6d75f2d34fbbdced9aef7530f1ff97c7cefa558c2e92fa4cd07b7fa46c02fc9504868f7f683ad81fec5dd42584de07a1a8fa62dbe7c22f57683421a8f71269f9ed4d52a3e30dee15adfaa9f9289eda0414d3fc156e1340fbdce5246773e535ed241b2ea52d7f3dfa1a73d9985f0b9962b98b9cfc6e2e50b39cddbd04e7e24a56a341b2935e800b7fb66dc960e85c4902130459a89f408a36ba5509eb7341d8e0b80a708a20f3ce09a64794dbe90fb5439f3c4b410c7a3ca55f266fffb6e6127fbcaec22b692712d723998204c86fc5abac93bdd8aae6e3da9507a1f5ac72f9df250247d0f39f4156bb61245193a59f8beaf2222501"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000080)) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x19}}, './file0\x00'}) unshare(0x48020200) [ 1033.116573] FAULT_INJECTION: forcing a failure. [ 1033.116573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.117592] CPU: 1 PID: 8124 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1033.118138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.118801] Call Trace: [ 1033.119021] dump_stack+0x107/0x167 [ 1033.119326] should_fail.cold+0x5/0xa [ 1033.119646] _copy_from_iter_full+0x201/0xa60 [ 1033.120024] raw_sendmsg+0x1d0f/0x29d0 [ 1033.120355] ? dst_output+0x170/0x170 [ 1033.120665] ? __lock_acquire+0x1657/0x5b00 [ 1033.121033] ? perf_trace_lock+0xac/0x490 [ 1033.121366] ? SOFTIRQ_verbose+0x10/0x10 [ 1033.121701] ? __lockdep_reset_lock+0x180/0x180 [ 1033.122082] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1033.122497] ? find_held_lock+0x2c/0x110 [ 1033.122840] ? trace_hardirqs_on+0x5b/0x180 [ 1033.123191] ? dst_output+0x170/0x170 [ 1033.123507] inet_sendmsg+0x11d/0x140 [ 1033.123819] ? inet_send_prepare+0x540/0x540 [ 1033.124188] __sock_sendmsg+0x13c/0x190 [ 1033.124514] ____sys_sendmsg+0x334/0x870 [ 1033.124850] ? sock_write_iter+0x3d0/0x3d0 [ 1033.125189] ? do_recvmmsg+0x6d0/0x6d0 [ 1033.125515] ? perf_trace_lock+0xac/0x490 [ 1033.125855] ? __lockdep_reset_lock+0x180/0x180 [ 1033.126227] ? perf_trace_lock+0xac/0x490 [ 1033.126570] ___sys_sendmsg+0xf3/0x170 [ 1033.126891] ? sendmsg_copy_msghdr+0x160/0x160 [ 1033.127263] ? lock_downgrade+0x6d0/0x6d0 [ 1033.127602] ? lock_downgrade+0x6d0/0x6d0 [ 1033.127945] ? __fget_files+0x296/0x4c0 [ 1033.128278] ? __fget_light+0xea/0x290 [ 1033.128601] __sys_sendmmsg+0x195/0x470 [ 1033.128925] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1033.129274] ? lock_downgrade+0x6d0/0x6d0 [ 1033.129623] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1033.130021] ? wait_for_completion_io+0x270/0x270 [ 1033.130416] ? rcu_read_lock_any_held+0x75/0xa0 [ 1033.130799] ? vfs_write+0x354/0xa70 [ 1033.131111] ? fput_many+0x2f/0x1a0 [ 1033.131407] ? ksys_write+0x1a9/0x260 [ 1033.131717] ? __ia32_sys_read+0xb0/0xb0 [ 1033.132055] __x64_sys_sendmmsg+0x99/0x100 [ 1033.132408] do_syscall_64+0x33/0x40 [ 1033.132713] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1033.133132] RIP: 0033:0x7fa5747bcb19 [ 1033.133434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.134916] RSP: 002b:00007fa571d32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1033.135532] RAX: ffffffffffffffda RBX: 00007fa5748cff60 RCX: 00007fa5747bcb19 [ 1033.136106] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1033.136692] RBP: 00007fa571d321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.137269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.137852] R13: 00007ffdc627a24f R14: 00007fa571d32300 R15: 0000000000022000 [ 1033.147837] FAULT_INJECTION: forcing a failure. [ 1033.147837] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.148841] CPU: 1 PID: 8129 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1033.149392] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.150063] Call Trace: [ 1033.150286] dump_stack+0x107/0x167 [ 1033.150587] should_fail.cold+0x5/0xa [ 1033.150904] should_failslab+0x5/0x20 [ 1033.151218] __kmalloc_node_track_caller+0x74/0x3b0 [ 1033.151629] ? __ip_append_data+0x2930/0x3310 [ 1033.152002] __alloc_skb+0xb1/0x5b0 [ 1033.152319] __ip_append_data+0x2930/0x3310 [ 1033.152680] ? lock_chain_count+0x20/0x20 [ 1033.153020] ? raw_destroy+0x30/0x30 [ 1033.153326] ? ip_finish_output+0x330/0x330 [ 1033.153676] ? lock_release+0x680/0x680 [ 1033.154009] ? ipv4_mtu+0x1ed/0x2c0 [ 1033.154312] ? raw_destroy+0x30/0x30 [ 1033.154622] ip_append_data+0x114/0x1a0 [ 1033.154958] raw_sendmsg+0xaa6/0x29d0 [ 1033.155286] ? dst_output+0x170/0x170 [ 1033.155599] ? __lock_acquire+0x1657/0x5b00 [ 1033.155963] ? perf_trace_lock+0xac/0x490 [ 1033.156308] ? SOFTIRQ_verbose+0x10/0x10 [ 1033.156638] ? __lockdep_reset_lock+0x180/0x180 [ 1033.157024] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1033.157440] ? find_held_lock+0x2c/0x110 [ 1033.157781] ? trace_hardirqs_on+0x5b/0x180 [ 1033.158132] ? dst_output+0x170/0x170 [ 1033.158445] inet_sendmsg+0x11d/0x140 [ 1033.158858] ? inet_send_prepare+0x540/0x540 [ 1033.158868] __sock_sendmsg+0x13c/0x190 [ 1033.158879] ____sys_sendmsg+0x334/0x870 [ 1033.158891] ? sock_write_iter+0x3d0/0x3d0 [ 1033.158900] ? do_recvmmsg+0x6d0/0x6d0 [ 1033.158910] ? perf_trace_lock+0xac/0x490 [ 1033.158925] ? __lockdep_reset_lock+0x180/0x180 [ 1033.158934] ? perf_trace_lock+0xac/0x490 [ 1033.158949] ___sys_sendmsg+0xf3/0x170 [ 1033.158961] ? sendmsg_copy_msghdr+0x160/0x160 [ 1033.158975] ? lock_downgrade+0x6d0/0x6d0 [ 1033.158991] ? lock_downgrade+0x6d0/0x6d0 [ 1033.159005] ? __fget_files+0x296/0x4c0 [ 1033.159022] ? __fget_light+0xea/0x290 [ 1033.159038] __sys_sendmmsg+0x195/0x470 [ 1033.159053] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1033.159063] ? lock_downgrade+0x6d0/0x6d0 [ 1033.159085] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1033.159098] ? wait_for_completion_io+0x270/0x270 [ 1033.159110] ? rcu_read_lock_any_held+0x75/0xa0 [ 1033.159119] ? vfs_write+0x354/0xa70 [ 1033.159129] ? fput_many+0x2f/0x1a0 [ 1033.159141] ? ksys_write+0x1a9/0x260 [ 1033.159151] ? __ia32_sys_read+0xb0/0xb0 [ 1033.159167] __x64_sys_sendmmsg+0x99/0x100 [ 1033.159179] do_syscall_64+0x33/0x40 [ 1033.159188] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1033.159195] RIP: 0033:0x7f24b3ae7b19 [ 1033.159205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.159210] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1033.159221] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1033.159227] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1033.159234] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.159239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1033.159246] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1033.174260] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1033.174260] program syz-executor.2 not setting count and/or reply_len properly [ 1033.181163] FAULT_INJECTION: forcing a failure. [ 1033.181163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1033.181185] CPU: 0 PID: 8132 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1033.181196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1033.181203] Call Trace: [ 1033.181226] dump_stack+0x107/0x167 [ 1033.181247] should_fail.cold+0x5/0xa [ 1033.181274] _copy_from_iter_full+0x201/0xa60 [ 1033.181317] raw_sendmsg+0x1d0f/0x29d0 [ 1033.181349] ? dst_output+0x170/0x170 [ 1033.181368] ? __lock_acquire+0x1657/0x5b00 [ 1033.181406] ? perf_trace_lock+0xac/0x490 [ 1033.181424] ? SOFTIRQ_verbose+0x10/0x10 [ 1033.181447] ? __lockdep_reset_lock+0x180/0x180 [ 1033.181476] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1033.181493] ? find_held_lock+0x2c/0x110 [ 1033.181528] ? trace_hardirqs_on+0x5b/0x180 [ 1033.181552] ? dst_output+0x170/0x170 [ 1033.181573] inet_sendmsg+0x11d/0x140 [ 1033.181591] ? inet_send_prepare+0x540/0x540 [ 1033.181609] __sock_sendmsg+0x13c/0x190 [ 1033.181629] ____sys_sendmsg+0x334/0x870 [ 1033.181652] ? sock_write_iter+0x3d0/0x3d0 [ 1033.181668] ? do_recvmmsg+0x6d0/0x6d0 [ 1033.181686] ? perf_trace_lock+0xac/0x490 [ 1033.181712] ? __lockdep_reset_lock+0x180/0x180 [ 1033.181729] ? perf_trace_lock+0xac/0x490 [ 1033.181754] ___sys_sendmsg+0xf3/0x170 [ 1033.181776] ? sendmsg_copy_msghdr+0x160/0x160 [ 1033.181802] ? lock_downgrade+0x6d0/0x6d0 [ 1033.181830] ? lock_downgrade+0x6d0/0x6d0 [ 1033.181856] ? __fget_files+0x296/0x4c0 [ 1033.181888] ? __fget_light+0xea/0x290 [ 1033.181916] __sys_sendmmsg+0x195/0x470 [ 1033.181943] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1033.181965] ? lock_downgrade+0x6d0/0x6d0 [ 1033.182006] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1033.182029] ? wait_for_completion_io+0x270/0x270 [ 1033.182052] ? rcu_read_lock_any_held+0x75/0xa0 [ 1033.182069] ? vfs_write+0x354/0xa70 [ 1033.182088] ? fput_many+0x2f/0x1a0 [ 1033.182108] ? ksys_write+0x1a9/0x260 [ 1033.182128] ? __ia32_sys_read+0xb0/0xb0 [ 1033.182157] __x64_sys_sendmmsg+0x99/0x100 [ 1033.182180] do_syscall_64+0x33/0x40 [ 1033.182197] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1033.182210] RIP: 0033:0x7f62f063ab19 [ 1033.182228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1033.182238] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1033.182259] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1033.182271] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1033.182282] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1033.182297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.182308] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1033.309079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309115] print_req_error: 6 callbacks suppressed [ 1033.309135] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309203] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309218] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1033.309258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309295] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309491] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309621] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309638] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309700] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1033.309731] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309738] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1033.309747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309766] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309785] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309791] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1033.309829] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1033.309836] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1033.309890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.309949] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1033.310016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.310077] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1033.310138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1033.310198] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1047.738963] FAULT_INJECTION: forcing a failure. [ 1047.738963] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.740879] CPU: 1 PID: 8142 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1047.741864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1047.743047] Call Trace: [ 1047.743432] dump_stack+0x107/0x167 [ 1047.744159] should_fail.cold+0x5/0xa [ 1047.744876] ? create_object.isra.0+0x3a/0xa20 07:44:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:01 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 8) 07:44:01 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000bc0)='+', 0x1}, {&(0x7f00000008c0)="2bfce6c80e0f997b143c6c176bab0af571ded65b0e84b4292ff1f160b8af42a9f62f8fb5fc925ab5f53247c5447d2d3493d140ff52fcb261e2a031d3d0a81d7f355be7509d9e8cd6c92fed301bed69e0b45baf111ba8b2a26871f12aaf69b5aeb54321418166e20d183b02daf29b8151fcf190f4c6fc43c739c5e0c5ce11b3bddaee75e93dd937f5e9a62fceba", 0x8d}, {&(0x7f0000000240)="b87f70cb81deb7bcdb", 0x9}], 0x3}, 0x0) write(r3, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000000840)=[{&(0x7f0000000a00)=""/193, 0xc1}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/6, 0x6}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/140, 0x8c}], 0x7) syz_open_procfs(r1, &(0x7f0000000400)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x7810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/icmp6\x00') unshare(0x48020200) 07:44:01 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(r0, &(0x7f00000000c0)=""/113, 0x71, 0x8) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 07:44:01 executing program 4: r0 = open_tree(0xffffffffffffffff, 0x0, 0x80980) sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x11) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x5, "77004a6efdff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x383700, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x8, 0xc004430, r3, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6tnl0\x00'}) openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000340)={'bridge_slave_1\x00'}) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) io_uring_setup(0x47502, &(0x7f00000001c0)={0x0, 0x4000, 0x20, 0x1, 0x1cf}) r4 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001900)=[0xffffffffffffffff], 0x1) creat(&(0x7f0000000040)='./file0\x00', 0x1a4) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r1, 0x0) 07:44:01 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 8) 07:44:01 executing program 7: fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) r3 = dup(r2) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESOCT=r2, @ANYRESDEC=r2], 0x50}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x146e2, 0x18d) socket$nl_generic(0x10, 0x3, 0x10) dup2(r4, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000040), 0x0, 0x0, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x325, 0x0, 0x0, {{0x67}, {@val={0x8, 0x67}, @val={0x8}, @void}}}, 0x24}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r5, 0x11d37000) 07:44:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 25) [ 1047.745521] should_failslab+0x5/0x20 [ 1047.746184] kmem_cache_alloc+0x5b/0x310 [ 1047.746781] create_object.isra.0+0x3a/0xa20 [ 1047.747404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1047.748123] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1047.748845] ? __ip_append_data+0x2930/0x3310 [ 1047.749482] __alloc_skb+0xb1/0x5b0 [ 1047.750006] __ip_append_data+0x2930/0x3310 [ 1047.750627] ? lock_chain_count+0x20/0x20 [ 1047.751212] ? raw_destroy+0x30/0x30 [ 1047.751759] ? ip_finish_output+0x330/0x330 [ 1047.752378] ? lock_release+0x680/0x680 [ 1047.752952] ? ipv4_mtu+0x1ed/0x2c0 [ 1047.753472] ? raw_destroy+0x30/0x30 [ 1047.753996] ip_append_data+0x114/0x1a0 [ 1047.754571] raw_sendmsg+0xaa6/0x29d0 [ 1047.755131] ? dst_output+0x170/0x170 [ 1047.755672] ? __lock_acquire+0x1657/0x5b00 [ 1047.756300] ? perf_trace_lock+0xac/0x490 [ 1047.756910] ? SOFTIRQ_verbose+0x10/0x10 [ 1047.757489] ? __lockdep_reset_lock+0x180/0x180 [ 1047.758168] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1047.758914] ? find_held_lock+0x2c/0x110 [ 1047.759506] ? trace_hardirqs_on+0x5b/0x180 [ 1047.760135] ? dst_output+0x170/0x170 [ 1047.760691] inet_sendmsg+0x11d/0x140 [ 1047.761228] ? inet_send_prepare+0x540/0x540 [ 1047.761850] __sock_sendmsg+0x13c/0x190 [ 1047.762410] ____sys_sendmsg+0x334/0x870 [ 1047.762984] ? sock_write_iter+0x3d0/0x3d0 [ 1047.763579] ? do_recvmmsg+0x6d0/0x6d0 [ 1047.764132] ? perf_trace_lock+0xac/0x490 [ 1047.764750] ? __lockdep_reset_lock+0x180/0x180 [ 1047.765404] ? perf_trace_lock+0xac/0x490 [ 1047.765993] ___sys_sendmsg+0xf3/0x170 [ 1047.766548] ? sendmsg_copy_msghdr+0x160/0x160 [ 1047.767220] ? lock_downgrade+0x6d0/0x6d0 [ 1047.767822] ? lock_downgrade+0x6d0/0x6d0 [ 1047.768446] ? __fget_files+0x296/0x4c0 [ 1047.769042] ? __fget_light+0xea/0x290 [ 1047.769619] __sys_sendmmsg+0x195/0x470 [ 1047.770206] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1047.770837] ? lock_downgrade+0x6d0/0x6d0 [ 1047.771460] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1047.772150] ? wait_for_completion_io+0x270/0x270 [ 1047.772859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1047.773530] ? vfs_write+0x354/0xa70 [ 1047.774073] ? fput_many+0x2f/0x1a0 [ 1047.774603] ? ksys_write+0x1a9/0x260 [ 1047.775157] ? __ia32_sys_read+0xb0/0xb0 [ 1047.775754] __x64_sys_sendmmsg+0x99/0x100 [ 1047.776381] do_syscall_64+0x33/0x40 [ 1047.776924] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1047.777664] RIP: 0033:0x7f24b3ae7b19 [ 1047.778203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1047.779030] device veth0_vlan entered promiscuous mode [ 1047.780834] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1047.780856] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1047.780867] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1047.780885] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.785432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.786409] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1047.796118] FAULT_INJECTION: forcing a failure. [ 1047.796118] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.798017] CPU: 1 PID: 8146 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1047.799010] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1047.800154] FAULT_INJECTION: forcing a failure. [ 1047.800154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1047.801804] Call Trace: [ 1047.801824] dump_stack+0x107/0x167 [ 1047.801846] should_fail.cold+0x5/0xa [ 1047.801868] ? dst_alloc+0x9e/0x5d0 [ 1047.803789] should_failslab+0x5/0x20 [ 1047.804343] kmem_cache_alloc+0x5b/0x310 [ 1047.804958] dst_alloc+0x9e/0x5d0 [ 1047.805460] ? trace_hardirqs_on+0x5b/0x180 [ 1047.806085] rt_dst_alloc+0x73/0x440 [ 1047.806634] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1047.807386] ip_route_output_key_hash+0x18d/0x340 [ 1047.808086] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1047.808909] ? _copy_from_iter_full+0x27c/0xa60 [ 1047.809595] ip_route_output_flow+0x23/0x150 [ 1047.810237] raw_sendmsg+0x930/0x29d0 [ 1047.810807] ? dst_output+0x170/0x170 [ 1047.811362] ? __lock_acquire+0x1657/0x5b00 [ 1047.812010] ? perf_trace_lock+0xac/0x490 [ 1047.812625] ? SOFTIRQ_verbose+0x10/0x10 [ 1047.813208] ? __lockdep_reset_lock+0x180/0x180 [ 1047.813888] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1047.814631] ? find_held_lock+0x2c/0x110 [ 1047.815241] ? trace_hardirqs_on+0x5b/0x180 [ 1047.815877] ? dst_output+0x170/0x170 [ 1047.816444] inet_sendmsg+0x11d/0x140 [ 1047.817002] ? inet_send_prepare+0x540/0x540 [ 1047.817637] __sock_sendmsg+0x13c/0x190 [ 1047.818216] ____sys_sendmsg+0x334/0x870 [ 1047.818813] ? sock_write_iter+0x3d0/0x3d0 [ 1047.819428] ? do_recvmmsg+0x6d0/0x6d0 [ 1047.819997] ? perf_trace_lock+0xac/0x490 [ 1047.820618] ? __lockdep_reset_lock+0x180/0x180 [ 1047.821292] ? perf_trace_lock+0xac/0x490 [ 1047.821903] ___sys_sendmsg+0xf3/0x170 [ 1047.822472] ? sendmsg_copy_msghdr+0x160/0x160 [ 1047.823138] ? lock_downgrade+0x6d0/0x6d0 [ 1047.823752] ? lock_downgrade+0x6d0/0x6d0 [ 1047.824373] ? __fget_files+0x296/0x4c0 [ 1047.824953] ? __fget_light+0xea/0x290 [ 1047.825536] __sys_sendmmsg+0x195/0x470 [ 1047.826128] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1047.826759] ? lock_downgrade+0x6d0/0x6d0 [ 1047.827386] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1047.828091] ? wait_for_completion_io+0x270/0x270 [ 1047.828803] ? rcu_read_lock_any_held+0x75/0xa0 [ 1047.829475] ? vfs_write+0x354/0xa70 [ 1047.830021] ? fput_many+0x2f/0x1a0 [ 1047.830546] ? ksys_write+0x1a9/0x260 [ 1047.831104] ? __ia32_sys_read+0xb0/0xb0 [ 1047.831706] __x64_sys_sendmmsg+0x99/0x100 [ 1047.832326] do_syscall_64+0x33/0x40 [ 1047.832862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1047.833606] RIP: 0033:0x7f62f063ab19 [ 1047.834146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1047.836794] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1047.837899] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1047.838926] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1047.839952] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.840986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.842013] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1047.843071] CPU: 0 PID: 8155 Comm: syz-executor.3 Not tainted 5.10.214 #1 [ 1047.843703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1047.844448] Call Trace: [ 1047.844698] dump_stack+0x107/0x167 [ 1047.845023] should_fail.cold+0x5/0xa [ 1047.845364] _copy_to_user+0x2e/0x180 [ 1047.845698] simple_read_from_buffer+0xcc/0x160 [ 1047.846115] proc_fail_nth_read+0x198/0x230 [ 1047.846510] ? proc_sessionid_read+0x230/0x230 [ 1047.846910] ? security_file_permission+0x24e/0x570 [ 1047.847354] ? perf_trace_initcall_start+0x101/0x380 [ 1047.847824] ? proc_sessionid_read+0x230/0x230 [ 1047.848222] vfs_read+0x228/0x580 [ 1047.848550] ksys_read+0x12d/0x260 [ 1047.848859] ? vfs_write+0xa70/0xa70 [ 1047.849215] do_syscall_64+0x33/0x40 [ 1047.849553] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1047.850002] RIP: 0033:0x7fa57476f69c [ 1047.850345] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1047.851950] RSP: 002b:00007fa571d11170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1047.852628] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fa57476f69c [ 1047.853245] RDX: 000000000000000f RSI: 00007fa571d111e0 RDI: 0000000000000006 [ 1047.853876] RBP: 00007fa571d111d0 R08: 0000000000000000 R09: 0000000000000000 [ 1047.854502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1047.855126] R13: 00007ffdc627a24f R14: 00007fa571d11300 R15: 0000000000022000 [ 1047.856742] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 07:44:02 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1048.014605] device veth0_vlan entered promiscuous mode [ 1048.329528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.330421] print_req_error: 6 callbacks suppressed [ 1048.330441] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.332851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.333676] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.335289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.336108] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.337723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.338541] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.340152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.340982] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.342581] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.344134] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1048.345301] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.346849] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1048.347984] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.349521] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1048.350656] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.352182] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1048.353352] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1048.354875] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1048.356873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.357479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.357962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1048.358046] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1048.359584] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1048.360832] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1060.849190] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 07:44:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40180) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'veth1_vlan\x00'}) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x3, r3, 0x3ff, 0x80000}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x1, 0x1, {0x2, r6}}, 0x4) r7 = gettid() sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee01}}}], 0x20}, 0x0) 07:44:14 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) pread64(r0, &(0x7f00000000c0)=""/113, 0x71, 0x8) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 07:44:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 26) 07:44:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 9) 07:44:15 executing program 4: fallocate(0xffffffffffffffff, 0x3, 0x10000, 0x30000000000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000340)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x4000, &(0x7f00000000c0)=ANY=[]) r0 = syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f0000000300)='./file1\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000480)=[{&(0x7f0000000380)="b45dbaa08bf09d2a0670b8837a8ba17c3523eb27e8741c29c308dc063ea06455bd4aaab6fe4b30a72337e09f5683487d2b21aae7175fc26ebbb591c35d4d962ef6a882e2b220a8691e4a9d0fca079d604cdcaac9977890a07e9f1447b9ed047e0c37e73095c1df520e0012cfb172974b532a95f584e4f8d2a5346aed82d12535fc270e4057277adb5a2cd2303d9e0b256b58bcf3bb5b9ab316dcda4abdb79b6dbc9fa29271bef3b7fca7708fbe6b79236215c3a6c3d23dd6f2d8392f857498ed6d45ea1d8a97b28ff089fbe3bddc0458d4b586d8ca70bd717ae5c55d05960f0ca9dff3d596a9d9a39b4f", 0xea, 0x1f}], 0x3a20004, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r1 = creat(0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x81, 0x9, 0x10001, 0x5}) sendfile(r2, r3, 0x0, 0x100000001) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000200)) read(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x98) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x10010, r1, 0x10000000) syz_io_uring_setup(0x2a7b, &(0x7f00000004c0)={0x0, 0x3, 0x8, 0x0, 0x18c}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000480), &(0x7f0000000140)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000580)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x9) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x80000001) 07:44:14 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:15 executing program 7: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000500)={{0x0, 0x1, 0x401, 0x3, 0x1000, 0x0, 0x1, 0x101, 0x6, 0xfffffffe, 0x0, 0x6, 0x0, 0x1, 0x20}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004ea80)={0x0, r1, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001500)=ANY=[@ANYRES64=r1, @ANYBLOB="f70300000000000000800000000000000900000000000000070000000000000011b00000000000000d1600000000000002000000030000003df300000100010009000000085f95e0be21e3e0d8e294d292be7d000000000900000000000000800000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000f00"/159]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000004fb40)={0xa1e, [{r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {}, {r1}, {}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}], 0x40, "a20d7fe3445bd9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000050b40)={0x1, [{}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1, 0x0}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}], 0x2, "6d96d17579d11f"}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) [ 1060.876895] FAULT_INJECTION: forcing a failure. [ 1060.876895] name failslab, interval 1, probability 0, space 0, times 0 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f0000002e00)={0x0, r8, "ca66077d724a63af75e561c6409be7c0ce660fa9a14d9756f4a6b10e787fa39e63d572732b88fe299d583b4180438a314f9d045e6c01f73dfd42aa4fb6210f553076ed7253276ce1f9a75ba94cacd64f161c1f48ce470cac49f777da0060ab43bb827c3c9f81dab49d270794c50fd0838004e1a1154cc3f05dce446efed6ebf46b40b9a27afdda27752eea8b35f787302595408651c9a4c23ade0d2a9ffbb8223d80b5d6402b3b60a0b475c395b3fe056cdb38d23a35cb0f198015614b0b951a8d22cb569620f74e00b2e3ef21e1099022e34b844a8844332296bd181d3910ef8d7f575f20f851fa6d54165654003ea6133806bb28430755ae4ae70ac340d1c0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {0x0, 0x0}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {0x0, r7}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {r26}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r20}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r16}, {0x0, r10}, {0x0, r22}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r27}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r24}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {0x0, r25}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000051b40)={0x200, [{}, {}, {r1}, {r1}, {}, {r1}, {}, {}, {r1}, {r1}, {r1}, {r1}, {}, {}, {r1}, {}, {}, {r1}, {}, {r1}, {}, {}, {}, {}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {}, {}, {}, {}, {r1}, {}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {}, {}, {r1}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {r1}, {}, {}, {}, {r1}, {r1}, {}, {}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {}, {}, {}, {r1}, {r1}, {r1}, {r1}, {}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {}, {}, {}, {}, {}, {r1}, {r1}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {r1}, {}, {}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {}, {r1}, {}, {}, {}, {}, {r1}, {}, {}, {r1}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {r1}, {r1}, {r1}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {r1}, {r1}, {}, {}, {}, {r1}, {}, {r1}, {}, {r1}, {r1}, {r1}, {}, {}, {r1}, {r1}, {r1}, {}, {}, {r1}, {}, {}, {r1}, {r1}, {}, {}, {r1}, {}, {r1}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {r1}, {r1}, {}, {r1}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {r1}, {}, {}, {r1}, {r1}, {r1}, {}, {}, {}, {r1, r2}, {r3}, {r4, r5}, {r1}, {r1, r10}], 0x5, "6f9cb7de57de00"}) r28 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r29 = accept4(r28, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000040)=0x80, 0x80000) fcntl$getflags(r29, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x80, 0xfffffffe, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r28, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x4c}], 0x1}}], 0x7ffff000, 0x0) [ 1060.877967] CPU: 1 PID: 8178 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1060.878630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1060.879314] Call Trace: [ 1060.879538] dump_stack+0x107/0x167 [ 1060.879828] should_fail.cold+0x5/0xa [ 1060.880141] ? __alloc_skb+0x6d/0x5b0 [ 1060.880458] should_failslab+0x5/0x20 [ 1060.880767] kmem_cache_alloc_node+0x55/0x330 [ 1060.881128] __alloc_skb+0x6d/0x5b0 [ 1060.881425] __ip_append_data+0x2930/0x3310 [ 1060.881782] ? lock_chain_count+0x20/0x20 [ 1060.882110] ? raw_destroy+0x30/0x30 [ 1060.882417] ? ip_finish_output+0x330/0x330 [ 1060.882754] ? lock_release+0x680/0x680 [ 1060.883069] ? ipv4_mtu+0x1ed/0x2c0 [ 1060.883360] ? raw_destroy+0x30/0x30 [ 1060.883653] ip_append_data+0x114/0x1a0 [ 1060.883985] raw_sendmsg+0xaa6/0x29d0 [ 1060.884296] ? dst_output+0x170/0x170 [ 1060.884621] ? __lock_acquire+0x1657/0x5b00 [ 1060.884975] ? perf_trace_lock+0xac/0x490 [ 1060.885310] ? SOFTIRQ_verbose+0x10/0x10 [ 1060.885634] ? __lockdep_reset_lock+0x180/0x180 [ 1060.886024] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1060.886433] ? find_held_lock+0x2c/0x110 [ 1060.886774] ? trace_hardirqs_on+0x5b/0x180 [ 1060.887117] ? dst_output+0x170/0x170 [ 1060.887421] inet_sendmsg+0x11d/0x140 [ 1060.887727] ? inet_send_prepare+0x540/0x540 [ 1060.888082] __sock_sendmsg+0x13c/0x190 [ 1060.888398] ____sys_sendmsg+0x334/0x870 [ 1060.888738] ? sock_write_iter+0x3d0/0x3d0 [ 1060.889079] ? do_recvmmsg+0x6d0/0x6d0 [ 1060.889399] ? perf_trace_lock+0xac/0x490 [ 1060.889741] ? __lockdep_reset_lock+0x180/0x180 [ 1060.890113] ? perf_trace_lock+0xac/0x490 [ 1060.890452] ___sys_sendmsg+0xf3/0x170 [ 1060.890762] ? sendmsg_copy_msghdr+0x160/0x160 [ 1060.891133] ? lock_downgrade+0x6d0/0x6d0 [ 1060.891472] ? lock_downgrade+0x6d0/0x6d0 [ 1060.891802] ? __fget_files+0x296/0x4c0 [ 1060.892122] ? __fget_light+0xea/0x290 [ 1060.892437] __sys_sendmmsg+0x195/0x470 [ 1060.892763] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1060.893105] ? lock_downgrade+0x6d0/0x6d0 [ 1060.893449] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1060.893840] ? wait_for_completion_io+0x270/0x270 [ 1060.894223] ? rcu_read_lock_any_held+0x75/0xa0 [ 1060.894590] ? vfs_write+0x354/0xa70 [ 1060.894891] ? fput_many+0x2f/0x1a0 [ 1060.895178] ? ksys_write+0x1a9/0x260 [ 1060.895498] ? __ia32_sys_read+0xb0/0xb0 [ 1060.895826] __x64_sys_sendmmsg+0x99/0x100 [ 1060.896171] do_syscall_64+0x33/0x40 [ 1060.896464] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1060.896881] RIP: 0033:0x7f24b3ae7b19 [ 1060.897176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1060.898644] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1060.899254] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1060.899830] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1060.900406] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1060.900987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1060.901558] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1060.929205] FAULT_INJECTION: forcing a failure. [ 1060.929205] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.931642] CPU: 0 PID: 8185 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1060.932766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1060.933945] Call Trace: [ 1060.934338] dump_stack+0x107/0x167 [ 1060.934877] should_fail.cold+0x5/0xa [ 1060.935435] ? create_object.isra.0+0x3a/0xa20 [ 1060.936101] should_failslab+0x5/0x20 [ 1060.936667] kmem_cache_alloc+0x5b/0x310 [ 1060.937249] ? lock_acquire+0x197/0x470 [ 1060.937832] create_object.isra.0+0x3a/0xa20 [ 1060.938467] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1060.939201] kmem_cache_alloc+0x159/0x310 [ 1060.939810] dst_alloc+0x9e/0x5d0 [ 1060.940312] ? trace_hardirqs_on+0x5b/0x180 [ 1060.940947] rt_dst_alloc+0x73/0x440 [ 1060.941495] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 1060.942266] ip_route_output_key_hash+0x18d/0x340 [ 1060.942960] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 1060.943760] ? _copy_from_iter_full+0x27c/0xa60 [ 1060.944439] ip_route_output_flow+0x23/0x150 [ 1060.945087] raw_sendmsg+0x930/0x29d0 [ 1060.945648] ? dst_output+0x170/0x170 [ 1060.946198] ? __lock_acquire+0x1657/0x5b00 [ 1060.946846] ? perf_trace_lock+0xac/0x490 [ 1060.947446] ? SOFTIRQ_verbose+0x10/0x10 [ 1060.948036] ? __lockdep_reset_lock+0x180/0x180 [ 1060.948729] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1060.949472] ? find_held_lock+0x2c/0x110 [ 1060.950074] ? trace_hardirqs_on+0x5b/0x180 [ 1060.950697] ? dst_output+0x170/0x170 [ 1060.951251] inet_sendmsg+0x11d/0x140 [ 1060.951803] ? inet_send_prepare+0x540/0x540 [ 1060.952435] __sock_sendmsg+0x13c/0x190 [ 1060.953021] ____sys_sendmsg+0x334/0x870 [ 1060.953615] ? sock_write_iter+0x3d0/0x3d0 [ 1060.954220] ? do_recvmmsg+0x6d0/0x6d0 [ 1060.954780] ? perf_trace_lock+0xac/0x490 [ 1060.955390] ? __lockdep_reset_lock+0x180/0x180 [ 1060.956059] ? perf_trace_lock+0xac/0x490 [ 1060.956679] ___sys_sendmsg+0xf3/0x170 [ 1060.957245] ? sendmsg_copy_msghdr+0x160/0x160 [ 1060.957909] ? lock_downgrade+0x6d0/0x6d0 [ 1060.958515] ? lock_downgrade+0x6d0/0x6d0 [ 1060.959121] ? __fget_files+0x296/0x4c0 [ 1060.959714] ? __fget_light+0xea/0x290 [ 1060.960290] __sys_sendmmsg+0x195/0x470 [ 1060.960882] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1060.961505] ? lock_downgrade+0x6d0/0x6d0 [ 1060.962149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1060.962854] ? wait_for_completion_io+0x270/0x270 [ 1060.963561] ? rcu_read_lock_any_held+0x75/0xa0 [ 1060.964234] ? vfs_write+0x354/0xa70 [ 1060.964787] ? fput_many+0x2f/0x1a0 [ 1060.965325] ? ksys_write+0x1a9/0x260 [ 1060.965883] ? __ia32_sys_read+0xb0/0xb0 [ 1060.966487] __x64_sys_sendmmsg+0x99/0x100 [ 1060.967113] do_syscall_64+0x33/0x40 [ 1060.967654] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1060.968397] RIP: 0033:0x7f62f063ab19 [ 1060.968947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1060.971571] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1060.972676] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1060.973701] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1060.974753] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1060.975790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.976822] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1060.986794] ieee802154 phy0 wpan0: encryption failed: -22 07:44:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:15 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 07:44:15 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 27) 07:44:15 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x14, 0x80, 0xd1, 0x1f, 0x0, 0x100, 0x52802, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x208000, 0x2, @perf_bp={&(0x7f0000000340), 0x9}, 0x18112, 0x8, 0x8, 0x0, 0xffffffff, 0x2, 0x40, 0x0, 0x81, 0x0, 0x80000000}, 0xffffffffffffffff, 0x8, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) fstat(r2, &(0x7f0000000400)) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0xde3d986e77051b32, 0x28) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, 0x100, 0x0, 0x0, 0x0, 0x98, &(0x7f0000000080)='syzkaller0\x00', 0x5, 0x1, 0x206}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = dup2(r6, r5) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000740)=ANY=[@ANYBLOB="96731a06aeb64a2243cc787d1f7f6e43fca38b1d1e75949676cfa2b70425fcb6967415bad71b3036a389f450b4db326395d01a2db38ecb1218ee0944"]) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r8, r7, 0x0, 0x7ffffff9) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/71, 0x47}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0004000098c55bc8738a9f13f990f9b28fb04866175d22ae93f68130918327bef6fdcf55de28db53a2a216b3dd89d23e783c0c346a59458cd91800c1e8bc50c80e57f315978c151685b9d2e188ae0d999b5893eba33e25ed39f56cc478b2d12ce4d6359bff6cd3624b92221bee30a4149d150312f4a9a8967cbd3fea0250"], 0x30}, 0x0) 07:44:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10402, 0x0, 0x3, 0x5, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000007c0), 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x404, 0x1e, 0x300, 0x70bd27, 0x6, {0x1}, [@nested={0x12b, 0x31, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0xfff}, @typed={0x8, 0x73, 0x0, 0x0, @uid}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x4, 0x65}, @generic="7f0b19d8e05181fe5479223ecfed16921de5c2e12b636a3459d0dc30e6d9d478c58bb2eae256d1168fd891b92e3223b752488174eb1a9f8423093fe8fb0e5c5d9c24062f3762083d554c5af1f62df3b49ae1336dae99cbfc1d94029c2c7997027efd870261d347f25115b674f30748df5b5d98eb5db0da59bfbf5e3bb387fcc542d0eed08e51a0a8ced3159f9c4539b025532f53984e47ee5296f93b9a984b6e0e9f25da9b054e22040b49eb57d834e60e8b92d3c9e5f97aa8ad5dd6afe35b8a5c743cd12c79466023cc6b4b09be046111cc7e6c6060847e4411dc151a2f1c8ec7ed0fbf1905e67b55479c73316fe8"]}, @nested={0x18, 0x73, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic]}, @generic="3f1e7db5dc8d7337575509def5a39d7757ad17424b9f801b11805aed19b752756537271fab79600d564d2861b6c49e39c58acb1e3f68ad53d7210989c721740d2e857a17d1d427f892c65ac43ea47ad9ed426c68eb7f0555959ebb2029024e2cb0df381579d23eed69daa84d0151da2b8638601a22a627e202620e8260a9632bceae6a284208067e1a0be04aa756d2aac84cb4e7c5d30ed7d6f18f1d1d58755cc574e6f045bf4e2f36e16800f559e75879bd1b74357f061a66fb4a369a334a363286a8b58c630e4129399ae6da65b16d4db7a29d3c32340aae38262731431dc1e5d72deb5aa1e6f8ab158e09b5e874d4ce3910", @nested={0x9d, 0x3c, 0x0, 0x1, [@generic="60bd810d6a5adbb56be8b46d4c2fa4f47b7e07d58dd975e95e1e5cf11e4c86849542575887d02d64af6796ad3115f84edf920e5bcfcbd62852234f70034d0c6cba583256383b0ebe74c72cb7738a881c9a964cfe7390a9eeb9eadabe2ac5f998745609d31b40e0b00ab83f77f58c36b8dbe0e6de125bcccb1bc06154f547d1255b1a148147bd78bfcb2e1139c417c0b5f6be1cc4dc5edcdcea"]}, @generic="c4ead547f4c64be943d096d937c4d60f6f6e2cd1b87c2ecfa11de61b93924359b41945932d44183a7850f5eaf54debde690660d6cecbe266b2b63e95c287e1d42dfcaaa8e850ee", @generic="5ae4493d754a364f66ac3db062d2692c79cb75fb87835d96d1ab7d1c6b24b62a383aeabaaa6e3a66cc098acb6ebbed81ea5414ced1ade80657942105a9683cd76dde76f605c8dbcb31b688c86fa66b404da01f5807b67e111de18697e795050a9e4ce1d5808ff409d8d66d3569fce7cfaf5ea22e2f8b860fdab4cab44f1e1d261140e49d20689610cc04211667e061cc1c3899650e44882d40170dfdbdd42cd9720d8ab6ab0c6f5e21a4e0a086262612a2501bc28b3834c3254497dbad3304d57d01468ce350c19dd817b45db2caef9965"]}, 0x404}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) 07:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:15 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:44:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x7, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1061.205646] FAULT_INJECTION: forcing a failure. [ 1061.205646] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.207566] CPU: 1 PID: 8204 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1061.208546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1061.209688] Call Trace: [ 1061.210071] dump_stack+0x107/0x167 [ 1061.210594] should_fail.cold+0x5/0xa [ 1061.211136] ? create_object.isra.0+0x3a/0xa20 [ 1061.211897] should_failslab+0x5/0x20 [ 1061.212435] kmem_cache_alloc+0x5b/0x310 [ 1061.213028] create_object.isra.0+0x3a/0xa20 [ 1061.213634] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1061.214353] kmem_cache_alloc_node+0x169/0x330 [ 1061.215007] __alloc_skb+0x6d/0x5b0 [ 1061.215530] __ip_append_data+0x2930/0x3310 [ 1061.216153] ? lock_chain_count+0x20/0x20 [ 1061.216744] ? raw_destroy+0x30/0x30 [ 1061.217283] ? ip_finish_output+0x330/0x330 [ 1061.217882] ? lock_release+0x680/0x680 [ 1061.218427] ? ipv4_mtu+0x1ed/0x2c0 [ 1061.218938] ? raw_destroy+0x30/0x30 [ 1061.219450] ip_append_data+0x114/0x1a0 [ 1061.220022] raw_sendmsg+0xaa6/0x29d0 [ 1061.220576] ? dst_output+0x170/0x170 [ 1061.221106] ? __lock_acquire+0x1657/0x5b00 [ 1061.221734] ? perf_trace_lock+0xac/0x490 [ 1061.222306] ? SOFTIRQ_verbose+0x10/0x10 [ 1061.222868] ? __lockdep_reset_lock+0x180/0x180 [ 1061.223519] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1061.224230] ? find_held_lock+0x2c/0x110 [ 1061.224850] ? trace_hardirqs_on+0x5b/0x180 [ 1061.225459] ? dst_output+0x170/0x170 [ 1061.225981] inet_sendmsg+0x11d/0x140 [ 1061.226521] ? inet_send_prepare+0x540/0x540 [ 1061.227114] __sock_sendmsg+0x13c/0x190 [ 1061.227682] ____sys_sendmsg+0x334/0x870 [ 1061.228234] ? sock_write_iter+0x3d0/0x3d0 [ 1061.228836] ? do_recvmmsg+0x6d0/0x6d0 [ 1061.229391] ? perf_trace_lock+0xac/0x490 [ 1061.229984] ? __lockdep_reset_lock+0x180/0x180 [ 1061.230634] ? perf_trace_lock+0xac/0x490 [ 1061.231222] ___sys_sendmsg+0xf3/0x170 [ 1061.231775] ? sendmsg_copy_msghdr+0x160/0x160 [ 1061.232437] ? lock_downgrade+0x6d0/0x6d0 [ 1061.233053] ? lock_downgrade+0x6d0/0x6d0 [ 1061.233628] ? __fget_files+0x296/0x4c0 [ 1061.234204] ? __fget_light+0xea/0x290 [ 1061.234742] __sys_sendmmsg+0x195/0x470 [ 1061.235310] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1061.235900] ? lock_downgrade+0x6d0/0x6d0 [ 1061.236510] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1061.237219] ? wait_for_completion_io+0x270/0x270 [ 1061.237907] ? rcu_read_lock_any_held+0x75/0xa0 [ 1061.238559] ? vfs_write+0x354/0xa70 [ 1061.239089] ? fput_many+0x2f/0x1a0 [ 1061.239608] ? ksys_write+0x1a9/0x260 [ 1061.240145] ? __ia32_sys_read+0xb0/0xb0 [ 1061.240737] __x64_sys_sendmmsg+0x99/0x100 [ 1061.241344] do_syscall_64+0x33/0x40 [ 1061.241875] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1061.242603] RIP: 0033:0x7f24b3ae7b19 [ 1061.243132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1061.245696] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1061.246762] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1061.247750] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1061.248750] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1061.249761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1061.250768] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:44:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 1061.366128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.366968] print_req_error: 6 callbacks suppressed [ 1061.366987] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.369493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.369701] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.370457] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.371879] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1061.373438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.375160] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.376749] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.376759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.376798] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.378283] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1061.379132] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.380484] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.381567] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.382268] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1061.383856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.387141] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.388735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.389543] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1061.391136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.402687] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1061.403811] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1061.404983] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1061.406074] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1061.407163] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1061.869818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.870747] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1061.873264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.874129] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1061.875914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.876914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.878447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.879923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.880924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.882452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.902639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.903638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.905145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.906731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.907723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.909194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.910769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1061.911758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:44:30 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x20}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xa8b02, 0x0) ioctl$CDROMRESET(r0, 0x5312) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x2f87, &(0x7f00000000c0)={0x0, 0xafa9, 0x2a, 0x2, 0x2ca, 0x0, r0}, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x7, 0x2004, @fd_index=0x1, 0xd5e4, &(0x7f0000000240)="f5570287f18b8c2d21e2ecd480ff1162e646b4f178bb47dee789907170833deebd58528ad633d9d2cbc48efd5acb232a0bfcd16fae92ef7943b97bb250baa3ddefc025f1273221da850abd5c94c5f7eaf9e0427b102929c0c3bd80a34ef8ca7a34bc544aa4f07020e11a1195cf6d0895d1981655fb5e00ea80ef808f62d44603c7130ff4ff092613f7b4dc16c57898cfb5dfd915b723043f611b4341d3d3b9ee2a2c0fd79acf44d102f98d93e57ca77d797a5fed6af460d8b3d58f5a141d033619b525b4eb35a6de9f5d4a3249f2ba0a62e5d1008edfabc6a940681ba02192fa978baa0bea3a7735ca2df3ab8a749a2863b49f40a4fa421325feee007c49", 0xfe, 0x12, 0x1, {0x0, r3}}, 0xfffffeff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000040)=0x7fffffff, 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x80042, 0x10, 0x10}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x23456}, 0x9) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x8) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) fallocate(r4, 0x20, 0x0, 0x8000) mbind(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x5, 0xc3f6, 0x4) 07:44:30 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0xe8b82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) fallocate(r1, 0x4, 0x2, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000000440)={"7ff74a2a2df43fcd6bbc4413", 0x0, 0x0, 0x0, 0x0, 0x79149570e0bc8977, 0x0, 0x0, 0x0}) 07:44:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xa, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 28) 07:44:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10402, 0x0, 0x3, 0x5, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000"], 0x68) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x5]}, &(0x7f0000000140)=0x78) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0xa0d800, 0x0) socket$netlink(0x10, 0x3, 0x4) setresuid(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000007c0), 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) symlinkat(&(0x7f0000000100)='./file0\x00', r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x404, 0x1e, 0x300, 0x70bd27, 0x6, {0x1}, [@nested={0x12b, 0x31, 0x0, 0x1, [@typed={0x8, 0x89, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0x77, 0x0, 0x0, @u32=0xfff}, @typed={0x8, 0x73, 0x0, 0x0, @uid}, @typed={0x8, 0x39, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xc, 0x2e, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x4, 0x65}, @generic="7f0b19d8e05181fe5479223ecfed16921de5c2e12b636a3459d0dc30e6d9d478c58bb2eae256d1168fd891b92e3223b752488174eb1a9f8423093fe8fb0e5c5d9c24062f3762083d554c5af1f62df3b49ae1336dae99cbfc1d94029c2c7997027efd870261d347f25115b674f30748df5b5d98eb5db0da59bfbf5e3bb387fcc542d0eed08e51a0a8ced3159f9c4539b025532f53984e47ee5296f93b9a984b6e0e9f25da9b054e22040b49eb57d834e60e8b92d3c9e5f97aa8ad5dd6afe35b8a5c743cd12c79466023cc6b4b09be046111cc7e6c6060847e4411dc151a2f1c8ec7ed0fbf1905e67b55479c73316fe8"]}, @nested={0x18, 0x73, 0x0, 0x1, [@typed={0x14, 0x6c, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic]}, @generic="3f1e7db5dc8d7337575509def5a39d7757ad17424b9f801b11805aed19b752756537271fab79600d564d2861b6c49e39c58acb1e3f68ad53d7210989c721740d2e857a17d1d427f892c65ac43ea47ad9ed426c68eb7f0555959ebb2029024e2cb0df381579d23eed69daa84d0151da2b8638601a22a627e202620e8260a9632bceae6a284208067e1a0be04aa756d2aac84cb4e7c5d30ed7d6f18f1d1d58755cc574e6f045bf4e2f36e16800f559e75879bd1b74357f061a66fb4a369a334a363286a8b58c630e4129399ae6da65b16d4db7a29d3c32340aae38262731431dc1e5d72deb5aa1e6f8ab158e09b5e874d4ce3910", @nested={0x9d, 0x3c, 0x0, 0x1, [@generic="60bd810d6a5adbb56be8b46d4c2fa4f47b7e07d58dd975e95e1e5cf11e4c86849542575887d02d64af6796ad3115f84edf920e5bcfcbd62852234f70034d0c6cba583256383b0ebe74c72cb7738a881c9a964cfe7390a9eeb9eadabe2ac5f998745609d31b40e0b00ab83f77f58c36b8dbe0e6de125bcccb1bc06154f547d1255b1a148147bd78bfcb2e1139c417c0b5f6be1cc4dc5edcdcea"]}, @generic="c4ead547f4c64be943d096d937c4d60f6f6e2cd1b87c2ecfa11de61b93924359b41945932d44183a7850f5eaf54debde690660d6cecbe266b2b63e95c287e1d42dfcaaa8e850ee", @generic="5ae4493d754a364f66ac3db062d2692c79cb75fb87835d96d1ab7d1c6b24b62a383aeabaaa6e3a66cc098acb6ebbed81ea5414ced1ade80657942105a9683cd76dde76f605c8dbcb31b688c86fa66b404da01f5807b67e111de18697e795050a9e4ce1d5808ff409d8d66d3569fce7cfaf5ea22e2f8b860fdab4cab44f1e1d261140e49d20689610cc04211667e061cc1c3899650e44882d40170dfdbdd42cd9720d8ab6ab0c6f5e21a4e0a086262612a2501bc28b3834c3254497dbad3304d57d01468ce350c19dd817b45db2caef9965"]}, 0x404}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) 07:44:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 10) 07:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:30 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 1076.364024] FAULT_INJECTION: forcing a failure. [ 1076.364024] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.365577] CPU: 0 PID: 8240 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1076.366218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.367003] Call Trace: [ 1076.367260] dump_stack+0x107/0x167 [ 1076.367615] should_fail.cold+0x5/0xa [ 1076.367990] should_failslab+0x5/0x20 [ 1076.368355] __kmalloc_node_track_caller+0x74/0x3b0 [ 1076.368835] ? __ip_append_data+0x2930/0x3310 [ 1076.369266] __alloc_skb+0xb1/0x5b0 [ 1076.369611] __ip_append_data+0x2930/0x3310 [ 1076.370028] ? lock_chain_count+0x20/0x20 [ 1076.370424] ? raw_destroy+0x30/0x30 [ 1076.370784] ? ip_finish_output+0x330/0x330 [ 1076.371180] ? lock_release+0x680/0x680 [ 1076.371549] ? ipv4_mtu+0x1ed/0x2c0 [ 1076.371893] ? raw_destroy+0x30/0x30 [ 1076.372237] ip_append_data+0x114/0x1a0 [ 1076.372616] raw_sendmsg+0xaa6/0x29d0 [ 1076.372993] ? dst_output+0x170/0x170 [ 1076.373351] ? __lock_acquire+0x1657/0x5b00 [ 1076.373792] ? perf_trace_lock+0xac/0x490 [ 1076.374200] ? SOFTIRQ_verbose+0x10/0x10 [ 1076.374604] ? __lockdep_reset_lock+0x180/0x180 [ 1076.375043] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1076.375523] ? find_held_lock+0x2c/0x110 [ 1076.375929] ? trace_hardirqs_on+0x5b/0x180 [ 1076.376340] ? dst_output+0x170/0x170 [ 1076.376717] inet_sendmsg+0x11d/0x140 [ 1076.377068] ? inet_send_prepare+0x540/0x540 [ 1076.377482] __sock_sendmsg+0x13c/0x190 [ 1076.377855] ____sys_sendmsg+0x334/0x870 [ 1076.378237] ? sock_write_iter+0x3d0/0x3d0 [ 1076.378631] ? do_recvmmsg+0x6d0/0x6d0 [ 1076.378992] ? perf_trace_lock+0xac/0x490 [ 1076.379397] ? __lockdep_reset_lock+0x180/0x180 [ 1076.379835] ? perf_trace_lock+0xac/0x490 [ 1076.380228] ___sys_sendmsg+0xf3/0x170 [ 1076.380614] ? sendmsg_copy_msghdr+0x160/0x160 [ 1076.381062] ? lock_downgrade+0x6d0/0x6d0 [ 1076.381462] ? lock_downgrade+0x6d0/0x6d0 [ 1076.381853] ? __fget_files+0x296/0x4c0 [ 1076.382238] ? __fget_light+0xea/0x290 [ 1076.382619] __sys_sendmmsg+0x195/0x470 [ 1076.382995] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1076.383407] ? lock_downgrade+0x6d0/0x6d0 [ 1076.383805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1076.384252] ? wait_for_completion_io+0x270/0x270 [ 1076.384719] ? rcu_read_lock_any_held+0x75/0xa0 [ 1076.385155] ? vfs_write+0x354/0xa70 [ 1076.385255] FAULT_INJECTION: forcing a failure. [ 1076.385255] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.385503] ? fput_many+0x2f/0x1a0 [ 1076.385517] ? ksys_write+0x1a9/0x260 [ 1076.385530] ? __ia32_sys_read+0xb0/0xb0 [ 1076.385550] __x64_sys_sendmmsg+0x99/0x100 [ 1076.385565] do_syscall_64+0x33/0x40 [ 1076.385577] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1076.385586] RIP: 0033:0x7f24b3ae7b19 [ 1076.385598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.385605] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1076.385618] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1076.385627] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1076.385634] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.385641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.385659] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1076.395579] CPU: 1 PID: 8239 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1076.396602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.397823] Call Trace: [ 1076.398219] dump_stack+0x107/0x167 [ 1076.398765] should_fail.cold+0x5/0xa [ 1076.399333] ? __alloc_skb+0x6d/0x5b0 [ 1076.399908] should_failslab+0x5/0x20 [ 1076.400470] kmem_cache_alloc_node+0x55/0x330 [ 1076.401144] __alloc_skb+0x6d/0x5b0 [ 1076.401696] __ip_append_data+0x2930/0x3310 [ 1076.402352] ? lock_chain_count+0x20/0x20 [ 1076.402970] ? raw_destroy+0x30/0x30 [ 1076.403525] ? ip_finish_output+0x330/0x330 [ 1076.404159] ? lock_release+0x680/0x680 [ 1076.404746] ? ipv4_mtu+0x1ed/0x2c0 [ 1076.405289] ? raw_destroy+0x30/0x30 [ 1076.405843] ip_append_data+0x114/0x1a0 [ 1076.406445] raw_sendmsg+0xaa6/0x29d0 [ 1076.407028] ? dst_output+0x170/0x170 [ 1076.407592] ? __lock_acquire+0x1657/0x5b00 [ 1076.408249] ? perf_trace_lock+0xac/0x490 [ 1076.408870] ? SOFTIRQ_verbose+0x10/0x10 [ 1076.409472] ? __lockdep_reset_lock+0x180/0x180 [ 1076.410166] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1076.410905] ? find_held_lock+0x2c/0x110 [ 1076.411525] ? trace_hardirqs_on+0x5b/0x180 [ 1076.412164] ? dst_output+0x170/0x170 [ 1076.412738] inet_sendmsg+0x11d/0x140 [ 1076.413300] ? inet_send_prepare+0x540/0x540 [ 1076.413951] __sock_sendmsg+0x13c/0x190 [ 1076.414541] ____sys_sendmsg+0x334/0x870 [ 1076.415131] ? sock_write_iter+0x3d0/0x3d0 [ 1076.415757] ? do_recvmmsg+0x6d0/0x6d0 [ 1076.416333] ? perf_trace_lock+0xac/0x490 [ 1076.416967] ? __lockdep_reset_lock+0x180/0x180 [ 1076.417648] ? perf_trace_lock+0xac/0x490 [ 1076.418266] ___sys_sendmsg+0xf3/0x170 [ 1076.418849] ? sendmsg_copy_msghdr+0x160/0x160 [ 1076.419530] ? lock_downgrade+0x6d0/0x6d0 [ 1076.420150] ? lock_downgrade+0x6d0/0x6d0 [ 1076.420780] ? __fget_files+0x296/0x4c0 [ 1076.421381] ? __fget_light+0xea/0x290 [ 1076.421969] __sys_sendmmsg+0x195/0x470 [ 1076.422564] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1076.423201] ? lock_downgrade+0x6d0/0x6d0 [ 1076.423839] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1076.424556] ? wait_for_completion_io+0x270/0x270 [ 1076.425278] ? rcu_read_lock_any_held+0x75/0xa0 [ 1076.425965] ? vfs_write+0x354/0xa70 [ 1076.426522] ? fput_many+0x2f/0x1a0 [ 1076.427050] ? ksys_write+0x1a9/0x260 [ 1076.427617] ? __ia32_sys_read+0xb0/0xb0 [ 1076.428228] __x64_sys_sendmmsg+0x99/0x100 [ 1076.428851] do_syscall_64+0x33/0x40 [ 1076.429400] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1076.430153] RIP: 0033:0x7f62f063ab19 [ 1076.430690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.433380] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1076.434497] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1076.435536] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1076.436577] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.437632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.438678] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:30 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = gettid() kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x9, 0x9, 0x80, 0x0, 0x3f, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x8400, 0x81, 0x7fff, 0x6, 0x3f, 0xff, 0x5, 0x0, 0x1, 0x0, 0x3}, r2, 0x4, r0, 0x2) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:44:30 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105142, 0x153) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x2) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file1\x00'}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)={[{}, {@size={'size', 0x3d, [0x35]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x36, 0x31, 0x34, 0x2160ed0aebb93baf, 0x31]}}, {@uid={'uid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0xff}}, {@huge_always}, {@mpol={'mpol', 0x3d, {'default', '', @void}}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x25, 0x31]}}, {@size={'size', 0x3d, [0x35, 0x33, 0x33, 0x78]}}, {@huge_within_size}], [{@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@hash}, {@fowner_gt={'fowner>', 0xee01}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) dup2(0xffffffffffffffff, r4) write(r3, &(0x7f0000000240)="01", 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) flock(r0, 0x0) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x101800, 0x4) getdents(r6, &(0x7f00000002c0)=""/231, 0xe7) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r7, 0xffff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)) sendfile(r1, r2, 0x0, 0x20d315) 07:44:30 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x28e, 0x0, 0x67a6, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) fallocate(r0, 0x3, 0x0, 0x18000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@rc, &(0x7f00000000c0)=0x80) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x3, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2]) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x4, 0x0, 0x401, 0x2, 0x3e, 0x4, 0x102, 0x40, 0xcb, 0x20, 0x8001, 0x38, 0x2, 0x81, 0x6, 0x11d0}, [{0x70000000, 0x62f70, 0x7ff, 0x8, 0x7fffffff, 0x7, 0x4, 0xba}, {0x6474e551, 0x6, 0x80, 0xfffffffffffffff9, 0x2, 0x5, 0x8, 0xa167}], "8a502d05f7afdb6e6ce4dd239e6039d0c0de2426a4f961e33986506658017ec29d8a62087d28a0b8e7ed98a33687ea471daf9a715960be6860e1841360f3a400b5", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9f1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x6, 0x0) dup3(r2, r5, 0x80000) sendfile(r4, r3, 0x0, 0x7ffffff9) 07:44:30 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 07:44:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x10, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 29) [ 1076.586063] FAULT_INJECTION: forcing a failure. [ 1076.586063] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.587490] CPU: 0 PID: 8260 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1076.588129] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1076.588901] Call Trace: [ 1076.589134] dump_stack+0x107/0x167 [ 1076.589445] should_fail.cold+0x5/0xa [ 1076.589773] ? create_object.isra.0+0x3a/0xa20 [ 1076.590160] should_failslab+0x5/0x20 [ 1076.590482] kmem_cache_alloc+0x5b/0x310 [ 1076.590831] create_object.isra.0+0x3a/0xa20 [ 1076.591202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1076.591628] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1076.592055] ? __ip_append_data+0x2930/0x3310 [ 1076.592441] __alloc_skb+0xb1/0x5b0 [ 1076.592759] __ip_append_data+0x2930/0x3310 [ 1076.593131] ? lock_chain_count+0x20/0x20 [ 1076.593483] ? raw_destroy+0x30/0x30 [ 1076.593810] ? ip_finish_output+0x330/0x330 [ 1076.594172] ? lock_release+0x680/0x680 [ 1076.594507] ? ipv4_mtu+0x1ed/0x2c0 [ 1076.594819] ? raw_destroy+0x30/0x30 [ 1076.595129] ip_append_data+0x114/0x1a0 [ 1076.595470] raw_sendmsg+0xaa6/0x29d0 [ 1076.595800] ? dst_output+0x170/0x170 [ 1076.596119] ? __lock_acquire+0x1657/0x5b00 [ 1076.596495] ? perf_trace_lock+0xac/0x490 [ 1076.596853] ? SOFTIRQ_verbose+0x10/0x10 [ 1076.597203] ? __lockdep_reset_lock+0x180/0x180 [ 1076.597619] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1076.598052] ? find_held_lock+0x2c/0x110 [ 1076.598411] ? trace_hardirqs_on+0x5b/0x180 [ 1076.598778] ? dst_output+0x170/0x170 [ 1076.599114] inet_sendmsg+0x11d/0x140 [ 1076.599432] ? inet_send_prepare+0x540/0x540 [ 1076.599800] __sock_sendmsg+0x13c/0x190 [ 1076.600135] ____sys_sendmsg+0x334/0x870 [ 1076.600479] ? sock_write_iter+0x3d0/0x3d0 [ 1076.600837] ? do_recvmmsg+0x6d0/0x6d0 [ 1076.601163] ? perf_trace_lock+0xac/0x490 [ 1076.601515] ? __lockdep_reset_lock+0x180/0x180 [ 1076.601904] ? perf_trace_lock+0xac/0x490 [ 1076.602252] ___sys_sendmsg+0xf3/0x170 [ 1076.602582] ? sendmsg_copy_msghdr+0x160/0x160 [ 1076.602968] ? lock_downgrade+0x6d0/0x6d0 [ 1076.603321] ? lock_downgrade+0x6d0/0x6d0 [ 1076.603674] ? __fget_files+0x296/0x4c0 [ 1076.604018] ? __fget_light+0xea/0x290 [ 1076.604348] __sys_sendmmsg+0x195/0x470 [ 1076.604685] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1076.605051] ? lock_downgrade+0x6d0/0x6d0 [ 1076.605421] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1076.605826] ? wait_for_completion_io+0x270/0x270 [ 1076.606234] ? rcu_read_lock_any_held+0x75/0xa0 [ 1076.606624] ? vfs_write+0x354/0xa70 [ 1076.606938] ? fput_many+0x2f/0x1a0 [ 1076.607241] ? ksys_write+0x1a9/0x260 [ 1076.607565] ? __ia32_sys_read+0xb0/0xb0 [ 1076.607913] __x64_sys_sendmmsg+0x99/0x100 [ 1076.608275] do_syscall_64+0x33/0x40 [ 1076.608590] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1076.609022] RIP: 0033:0x7f24b3ae7b19 [ 1076.609338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1076.610853] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1076.611484] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1076.612073] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1076.612668] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1076.613271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1076.613864] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:44:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@private2, 0x0, 0x1}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000001300), 0x2008880, &(0x7f0000001380)={[{@fat=@dos1xfloppy}]}) [ 1076.892006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.892516] print_req_error: 38 callbacks suppressed [ 1076.892528] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.893815] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.894691] buffer_io_error: 14 callbacks suppressed [ 1076.894699] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1076.896267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.896741] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.897602] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.898445] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1076.899439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.899876] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.900746] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.901595] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1076.902643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.903083] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.903946] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.904804] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1076.905837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.906273] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.907141] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1076.907994] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1076.908962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.909448] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1076.910419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.910875] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1076.911833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.912296] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1076.922080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.922570] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1076.923251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.923736] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1076.924729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.925264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.926081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.926903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.927713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.928244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.936813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.937708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.938235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.939052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.939873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.940688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.941225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.942039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.951175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.951742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.952268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.953169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.953982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.954798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.955355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1076.956149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:44:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5c8, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() gettid() r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 07:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:45 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x4000007ffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) recvmmsg$unix(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001100)=""/244, 0xf4}, {&(0x7f0000001200)=""/126, 0x7e}, {&(0x7f0000001280)=""/62, 0x3e}, {&(0x7f00000012c0)=""/118, 0x76}, {&(0x7f0000001340)=""/87, 0x57}], 0x5, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f00000014c0)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/36, 0x24}, {&(0x7f0000001580)=""/169, 0xa9}], 0x2, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}], 0x2, 0x2002, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000340)={0x1c, r5, 0x7, 0x0, 0x25dfdbff, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) setsockopt(r2, 0x4, 0x1, &(0x7f0000000100)="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", 0x1000) 07:44:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x180) pipe(&(0x7f0000000080)={0xffffffffffffffff}) signalfd4(r1, &(0x7f00000000c0), 0x8, 0x80800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x202040, 0x100) setrlimit(0x8, &(0x7f0000000040)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) 07:44:45 executing program 7: pkey_free(0xffffffffffffffff) pkey_alloc(0x0, 0x1) r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000007, r0) 07:44:45 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 11) 07:44:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 30) 07:44:45 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000def4655fdef4655f0100ffff53ef010001000000def4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="01000000000005000c", 0x9, 0x560}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x6000}], 0x1, &(0x7f0000013c00)=ANY=[]) 07:44:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 1091.171965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.180306] FAULT_INJECTION: forcing a failure. [ 1091.180306] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.182687] CPU: 0 PID: 8291 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1091.183766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.185085] Call Trace: [ 1091.185516] dump_stack+0x107/0x167 [ 1091.186098] should_fail.cold+0x5/0xa [ 1091.186707] ? create_object.isra.0+0x3a/0xa20 [ 1091.187436] should_failslab+0x5/0x20 [ 1091.188047] kmem_cache_alloc+0x5b/0x310 [ 1091.188704] create_object.isra.0+0x3a/0xa20 [ 1091.189413] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.190227] kmem_cache_alloc_node+0x169/0x330 [ 1091.190966] __alloc_skb+0x6d/0x5b0 [ 1091.191556] __ip_append_data+0x2930/0x3310 [ 1091.192254] ? lock_chain_count+0x20/0x20 [ 1091.192909] ? raw_destroy+0x30/0x30 [ 1091.193523] ? ip_finish_output+0x330/0x330 [ 1091.194209] ? lock_release+0x680/0x680 [ 1091.194354] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.194836] ? ipv4_mtu+0x1ed/0x2c0 [ 1091.196391] ? raw_destroy+0x30/0x30 [ 1091.196993] ip_append_data+0x114/0x1a0 [ 1091.197638] raw_sendmsg+0xaa6/0x29d0 [ 1091.198265] ? dst_output+0x170/0x170 [ 1091.198870] ? __lock_acquire+0x1657/0x5b00 [ 1091.199580] ? perf_trace_lock+0xac/0x490 [ 1091.200244] ? SOFTIRQ_verbose+0x10/0x10 [ 1091.200905] ? __lockdep_reset_lock+0x180/0x180 [ 1091.201662] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1091.202479] ? find_held_lock+0x2c/0x110 [ 1091.203146] ? trace_hardirqs_on+0x5b/0x180 [ 1091.203844] ? dst_output+0x170/0x170 [ 1091.204451] inet_sendmsg+0x11d/0x140 [ 1091.205077] ? inet_send_prepare+0x540/0x540 [ 1091.205096] __sock_sendmsg+0x13c/0x190 [ 1091.205118] ____sys_sendmsg+0x334/0x870 [ 1091.205143] ? sock_write_iter+0x3d0/0x3d0 [ 1091.205160] ? do_recvmmsg+0x6d0/0x6d0 [ 1091.205180] ? perf_trace_lock+0xac/0x490 [ 1091.205196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.205211] ? __lockdep_reset_lock+0x180/0x180 [ 1091.205230] ? perf_trace_lock+0xac/0x490 [ 1091.205258] ___sys_sendmsg+0xf3/0x170 [ 1091.205282] ? sendmsg_copy_msghdr+0x160/0x160 [ 1091.205310] ? lock_downgrade+0x6d0/0x6d0 [ 1091.210110] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.210647] ? lock_downgrade+0x6d0/0x6d0 [ 1091.210676] ? __fget_files+0x296/0x4c0 [ 1091.216712] ? __fget_light+0xea/0x290 [ 1091.217353] __sys_sendmmsg+0x195/0x470 [ 1091.218003] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1091.218688] ? lock_downgrade+0x6d0/0x6d0 [ 1091.219373] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.220146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.220985] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.221839] ? trace_hardirqs_on+0x5b/0x180 [ 1091.222524] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.223393] __x64_sys_sendmmsg+0x99/0x100 [ 1091.224073] do_syscall_64+0x33/0x40 [ 1091.224655] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1091.225478] RIP: 0033:0x7f62f063ab19 [ 1091.226062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.229159] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1091.230338] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1091.231438] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1091.232535] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.233636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.234734] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:44:45 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000009452194000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff00"/256]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) r4 = accept$inet6(r0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x881003, &(0x7f0000001300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@cache_mmap}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, ',-'}}, {@noextend}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x7}}, {@version_u}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x64, 0x31, 0x30, 0x39, 0x62, 0x34], 0x2d, [0x63, 0x66, 0x36, 0x31], 0x2d, [0x36, 0x65, 0x32, 0x36], 0x2d, [0x34, 0x64, 0x38, 0x39], 0x2d, [0x38, 0x64, 0x31, 0x32, 0x35, 0x61, 0x35, 0x35]}}}]}}) 07:44:45 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 07:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0xb90, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1091.260943] FAULT_INJECTION: forcing a failure. [ 1091.260943] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.263129] CPU: 0 PID: 8294 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1091.264228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.265560] Call Trace: [ 1091.265993] dump_stack+0x107/0x167 [ 1091.266586] should_fail.cold+0x5/0xa [ 1091.267207] ? __alloc_skb+0x6d/0x5b0 [ 1091.267829] should_failslab+0x5/0x20 [ 1091.268343] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.268448] kmem_cache_alloc_node+0x55/0x330 [ 1091.270177] __alloc_skb+0x6d/0x5b0 [ 1091.270778] __ip_append_data+0x2930/0x3310 [ 1091.271490] ? lock_chain_count+0x20/0x20 [ 1091.272162] ? raw_destroy+0x30/0x30 [ 1091.272781] ? ip_finish_output+0x330/0x330 [ 1091.273486] ? lock_release+0x680/0x680 [ 1091.274128] ? ipv4_mtu+0x1ed/0x2c0 [ 1091.274712] ? raw_destroy+0x30/0x30 [ 1091.275312] ip_append_data+0x114/0x1a0 [ 1091.275957] raw_sendmsg+0xaa6/0x29d0 [ 1091.276578] ? dst_output+0x170/0x170 [ 1091.277193] ? __lock_acquire+0x1657/0x5b00 [ 1091.277892] ? perf_trace_lock+0xac/0x490 [ 1091.278542] ? SOFTIRQ_verbose+0x10/0x10 [ 1091.279211] ? __lockdep_reset_lock+0x180/0x180 [ 1091.279968] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1091.280779] ? find_held_lock+0x2c/0x110 [ 1091.281452] ? trace_hardirqs_on+0x5b/0x180 [ 1091.282145] ? dst_output+0x170/0x170 [ 1091.282759] inet_sendmsg+0x11d/0x140 [ 1091.283361] ? inet_send_prepare+0x540/0x540 [ 1091.284068] __sock_sendmsg+0x13c/0x190 [ 1091.284705] ____sys_sendmsg+0x334/0x870 [ 1091.285367] ? sock_write_iter+0x3d0/0x3d0 [ 1091.286032] ? do_recvmmsg+0x6d0/0x6d0 [ 1091.286655] ? perf_trace_lock+0xac/0x490 [ 1091.287286] ? __lockdep_reset_lock+0x180/0x180 [ 1091.287995] ? perf_pmu_nop_int+0x5/0x10 [ 1091.288640] ? merge_sched_in+0x142/0xfb0 [ 1091.289344] ___sys_sendmsg+0xf3/0x170 [ 1091.289983] ? sendmsg_copy_msghdr+0x160/0x160 [ 1091.290743] ? lock_downgrade+0x6d0/0x6d0 [ 1091.291406] ? __fget_files+0x296/0x4c0 [ 1091.292065] ? __fget_light+0xea/0x290 [ 1091.292437] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.292707] __sys_sendmmsg+0x195/0x470 [ 1091.295100] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1091.295834] ? finish_task_switch+0x126/0x5d0 [ 1091.296587] ? __switch_to_asm+0x34/0x60 [ 1091.297270] ? __schedule+0x82c/0x1ea0 [ 1091.297921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1091.298777] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.299589] ? trace_hardirqs_on+0x5b/0x180 [ 1091.300301] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1091.301218] ? __sys_sendmmsg+0x470/0x470 [ 1091.301898] __x64_sys_sendmmsg+0x99/0x100 [ 1091.302588] do_syscall_64+0x33/0x40 [ 1091.303162] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1091.303940] RIP: 0033:0x7f24b3ae7b19 [ 1091.303974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.307341] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1091.308546] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1091.309649] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1091.310789] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.311927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.313042] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1091.343460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 07:44:45 executing program 7: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r1, &(0x7f0000000000), 0x1b4000) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x3f, 0x9, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000003c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x300, 0xae, &(0x7f0000000580)=""/174}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x104) [ 1091.366205] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 07:44:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 31) [ 1091.428776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.430978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=8289 comm=syz-executor.2 [ 1091.437631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.438507] print_req_error: 54 callbacks suppressed [ 1091.438526] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.441011] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.442630] buffer_io_error: 22 callbacks suppressed [ 1091.442643] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1091.448009] Restarting kernel threads ... done. [ 1091.459688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.460600] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.462294] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.463956] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1091.503151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.504399] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.506082] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.506129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.507950] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1091.508532] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.508658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.510151] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.511359] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.512125] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1091.518824] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1091.520442] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1091.541289] FAULT_INJECTION: forcing a failure. [ 1091.541289] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.543552] CPU: 1 PID: 8315 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1091.544578] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1091.545815] Call Trace: [ 1091.546220] dump_stack+0x107/0x167 [ 1091.546781] should_fail.cold+0x5/0xa [ 1091.547351] ? create_object.isra.0+0x3a/0xa20 [ 1091.548044] should_failslab+0x5/0x20 [ 1091.548625] kmem_cache_alloc+0x5b/0x310 [ 1091.549260] create_object.isra.0+0x3a/0xa20 [ 1091.549924] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1091.550697] kmem_cache_alloc_node+0x169/0x330 [ 1091.551393] __alloc_skb+0x6d/0x5b0 [ 1091.551949] __ip_append_data+0x2930/0x3310 [ 1091.552607] ? lock_chain_count+0x20/0x20 [ 1091.553242] ? raw_destroy+0x30/0x30 [ 1091.553819] ? ip_finish_output+0x330/0x330 [ 1091.554467] ? lock_release+0x680/0x680 [ 1091.555065] ? ipv4_mtu+0x1ed/0x2c0 [ 1091.555622] ? raw_destroy+0x30/0x30 [ 1091.556184] ip_append_data+0x114/0x1a0 [ 1091.556790] raw_sendmsg+0xaa6/0x29d0 [ 1091.557396] ? dst_output+0x170/0x170 [ 1091.557963] ? __lock_acquire+0x1657/0x5b00 [ 1091.558629] ? perf_trace_lock+0xac/0x490 [ 1091.559253] ? SOFTIRQ_verbose+0x10/0x10 [ 1091.559870] ? __lockdep_reset_lock+0x180/0x180 [ 1091.560577] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1091.561356] ? find_held_lock+0x2c/0x110 [ 1091.561985] ? trace_hardirqs_on+0x5b/0x180 [ 1091.562642] ? dst_output+0x170/0x170 [ 1091.563212] inet_sendmsg+0x11d/0x140 [ 1091.563777] ? inet_send_prepare+0x540/0x540 [ 1091.564439] __sock_sendmsg+0x13c/0x190 [ 1091.565041] ____sys_sendmsg+0x334/0x870 [ 1091.565657] ? sock_write_iter+0x3d0/0x3d0 [ 1091.566283] ? do_recvmmsg+0x6d0/0x6d0 [ 1091.566871] ? perf_trace_lock+0xac/0x490 [ 1091.567505] ? __lockdep_reset_lock+0x180/0x180 [ 1091.568198] ? perf_trace_lock+0xac/0x490 [ 1091.568833] ___sys_sendmsg+0xf3/0x170 [ 1091.569427] ? sendmsg_copy_msghdr+0x160/0x160 [ 1091.570114] ? lock_downgrade+0x6d0/0x6d0 [ 1091.570746] ? lock_downgrade+0x6d0/0x6d0 [ 1091.571369] ? __fget_files+0x296/0x4c0 [ 1091.571971] ? __fget_light+0xea/0x290 [ 1091.572563] __sys_sendmmsg+0x195/0x470 [ 1091.573180] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1091.573831] ? lock_downgrade+0x6d0/0x6d0 [ 1091.574482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1091.575217] ? wait_for_completion_io+0x270/0x270 [ 1091.575947] ? rcu_read_lock_any_held+0x75/0xa0 [ 1091.576648] ? vfs_write+0x354/0xa70 [ 1091.577221] ? fput_many+0x2f/0x1a0 [ 1091.577774] ? ksys_write+0x1a9/0x260 [ 1091.578351] ? __ia32_sys_read+0xb0/0xb0 [ 1091.578977] __x64_sys_sendmmsg+0x99/0x100 [ 1091.579623] do_syscall_64+0x33/0x40 [ 1091.580187] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1091.580968] RIP: 0033:0x7f24b3ae7b19 [ 1091.581533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1091.584269] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1091.585426] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1091.586492] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1091.587563] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.588628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.589701] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1091.591887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1091.592862] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1091.594029] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1091.595177] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1092.016813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.017758] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1092.030052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.030936] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1092.032213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.033220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.034244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.035238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.036227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1092.037232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:44:58 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd0100000000000000000000000000000000000000000000000000000009452194000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000feffffffffffffff00"/256]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x4, 0x0, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x14e6}, 0x40002, 0x0, 0x0, 0x4, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000300)={{}, "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"}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x67bb, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x101, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) unshare(0x48020200) read(0xffffffffffffffff, &(0x7f0000000000), 0x1b4000) r4 = accept$inet6(r0, 0x0, &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x881003, &(0x7f0000001300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend}, {@cache_mmap}, {@version_u}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@aname={'aname', 0x3d, ',-'}}, {@noextend}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x7}}, {@version_u}], [{@pcr={'pcr', 0x3d, 0x2e}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x64, 0x31, 0x30, 0x39, 0x62, 0x34], 0x2d, [0x63, 0x66, 0x36, 0x31], 0x2d, [0x36, 0x65, 0x32, 0x36], 0x2d, [0x34, 0x64, 0x38, 0x39], 0x2d, [0x38, 0x64, 0x31, 0x32, 0x35, 0x61, 0x35, 0x35]}}}]}}) 07:44:58 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x47020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x9, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="00000000303030303030300506466cbf87efeb30303030394d"]) r3 = open(&(0x7f0000000040)='./file0\x00', 0x242800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) readv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/249, 0xf9}, {&(0x7f00000001c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/97, 0x61}], 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x88) ioctl$VT_DISALLOCATE(r1, 0x5608) 07:44:58 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 12) 07:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1158, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:44:58 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x0, 0x3) r0 = pkey_alloc(0x0, 0x0) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000001c0)=0x2, 0x0, 0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000002000210c0010000000000000020000005e00968008005c000a01010139c2762ff9ba46040093b659739bb5f96c60227a0b25e7c1f11199296c43fb7946a972c8f85b43c8044109bafde0897a78eb44338c0cbc86bf56293ee55fc2e0bb0b43645d2456c612cc7191a1002c000c00ff00cc990000e94e10850d03837f8a17b38e87277fc5689b47e693171678a1ac87e5eeeb1e00000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, r0) sendfile(r2, r1, 0x0, 0x9bbb) 07:44:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 32) 07:44:58 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) [ 1104.271742] FAULT_INJECTION: forcing a failure. [ 1104.271742] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.272932] CPU: 1 PID: 8336 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1104.273500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.274182] Call Trace: [ 1104.274410] dump_stack+0x107/0x167 [ 1104.274710] should_fail.cold+0x5/0xa [ 1104.275026] should_failslab+0x5/0x20 [ 1104.275334] __kmalloc_node_track_caller+0x74/0x3b0 [ 1104.275733] ? __ip_append_data+0x2930/0x3310 [ 1104.276092] __alloc_skb+0xb1/0x5b0 [ 1104.276389] __ip_append_data+0x2930/0x3310 [ 1104.276749] ? lock_chain_count+0x20/0x20 [ 1104.277090] ? raw_destroy+0x30/0x30 [ 1104.277394] ? ip_finish_output+0x330/0x330 [ 1104.277739] ? lock_release+0x680/0x680 [ 1104.278058] ? ipv4_mtu+0x1ed/0x2c0 [ 1104.278355] ? raw_destroy+0x30/0x30 [ 1104.278655] ip_append_data+0x114/0x1a0 [ 1104.279000] raw_sendmsg+0xaa6/0x29d0 [ 1104.279315] ? dst_output+0x170/0x170 [ 1104.279623] ? __lock_acquire+0x1657/0x5b00 [ 1104.279981] ? perf_trace_lock+0xac/0x490 [ 1104.280319] ? SOFTIRQ_verbose+0x10/0x10 [ 1104.280658] ? __lockdep_reset_lock+0x180/0x180 [ 1104.281033] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1104.281456] ? find_held_lock+0x2c/0x110 [ 1104.281793] ? trace_hardirqs_on+0x5b/0x180 [ 1104.282145] ? dst_output+0x170/0x170 [ 1104.282453] inet_sendmsg+0x11d/0x140 [ 1104.282757] ? inet_send_prepare+0x540/0x540 [ 1104.283106] __sock_sendmsg+0x13c/0x190 [ 1104.283430] ____sys_sendmsg+0x334/0x870 [ 1104.283757] ? sock_write_iter+0x3d0/0x3d0 [ 1104.284097] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.284414] ? perf_trace_lock+0xac/0x490 [ 1104.284751] ? __lockdep_reset_lock+0x180/0x180 [ 1104.285127] ? perf_trace_lock+0xac/0x490 [ 1104.285464] ___sys_sendmsg+0xf3/0x170 [ 1104.285783] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.286158] ? lock_downgrade+0x6d0/0x6d0 [ 1104.286494] ? lock_downgrade+0x6d0/0x6d0 [ 1104.286832] ? __fget_files+0x296/0x4c0 [ 1104.287158] ? __fget_light+0xea/0x290 [ 1104.287479] __sys_sendmmsg+0x195/0x470 [ 1104.287804] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1104.288152] ? lock_downgrade+0x6d0/0x6d0 [ 1104.288503] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1104.288903] ? wait_for_completion_io+0x270/0x270 [ 1104.288982] FAULT_INJECTION: forcing a failure. [ 1104.288982] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.289296] ? rcu_read_lock_any_held+0x75/0xa0 [ 1104.289307] ? vfs_write+0x354/0xa70 [ 1104.289318] ? fput_many+0x2f/0x1a0 [ 1104.289329] ? ksys_write+0x1a9/0x260 [ 1104.289340] ? __ia32_sys_read+0xb0/0xb0 [ 1104.289356] __x64_sys_sendmmsg+0x99/0x100 [ 1104.289380] do_syscall_64+0x33/0x40 [ 1104.293373] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1104.293794] RIP: 0033:0x7f62f063ab19 [ 1104.294093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.295571] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1104.296185] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1104.296767] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1104.297347] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.297923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.298498] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1104.299100] CPU: 0 PID: 8335 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1104.300179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.301464] Call Trace: [ 1104.301872] dump_stack+0x107/0x167 [ 1104.302457] should_fail.cold+0x5/0xa [ 1104.303043] should_failslab+0x5/0x20 [ 1104.303640] __kmalloc_node_track_caller+0x74/0x3b0 [ 1104.304408] ? __ip_append_data+0x2930/0x3310 [ 1104.304438] __alloc_skb+0xb1/0x5b0 07:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:58 executing program 6: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 1104.304467] __ip_append_data+0x2930/0x3310 [ 1104.304503] ? lock_chain_count+0x20/0x20 [ 1104.304525] ? raw_destroy+0x30/0x30 [ 1104.304562] ? ip_finish_output+0x330/0x330 [ 1104.304581] ? lock_release+0x680/0x680 [ 1104.304598] ? ipv4_mtu+0x1ed/0x2c0 [ 1104.304624] ? raw_destroy+0x30/0x30 [ 1104.304644] ip_append_data+0x114/0x1a0 [ 1104.304678] raw_sendmsg+0xaa6/0x29d0 [ 1104.304717] ? dst_output+0x170/0x170 [ 1104.304736] ? __lock_acquire+0x1657/0x5b00 [ 1104.304778] ? perf_trace_lock+0xac/0x490 [ 1104.304797] ? SOFTIRQ_verbose+0x10/0x10 [ 1104.304823] ? __lockdep_reset_lock+0x180/0x180 [ 1104.304856] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1104.304873] ? find_held_lock+0x2c/0x110 [ 1104.304914] ? trace_hardirqs_on+0x5b/0x180 [ 1104.304940] ? dst_output+0x170/0x170 [ 1104.304963] inet_sendmsg+0x11d/0x140 [ 1104.304982] ? inet_send_prepare+0x540/0x540 [ 1104.305000] __sock_sendmsg+0x13c/0x190 [ 1104.305022] ____sys_sendmsg+0x334/0x870 [ 1104.305055] ? sock_write_iter+0x3d0/0x3d0 [ 1104.305073] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.305093] ? perf_trace_lock+0xac/0x490 [ 1104.305121] ? __lockdep_reset_lock+0x180/0x180 [ 1104.305140] ? perf_trace_lock+0xac/0x490 [ 1104.305168] ___sys_sendmsg+0xf3/0x170 [ 1104.305192] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.305221] ? lock_downgrade+0x6d0/0x6d0 [ 1104.305253] ? lock_downgrade+0x6d0/0x6d0 [ 1104.305281] ? __fget_files+0x296/0x4c0 [ 1104.305316] ? __fget_light+0xea/0x290 [ 1104.305349] __sys_sendmmsg+0x195/0x470 [ 1104.305378] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1104.305398] ? lock_downgrade+0x6d0/0x6d0 [ 1104.305444] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1104.305470] ? wait_for_completion_io+0x270/0x270 [ 1104.305495] ? rcu_read_lock_any_held+0x75/0xa0 [ 1104.305514] ? vfs_write+0x354/0xa70 [ 1104.305534] ? fput_many+0x2f/0x1a0 [ 1104.305556] ? ksys_write+0x1a9/0x260 07:44:58 executing program 6: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 1104.305578] ? __ia32_sys_read+0xb0/0xb0 [ 1104.305609] __x64_sys_sendmmsg+0x99/0x100 [ 1104.305633] do_syscall_64+0x33/0x40 [ 1104.305652] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1104.305666] RIP: 0033:0x7f24b3ae7b19 [ 1104.305686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.305697] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1104.305720] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1104.305732] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 07:44:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1720, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1104.305744] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.305755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.305768] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:44:58 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:44:58 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x1f) accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84100, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', 0x0, 0x0, 0x0, 0x0, 0x290004, &(0x7f0000000800)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f37, 0x0, @perf_config_ext={0x0, 0x2000000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 07:44:58 executing program 6: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 07:44:58 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 33) [ 1104.521449] FAULT_INJECTION: forcing a failure. [ 1104.521449] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.522414] CPU: 1 PID: 8360 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1104.522954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1104.523618] Call Trace: [ 1104.523838] dump_stack+0x107/0x167 [ 1104.524140] should_fail.cold+0x5/0xa [ 1104.524458] ? create_object.isra.0+0x3a/0xa20 [ 1104.524835] should_failslab+0x5/0x20 [ 1104.525158] kmem_cache_alloc+0x5b/0x310 [ 1104.525507] create_object.isra.0+0x3a/0xa20 [ 1104.525865] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1104.526279] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1104.526703] ? __ip_append_data+0x2930/0x3310 [ 1104.527073] __alloc_skb+0xb1/0x5b0 [ 1104.527380] __ip_append_data+0x2930/0x3310 [ 1104.527752] ? lock_chain_count+0x20/0x20 [ 1104.528087] ? raw_destroy+0x30/0x30 [ 1104.528403] ? ip_finish_output+0x330/0x330 [ 1104.528754] ? lock_release+0x680/0x680 [ 1104.529095] ? ipv4_mtu+0x1ed/0x2c0 [ 1104.529399] ? raw_destroy+0x30/0x30 [ 1104.529707] ip_append_data+0x114/0x1a0 [ 1104.530035] raw_sendmsg+0xaa6/0x29d0 [ 1104.530353] ? dst_output+0x170/0x170 [ 1104.530673] ? __lock_acquire+0x1657/0x5b00 [ 1104.531037] ? perf_trace_lock+0xac/0x490 [ 1104.531373] ? SOFTIRQ_verbose+0x10/0x10 [ 1104.531717] ? __lockdep_reset_lock+0x180/0x180 [ 1104.532104] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1104.532525] ? find_held_lock+0x2c/0x110 [ 1104.532871] ? trace_hardirqs_on+0x5b/0x180 [ 1104.533230] ? dst_output+0x170/0x170 [ 1104.533543] inet_sendmsg+0x11d/0x140 [ 1104.533857] ? inet_send_prepare+0x540/0x540 [ 1104.534216] __sock_sendmsg+0x13c/0x190 [ 1104.534541] ____sys_sendmsg+0x334/0x870 [ 1104.534874] ? sock_write_iter+0x3d0/0x3d0 [ 1104.535213] ? do_recvmmsg+0x6d0/0x6d0 [ 1104.535535] ? perf_trace_lock+0xac/0x490 [ 1104.535872] ? __lockdep_reset_lock+0x180/0x180 [ 1104.536247] ? perf_trace_lock+0xac/0x490 [ 1104.536590] ___sys_sendmsg+0xf3/0x170 [ 1104.536912] ? sendmsg_copy_msghdr+0x160/0x160 [ 1104.537294] ? lock_downgrade+0x6d0/0x6d0 [ 1104.537639] ? lock_downgrade+0x6d0/0x6d0 [ 1104.537992] ? __fget_files+0x296/0x4c0 [ 1104.538331] ? __fget_light+0xea/0x290 [ 1104.538670] __sys_sendmmsg+0x195/0x470 [ 1104.539010] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1104.539363] ? lock_downgrade+0x6d0/0x6d0 [ 1104.539721] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1104.540128] ? wait_for_completion_io+0x270/0x270 [ 1104.540524] ? rcu_read_lock_any_held+0x75/0xa0 [ 1104.540906] ? vfs_write+0x354/0xa70 [ 1104.541217] ? fput_many+0x2f/0x1a0 [ 1104.541518] ? ksys_write+0x1a9/0x260 [ 1104.541841] ? __ia32_sys_read+0xb0/0xb0 [ 1104.542184] __x64_sys_sendmmsg+0x99/0x100 [ 1104.542533] do_syscall_64+0x33/0x40 [ 1104.542838] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1104.543259] RIP: 0033:0x7f24b3ae7b19 [ 1104.543571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1104.545061] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1104.545691] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1104.546264] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1104.546843] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1104.547419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1104.547991] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1104.798227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.799151] print_req_error: 20 callbacks suppressed [ 1104.799171] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.801496] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.801561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.802426] buffer_io_error: 6 callbacks suppressed [ 1104.802443] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1104.803199] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.806176] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.806243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.807051] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1104.808896] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.810421] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.810602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.811285] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1104.812167] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.814169] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.814245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.815045] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1104.816913] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.818430] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.818498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.819308] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1104.820175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.820707] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1104.821538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1104.822001] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1104.823370] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:45:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x1ce8, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:14 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000010c0)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f00000011c0)=0xe8) getgroups(0x5, &(0x7f00000023c0)=[0xee00, 0x0, 0xee00, 0xee00, 0xffffffffffffffff]) lchown(&(0x7f0000000040)='./file0/../file0\x00', r0, r1) r2 = syz_open_procfs(0x0, &(0x7f0000001080)='mountinfo\x00') pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x0) 07:45:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 07:45:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 34) 07:45:14 executing program 4: r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x9e57953dc1266a25, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x4, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x300, 0x2, 0x25dfdbfc, {{}, {@val={0xfffffffffffffe03}, @val={0xc, 0x99, {0x6, 0x2c}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9cf}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x2004c800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18) r2 = openat(0xffffffffffffff9c, 0x0, 0x4003, 0x0) io_submit(0x0, 0x0, 0x0) openat(r0, &(0x7f00000002c0)='./file1\x00', 0x410802, 0x0) setgroups(0x4000000000000356, &(0x7f0000000380)) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwritev(r3, &(0x7f0000001140)=[{&(0x7f0000000080)="f2", 0x1}], 0x1, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8020, 0x0, 0xfffffffe}) close(r3) r4 = open$dir(0x0, 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="080000008000"/16], 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) 07:45:14 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 13) 07:45:14 executing program 7: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001600010d010017e3cd81000000008940a70d67f20b4ee6f1b8b8e09a6af4db918df8701c86e316e77e0ff2247e18c2b5705f30ea79009cbe3d92fac815967b385958e645904ae4243ffc03ca44e2664de6d772f3f4b0"], 0x14}}, 0x0) syz_io_uring_setup(0x20a, &(0x7f00000002c0)={0x0, 0x63, 0x4, 0x2, 0x1d8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000240)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:45:14 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) [ 1120.684880] FAULT_INJECTION: forcing a failure. [ 1120.684880] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.686728] CPU: 0 PID: 8371 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1120.687683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.688830] Call Trace: [ 1120.689207] dump_stack+0x107/0x167 [ 1120.689723] should_fail.cold+0x5/0xa [ 1120.690255] ? create_object.isra.0+0x3a/0xa20 [ 1120.690896] should_failslab+0x5/0x20 [ 1120.691430] kmem_cache_alloc+0x5b/0x310 [ 1120.692007] create_object.isra.0+0x3a/0xa20 [ 1120.692617] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1120.693337] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1120.694043] ? __ip_append_data+0x2930/0x3310 [ 1120.694680] __alloc_skb+0xb1/0x5b0 [ 1120.695194] __ip_append_data+0x2930/0x3310 [ 1120.695815] ? lock_chain_count+0x20/0x20 [ 1120.696396] ? raw_destroy+0x30/0x30 [ 1120.696935] ? ip_finish_output+0x330/0x330 [ 1120.697552] ? lock_release+0x680/0x680 [ 1120.698113] ? ipv4_mtu+0x1ed/0x2c0 [ 1120.698629] ? raw_destroy+0x30/0x30 [ 1120.699155] ip_append_data+0x114/0x1a0 [ 1120.699729] raw_sendmsg+0xaa6/0x29d0 [ 1120.700279] ? dst_output+0x170/0x170 [ 1120.700817] ? __lock_acquire+0x1657/0x5b00 [ 1120.701454] ? perf_trace_lock+0xac/0x490 [ 1120.702039] ? SOFTIRQ_verbose+0x10/0x10 [ 1120.702621] ? __lockdep_reset_lock+0x180/0x180 [ 1120.703288] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1120.704002] ? find_held_lock+0x2c/0x110 [ 1120.704589] ? trace_hardirqs_on+0x5b/0x180 [ 1120.705205] ? dst_output+0x170/0x170 [ 1120.705758] inet_sendmsg+0x11d/0x140 [ 1120.706289] ? inet_send_prepare+0x540/0x540 [ 1120.706909] __sock_sendmsg+0x13c/0x190 [ 1120.707475] ____sys_sendmsg+0x334/0x870 [ 1120.708049] ? sock_write_iter+0x3d0/0x3d0 [ 1120.708647] ? do_recvmmsg+0x6d0/0x6d0 [ 1120.709197] ? perf_trace_lock+0xac/0x490 [ 1120.709800] ? __lockdep_reset_lock+0x180/0x180 [ 1120.710444] ? perf_trace_lock+0xac/0x490 [ 1120.711034] ___sys_sendmsg+0xf3/0x170 [ 1120.711581] ? sendmsg_copy_msghdr+0x160/0x160 [ 1120.712229] ? lock_downgrade+0x6d0/0x6d0 [ 1120.712826] ? lock_downgrade+0x6d0/0x6d0 [ 1120.713425] ? __fget_files+0x296/0x4c0 [ 1120.714001] ? __fget_light+0xea/0x290 [ 1120.714558] __sys_sendmmsg+0x195/0x470 [ 1120.715121] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1120.715728] ? lock_downgrade+0x6d0/0x6d0 [ 1120.716341] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.717031] ? wait_for_completion_io+0x270/0x270 [ 1120.717726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1120.718379] ? vfs_write+0x354/0xa70 [ 1120.718901] ? fput_many+0x2f/0x1a0 [ 1120.719417] ? ksys_write+0x1a9/0x260 [ 1120.719954] ? __ia32_sys_read+0xb0/0xb0 [ 1120.720543] __x64_sys_sendmmsg+0x99/0x100 [ 1120.721153] do_syscall_64+0x33/0x40 [ 1120.721706] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1120.722426] RIP: 0033:0x7f62f063ab19 [ 1120.722951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.725554] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1120.726615] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1120.727623] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1120.728607] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.729597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.730613] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1120.743848] FAULT_INJECTION: forcing a failure. [ 1120.743848] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.745789] CPU: 1 PID: 8381 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1120.746777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1120.747970] Call Trace: [ 1120.748362] dump_stack+0x107/0x167 [ 1120.748895] should_fail.cold+0x5/0xa [ 1120.749463] ? __alloc_skb+0x6d/0x5b0 [ 1120.750020] should_failslab+0x5/0x20 [ 1120.750576] kmem_cache_alloc_node+0x55/0x330 [ 1120.751229] __alloc_skb+0x6d/0x5b0 [ 1120.751770] __ip_append_data+0x2930/0x3310 [ 1120.752415] ? lock_chain_count+0x20/0x20 [ 1120.753015] ? raw_destroy+0x30/0x30 [ 1120.753585] ? ip_finish_output+0x330/0x330 [ 1120.754212] ? lock_release+0x680/0x680 [ 1120.754789] ? ipv4_mtu+0x1ed/0x2c0 [ 1120.755323] ? raw_destroy+0x30/0x30 [ 1120.755863] ip_append_data+0x114/0x1a0 [ 1120.756460] raw_sendmsg+0xaa6/0x29d0 [ 1120.757034] ? dst_output+0x170/0x170 [ 1120.757604] ? __lock_acquire+0x1657/0x5b00 [ 1120.758261] ? perf_trace_lock+0xac/0x490 [ 1120.758876] ? SOFTIRQ_verbose+0x10/0x10 [ 1120.759485] ? __lockdep_reset_lock+0x180/0x180 [ 1120.760175] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1120.760918] ? find_held_lock+0x2c/0x110 [ 1120.761537] ? trace_hardirqs_on+0x5b/0x180 [ 1120.762170] ? dst_output+0x170/0x170 [ 1120.762725] inet_sendmsg+0x11d/0x140 [ 1120.763280] ? inet_send_prepare+0x540/0x540 [ 1120.763916] __sock_sendmsg+0x13c/0x190 [ 1120.764493] ____sys_sendmsg+0x334/0x870 [ 1120.765089] ? sock_write_iter+0x3d0/0x3d0 [ 1120.765713] ? do_recvmmsg+0x6d0/0x6d0 [ 1120.766281] ? perf_trace_lock+0xac/0x490 [ 1120.766890] ? __lockdep_reset_lock+0x180/0x180 [ 1120.767564] ? perf_trace_lock+0xac/0x490 [ 1120.768169] ___sys_sendmsg+0xf3/0x170 [ 1120.768735] ? sendmsg_copy_msghdr+0x160/0x160 [ 1120.769412] ? lock_downgrade+0x6d0/0x6d0 [ 1120.770023] ? lock_downgrade+0x6d0/0x6d0 [ 1120.770700] ? __fget_files+0x296/0x4c0 [ 1120.771415] ? __fget_light+0xea/0x290 [ 1120.771987] __sys_sendmmsg+0x195/0x470 [ 1120.772569] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1120.773193] ? lock_downgrade+0x6d0/0x6d0 [ 1120.773820] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1120.774520] ? wait_for_completion_io+0x270/0x270 [ 1120.775218] ? rcu_read_lock_any_held+0x75/0xa0 [ 1120.775882] ? vfs_write+0x354/0xa70 [ 1120.776424] ? fput_many+0x2f/0x1a0 [ 1120.776989] ? ksys_write+0x1a9/0x260 [ 1120.777691] ? __ia32_sys_read+0xb0/0xb0 [ 1120.778286] __x64_sys_sendmmsg+0x99/0x100 [ 1120.778897] do_syscall_64+0x33/0x40 [ 1120.779452] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1120.780377] RIP: 0033:0x7f24b3ae7b19 [ 1120.780986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1120.783599] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1120.784673] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1120.785695] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1120.786711] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1120.787726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.788737] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:45:14 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 07:45:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x22b0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000180140007"], 0x38}}, 0x0) 07:45:15 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001400)=""/53, 0x35) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{r0}, 0x0, 0x2, @unused=[0x1, 0x7ff, 0x9, 0x4], @name="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"}) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="9962ef2585b23d", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,\x00']) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x145003, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pidfd_getfd(r3, r1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000240)='nomand\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, r3) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000080)='silent\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$setown(0xffffffffffffffff, 0x8, r2) r4 = syz_io_uring_setup(0x46c5, &(0x7f0000000240)={0x0, 0xe33d, 0x0, 0xfffffffe, 0x4}, &(0x7f00006bc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_enter(r4, 0x58af, 0x0, 0x2, 0x0, 0x0) fgetxattr(r4, &(0x7f0000000000)=@random={'btrfs.', '\',{[[(\x00'}, &(0x7f0000000380)=""/234, 0xea) 07:45:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 35) 07:45:15 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) [ 1120.977999] 9pnet: Insufficient options for proto=fd 07:45:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 14) [ 1121.031228] FAULT_INJECTION: forcing a failure. [ 1121.031228] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.033642] CPU: 0 PID: 8403 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1121.034607] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.035747] Call Trace: [ 1121.036124] dump_stack+0x107/0x167 [ 1121.036638] should_fail.cold+0x5/0xa [ 1121.037172] ? create_object.isra.0+0x3a/0xa20 [ 1121.037829] should_failslab+0x5/0x20 [ 1121.038366] kmem_cache_alloc+0x5b/0x310 [ 1121.038941] create_object.isra.0+0x3a/0xa20 [ 1121.039566] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1121.040289] kmem_cache_alloc_node+0x169/0x330 [ 1121.040936] __alloc_skb+0x6d/0x5b0 [ 1121.041468] __ip_append_data+0x2930/0x3310 [ 1121.042086] ? lock_chain_count+0x20/0x20 [ 1121.042672] ? raw_destroy+0x30/0x30 [ 1121.043213] ? ip_finish_output+0x330/0x330 [ 1121.043813] ? lock_release+0x680/0x680 [ 1121.044374] ? ipv4_mtu+0x1ed/0x2c0 [ 1121.044894] ? raw_destroy+0x30/0x30 [ 1121.045451] ip_append_data+0x114/0x1a0 [ 1121.046024] raw_sendmsg+0xaa6/0x29d0 [ 1121.046582] ? dst_output+0x170/0x170 [ 1121.047115] ? __lock_acquire+0x1657/0x5b00 [ 1121.047744] ? perf_trace_lock+0xac/0x490 [ 1121.048331] ? SOFTIRQ_verbose+0x10/0x10 [ 1121.048906] ? __lockdep_reset_lock+0x180/0x180 [ 1121.049582] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1121.050304] ? find_held_lock+0x2c/0x110 [ 1121.050898] ? trace_hardirqs_on+0x5b/0x180 [ 1121.051510] ? dst_output+0x170/0x170 [ 1121.052050] inet_sendmsg+0x11d/0x140 [ 1121.052585] ? inet_send_prepare+0x540/0x540 [ 1121.053204] __sock_sendmsg+0x13c/0x190 [ 1121.053778] ____sys_sendmsg+0x334/0x870 [ 1121.054357] ? sock_write_iter+0x3d0/0x3d0 [ 1121.054965] ? do_recvmmsg+0x6d0/0x6d0 [ 1121.055516] ? perf_trace_lock+0xac/0x490 [ 1121.056094] ? __lockdep_reset_lock+0x180/0x180 [ 1121.056753] ? perf_trace_lock+0xac/0x490 [ 1121.057357] ___sys_sendmsg+0xf3/0x170 [ 1121.057915] ? sendmsg_copy_msghdr+0x160/0x160 [ 1121.058571] ? lock_downgrade+0x6d0/0x6d0 [ 1121.059167] ? lock_downgrade+0x6d0/0x6d0 [ 1121.059766] ? __fget_files+0x296/0x4c0 [ 1121.060344] ? __fget_light+0xea/0x290 [ 1121.060900] __sys_sendmmsg+0x195/0x470 [ 1121.061477] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1121.062092] ? lock_downgrade+0x6d0/0x6d0 [ 1121.062696] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1121.063381] ? wait_for_completion_io+0x270/0x270 [ 1121.064052] ? rcu_read_lock_any_held+0x75/0xa0 [ 1121.064698] ? vfs_write+0x354/0xa70 [ 1121.065230] ? fput_many+0x2f/0x1a0 [ 1121.065753] ? ksys_write+0x1a9/0x260 [ 1121.066288] ? __ia32_sys_read+0xb0/0xb0 [ 1121.066868] __x64_sys_sendmmsg+0x99/0x100 [ 1121.067463] do_syscall_64+0x33/0x40 [ 1121.068011] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1121.068730] RIP: 0033:0x7f24b3ae7b19 [ 1121.069253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.071912] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1121.072976] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1121.074026] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1121.075025] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.076023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.077018] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1121.103189] FAULT_INJECTION: forcing a failure. [ 1121.103189] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.105093] CPU: 1 PID: 8408 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1121.106068] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.107211] Call Trace: [ 1121.107595] dump_stack+0x107/0x167 [ 1121.108103] should_fail.cold+0x5/0xa [ 1121.108645] ? __alloc_skb+0x6d/0x5b0 [ 1121.109187] should_failslab+0x5/0x20 [ 1121.109738] kmem_cache_alloc_node+0x55/0x330 [ 1121.110370] __alloc_skb+0x6d/0x5b0 [ 1121.110897] __ip_append_data+0x2930/0x3310 [ 1121.111514] ? lock_chain_count+0x20/0x20 [ 1121.112092] ? raw_destroy+0x30/0x30 [ 1121.112634] ? ip_finish_output+0x330/0x330 [ 1121.113234] ? lock_release+0x680/0x680 [ 1121.113815] ? ipv4_mtu+0x1ed/0x2c0 [ 1121.114327] ? raw_destroy+0x30/0x30 [ 1121.114862] ip_append_data+0x114/0x1a0 [ 1121.115431] raw_sendmsg+0xaa6/0x29d0 [ 1121.115985] ? dst_output+0x170/0x170 [ 1121.116519] ? __lock_acquire+0x1657/0x5b00 [ 1121.117150] ? perf_trace_lock+0xac/0x490 [ 1121.117751] ? SOFTIRQ_verbose+0x10/0x10 [ 1121.118332] ? __lockdep_reset_lock+0x180/0x180 [ 1121.118984] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1121.119703] ? find_held_lock+0x2c/0x110 [ 1121.120282] ? trace_hardirqs_on+0x5b/0x180 [ 1121.120891] ? dst_output+0x170/0x170 [ 1121.121442] inet_sendmsg+0x11d/0x140 [ 1121.121972] ? inet_send_prepare+0x540/0x540 [ 1121.122589] __sock_sendmsg+0x13c/0x190 [ 1121.123143] ____sys_sendmsg+0x334/0x870 [ 1121.123717] ? sock_write_iter+0x3d0/0x3d0 [ 1121.124301] ? do_recvmmsg+0x6d0/0x6d0 [ 1121.124850] ? perf_trace_lock+0xac/0x490 [ 1121.125442] ? __lockdep_reset_lock+0x180/0x180 [ 1121.126092] ? perf_trace_lock+0xac/0x490 [ 1121.126681] ___sys_sendmsg+0xf3/0x170 [ 1121.127223] ? sendmsg_copy_msghdr+0x160/0x160 [ 1121.127871] ? lock_downgrade+0x6d0/0x6d0 [ 1121.128466] ? lock_downgrade+0x6d0/0x6d0 [ 1121.129048] ? __fget_files+0x296/0x4c0 [ 1121.129636] ? __fget_light+0xea/0x290 [ 1121.130189] __sys_sendmmsg+0x195/0x470 [ 1121.130756] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1121.131355] ? lock_downgrade+0x6d0/0x6d0 [ 1121.131956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1121.132640] ? wait_for_completion_io+0x270/0x270 [ 1121.133330] ? rcu_read_lock_any_held+0x75/0xa0 [ 1121.133977] ? vfs_write+0x354/0xa70 [ 1121.134503] ? fput_many+0x2f/0x1a0 [ 1121.135010] ? ksys_write+0x1a9/0x260 [ 1121.135546] ? __ia32_sys_read+0xb0/0xb0 [ 1121.136121] __x64_sys_sendmmsg+0x99/0x100 [ 1121.136721] do_syscall_64+0x33/0x40 [ 1121.137235] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1121.137951] RIP: 0033:0x7f62f063ab19 [ 1121.138469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.141073] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1121.142137] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1121.143128] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1121.144155] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.145170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.146199] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1121.656597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.657467] print_req_error: 6 callbacks suppressed [ 1121.657486] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.659689] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.659747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.660842] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1121.662643] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.664109] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.664168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.665163] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1121.666947] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.668409] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.668513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.669452] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1121.671445] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.672892] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.672959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.673962] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1121.675885] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.677360] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1121.677413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.678401] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1121.680194] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1121.680255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.681800] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1121.681885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.683436] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1121.704401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.705192] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1121.705252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.707059] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1121.707122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.708675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.709549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.710416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.711239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1121.712098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:45:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 36) [ 1135.077455] FAULT_INJECTION: forcing a failure. [ 1135.077455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.078465] CPU: 1 PID: 8420 Comm: syz-executor.6 Not tainted 5.10.214 #1 [ 1135.079002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.079665] Call Trace: [ 1135.079888] dump_stack+0x107/0x167 [ 1135.080184] should_fail.cold+0x5/0xa [ 1135.080510] _copy_to_user+0x2e/0x180 [ 1135.080824] simple_read_from_buffer+0xcc/0x160 [ 1135.081213] proc_fail_nth_read+0x198/0x230 [ 1135.081573] ? proc_sessionid_read+0x230/0x230 [ 1135.081938] ? security_file_permission+0x24e/0x570 [ 1135.082346] ? perf_trace_initcall_start+0x101/0x380 [ 1135.082760] ? proc_sessionid_read+0x230/0x230 [ 1135.083131] vfs_read+0x228/0x580 [ 1135.083415] ksys_read+0x12d/0x260 [ 1135.083708] ? vfs_write+0xa70/0xa70 [ 1135.084023] do_syscall_64+0x33/0x40 [ 1135.084323] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1135.084736] RIP: 0033:0x7f2f8aa2769c [ 1135.085039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1135.086528] RSP: 002b:00007f2f87fea170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1135.087140] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f8aa2769c [ 1135.087723] RDX: 000000000000000f RSI: 00007f2f87fea1e0 RDI: 0000000000000004 [ 1135.088296] RBP: 00007f2f87fea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.089144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.089900] R13: 00007ffd55ec676f R14: 00007f2f87fea300 R15: 0000000000022000 [ 1135.094062] FAULT_INJECTION: forcing a failure. [ 1135.094062] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.095206] CPU: 1 PID: 8423 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1135.095755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.096423] Call Trace: [ 1135.096640] dump_stack+0x107/0x167 [ 1135.096940] should_fail.cold+0x5/0xa [ 1135.097256] ? create_object.isra.0+0x3a/0xa20 [ 1135.097638] should_failslab+0x5/0x20 [ 1135.097954] kmem_cache_alloc+0x5b/0x310 [ 1135.098286] create_object.isra.0+0x3a/0xa20 [ 1135.098649] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1135.099065] kmem_cache_alloc_node+0x169/0x330 [ 1135.099447] __alloc_skb+0x6d/0x5b0 [ 1135.099751] __ip_append_data+0x2930/0x3310 [ 1135.100111] ? lock_chain_count+0x20/0x20 [ 1135.100449] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1135.100893] ? raw_destroy+0x30/0x30 [ 1135.101206] ? ip_finish_output+0x330/0x330 [ 1135.101565] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1135.102112] ? ipv4_mtu+0x1ed/0x2c0 07:45:29 executing program 4: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x33, 0x0, @dev, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x9200}, @val={0x1, 0x1, 0xfdce, 0x0, 0x1ff, 0x100}, @ipv6=@icmpv6={0xd, 0x6, "512694", 0x21b, 0x3a, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x62, 0x4, 0x0, 0xbb, 0x0, [@remote, @loopback]}, @routing={0x0, 0x2, 0x1, 0x43, 0x0, [@mcast2]}, @hopopts={0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}, @pad1]}, @hopopts={0x4, 0x10, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0xff, 0x7, [0x40, 0x4, 0x1, 0x5, 0x6, 0x48, 0xffffffff]}}, @ra={0x5, 0x2, 0x5}, @generic={0x4, 0x1b, "7c1e148accbfb33003ff364db42b56f9abd502729580dce631b769"}, @jumbo={0xc2, 0x4, 0x10001}, @ra={0x5, 0x2, 0x401}, @jumbo={0xc2, 0x4, 0x1000}, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x63}, @pad1, @enc_lim={0x4, 0x1, 0x7}]}], @time_exceed={0x3, 0x1, 0x0, 0x4, '\x00', {0x1, 0x6, "500df7", 0x6, 0x0, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, [@dstopts={0x3b, 0x3, '\x00', [@pad1, @pad1, @jumbo={0xc2, 0x4, 0x8000}, @generic={0x8, 0xe, "55db7237373aea47bb3cb25d989c"}]}], "469470020817c0c16e8b0b247aee1471747b69223f1cf265213067232fb89d334d40414f1a5aae5dd409a8a3a490b0087dc33e7233ae15f5ef46b9ef5dce186f2d1b5deaf93540e6d9430efd7642d185d78a383ddc0befd6ea41f500ebf236689eba13aeec5e6cfedff531c3808eba365cd070f6558420a4af67d48973e0125e4de969a8a3f06e8728af07b0e99a15e79563951d5a256878d27daa4718e1b8cf49a07fe37a148c9b7b97abe41102655bddc2fcb45c6141be8639c880b949011de57a3787f1c51ea44fc09639329e4af0a2c951d1430d671fbe16598695ece0c61c4122"}}}}}, 0x251) write$tun(0xffffffffffffffff, &(0x7f00000002c0)={@val={0x0, 0x600}, @val={0x2, 0x0, 0x0, 0x1, 0x5, 0x401}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @empty, @empty, @local}}, 0x2a) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 07:45:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 15) 07:45:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 07:45:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2878, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) (fail_nth: 1) 07:45:29 executing program 7: r0 = semget(0x3, 0x0, 0x0) semtimedop(r0, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x0, 0x3938700}) semctl$IPC_RMID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r2, &(0x7f0000000300)='./file0\x00', 0x101000, 0x4) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000540)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) 07:45:29 executing program 2: r0 = syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) eventfd(0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000004f1c0)={0x0, 0x0, "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", "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"}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) [ 1135.102455] ? raw_destroy+0x30/0x30 [ 1135.102872] ip_append_data+0x114/0x1a0 [ 1135.103231] raw_sendmsg+0xaa6/0x29d0 [ 1135.103547] ? dst_output+0x170/0x170 [ 1135.103856] ? __lock_acquire+0x1657/0x5b00 [ 1135.104214] ? perf_trace_lock+0xac/0x490 [ 1135.104546] ? SOFTIRQ_verbose+0x10/0x10 [ 1135.104875] ? __lockdep_reset_lock+0x180/0x180 [ 1135.105254] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1135.105683] ? find_held_lock+0x2c/0x110 [ 1135.106032] ? dst_output+0x170/0x170 [ 1135.106349] inet_sendmsg+0x11d/0x140 [ 1135.106658] ? inet_send_prepare+0x540/0x540 [ 1135.107019] __sock_sendmsg+0x13c/0x190 [ 1135.107343] ____sys_sendmsg+0x334/0x870 [ 1135.107678] ? sock_write_iter+0x3d0/0x3d0 [ 1135.108020] ? do_recvmmsg+0x6d0/0x6d0 [ 1135.108340] ? perf_trace_lock+0xac/0x490 [ 1135.108687] ? __lockdep_reset_lock+0x180/0x180 [ 1135.109059] ? perf_trace_lock+0xac/0x490 [ 1135.109399] ___sys_sendmsg+0xf3/0x170 [ 1135.109721] ? sendmsg_copy_msghdr+0x160/0x160 [ 1135.110097] ? lock_downgrade+0x6d0/0x6d0 [ 1135.110442] ? lock_downgrade+0x6d0/0x6d0 [ 1135.110784] ? __fget_files+0x296/0x4c0 [ 1135.111113] ? __fget_light+0xea/0x290 [ 1135.111435] __sys_sendmmsg+0x195/0x470 [ 1135.111757] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1135.112104] ? lock_downgrade+0x6d0/0x6d0 [ 1135.112453] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1135.112843] ? wait_for_completion_io+0x270/0x270 [ 1135.113239] ? rcu_read_lock_any_held+0x75/0xa0 [ 1135.113616] ? vfs_write+0x354/0xa70 [ 1135.113920] ? fput_many+0x2f/0x1a0 [ 1135.114215] ? ksys_write+0x1a9/0x260 [ 1135.114527] ? __ia32_sys_read+0xb0/0xb0 [ 1135.114862] __x64_sys_sendmmsg+0x99/0x100 [ 1135.115205] do_syscall_64+0x33/0x40 [ 1135.115501] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1135.115913] RIP: 0033:0x7f62f063ab19 [ 1135.116210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.117678] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1135.118293] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1135.118869] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1135.119441] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.120009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.120593] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1135.149254] FAULT_INJECTION: forcing a failure. [ 1135.149254] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.151516] CPU: 0 PID: 8424 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1135.152590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.153894] Call Trace: [ 1135.154318] dump_stack+0x107/0x167 [ 1135.154896] should_fail.cold+0x5/0xa [ 1135.155503] ? create_object.isra.0+0x3a/0xa20 [ 1135.156224] should_failslab+0x5/0x20 [ 1135.156823] kmem_cache_alloc+0x5b/0x310 [ 1135.157484] create_object.isra.0+0x3a/0xa20 [ 1135.158178] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1135.158999] kmem_cache_alloc_node+0x169/0x330 [ 1135.159739] __alloc_skb+0x6d/0x5b0 [ 1135.160343] __ip_append_data+0x2930/0x3310 [ 1135.160380] ? lock_chain_count+0x20/0x20 [ 1135.160404] ? raw_destroy+0x30/0x30 [ 1135.160441] ? ip_finish_output+0x330/0x330 [ 1135.160461] ? lock_release+0x680/0x680 [ 1135.160479] ? ipv4_mtu+0x1ed/0x2c0 [ 1135.160504] ? raw_destroy+0x30/0x30 [ 1135.160524] ip_append_data+0x114/0x1a0 [ 1135.160558] raw_sendmsg+0xaa6/0x29d0 [ 1135.160597] ? dst_output+0x170/0x170 [ 1135.160616] ? __lock_acquire+0x1657/0x5b00 [ 1135.160658] ? perf_trace_lock+0xac/0x490 [ 1135.160677] ? SOFTIRQ_verbose+0x10/0x10 [ 1135.160703] ? __lockdep_reset_lock+0x180/0x180 [ 1135.160736] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1135.160753] ? find_held_lock+0x2c/0x110 [ 1135.160793] ? trace_hardirqs_on+0x5b/0x180 [ 1135.160818] ? dst_output+0x170/0x170 [ 1135.160842] inet_sendmsg+0x11d/0x140 [ 1135.172377] ? inet_send_prepare+0x540/0x540 [ 1135.173068] __sock_sendmsg+0x13c/0x190 [ 1135.173708] ____sys_sendmsg+0x334/0x870 [ 1135.174356] ? sock_write_iter+0x3d0/0x3d0 [ 1135.175017] ? do_recvmmsg+0x6d0/0x6d0 [ 1135.175630] ? perf_trace_lock+0xac/0x490 [ 1135.176295] ? __lockdep_reset_lock+0x180/0x180 [ 1135.177024] ? perf_trace_lock+0xac/0x490 [ 1135.177700] ___sys_sendmsg+0xf3/0x170 [ 1135.178319] ? sendmsg_copy_msghdr+0x160/0x160 [ 1135.179044] ? lock_downgrade+0x6d0/0x6d0 [ 1135.179714] ? lock_downgrade+0x6d0/0x6d0 [ 1135.180378] ? __fget_files+0x296/0x4c0 [ 1135.181020] ? __fget_light+0xea/0x290 [ 1135.181652] __sys_sendmmsg+0x195/0x470 [ 1135.182284] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1135.182966] ? lock_downgrade+0x6d0/0x6d0 [ 1135.183645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1135.184406] ? wait_for_completion_io+0x270/0x270 [ 1135.185166] ? rcu_read_lock_any_held+0x75/0xa0 [ 1135.185899] ? vfs_write+0x354/0xa70 [ 1135.186489] ? fput_many+0x2f/0x1a0 [ 1135.187065] ? ksys_write+0x1a9/0x260 [ 1135.187668] ? __ia32_sys_read+0xb0/0xb0 [ 1135.188317] __x64_sys_sendmmsg+0x99/0x100 [ 1135.188989] do_syscall_64+0x33/0x40 [ 1135.189579] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1135.190380] RIP: 0033:0x7f24b3ae7b19 [ 1135.190966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.193813] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1135.195001] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1135.196106] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1135.197212] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.198327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.199431] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000002e00)={0x0, r9, "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", "384a5ad4371663e0d8a8fcd5e1d6eaf4e4a1912055de1e40391602f4cca4dde1ef817c9dac44d4ccf460a27cf3dbd86d999df22c4f05b0c0658d7a0edb9f83d665fc3f0e41f033dbcbd581f2bc29e3633d1c7d72f6e086916079ab100ca91bda30e2cb06c4c90d5d038c6159da2370c07d551d20d576653129d4d8645bb05936678808c41375f499c8686aea59b9bcca8e6dad624fb49653211f515f22ca60dcdccaabf2e24332a79dcdc3d363961025f7993b599d87a4448848fbb6fc87cb6a62ceec1013ccb20eaf6f9a9dea0eaa11170e678295c4c67902ea0cdcc56a56ad956c12745bec9da26abe96cbe6d764ce283af458d5faf72a0e90bf6a9991b908bf265e348c71d6a1b93a4abef4eb332809502df017900e11f4a166334edf7f4cf7d092a5c5c785986056b4a879a0f1aad82ba82a8ad5c7a4b2c74e572f48fc46ebb5d3775bb3fb43d0f3779f59bc090d8673c73ef27f3028d82340b6bd223060d687802de8dc414cd1fb616bde73b9c57c7e7a21fa6a7a1bd58230ffbdb096e4ec065347bd2db2a7b26c5f0ab3f8b5b7a3688045c15620444fea78c01bd0a72f1db5da8f5cf70f3fa0cdf5a0753ee9a9ab23d7573bdaba0da7fd79068fe6134cc47973eff7c58f390a97197e3601696d7faf92dc6ee110210c865b8f082ac74d8b15e98ef8c3ae51aff9713d015aaaddff5f11d4ae3af9c8416576b809678c3a0f547654f98970bbc0c28fc5d675c98b43f5f26e4e0c8737ecc5d0654b17b689be29487cf0ca73fd33d5aaf655312b04977f14c6c85b859eb59a66a335f8f751cbd07da398dfeb1ef8b306f56a674fb86e2fbc2926a59b050710c4389ee9474257e147ff54556008d1d5f8228ca817140168a7d60b061c7a63d4ef2d10bc54a846f81c2765ce376f7c78ff23db961d2f81de32a34c6dee18342d7a3aa937ce1ab4e376c136f531ec1ad0dd34e9fe34e54b9b28d16fe38870b94cdd024a91191a8c762a9b214937bd990857532900a690a1e29949665df7b80ee3fc742f9038d0f58874a651627bd88a7771b549c5f555bb397838428e17cf7000599307623787a8aa52f317e1e196950439da4f198d84d44aae13dc9ecdf804bb788b4da2e02c5a2f06053a011b36a78762ba73f629ce9825acdd40b74376e73fb16f61abdfc171a9f470b265feef5d4b654d7a99c7208cbf29529d9009faafb81ea08724700edfcd63489afc47544052ceb923d211509385d25e8f626654aa370847020cf40ee5940e6d9e919e7dd0177c68ce02672cd4ef23a6fc2d73ea37cbcf2e6bd7dc08e455568e5647b1be0baccdd4f6b344558d7c216841671e090f5a879b561a5f0a6cccc910adb02f5a6b1bb7bc7503569699069724069b650c40c9081403c0e49396f42957761805a9246dedb06ce448db3975ce36fc72a6cac302378c85f0f4130b95c8d43052cdb79d66a1cfd2f10be2ab7f028ecdd2ee88930f0ac8c0626651fe4839a5d96bd7d8901d3aaf8cb70f60dbed0b74e74a2227bc02166be53b43b4e381b4a4a1ef08f270597cb3ca0b89de21827da3aaab2d3f54d4046eb507d4d674021422db0d4bcabc3e7ef41550afb304d13bb2552134341910b71ad1da5ccf7adb01c329035f992a542e5d782d108b8efa5ad6c9232f541737bab261c65332fd5192bc86e84b6b9e3dc03a96bb904b37a17f7c34f14db9cfd0e46bbd3ef59c37d47b76bda170efdf087d14436e2e617214a3d416c92b932e5b49c878c9ac9d8eb52efdf33e0be2843fede3ab21ef6671c99776c565303ad79fa897e73bfffcbfb037042b2d5ec09ba136218bb9d640af336637b7b8c287037a68ec60ec0b9859d51b23d804908791eb6234c867f208349891a003d023e5bc8c916940c48804e84f945dd66323ac9e2db75f30db90feee5cbaf732b9bf78f3c9ed841501923189747695848c42c3448eae5388428ba9202216f0c0a9064f8534c9cc96f67c0ae30ad776b47058dcbb7ccb2a10faa8f4f526b9427a6c7947d9dcc38f0958ef8235836a0d3bc7128da07d85354c28e7dff126a3304c90e2fa24bcdd485e07ca6f189bea19797b458d0b9e89083ecf8e892209330bd924f61a27e74f7f20387c14f580824166b547fcababc317cadff6808cb25c2a2a672842ad546e58bb872ad4bcc857eebe76233ce6a4739f4b2c908c78e018786c49376d1b223c8d3beac4420d784413e8e7122ea2bb37deefb782a59ff0fa22bf3d11d0519a0066f4adfb89fd5def08b8087a4853aa3cfd4e88a0c17ab78590cf7d2de7aed6ba3d5025ee9c94b630ea4a00715cdf9598c07521e43eb18b0243677315d6d24f566fb5ee948af15ac8ef5c9881966cc0e45683a65658f8ef7ebfc1d69815dfd1e7b16554af8c76a9ca5b31825feaa0568f8e9b93361004b22615b969076761a4ec3a3c20ff5ce205487e3d985a9e38a2b1f3990ebbce41544e403badaf5f9ec3b85ae29a9f096423cc5c0f38be216e5545c7ac31c40a0e50564b65950a5f33655d25de1d11f3d11f6fe21376d3c6806e8e05134bd262753b448cdf0b30f20ccb1031dd41c8c761f357d61adc39177598377ffb6a4b3657b04d5bdd147a4189eb84afa89b54115bcdeeee60ca1f96103e7dab87e4146d5295d4b56de94252e8fc4123394d845f71b1bcb0be2d3ec888e5f745f626659dcffbeee8a30c8775d74881f9ac81b93d13ccafdb48f7fba6c135841fd7a8f6c82283facbc0807e3e22fd29241b0bab3fa78c4c5522e58236429631188cf6529de831a1fd14f1fb53b38ddaa5902ec4c0847a47aba1fb2c4cf510f7747cc8ca207ff9f6092743e7e0d3026f48e915189ed918ca02b0948a6bdc69eec9558a8f942f1e6646c9898097fd32e54f1f9cb3f98e795d92137722aadcb99ba94dc5fd031a744fbb72f571f7835db6ec0cddbbebfe6055bd0725983c9096d44f006ccaead195ff30fa10f660fec51757b8787e41b7d9f2b311241026ec4d034e8f9e1be1c4b7f81955890dcdea7e973932b1b8d135aa83922c912528f65c9b8c4fc9d9fc408a2a28faf69b5aebc4723230bb697216140fd7cfb63b29300e2671b02f26592e0eef6e185ac84c41c19b79cdd231f426128bb3d33ac9d2e85efb77adbbcd26f62c1d1cd34fcc310dfdd4813d7b92e754191cebfd854edae94c4d50c7746c764c87beaf1fb7d1ff9b4c7fad631052bb7a47e953a1a9da54a0b859f2ee406e118d58d88bd949a9693cc41a541d0417053efa7998c8297321ee8dc080e256acb8acb58e17fb1adf844fc8f3d8ca4d21e00862f38d54cd94aa9a34514ffac7acfc3f4ca0916bb78536ff49f1b6e99f752e0e9df20e69b83265b6448cc4897d828d910e2557491b83448c4a72e16ca192ed01339a0b8f28508d3b7883ab8505132e0d7936639d5c8431f4078d78cd18913bf097604404340d11f322446e9c7cf1c122636fecec4af7c415b5bece0d054181261cfc4f3838f0d88bbf6c225de23f8489fac7f99c168cb1ce298234c5321b3ed8b2dddb4a121854160442caa8a21862e24201bff785fa25236b45fad180b28042fb6207a71a5d93341f6b57555ad8753f7513a9d41fe7fc52c9dd74fe997f159ddaaefb705c7fec006edca74a70a1ff37dff88d89c47d26aec83351afa7173132f36030122866d494473c6fa1946da1d9ff6c1bd13bad67ad097c3a6513658515094f5026f52261a0ee1346417934a54c75e3bc98e9502f989b93ac603d761106efa038cf6cc660fd27f3c0a76aa4ac6250ef0d01011fd3eaf2648f8940f0118e63373d89369815c8c8578ee4970363d0f0c85b55fb940cd60a79fde61bbda99a14178011fc70e31118034e6c29e606391f3651d94606db5622f89fd416b3742e0c8cf38bc23f830e69b6d2fe9f2e5cc802dad8d2e56d03198937738511152f76f11ad17533af2b3449dcf52af8dae18e32697b616f669f54cf983929874eff88cb29e7e49df1d05b4d418a30cbbf7542bbf6824b3d8d8ce9d4ef1a22dd57f51853caf613d79f6773fc19fac61c1d63b9f1a37fe7e427022114f4a080f450e7e8c3530dc5ab904d1f06fc6a7bd324f3dded95289acf5f5f25bb42304a587e72a0c60dace50b0a3fbd591c76030df522c695069c53aef01528f100be0dc94aad0f55de43da95abba073c415e56353d2f5e2ef5a3f50f6d985fb97f402e5ac61200c3ff311487614a5063cf037a69a84eb8c06c609c9541fc2e83f970efff16e739d32ac57929d34253dace7da5e844c1ee64702a500ff4338b9be284ea90da1ff42947df0ce0f760255df7d3ef77d23892e6dd061c6df7c4e0f317e9fb6c7a00fd8b81a2b45247f25ec0f2f61b690bd7f94fc4c6fd704fc0f9dd8207bc4c099728209741946391a4912c9e98bd3b4039381a12c27b0dfdc2d2b8f7ea7b789c605e1cf84a9a45775b228c6b4afa59698f5dfc6d272dada8e217fd7bfa04fae9c2cd8ce9068419bb5fcd02628da0ec58b552985397716332b907f0aacc1d1a3f281626c518c4ba83855c6560a1537a6a24ac7b71af7f87fc58c38376a772bcbb5239ae7f1b9817700d877200c0b962ff1387e47f971a65b7f9e6e4103040f07aae3e59f83bcd62f53f242244a1db93ab783829e12bc799fcbe34b86957be95fad32425a2f960e925bcfbe22ac61cedf3ab10bc849cdaa1eccd6a9f5addefad216d4caa67ef038d5009dce4418413e172b31f33dc5be8ba2e9e145660c70ccedd3ae3864350883cf35d29b0af80a6eba8d29a02f869270266ab2dc89f24a9d26ab72a53eb88f52a39320bafae21e255592b92c7975aba00e4cc2bbbc595d14858f15a87e351c51f7d032f5987acc5c4702b7dc40e344312a6a433bd1c856af7e270091c8e666f10caa5b621ea70e83a7df919baa6adfdebbca4995005e195a46253e80089365b0fd51c5fc0eef27a96af9940ced619eaf77696c9c9a24a1938d59fd9949064a225a47553035a133d3613404344f54be9be771e3024e0516a2640bbce166dbbc0725304fa7617c08dfbc5580119c89708ce8284757a235820e3fff36e0fed98243cec3d313aa3d44697fcd92db80a0384458a7e8cd655308429c9ab874af95684bcfc8178e2d405af518fcb9e54b093607c707ff90b349a10810b9cfbe1e2054a1e628c08249c8f9c7c0afd9d085907f5edef19262399a98d5d5657b6146a4cad02f3428c1eb1e1fedd1f51411f4de1c114df77e1b16044f8cf5c984b1505a397d5b638d0d255d9c0aa301b8b1cdf0a746dd39c5ead0b66e9849bdc15120540f37547de31059b003afe34c04f5527b6e403f2ec19dabaf2ec63597d2529d55b33a65644992b57433771ee27382d2c01c8d5deac65fdcf772e7d5e2a67095db9066c43d48391c534cbd44aed"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {r10}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000501c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000511c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000513c0)={0x0, 0x0, "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", "48c13717b631ead81701c984d0dce57c4eac1f50c0d495316d70596c1512e7319e6fa0639b28dd7f6f2105d343b7ad0f2e05d201bddbc1349456401d32e02b243625e5ac1f028f916b4aedc63b99a0dffdd0f74a18ae6f1fd21074ab5a027ed6d001b325e4cedcded2653ecde5d86a313d12250a14ccdda8495e4b744bb5c3bc831ec5ae8b1bafbf0ec9debbaddf16b237d546a9e601a0842372801282d6226c982f668f13b090e38f9d8d0fa7c218c095bb0b9f9cced8a92d3f701f78f696cec4814970cb4f89afaafbb5748ff2c22a7901f61e68fc265e75be72967acf8e9f527b17eae37229174fef3dab7946c63a9be50afb15adba237f29788e79a98fdd2f8683165361cbc2c15d2a53cc9f5057c94aebcae5fb6ba9bcf6ed1d40c4af216c45017ff6c7a314665db251c0374beb76ac74816351df6d92f6f24d1bb60a7e9e1bd23739a6a005be4fed007823831b42e78323280669b67a9d8095d54940d0ee3262a2dcfb3d71836b3fc965f7ca1261f42910c61cee3bde788eb36bf54b6264debc03d0425e8b1a6a1bb85eec09e87272f1c85e96e49b453baa4316fe0267f6b7ead383f7d795f15217be93a72a7dc98bcef98e900923d02a83d4dd09f75fe0229a979e5f6e2ea041622c182126992cba4f1f7f5679245db846d361ffbad04ed801b6f02d57483be796ee0f8a922fb902db2869b4b904814a415f7f1d9b9dec7dcbb185dd531330526f0d8118c7c161321be12b3712a5b69fab097a82083a98ce0785563b198cbe79afe869021b72947917cd3fbe7f7d4b3015807c2d15f04e874f1644eba5cb7425e6005a0294a0ed9d057ac17ea8bad6f1a8f328a0bbccdd79fe395513de80b743215171bac58e7d0d832276722caae2dcd754dc4c2969810158c439a39b5d5ce44bd26a19057a6736df7ade9276f3e25b884e998a103f0e571e11caed284fe53302e5dcb6dd0038ee020282f317a9a666fd71c1127efa7f7cb1b3c86b6fdc890ff768ad473b3471052cae647b07b78cecb6ade2dcdeaab8f168db3a2e1687ed3c73f3b278b2f2a59581e7b791b17abbbbfa19c432f72b5f1f91eed9f99848a20f5ae82297de3158f81c687f5e868152a172e80418e78c43aaa3e630b5e7bca06c143bfb3cad813c8eec70827c998e4b300f2ab7f7a26deeab63fa3f69d5cf6d89db8fc74267b0d5588264c4fe0f25f5edb45faaeadfc32670b358dc8d4069170144759379f88516c844e335c0bc9b77a560611521db32d37f8d79ea1a869208942d988b27389f15f682bb1619102e544f3167887498a395396e19207f983443cf5c00711ca55226917b471733a3a2ed66c8d72e1c87cc329a91dffdbf659a15e53063688c24e0efa98d77cfb6a64d5418c2635ef8aa9f122e08fdf0c2072222a8a41599ebc5501caabac6711fc95bc3987f8af1b4e0a8a9906905df8e26a3cdd27a8ec1eeafc0b62d19207fe21d687325e337f219f7be53f390bac8ee8c26c2b4ce8b0a2ab2144693ca223caad94474e63f753ab60cfb5a3d45dd9ddac5d476e21e1fb44a275b70c9d4ccaff96d571aaee95bad62e0542ea00a08411811407764fb367871ac41f64151df90ee32f708c30abef89bb390531e4e9a1e4e4d7a14268dc96431936fabeb4ccc386a98d2c31d15aac5a1178726650dc7a7bce485543a4f8c6a1d1585409ab42f97c9396f25ecc384a12de982cc25cad05af6b45be50eb73a91f4ab04d9b5bd075129694777ec390caf92f5a6e2486dc61a6b140331a0ea2d7c637211d5f2a8e78f67b6e97dabf63e9fa92ad3a83bbb84b49a6eaf8ec57d5c41cfb51897ac92ebf9f738cc09cb443ba03fe92f3d68e0e18beebfa6786b8d917f2d4e69c37fa1f436cfa619137861b067e8d46b05af6e04515231c780e8daf1eeeca8b291dc25fc6e4f55809070fbe251ac75867b01b8adc647410f6674970cf28b94394c4a098a66c79964e1ea4dff4e60fef0ec9a27829477abd2631cfe06faa51def1f408fd116b8dc98aa245045c1069f821b0fe58c350e3a065c9faddced2d52ece0a9c9d1c6b7e1da73099af9774ae13bf5f4f390bdd83251716a6156fd99b2004b1009ff9017912b004670cd5b6d277f84672fa822d8bc72dba585c533e8310b9d650484df2b996852630873a21407074b430bc966289bf9b9d9ab685a44fb51652483d3b8583c5c15579cac79c99be8b3288b8faa5e924db23a2eadc8c520d9d8cadfaf98323c14be3aceec8a29cd6097cb7d91b73ef1c8c1b88efb9b2d39f115c076e0231baef45f0073cca6cf955242fbe2048b95f222520affbcd1016c2cb39421378fe3b0b4344aac8a26ea4ae72cdd05d178f3ee5c19b075572a01744583b6bc642c6dbb20b9a39239bc07a1772d641d2cabdb8d527ac943058fe8620f4befdc9485a36554b546fa5b3fcd82808deab20be9d8f7593e6e3f136b238bd87c46d3837fefd03b147c2859f2b12a051e99aa284ede91a6518d10d5feefdcd36ad0346813bbaa7f90f04f4a664b705870aa2dab41c4b1eea2a2ef7290b79948a2ff73a3929f97c1e57c5d4d9544c6c77630f4dec96cb3226acc912da024cd759d7030ddb914a5093aec46de3fbd6c02214691fa1bac366db4a8674a4ffc3ba25340b20cf86d276f74b8f62da4c601e22cd1442a7a92ca3dbadc5cb59b5be72cfed5e6dbfcc362fcee9646a0fcbb30aa949475ad264f8a2820c2db2bb874530d67cdd13ca11e0c01d57a60dd40fe6c7af4f1ba0eb75e343c099494812665ba325352618c7c005c1ec375ac95b1056fdd10049ca2dcc7b3cbc94c52ede6d306ceca967418d3833dd9438c6e8d736a137772a4c868fa2ac23457138223ff0fa14946ad6bc0e02b763ccaa2d3d1db9d71f8e2505c6a764dc1061e3dcd3c78b83750023a7cf363229f24f73c9c66bc71f28e3c9590307bc5f1092c47d35be7474411d7802f85f55b98b468db99ed9ac8a451dccd1953b5758681aebfb17ac771c9096725ca7125b41588d1bd1b0a5e560486e65e0a19359466e04820205171a0186606afa4fd83b6eee0945688d57e36439a558a65913a8e1114361c440e661c94097473440edf62634863eeae655585d5ebd9e45e887a93e7ceb96375fc0a7af0813a6bd2de296553943c7c603b50bbb7fd2e3557ec216e22af29c3327d961e312371323b2c868c7ce71575d778d731bb33acd067ed0cc2e05689b9e3988fe8af962d2e08f5d5b64b7bd7ea4c3f2ba086cead63da169c6e7ef1050ea762ba3dacbde7bee4e20ddca2764d18980c0afa38c43bb44666cc5b7cdd93364f088a48496fd410190f204c00058554a1c50c114d62ab82a87e638601e94178b097dd779b0e2211362d0e5ff51671fd0a18c537c93ab494d10c36d6a2b72bc030acc1f79fa7865a029db9cd554c5da56db69538688f96fb8e6e6936d959ac268429fa4cabe10b85671fa5df974b007dfa83ccd21eb64f056e5fba15d018f1cb38fe629128282c8cf157f5a1025c86b0901ac30c5c1c537f964c71f4a30d709932fc9738e8b6d2141153b0836b104670632e39c7c8c5b7e7df627b11b59caaf1a08fed2a3e23007d0c090c19c4b5d1ea962497fb62a488e83dbf530af354106c6c72a4e5d3da210fef5616f88d4166b1a459672a1abcc18361c1a9c0a76bc39f067fe011c9035bafcd19e90934c06a01c4c3729dbfbb139d78143ae28058180778a0d4ad5b9310164389a9dac2cc8c154a8c344f6f7d5e7e7bac7ad06613543e3a83d1fd87cc743088342fd5fb9af4c727ed1db486db3d168a7e62aad68294300154fed94a400fc68083c901ea413546131ff29e9d88af25d81c952c60450bb2f8c2f495dc86db1a779314cf9ea1d50dd5975567180f8636a526eb5c824a7ca70102badb7263ccf87c19035fd43763f96eb032dad33d4138a54be1c198a22d8a7ec94bcdd03d39fbf5bfc4de59188a5957f615c21618075f05869cf4e77e1847e6a19e877d9d0f5ac76625a69e30d170a7bd2d5ce2011078fb11c539a8b605992f3b77994d8ceffdb0e84d25a8bde09a18ddb19c4475d4c39dd9dcc960be794d9953ab2234ecea1b934ecb855e57436547a3405b7c09f7eb2ddff727cbc8db337705cae10c573c436189881d47b32ced4b447d09c2c281bb965590abb38ed044d0b13567235bec5626aaca62b05bd735f50d664b3cf6c2b745e409caeb2cbae5def1978dacc099e552e77c8a42d24316cabdf9bed0901aad26ad6ab687ca6206b9968ff40f9e6989d35ff441a9dff0e95d963a226a095e5a66e54fdcb9815ee82368fcdebcdfc2a8574b2b790d981f280d4b9c69831f43a75aafd594f64be4c358b9873eea42a4f9b6fb289e506e2ea961aaadfba4d01ca5a7385bc8b30fc9036c3ef51613b51621cbac95304aee2668c76802405f0473cf602bf903c153af812a0508efbf44f2e0cca9f2a07f31a90f72304e0dc7bcd527dbe659beda6ec3afd7ec8914369d18e74143d88469327a7f8cdf2fe59eceda9d040a4a30880a53336d2c55460d1d724ed5805ec46b1d8f9407434ef42336f9656b618d4abac9634fd5cabbc1df4d0c0540eebecc97774105721340060b0b3f1492cdb7e39e97117e999bbb818b44c1a3e2558365517b9289f3d74a15d04cb5f4073609cac33d10f13e5b70856279d0dede30e73a1eeec7720715079a666c049bc5ec788cbf184b17ea02e178f05f3aba3b6e7f7435cc59b95aad21a04d71794a20a157abe9cc152fac1c85205e70c998beab973000170938b39f19c85354edbc6cad6e2dd27778a5321336d37d9900688f240a531c4cac067840c71f08c7a4f867689dda1e987890b110b8cbaad6179c8e008cf8efabde6a6c05486b15461514f8077d803b6ecba9ba04797c718dcc8a855230f2ee69a56b101ec89abbe1e00f28b14abf83e46b29e8b36582e10d528cb436e6eba2fe2eabf3162637cad7383ae438168a9572abb90b3cf44d5d474ea09e1beafe96ca845cc316a57d440c0058f8720036f421c0623b293e6e71bda3dc9fd299ba269a7305ffa4a7ad7b253015c3e7fbd367d9d4a5639ea3b35aff5257824176bb5e022f16d5e3c0b1090b0d6068a625063e97d21250e9a2303fb7fa4daa14e2018bd9b573c6e73ef029bccb2f7e0e8851b15eff2da1b07dd6a716fd440797267cc6f29f85f0ce7cbaf3c1415a1864b9009e000f04bf007eb261adc05af39007ed484d41d93a5e0b5c9cc77cbfd4e9c84008b8ae4ba9621b5c212b67e1c08e37c76e61d79312bd45d881e45c2cb67e55f2469debd071190e88dfaec2adb91a52c9f02cf4dd5936c02c3fb6342d720df5c05965ad06977c2b5cd5e2be7a7ebdbc7fbc0ff138993b22921c38e553aae84c7309eafdf189185cb39bb7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000523c0)={{0x0, 0x77, 0x1ff, 0x9b, 0xff, 0xdcc, 0x6, 0x5, 0xe167, 0xa43, 0x1, 0x40, 0xfffffffffffffffd, 0x2, 0x6ca9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000533c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r10}, {}, {r14}, {r15, r16}, {r17}], 0x81, "0a8a87d2476d19"}) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x2, &(0x7f0000000000)) 07:45:29 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x3, [{}, {}, {}]}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r2, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'ip6_vti0\x00'}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r0, 0x8, r4) 07:45:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2e40, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:29 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 16) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b2f, &(0x7f0000000000)) 07:45:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) [ 1135.298516] FAULT_INJECTION: forcing a failure. [ 1135.298516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1135.299786] CPU: 1 PID: 8445 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1135.300336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.301013] Call Trace: [ 1135.301239] dump_stack+0x107/0x167 [ 1135.301544] should_fail.cold+0x5/0xa [ 1135.301864] __alloc_pages_nodemask+0x182/0x600 [ 1135.302243] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 1135.302748] alloc_pages_current+0x187/0x280 [ 1135.303114] allocate_slab+0x26f/0x380 [ 1135.303432] ___slab_alloc+0x470/0x700 [ 1135.303750] ? create_object.isra.0+0x3a/0xa20 [ 1135.304127] ? lock_acquire+0x197/0x470 [ 1135.304455] ? fs_reclaim_acquire+0xa5/0x100 [ 1135.304814] ? create_object.isra.0+0x3a/0xa20 [ 1135.305186] ? kmem_cache_alloc+0x301/0x310 [ 1135.305542] ? create_object.isra.0+0x3a/0xa20 [ 1135.305908] kmem_cache_alloc+0x301/0x310 [ 1135.306246] create_object.isra.0+0x3a/0xa20 [ 1135.306603] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1135.307021] kmem_cache_alloc_node+0x169/0x330 [ 1135.307405] __alloc_skb+0x6d/0x5b0 [ 1135.307709] __ip_append_data+0x2930/0x3310 [ 1135.308067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1135.308491] ? raw_destroy+0x30/0x30 [ 1135.308805] ? ip_finish_output+0x330/0x330 [ 1135.309151] ? ip_setup_cork+0x4c/0x930 [ 1135.309485] ? ipv4_mtu+0x1ed/0x2c0 [ 1135.309782] ? raw_destroy+0x30/0x30 [ 1135.310086] ip_append_data+0x114/0x1a0 [ 1135.310422] raw_sendmsg+0xaa6/0x29d0 [ 1135.310737] ? dst_output+0x170/0x170 [ 1135.311042] ? __lock_acquire+0x1657/0x5b00 [ 1135.311392] ? mark_held_locks+0x9e/0xe0 [ 1135.311727] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1135.312152] ? perf_trace_lock+0xac/0x490 [ 1135.312491] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1135.312923] ? __lockdep_reset_lock+0x180/0x180 [ 1135.313310] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1135.313752] ? find_held_lock+0x2c/0x110 [ 1135.314098] ? dst_output+0x170/0x170 [ 1135.314408] inet_sendmsg+0x11d/0x140 [ 1135.314716] ? inet_send_prepare+0x540/0x540 [ 1135.315073] __sock_sendmsg+0x13c/0x190 [ 1135.315392] ____sys_sendmsg+0x334/0x870 [ 1135.315724] ? sock_write_iter+0x3d0/0x3d0 [ 1135.316063] ? do_recvmmsg+0x6d0/0x6d0 [ 1135.316381] ? perf_trace_lock+0xac/0x490 [ 1135.316717] ? lock_downgrade+0x6d0/0x6d0 [ 1135.317055] ? __lockdep_reset_lock+0x180/0x180 [ 1135.317437] ___sys_sendmsg+0xf3/0x170 [ 1135.317755] ? sendmsg_copy_msghdr+0x160/0x160 [ 1135.318130] ? lock_downgrade+0x6d0/0x6d0 [ 1135.318477] ? __fget_files+0x296/0x4c0 [ 1135.318803] ? __fget_light+0xea/0x290 [ 1135.319127] __sys_sendmmsg+0x195/0x470 [ 1135.319450] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1135.319817] ? setup_APIC_eilvt+0x2f0/0x2f0 [ 1135.320168] ? clockevents_program_event+0x131/0x360 [ 1135.320585] ? tick_program_event+0xa8/0x140 [ 1135.320939] ? hrtimer_interrupt+0x771/0x9b0 [ 1135.321309] __x64_sys_sendmmsg+0x99/0x100 [ 1135.321662] do_syscall_64+0x33/0x40 [ 1135.321965] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1135.322375] RIP: 0033:0x7f62f063ab19 [ 1135.322677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.324135] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1135.324750] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1135.325317] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1135.325889] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.326458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.327024] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:45:29 executing program 7: r0 = perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000000)=0x74000000, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f00000009c0)={0x0, 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_ts_info={0x9}}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001e00)={{r6}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000280)={0x1, 0x3, 0x2, 0x100000000, {0x1, 0x2, 0x80000000, 0xc1, 0x7ff}, [0x100000001, 0x4, 0x5]}}, @devid}) process_vm_readv(r4, &(0x7f0000000540)=[{&(0x7f00000018c0)=""/31, 0x1f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x9f, 0xff, 0x3, 0xf6, 0x0, 0x8, 0xdc5, 0x6, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x7}, 0x61, 0x40004c, 0x1, 0x4, 0x558f, 0x7, 0x400, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x2, r0, 0xa) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) process_vm_readv(r1, &(0x7f0000001900)=[{0x0}], 0x1, &(0x7f00000019c0)=[{&(0x7f0000001c40)=""/250, 0xfa}, {&(0x7f0000004280)=""/4096, 0x1000}, {&(0x7f0000001940)=""/56, 0x38}, {&(0x7f0000001980)=""/1, 0x1}], 0x4, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000180)="48b451e36214382ce93dd10e354dd23f303f3ee9a004eb411d41599df4efe5a32d205cb5db60008adbe5bc2a3257b5351820d426509c882e5a8e09d35f792087619f5fca7dcc9b25039483d4e2269b67f5c1e7daaa275d3665036c31dcec34dde59bbc2ed661a8e6a378c377bff06829cbf0bf020e3518bfb2f890", 0x7b, 0x4000000, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 07:45:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 37) 07:45:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3408, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b30, &(0x7f0000000000)) 07:45:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0) 07:45:29 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@id, &(0x7f00000000c0)=0x80) syz_io_uring_setup(0x3618, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x7}, 0x0) r3 = pidfd_open(0x0, 0x0) r4 = dup(r3) recvmsg$unix(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000340)=""/198, 0xc6}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x140) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, r4, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r6}}, 0x8) syz_io_uring_submit(0x0, r2, &(0x7f00000015c0)=@IORING_OP_SEND={0x1a, 0x3, 0x0, r0, 0x0, &(0x7f00000005c0)="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", 0x1000, 0x50, 0x1, {0x0, r6}}, 0x9) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r7}}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001980)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd_index=0x4, 0xfffffffffffff001, &(0x7f0000001880)="138638417b4a5995387a9fce73429b635f74fa0cf90eb6e6463f532c352dc34006fdef8ad861ca611a1e605276ed6800d519c79c87da3f36a5f170af2690e819c79dfc4a7af144eca0fe8b6708b1e0249560f98fe9adf2995d0767ddfa662375d37dcb3f609cf5934f55621c4946d429d0a7a9ad2415a9160acb2b1fd6b2a97e748358d34fede073387a0b856cdfbe3041df5699a8b81d7f3b9d743c71e14a8d36b507d144b4e17e11759c10c629148e1567791fe27772d0ebe775e1a18e675f4795fe62fc", 0xc5, 0x2, 0x0, {0x0, r7}}, 0x7fffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000001600)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0/file0\x00'}) lsetxattr$security_ima(&(0x7f0000001680)='./file0/file0\x00', &(0x7f00000016c0), &(0x7f0000001700)=@v2={0x3, 0x3, 0x4, 0x7fff, 0x61, "504ffd23ecfe288b6db94b7d7c2c28a6a5dbfdfc6e62477a7f5be906e2c491a67d4dc8a8d0c13dc8037538ad0a0063863773d256a3c55e48a0b89e2a7775fa510d16ff944f98277cf1fbca02ea63adc7972a1b457074251c8a2b69bf47fa3c8433"}, 0x6a, 0x2) io_uring_enter(r8, 0x2b90, 0x4aa9, 0x3, &(0x7f0000001640)={[0x7338]}, 0x8) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0xc8, 0x22, 0x100, 0x70bd26, 0x25dfdbfb, {0x1c}, [@typed={0xb4, 0x6b, 0x0, 0x0, @binary="bfe6091c3f9fddbc87282274b4ab345ff8ccad0332624ba9b1ad22f7134f79ddb1346fda92fdbfa4670bb516ca5ec0343591c0c82d0678f3d941321351c9f2a148954987820da698a4fc6032149457928620a4b556781da4cf3d54b55604a84197b56a800f982cc071773c56b9d3228de12cb5890a57df4610249cc5263306a0abfaa53ee6a0725d98045645736c3b2ea0f36298f47df6cb8b8a2b48e6cbb14c9c165fc543fdb85cbea7d3ee5f233438"}]}, 0xc8}}, 0x20008000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x1d, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000001000018000000c28500002b0200000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e37313332313635343500"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000f2a953140c764271ad9be301789147cf010040000c00000000000000d1f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000500400000000000000000000000000000003100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="03000000040000000500000019000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010400)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d1f4655fd1f4655fd1f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010d00)="ed41000000040000d1f4655fd1f4655fd1f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010e00)="20000000e85575eae85575ea00000000d1f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000010f00)="8081000000300404d1f4655fd1f4655fd1f4655f00000000000001002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d1f4655f00"/160, 0xa0, 0x1a00}, {&(0x7f0000011000)="c0410000002c0000d1f4655fd1f4655fd1f4655f00000000000002002000000000000800000000000af301000400000000000000000000000b00000020000000", 0x40, 0x1e00}, {&(0x7f0000011100)="20000000000000000000000000000000d1f4655f000000000000000000000000000002ea00"/64, 0x40, 0x1e80}, {&(0x7f0000011200)="ed4100003c000000d1f4655fd1f4655fd1f4655f0000000000000200000000000000001003000000020000000d0000001000050166696c65300000000e0000002800050766696c6531000000000000000000000000000000000000000000000000000000d908479700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000000002ea04070000000000000000000000000000646174610000000000000000", 0xc0, 0x1f00}, {&(0x7f0000011300)="ed8100001a040000d1f4655fd1f4655fd1f4655f00000000000001002000000000000800010000000af30100040000000000000000000000020000005000000000000000000000000000000000000000000000000000000000000000000000000000000090dc20e700000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011400)="ffa1000026000000d1f4655fd1f4655fd1f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3731333231363534352f66696c65302f66696c65300000000000000000000000000000000000000000000009d0860300000000000000000000000000000000000000000000000020000000e85575eae85575eae85575ead1f4655fe85575ea0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011500)="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", 0x1a0, 0x2200}, {&(0x7f0000011700)="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", 0x100, 0x2400}, {&(0x7f0000011800)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011900)="0b0000000c0001022e000000020000000c0002022e2e000000000000e8030000", 0x20, 0x8000}, {&(0x7f0000011a00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011b00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012400)="504d4d00504d4dffd1f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033310075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x10000}, {&(0x7f0000012500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x14000}], 0x0, &(0x7f0000012a00)) 07:45:29 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b31, &(0x7f0000000000)) 07:45:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x39d0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'macsec0\x00'}) dup3(r2, r1, 0x0) preadv(r1, &(0x7f00000013c0)=[{&(0x7f00000011c0)=""/119, 0x77}], 0x1, 0x1, 0x0) pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000240)="a1ee79d4176e6845d2a7acdad10956f1a0a0f7594484f1d068884df22f8b0191502d9245251b3f0cbd8cf3bd89def5d80f09fa17248b2d030e75f19df440dc905fcdd4c8801c4acf3530ef6b1cd4b4deb108f893a66df875f3ac32a779cdb3d18ca43a589625044f75fe6a2abf761d1c666e2049531ea2b0174c201a5640c8395f103070b38b2fcd56e442e831244fce40bba31e303d14e8104fed03e5b5491bcc6ab532994fe21a63d5f2384a8b5a4c6ef00328a235b856f8788687e78c7b0ec5a0382827417e3be887d8238062f236dadbb529ed79b5", 0xd7}, {&(0x7f0000000340)="b68facd9b68dad9dcf90fac4fd2332d5003078d30c5ae66a3aa0a7fdddb54837301b", 0x22}, {&(0x7f0000000380)="3905ac", 0x3}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="c7c233266a0c33d6908b96be6683df0e50ee9d9ed50fc7db692f0f2d0ef9507783cd9332f3d40f11f5fd3608ecbaf646a4379f36ee3f8bfcfdc44ed60fd0f2bcdb61d1638608af8aaa00e490799bbe6f816e62a45dd2429a68bc65a90683ff797cd065b75c0678493965025fed95bebf0f73c07bb56025b0dbb9b058daaefa9c6131deee8886935e244ac5acb159700d4e8aeaafe8a638d3cf20fbba7a80a688b6c2a0cdc265a9e42cd158d79cb3c99d263849950583a87dee4fc387a167", 0xbe}, {&(0x7f00000004c0)="15e9024fbdd102eae6c0da3f80a1e0c3049e6b886b76a236a83e0c93ca24beada15bff409e1007814fcb640268fae8d8d0f37d236ca436db51fc2657b5ceb72567aedd36b4c0de76fc33f3bb6aa28c4ba13a6598b53f71a2dd60d0b9e9b37c8690fd4a5cdf068d2fd9", 0x69}, {&(0x7f0000000540)="8d4ac76799fb5d9c401aafc4d8022e2a8cbdc3270af1d3c11fbea5be6c0d51b97253db536633ce00a6e0517924d4fcfee2e091162e4833adb4c3e33b5f15aa2df8536802cac295435d97c977cbab287a2ca17b4b02", 0x55}, {&(0x7f00000005c0)="ab3934b9d5d0d4e308b2091153cfd32f6416f32cf81345c9fb29a53d3ef607839c84e9dcc8b3a12772f59935e86a199b75363588662aeffca1033f9b9063080b229f0eec0f9917a64418c8e9892f3f4218f731121b5674656f", 0x59}, {&(0x7f0000000640)="06ecd08fd83ab75ed9c76e4aa8b2350e9ba441b589badc72378265b4e5825dbeca093d087db81226de7a9e5b100bc630acef9669b1c2857eaf255b353aa68a1423c4bbc78aeb194d58064e4a6f083f9f3d20a924136db32afe69e61352b17c9d67ca7431a99a0019fe79aa2b074105fb5826e779c458c35190830dbfb4311b9e878c9dda337d70dc10e33b7fdef1317fb4cc1e4375902d124b8d24a47d6fd73595fcb66a526f8dc6aed497e2707346b3ea391f89e4a736f907acdfa4d6c48e6be3b756db", 0xc4}, {&(0x7f0000000740)="f410888ce0876baa149fe254d9c637eda54172ba2527ec71699ba0c62014bf6f9b8ac61785ba6112b25c0b196931d27ac79c6774c6a1e179fac878b8c6d5761b7cd7c808cdd67c9c82afb5d576c7ac09d7599442eff13068f8ae6967a65e6de6aecb0f1f187d82a996075f0ec1b1faa762ea661b060dad75dc19ae3e543bb3ac6b3f8965dcd61a698eb38e4d263e2d21c18b659a186e2eb6e1fb3c6047341aef03f6626b4e0e3b894d90e5ede1d5df75521625d15ff9bf676da9355c9b39a2cfc0", 0xc1}], 0xa, 0x8, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x22902, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{r4, r5+60000000}, {0x77359400}}, &(0x7f00000001c0)) copy_file_range(r3, 0x0, r3, 0x0, 0x6, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x0, 0x5a, 0x5, 0x80}, {0x800, 0x7, 0x81, 0x8}, {0x4, 0x4, 0x80, 0xaca}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TUNGETSNDBUF(r7, 0x800454d3, &(0x7f0000000900)) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000100)={0x1}) [ 1135.570216] FAULT_INJECTION: forcing a failure. [ 1135.570216] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.571520] CPU: 1 PID: 8478 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1135.572070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1135.572741] Call Trace: [ 1135.572960] dump_stack+0x107/0x167 [ 1135.573258] should_fail.cold+0x5/0xa [ 1135.573583] should_failslab+0x5/0x20 [ 1135.573892] __kmalloc_node_track_caller+0x74/0x3b0 [ 1135.574300] ? __ip_append_data+0x2930/0x3310 [ 1135.574668] __alloc_skb+0xb1/0x5b0 [ 1135.574971] __ip_append_data+0x2930/0x3310 [ 1135.575330] ? lock_chain_count+0x20/0x20 [ 1135.575664] ? raw_destroy+0x30/0x30 [ 1135.575974] ? ip_finish_output+0x330/0x330 [ 1135.576322] ? lock_release+0x680/0x680 [ 1135.576645] ? ipv4_mtu+0x1ed/0x2c0 [ 1135.576946] ? raw_destroy+0x30/0x30 [ 1135.577247] ip_append_data+0x114/0x1a0 [ 1135.577585] raw_sendmsg+0xaa6/0x29d0 [ 1135.577901] ? dst_output+0x170/0x170 [ 1135.578205] ? __lock_acquire+0x1657/0x5b00 [ 1135.578566] ? perf_trace_lock+0xac/0x490 [ 1135.578896] ? SOFTIRQ_verbose+0x10/0x10 [ 1135.579227] ? __lockdep_reset_lock+0x180/0x180 [ 1135.579611] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1135.580022] ? find_held_lock+0x2c/0x110 [ 1135.580363] ? trace_hardirqs_on+0x5b/0x180 [ 1135.580714] ? dst_output+0x170/0x170 [ 1135.581022] inet_sendmsg+0x11d/0x140 [ 1135.581329] ? inet_send_prepare+0x540/0x540 [ 1135.581695] __sock_sendmsg+0x13c/0x190 [ 1135.582015] ____sys_sendmsg+0x334/0x870 [ 1135.582346] ? sock_write_iter+0x3d0/0x3d0 [ 1135.582687] ? do_recvmmsg+0x6d0/0x6d0 [ 1135.582998] ? perf_trace_lock+0xac/0x490 [ 1135.583339] ? __lockdep_reset_lock+0x180/0x180 [ 1135.583710] ? perf_trace_lock+0xac/0x490 [ 1135.584044] ___sys_sendmsg+0xf3/0x170 [ 1135.584364] ? sendmsg_copy_msghdr+0x160/0x160 [ 1135.584733] ? lock_downgrade+0x6d0/0x6d0 [ 1135.585079] ? lock_downgrade+0x6d0/0x6d0 [ 1135.585447] ? __fget_files+0x296/0x4c0 [ 1135.585777] ? __fget_light+0xea/0x290 [ 1135.586096] __sys_sendmmsg+0x195/0x470 [ 1135.586422] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1135.586767] ? lock_downgrade+0x6d0/0x6d0 [ 1135.587119] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1135.587512] ? wait_for_completion_io+0x270/0x270 [ 1135.587905] ? rcu_read_lock_any_held+0x75/0xa0 [ 1135.588278] ? vfs_write+0x354/0xa70 [ 1135.588585] ? fput_many+0x2f/0x1a0 [ 1135.588882] ? ksys_write+0x1a9/0x260 [ 1135.589193] ? __ia32_sys_read+0xb0/0xb0 [ 1135.589542] __x64_sys_sendmmsg+0x99/0x100 [ 1135.589888] do_syscall_64+0x33/0x40 [ 1135.590188] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1135.590595] RIP: 0033:0x7f24b3ae7b19 [ 1135.590899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1135.592367] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1135.592983] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1135.593559] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1135.594130] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1135.594701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1135.595274] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1135.822721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.823205] print_req_error: 22 callbacks suppressed [ 1135.823217] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.824582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.825011] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.825895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.826343] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.827199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.827645] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.828518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.828947] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.829840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.830273] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.831145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.831591] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.832462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.832892] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.833761] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.834603] buffer_io_error: 6 callbacks suppressed [ 1135.834610] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1135.835637] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1135.836471] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1135.837072] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1135.837694] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1135.838308] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1135.838907] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1135.839522] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1135.840122] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1135.859350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.859818] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1135.860528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.860985] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1135.861685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.862213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.862765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.863311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.863842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1135.864385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 07:45:43 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 17) 07:45:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 38) 07:45:44 executing program 2: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x9, 0x80, 0x0, 0x0, 0x3, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x1f, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000bada78b73971fbb088d28bfbbbb4e48a665162c804dcdd94f54dd8ba0bc1", @ANYRES16=r1, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r2, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 07:45:44 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x3f98, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1149.864628] FAULT_INJECTION: forcing a failure. [ 1149.864628] name failslab, interval 1, probability 0, space 0, times 0 07:45:44 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b32, &(0x7f0000000000)) 07:45:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 07:45:44 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) pipe(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x40, @multicast2}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r4 = perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0xb96, 0x6}, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r3], 0x10}}], 0x2, 0x0) r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r4, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r2, &(0x7f0000002e00)=""/4094) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="7f93c584e2000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0x2, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 07:45:44 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x39d0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1149.865604] CPU: 1 PID: 8488 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1149.866307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.867053] Call Trace: [ 1149.867265] dump_stack+0x107/0x167 [ 1149.867549] should_fail.cold+0x5/0xa [ 1149.867848] ? __alloc_skb+0x6d/0x5b0 [ 1149.868144] should_failslab+0x5/0x20 [ 1149.868438] kmem_cache_alloc_node+0x55/0x330 [ 1149.868786] __alloc_skb+0x6d/0x5b0 [ 1149.869072] __ip_append_data+0x2930/0x3310 [ 1149.869408] ? lock_chain_count+0x20/0x20 [ 1149.869737] ? raw_destroy+0x30/0x30 [ 1149.870030] ? ip_finish_output+0x330/0x330 [ 1149.870363] ? lock_release+0x680/0x680 [ 1149.870667] ? ipv4_mtu+0x1ed/0x2c0 [ 1149.870950] ? raw_destroy+0x30/0x30 [ 1149.871236] ip_append_data+0x114/0x1a0 [ 1149.871553] raw_sendmsg+0xaa6/0x29d0 [ 1149.871857] ? dst_output+0x170/0x170 [ 1149.872147] ? __lock_acquire+0x1657/0x5b00 [ 1149.872492] ? perf_trace_lock+0xac/0x490 [ 1149.872808] ? SOFTIRQ_verbose+0x10/0x10 [ 1149.873119] ? __lockdep_reset_lock+0x180/0x180 [ 1149.873485] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1149.873888] ? find_held_lock+0x2c/0x110 [ 1149.874207] ? trace_hardirqs_on+0x5b/0x180 [ 1149.874538] ? dst_output+0x170/0x170 [ 1149.874829] inet_sendmsg+0x11d/0x140 [ 1149.875124] ? inet_send_prepare+0x540/0x540 [ 1149.875465] __sock_sendmsg+0x13c/0x190 [ 1149.875771] ____sys_sendmsg+0x334/0x870 [ 1149.876086] ? sock_write_iter+0x3d0/0x3d0 [ 1149.876411] ? do_recvmmsg+0x6d0/0x6d0 [ 1149.876712] ? perf_trace_lock+0xac/0x490 [ 1149.877036] ? __lockdep_reset_lock+0x180/0x180 [ 1149.877395] ? perf_trace_lock+0xac/0x490 [ 1149.877719] ___sys_sendmsg+0xf3/0x170 [ 1149.878024] ? sendmsg_copy_msghdr+0x160/0x160 [ 1149.878375] ? lock_downgrade+0x6d0/0x6d0 [ 1149.878700] ? lock_downgrade+0x6d0/0x6d0 [ 1149.879028] ? __fget_files+0x296/0x4c0 [ 1149.879344] ? __fget_light+0xea/0x290 [ 1149.879653] __sys_sendmmsg+0x195/0x470 [ 1149.879962] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1149.880291] ? lock_downgrade+0x6d0/0x6d0 [ 1149.880627] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1149.880998] ? wait_for_completion_io+0x270/0x270 [ 1149.881377] ? rcu_read_lock_any_held+0x75/0xa0 [ 1149.881743] ? vfs_write+0x354/0xa70 [ 1149.882025] ? fput_many+0x2f/0x1a0 [ 1149.882305] ? ksys_write+0x1a9/0x260 [ 1149.882595] ? __ia32_sys_read+0xb0/0xb0 [ 1149.882908] __x64_sys_sendmmsg+0x99/0x100 [ 1149.883240] do_syscall_64+0x33/0x40 [ 1149.883522] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1149.883911] RIP: 0033:0x7f24b3ae7b19 [ 1149.884198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1149.885556] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1149.886183] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1149.886725] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1149.887261] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1149.887810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.888355] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1149.925088] FAULT_INJECTION: forcing a failure. [ 1149.925088] name failslab, interval 1, probability 0, space 0, times 0 [ 1149.926070] CPU: 1 PID: 8501 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1149.926600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1149.927241] Call Trace: [ 1149.927452] dump_stack+0x107/0x167 [ 1149.927730] should_fail.cold+0x5/0xa [ 1149.928027] ? create_object.isra.0+0x3a/0xa20 [ 1149.928380] should_failslab+0x5/0x20 [ 1149.928675] kmem_cache_alloc+0x5b/0x310 [ 1149.929006] create_object.isra.0+0x3a/0xa20 [ 1149.929356] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1149.929729] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1149.930118] ? __ip_append_data+0x2930/0x3310 [ 1149.930472] __alloc_skb+0xb1/0x5b0 [ 1149.930755] __ip_append_data+0x2930/0x3310 [ 1149.931074] ? lock_chain_count+0x20/0x20 [ 1149.931395] ? raw_destroy+0x30/0x30 [ 1149.931665] ? ip_finish_output+0x330/0x330 [ 1149.931993] ? lock_release+0x680/0x680 [ 1149.932281] ? ipv4_mtu+0x1ed/0x2c0 [ 1149.932571] ? raw_destroy+0x30/0x30 [ 1149.932840] ip_append_data+0x114/0x1a0 [ 1149.933126] raw_sendmsg+0xaa6/0x29d0 [ 1149.933408] ? dst_output+0x170/0x170 [ 1149.933705] ? __lock_acquire+0x1657/0x5b00 [ 1149.934049] ? perf_trace_lock+0xac/0x490 [ 1149.934368] ? SOFTIRQ_verbose+0x10/0x10 [ 1149.934684] ? __lockdep_reset_lock+0x180/0x180 [ 1149.935050] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1149.935416] ? find_held_lock+0x2c/0x110 [ 1149.935709] ? trace_hardirqs_on+0x5b/0x180 [ 1149.936044] ? dst_output+0x170/0x170 [ 1149.936340] inet_sendmsg+0x11d/0x140 [ 1149.936636] ? inet_send_prepare+0x540/0x540 [ 1149.936974] __sock_sendmsg+0x13c/0x190 [ 1149.937281] ____sys_sendmsg+0x334/0x870 [ 1149.937606] ? sock_write_iter+0x3d0/0x3d0 [ 1149.937929] ? do_recvmmsg+0x6d0/0x6d0 [ 1149.938231] ? perf_trace_lock+0xac/0x490 [ 1149.938555] ? __lockdep_reset_lock+0x180/0x180 [ 1149.938878] ? perf_trace_lock+0xac/0x490 [ 1149.939204] ___sys_sendmsg+0xf3/0x170 [ 1149.939505] ? sendmsg_copy_msghdr+0x160/0x160 [ 1149.939865] ? lock_downgrade+0x6d0/0x6d0 [ 1149.940168] ? lock_downgrade+0x6d0/0x6d0 [ 1149.940494] ? __fget_files+0x296/0x4c0 [ 1149.940807] ? __fget_light+0xea/0x290 [ 1149.941113] __sys_sendmmsg+0x195/0x470 [ 1149.941400] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1149.941737] ? lock_downgrade+0x6d0/0x6d0 [ 1149.942074] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1149.942447] ? wait_for_completion_io+0x270/0x270 [ 1149.942792] ? rcu_read_lock_any_held+0x75/0xa0 [ 1149.943150] ? vfs_write+0x354/0xa70 [ 1149.943441] ? fput_many+0x2f/0x1a0 [ 1149.943700] ? ksys_write+0x1a9/0x260 [ 1149.943967] ? __ia32_sys_read+0xb0/0xb0 [ 1149.944287] __x64_sys_sendmmsg+0x99/0x100 [ 1149.944620] do_syscall_64+0x33/0x40 [ 1149.944907] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1149.945264] RIP: 0033:0x7f62f063ab19 [ 1149.945525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1149.946934] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1149.947463] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1149.948010] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1149.948556] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1149.949102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.949663] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 [ 1150.246470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.247370] print_req_error: 22 callbacks suppressed [ 1150.247388] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.249754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.250567] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.252168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.252990] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.254605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.255419] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.257020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.257851] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.261064] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.262626] buffer_io_error: 6 callbacks suppressed [ 1150.262638] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1150.264506] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.266035] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1150.267168] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.268684] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1150.269819] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.271339] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1150.272465] blk_update_request: I/O error, dev loop4, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.273997] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1150.275346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.276234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.277145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1150.282372] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1150.283523] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1150.284645] Buffer I/O error on dev loop4, logical block 2096903, async page read 07:45:56 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/block/sr0', 0x400200, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000180), 0x14) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file1\x00'}) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) mount$9p_unix(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', &(0x7f0000000100), 0x2081, &(0x7f00000001c0)={'trans=unix,', {[{@privport}, {@noextend}, {@cachetag={'cachetag', 0x3d, '-'}}, {@fscache}, {@fscache}, {@fscache}, {@noextend}, {@uname={'uname', 0x3d, '{-'}}, {@dfltuid={'dfltuid', 0x3d, 0xee00}}], [{@subj_user={'subj_user', 0x3d, '\'(([%/\x1e!*'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@seclabel}, {@uid_lt={'uid<', r2}}, {@hash}, {@smackfstransmute}, {@measure}]}}) 07:45:56 executing program 7: r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @broadcast}, 0x0) r1 = add_key$keyring(&(0x7f0000000640), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000180)='dns_resolver\x00', 0x0, 0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$search(0xa, r3, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x1}, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='big_key\x00', &(0x7f0000000080)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 07:45:56 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b33, &(0x7f0000000000)) 07:45:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 18) 07:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 07:45:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4560, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 39) 07:45:56 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000040)='.\x00', 0x2000003) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x48e0}, 0x80) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2410d0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6163636573733d96d95773733d616e792c6163636573733d", @ANYRESDEC=0xee01, @ANYBLOB=',uname=.,access=user,debug=0x0000000000000fff,noextend,euid=', @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) fcntl$getown(0xffffffffffffffff, 0x9) fsmount(r4, 0x0, 0x70) r5 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000100)={{r5}, 0x0, 0x0, @unused=[0xffffffff80000000, 0xfffffffffffffffa, 0x101, 0xfffffffffffffffc], @devid=r6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000740)={{}, 0x0, 0x0, @unused=[0x3ff, 0x7, 0xccd5, 0x400], @devid=r6}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000580)={{r0}, 0x0, 0x2c, @unused=[0x3f, 0x1793, 0x101, 0x56], @name="d7fe6cd030d0e72c6501bc013cf45a94f6cfe1580a204012c006408932ee516ecb7f2f0aad5369c24e80b7a701943d63ea0491769865895f18d2b8ddc94407ce2d418a448bf1a2cd8019bb83ce03aeabe5851a247cbcd9ee5d17d6bac311545e591b5e9125457ea35d306e1a8aaee8d682d6f989cce7166023c211a69deec495ae066d7974acac73994d0fab6ed0e66f859907208b4ef9303c9b1bca4d931fc19bcf37fe50eea1e0d6c1f38d095d94b4eaccfabfcbcbc67f9010c485f1a7c2d2285fd01dd90fad26bd600be97ac4ab03c3a86bb8afc896d75ca12e2c127c7de2bf0e136492d0f6b8d8e68276d3e8cf25aedc147aa35b59f10011a4642069c4f0c724fd604845785e82e03b5543a1d5950f71847921925d73a18920db9f2d9d86619c8377d1b9149776b363aa04167f3bb95a9b276d618efb877739a734bd4a5989c5aec536ae7236605aac7a8c6be5e9ddc861c9fb95434522269d3b9e1a7dabf9b784e181dd6af5507b2ff729c6194786e3f851090581a4ecf87b37c96fdb3c25d26c7e16131a881160cc088ad8a2f5ae8cdd7c50ddb06de8293bdcf75470138048dbc2dca64b290e38f4ec4f626ffa8f11573d568754be89674be7e85b1b25974c84acd9581a70051a67912b6383324b280205c6f7c88ec88f318d4308d3b6dae5b1c3ec805131cbe1412766a2046dc289f349bf702991428d2adb0b7d449911ffb53b21a2234c12ac05e846f413193464ac1b4646b4593b701d7d2399d2ebcf2cb7e9ac349ddf8c11eba113d4268ee6cc42cb1836edaad212c1d4efd62e66899e405bdbf7832279fe739e832ea640aa10fa94bed38602927ed869553e06bce849999299e3c2a847de28d930f8af737adb108f02c2ef2bfc910462e57a35e5c6b5eea5a473c7cf24a49f7ccb06d2c641b74905e49f73335aca3e964d91a7d03738d1696ef3ab3186a4ac0ae0a50055989a6c587fb595a841e4f2b7fea4c1c915eea37d82d52bb1eef782d595d1329efb91d65093f0b83e3216c10580f0f93138b8a276b1736a62dbd83b9f5d2977594fe1053d12e6b18dcce7ab8fba8563a03dfa87443861510053361b34399f322e650cbe8006e721b45dd731f78f08c73c780482862af36c71b9465a9741ce9d95933ae467b1430cf980bb3efe1d90b6e69dfa31d49c0eeec590558995bdbefbdc439e18e4b634e983331d639308471f6e65a77143da373109e2cdd41b0a2bd4162e6dc3bb24f756633167b9c706ce7f1010fd52e249175a65de5f3c087864b5ee3f61dd5c07326e4f465d4bd43a165f5c8bef7c7fb456d6d38e0744cb01337b84999802cdfeb139cd5723e04a245e50fa0d1d7ced35eaabe52471dc1c7d18eb47ac0e3fac82047917a9692e4b44710d58716810ec64ae78ca9fff1f4bdd22e6a8bd1635f25362e0538b17b532f3cd3df7a12aa3e2e45d10bfc5c1d3fbf22a80f3b19537decb8c1fda689e1e038f55c4ca7beab898d8215727cec5685d5b123a12647b09497df3823501ead39d9f1585777b45fed1e80274d8dbc2e2a4a122fe79709044f045c6a03153bb31941201570ddbf8d93a86da81fb2f3906a9871b6053d212c3b8898e906c7a004af7b4dd16a442e55670efc1d7e3751d08cc9b2d5d65dd53c96b1836c12d78a0332bdfa6cb3f8d80bdb8548a55e74eb9fcce03e157096d86843a533b5969526671990908f063ce322b9cb0c05a80ac80fd1042d3d1cad61dad7fb02415a77728d3c196b3fdb2fc9bb3e31f4ad39ebb48e6fa5217374f0fba6ef58cd7e1d394dd956ddd85f21de18e7fa3e6ff9467f7382196d7f423d5920d822398790651a4b878d2a0b3f495e15412bab3f63d0dd2ea74b3d4c1f3c05b513a4c88915f8a3e90cae84d544473cb06f1bbbce7555d0e3d8a31c6176ed458818310b7999040bf87519d2a04c23b73f8d47c5196c6f3686fef6a33442fbd199a79e021a88edfd3613195b24e58d9575598eeacf50049b2d4978cc55173aadf274d07b3fcbb579eb31c255d5214fa600e27657906fc52820135f0eadb830fdea66474ed3d0d8805b24d0415224fbcb1dec95f7285443b3726817bc5de1e1ed092ee4f9407248ce7654704dfc1e4e2c82800f6970a8af406b3314b254ca23c13daf7bb168e991afb071d2011b274c33e8c3a224c62ab6fdbd8a896a058098bb6e35b7e551fcdeb8bd78245f428ee30f30efbb80d435f2ac280d4f6ea8cfaa1a3200194be2d0ee6770036b825e21a64296c3d9ffa005cfe895ddba80b33fc018900f9451e9d3ae175c36f7efe040e0ffefc63676dc8595502938343c8aaf874d0abd6a00970702f9286737fbff80eaaa7d232520179cf5da43bbe8ca8ed61bc54619e16e22e2b0134867137a14ac8eef0ddf8350a27d497198158bd475bcb848ba4ff6c2b1a38500eb39648f241e85e07b7e0eb4e6f393dc20b5bd420767522cf759752ed02f2bf3c811d3559db8260032703dd116beb99a9ef32e3313c27c1359194182d583702943ade10f2f18c2fbdd0934b456b75e8d4f8d5200168bce149c3c78d5ea5ccfed64c72b29e90bcd8bee1800c3eaf9f796c88e8c519c6f3c44ea18eacdc22ead65295426aa9e73ef73c570421de92cbca2f5dfb88d05d31291f9762c977dcd4f0dc1ecbb92dfd51dd9009a4e044b2043119965a477222daa11d811ffce07319fd0d7a6523f6bd40dac8e2658a97467e4219063a4841b3b86afbe21ebbe361030eee6e240ce1ec602cc3461d5afd378c393fbeb7384f101f216f73edb0ce9a68931e6b1f82c20a973f7c60205103f20ea0c0fd1dc98d21ff02f981970294dd4e0c9ef4a10e237850cd7767634348ee4ca593d30ee387cc866287502fb6d9ccc38a4dc6158f35453787d05df70d1f2aabb904ca2bc8eb75006ad62144818952f47b9a21fceb4251256ec013223913a3e1032457c83790bdae8d6bac301514633b87deb48cc787fda8bbed4f9725b66717f18983e168b74c2451d134131aaf78adc7d14d7e0c3a442070b659baae2c224cb0c884b56b12368907c1ec87f9ff119e90099cdb4e706153cdaf19392d3f3f9ddc7ee1714faff15ee4fbca7724b7a52df5434fbf5f2a5b18e1d7398118bb40608d6bca163040deeeea2dbc8b3bf8381901fdae3cb63c5d201e1ed3db5a7827ef6a26a2afe82cba7e67ea530029c27321a026337cddc19ccca7d42cd3987b643bf2485c804afb8534a42f157e457173f0802b040bb02e50ba773f808639deae64dc0ba5835dea01cac32cd0c92228577ab96d9a131d0ad4d40821b70d93f0c290b686f6f61c62b874f4e35765103b05621d85428d2113131db2b46e8a4180fffde5761097be04afbfdd4d8167c57dee6aac2c6894d359437be12265805885256081bfa76d8075f6266a337de61954f82022fc3a3654fcce0f47e842f8c6a99f8b0a18f161f4146326a26f3ec516502a16f072c04c1b37ede89b3cffeb55b682705c533fd890bd5c8537793903f8f590303cac3683432d91bc7ff4d29cd0eefd6a329757f6afd816fe3d9f3dcfbcce9225fde58cc6a6a56d95474a50dd987040b63ba7617cbe907a07c889f2e7b7fa7f7229616c6862365cb2f7ea4c707b7dfead2f3fe33c5ac04d722aeb2c3054d4474183482b274667814046234d21cd1437f73bb78b63a13f09d7cd89b8b9a1713fce2eaa27041a94b286eb5c479aaefe87aaf5f1932515ee9a75a503e325640e43894aab8ca0cd043c368f3a448f86ef29a76e77573180485aae510367e609ab79a0faa3bb92b0d19a65e67d56b6fabc35fc457ac572c711aa5c7bf319570d29e4266abea5b9e8f2bd1e13f106637b7e671b9f74532803675b3fbacf4f199bcd644941a9d14c13d5decc3b9034e7301b4140f8c062a2957ab6987e6b7bcb9ce28c8d73ce73a666102ce4ae56d96b0efc6b6ea3de57dc769703519011c275943d9d36fa8a66c0a619a85cde010b0ba3f75a0ddef3789ca9402547dfb4768868b496ffaade7c9a79b8e06b90fdc687a97cc3b26825f7145401e6e92b9a2476e34036d81e6e3368253d0cb0abfa5c513505ad32168b2b72ffa0c957b501da8c0c22ee08d6f9fd435465a911b425891d0312732095ef2fe98acfce0063600466b8dd6ae215088a753b541c62d00810fbd6cb3b3027f19ad8f469458e483de366f2ff1e53818708e785da2f5d11e97e5bd80c26c99d7b5664be97b19a6c9558cce16ae813470708278247e33c621f50a79fc02ee608e81752c10afb4900b8774d3b293c643d33f7b69e648afe80c06441743c6d97a6653067bac936ce53ec1cf0bb39125ce1642b721364809f8d8ffd172c17aefa8a3963f67e039edfd517050400342797b91577bcca3afca43bb2514676651ec99602d42b738fb71e0bcecd82553ba1c198f5ec9db9c1962d347c77bde724f7717f7feaf2f89f45d43a9ee2134cb577d79483f38da95c52c1420172560a0acf1e48ba365804a1d8d3fde156def14a53f669c11675510c101524b081d17befd5a599a06c2cb5452beaeb89c2b26c169a69db4ff5b56da7ef31ea8fd892657aaa134414ac1dd52050d460f50fe2691b9670742a1b2468fbce41d5b025debb0a11568b9f398870dcf6353fc905595319602989c47bc8235b6fe1c6566e7109712581de02a6bec749c105f29918716b5963d7554c1f195977e84abf5a50986e2254b1d0358c2fda6fa33a6edca998e59060efa45c8576cc5ccfd97009ff3520427420581bb70d3781d27a10b67dee2802f3929809a83b3b9f736675e539dc7ec1aa45a0efd16235bd12263ef6f20cfb845af1fce640910ba1fb23d546a9850aa7c256ca0c209dcecea33276b889da0aa1097afcc454af10e50d68d1c368ff5ab5fdbc1c60d56b7737f63caf48276412b1c7f414cd089169c1f6d7e548daf7b81a48b1f507c1f55536fea432c41ce4b45483810d425800837e3105fae91212f4dd3c2c5fa413a6f337fb31a1da17ddbc26ec275e161475dd8d3ec63e50c4dc258e4a881a249c703169e9b71faabd617128c4a609e6e92b99f7a6d2ef70f4f07e92220152acb0ddb00b1254df1826310257369cb9d85c0f76bdab065abe844958147669d8bbae4780c7a5cf92e7573b5e5da6b2544fd25672c280533b74f8f22a969a99f8c8716305726ec75391d6f415911d8baacb62e5c6b55ca0b63c0e1e23a97fe42b5fddbe94aa81d13bda4baab9323e7c6b42c9ebd7ca73dee4c7fe0040296ba07dd1f0c73fc80319369e46be3bfc7695b108fe8f2c0d642bb926060e880a224773ffbf0131ae953175c75c27ad30f1dc34e9956a51a8f840a6a41b27ee8472cb3b449a5da25b512ee650c8045d48d3a5ed761964b2034c1fe222ac92cd92cc86c7cb42caba09772a4f000231f2bff826d710da0917219bd447f73d22db1b3b09bbb604be4ce9cb07c7fe535e0c1402972b6dd019d87f4ce80505f7e23b14adc13cf261cdeb6df2ebcf6018d762b93d002d5484d2a2efa96c26015860ad83de84b4fa0e9aa033c772ed54e6634b8d6defe517e1cbdbedbc2d21a32944176a42eec037fa3c546aefcb7d5fd4f3ae84992341b1d5a91b6484f1db3b106bec2e529698224f006daa45839562b5270334bc03aa250c2c67b32e78fe707ac57fe6421684836a334d3f34a322ab330192e3fc1f2db491cba32dd26b771f4c67ce6f86bce9"}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 07:45:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1162.772192] FAULT_INJECTION: forcing a failure. [ 1162.772192] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.773495] CPU: 1 PID: 8529 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1162.774156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.774875] Call Trace: [ 1162.775119] dump_stack+0x107/0x167 [ 1162.775449] should_fail.cold+0x5/0xa [ 1162.775788] ? create_object.isra.0+0x3a/0xa20 [ 1162.776200] should_failslab+0x5/0x20 [ 1162.776542] kmem_cache_alloc+0x5b/0x310 [ 1162.776904] create_object.isra.0+0x3a/0xa20 [ 1162.777294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1162.777740] kmem_cache_alloc_node+0x169/0x330 [ 1162.778151] __alloc_skb+0x6d/0x5b0 [ 1162.778480] __ip_append_data+0x2930/0x3310 [ 1162.778900] ? lock_chain_count+0x20/0x20 [ 1162.779272] ? raw_destroy+0x30/0x30 [ 1162.779611] ? ip_finish_output+0x330/0x330 [ 1162.779984] ? lock_release+0x680/0x680 [ 1162.780357] ? ipv4_mtu+0x1ed/0x2c0 [ 1162.780675] ? raw_destroy+0x30/0x30 [ 1162.781004] ip_append_data+0x114/0x1a0 [ 1162.781357] raw_sendmsg+0xaa6/0x29d0 [ 1162.781707] ? dst_output+0x170/0x170 [ 1162.782041] ? __lock_acquire+0x1657/0x5b00 [ 1162.782465] ? perf_trace_lock+0xac/0x490 [ 1162.782823] ? SOFTIRQ_verbose+0x10/0x10 [ 1162.783214] ? __lockdep_reset_lock+0x180/0x180 [ 1162.783631] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1162.783664] FAULT_INJECTION: forcing a failure. [ 1162.783664] name failslab, interval 1, probability 0, space 0, times 0 [ 1162.784071] ? find_held_lock+0x2c/0x110 [ 1162.784107] ? trace_hardirqs_on+0x5b/0x180 [ 1162.786422] ? dst_output+0x170/0x170 [ 1162.786759] inet_sendmsg+0x11d/0x140 [ 1162.787088] ? inet_send_prepare+0x540/0x540 [ 1162.787472] __sock_sendmsg+0x13c/0x190 [ 1162.787845] ____sys_sendmsg+0x334/0x870 [ 1162.788201] ? sock_write_iter+0x3d0/0x3d0 [ 1162.788573] ? do_recvmmsg+0x6d0/0x6d0 [ 1162.788908] ? perf_trace_lock+0xac/0x490 [ 1162.789271] ? __lockdep_reset_lock+0x180/0x180 [ 1162.789681] ? perf_trace_lock+0xac/0x490 [ 1162.790084] ___sys_sendmsg+0xf3/0x170 [ 1162.790429] ? sendmsg_copy_msghdr+0x160/0x160 [ 1162.790832] ? lock_downgrade+0x6d0/0x6d0 [ 1162.791194] ? lock_downgrade+0x6d0/0x6d0 [ 1162.791569] ? __fget_files+0x296/0x4c0 [ 1162.791921] ? __fget_light+0xea/0x290 [ 1162.792292] __sys_sendmmsg+0x195/0x470 [ 1162.792655] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1162.793060] ? lock_downgrade+0x6d0/0x6d0 [ 1162.793442] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1162.793913] ? wait_for_completion_io+0x270/0x270 [ 1162.794371] ? rcu_read_lock_any_held+0x75/0xa0 [ 1162.794809] ? vfs_write+0x354/0xa70 [ 1162.795158] ? fput_many+0x2f/0x1a0 [ 1162.795509] ? ksys_write+0x1a9/0x260 [ 1162.795862] ? __ia32_sys_read+0xb0/0xb0 [ 1162.796245] __x64_sys_sendmmsg+0x99/0x100 [ 1162.796629] do_syscall_64+0x33/0x40 [ 1162.796978] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1162.797425] RIP: 0033:0x7f24b3ae7b19 [ 1162.797799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.799493] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1162.800141] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1162.800807] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1162.801467] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.802137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.802804] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1162.803528] CPU: 0 PID: 8530 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1162.804584] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1162.805813] Call Trace: [ 1162.806213] dump_stack+0x107/0x167 [ 1162.806754] should_fail.cold+0x5/0xa [ 1162.807332] ? __alloc_skb+0x6d/0x5b0 [ 1162.807905] should_failslab+0x5/0x20 [ 1162.808470] kmem_cache_alloc_node+0x55/0x330 [ 1162.809137] __alloc_skb+0x6d/0x5b0 [ 1162.809688] __ip_append_data+0x2930/0x3310 [ 1162.810342] ? lock_chain_count+0x20/0x20 [ 1162.810955] ? raw_destroy+0x30/0x30 [ 1162.811521] ? ip_finish_output+0x330/0x330 [ 1162.812156] ? lock_release+0x680/0x680 [ 1162.812746] ? ipv4_mtu+0x1ed/0x2c0 [ 1162.813292] ? raw_destroy+0x30/0x30 [ 1162.813854] ip_append_data+0x114/0x1a0 [ 1162.814456] raw_sendmsg+0xaa6/0x29d0 [ 1162.815040] ? dst_output+0x170/0x170 [ 1162.815604] ? __lock_acquire+0x1657/0x5b00 [ 1162.816274] ? perf_trace_lock+0xac/0x490 [ 1162.816898] ? SOFTIRQ_verbose+0x10/0x10 [ 1162.817497] ? __lockdep_reset_lock+0x180/0x180 [ 1162.818200] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1162.818969] ? find_held_lock+0x2c/0x110 [ 1162.819592] ? trace_hardirqs_on+0x5b/0x180 [ 1162.820224] ? dst_output+0x170/0x170 [ 1162.820807] inet_sendmsg+0x11d/0x140 [ 1162.821365] ? inet_send_prepare+0x540/0x540 [ 1162.822024] __sock_sendmsg+0x13c/0x190 [ 1162.822623] ____sys_sendmsg+0x334/0x870 [ 1162.823235] ? sock_write_iter+0x3d0/0x3d0 [ 1162.823870] ? do_recvmmsg+0x6d0/0x6d0 [ 1162.824441] ? perf_trace_lock+0xac/0x490 [ 1162.825077] ? __lockdep_reset_lock+0x180/0x180 [ 1162.825771] ? perf_trace_lock+0xac/0x490 [ 1162.826409] ___sys_sendmsg+0xf3/0x170 [ 1162.826996] ? sendmsg_copy_msghdr+0x160/0x160 [ 1162.827699] ? lock_downgrade+0x6d0/0x6d0 [ 1162.828335] ? lock_downgrade+0x6d0/0x6d0 [ 1162.828974] ? __fget_files+0x296/0x4c0 [ 1162.829591] ? __fget_light+0xea/0x290 [ 1162.830205] __sys_sendmmsg+0x195/0x470 [ 1162.830812] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1162.831473] ? lock_downgrade+0x6d0/0x6d0 [ 1162.832126] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1162.832871] ? wait_for_completion_io+0x270/0x270 [ 1162.833602] ? rcu_read_lock_any_held+0x75/0xa0 [ 1162.834352] ? vfs_write+0x354/0xa70 [ 1162.834976] ? fput_many+0x2f/0x1a0 [ 1162.835536] ? ksys_write+0x1a9/0x260 [ 1162.836113] ? __ia32_sys_read+0xb0/0xb0 [ 1162.836732] __x64_sys_sendmmsg+0x99/0x100 [ 1162.837381] do_syscall_64+0x33/0x40 [ 1162.837987] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1162.838954] RIP: 0033:0x7f62f063ab19 [ 1162.839665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1162.843090] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1162.844352] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1162.845409] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1162.846472] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1162.847527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1162.848583] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:45:57 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b34, &(0x7f0000000000)) 07:45:57 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000009, 0x9}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487fec864b9c7d4827b10ecda3000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000140)={0x0, 0x0, 0x8}) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000840), &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x1}, 0xdc1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)=ANY=[@ANYBLOB="1a773dbcf6ca2fe0893df869bcd333ab2f7a9e3c7a727e6dd3ffebfa5ae0b1bff27c37532def1acb78a9cba17bb1152ec48a72bab779361403eaab1f1d984975828b693bac24825c3a21eb1429d521431132a0e4f2c955fc8c00093ea1a8e58e0e7fe7bd0a5b34ad9a6d580bc7335cf0dd3de63a5ecd1fec5a6f24cd5173820310b09f0f80a3140cd5ee9202e423de02ffb8b5f651356101bd5ab10554d48fdd1d191839", @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 07:45:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x4b28, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:45:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) [ 1162.932697] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. 07:45:57 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x2, 0xf8, "124915cd947607d58855a24236217e6b8d2e0346ee25179a6ff01bf97c7fe650cadc20a66600f70a3f3e92d82590cfee31c782548c00b3f9a1c55d8d7fa189bf1f486bb3c2cc58736b26cb5c357d9bff0430024e41ef93383fca4340f0f1cc4158cf79d6b40eda0ad6a2e690a4d5ae98f174b7ae6c007f9c42d91c57bd40bbafb5beffd0c3768cf058ec949d5ec006c57c4f92eb0def18485ab77b2b641c5a926eb9aeb3c690bdf2284c83ef3ef7eee469eb7853d30f2c19d109f12a2fe42ae1c040f1099823d75b810c3aaa896621e3099debffdfec326f02131073b1e2827ecc21b4a521b6c0e3836e0b937cc96735ec42304b41b4e04b"}) 07:45:57 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b35, &(0x7f0000000000)) 07:45:57 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 40) [ 1163.042868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1163.103831] FAULT_INJECTION: forcing a failure. [ 1163.103831] name failslab, interval 1, probability 0, space 0, times 0 [ 1163.104698] CPU: 1 PID: 8555 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1163.105172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1163.105800] Call Trace: [ 1163.105999] dump_stack+0x107/0x167 [ 1163.106279] should_fail.cold+0x5/0xa [ 1163.106554] ? create_object.isra.0+0x3a/0xa20 [ 1163.106907] should_failslab+0x5/0x20 [ 1163.107176] kmem_cache_alloc+0x5b/0x310 [ 1163.107496] create_object.isra.0+0x3a/0xa20 [ 1163.107807] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1163.108163] kmem_cache_alloc_node+0x169/0x330 [ 1163.108526] __alloc_skb+0x6d/0x5b0 [ 1163.108786] __ip_append_data+0x2930/0x3310 [ 1163.109128] ? lock_chain_count+0x20/0x20 [ 1163.109423] ? raw_destroy+0x30/0x30 [ 1163.109695] ? ip_finish_output+0x330/0x330 [ 1163.110031] ? lock_release+0x680/0x680 [ 1163.110316] ? ipv4_mtu+0x1ed/0x2c0 [ 1163.110597] ? raw_destroy+0x30/0x30 [ 1163.110865] ip_append_data+0x114/0x1a0 [ 1163.111151] raw_sendmsg+0xaa6/0x29d0 [ 1163.111456] ? dst_output+0x170/0x170 [ 1163.111755] ? __lock_acquire+0x1657/0x5b00 [ 1163.112100] ? perf_trace_lock+0xac/0x490 [ 1163.112420] ? SOFTIRQ_verbose+0x10/0x10 [ 1163.112736] ? __lockdep_reset_lock+0x180/0x180 [ 1163.113094] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1163.113497] ? find_held_lock+0x2c/0x110 [ 1163.113798] ? trace_hardirqs_on+0x5b/0x180 [ 1163.114132] ? dst_output+0x170/0x170 [ 1163.114427] inet_sendmsg+0x11d/0x140 [ 1163.114716] ? inet_send_prepare+0x540/0x540 [ 1163.115027] __sock_sendmsg+0x13c/0x190 [ 1163.115336] ____sys_sendmsg+0x334/0x870 [ 1163.115622] ? sock_write_iter+0x3d0/0x3d0 [ 1163.115948] ? do_recvmmsg+0x6d0/0x6d0 [ 1163.116219] ? perf_trace_lock+0xac/0x490 [ 1163.116545] ? __lockdep_reset_lock+0x180/0x180 [ 1163.116867] ? perf_trace_lock+0xac/0x490 [ 1163.117191] ___sys_sendmsg+0xf3/0x170 [ 1163.117466] ? sendmsg_copy_msghdr+0x160/0x160 [ 1163.117870] ? lock_downgrade+0x6d0/0x6d0 [ 1163.118167] ? lock_downgrade+0x6d0/0x6d0 [ 1163.118491] ? __fget_files+0x296/0x4c0 [ 1163.118780] ? __fget_light+0xea/0x290 [ 1163.119088] __sys_sendmmsg+0x195/0x470 [ 1163.119369] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1163.119699] ? lock_downgrade+0x6d0/0x6d0 [ 1163.120004] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1163.120377] ? wait_for_completion_io+0x270/0x270 [ 1163.120716] ? rcu_read_lock_any_held+0x75/0xa0 [ 1163.121072] ? vfs_write+0x354/0xa70 [ 1163.121337] ? fput_many+0x2f/0x1a0 [ 1163.121617] ? ksys_write+0x1a9/0x260 [ 1163.121894] ? __ia32_sys_read+0xb0/0xb0 [ 1163.122209] __x64_sys_sendmmsg+0x99/0x100 [ 1163.122507] do_syscall_64+0x33/0x40 [ 1163.122794] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1163.123146] RIP: 0033:0x7f24b3ae7b19 [ 1163.123434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1163.124675] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1163.125256] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1163.125745] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1163.126292] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1163.126835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1163.127377] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 [ 1163.348387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.348858] print_req_error: 6 callbacks suppressed [ 1163.348869] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.350112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.350536] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.351372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.351782] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.352621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.353032] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.353878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.354307] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.355127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.355555] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.356390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.356798] blk_update_request: I/O error, dev sr0, sector 2096902 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.357624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1163.358036] blk_update_request: I/O error, dev sr0, sector 2096903 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.358885] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.359685] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1163.360265] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1163.361055] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1163.361636] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1163.362206] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1163.362790] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1163.363375] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1163.363944] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1163.364528] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1178.555119] FAULT_INJECTION: forcing a failure. [ 1178.555119] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.556103] CPU: 1 PID: 8564 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1178.556651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.557312] Call Trace: [ 1178.557535] dump_stack+0x107/0x167 [ 1178.557832] should_fail.cold+0x5/0xa [ 1178.558148] ? create_object.isra.0+0x3a/0xa20 [ 1178.558524] should_failslab+0x5/0x20 [ 1178.558831] kmem_cache_alloc+0x5b/0x310 [ 1178.559164] create_object.isra.0+0x3a/0xa20 [ 1178.559529] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.559943] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1178.560609] ? __ip_append_data+0x2930/0x3310 [ 1178.561020] __alloc_skb+0xb1/0x5b0 [ 1178.561328] __ip_append_data+0x2930/0x3310 [ 1178.561849] ? lock_chain_count+0x20/0x20 [ 1178.562236] ? raw_destroy+0x30/0x30 [ 1178.562566] ? ip_finish_output+0x330/0x330 [ 1178.562910] ? lock_release+0x680/0x680 [ 1178.563228] ? ipv4_mtu+0x1ed/0x2c0 [ 1178.563525] ? raw_destroy+0x30/0x30 [ 1178.563819] ip_append_data+0x114/0x1a0 [ 1178.564146] raw_sendmsg+0xaa6/0x29d0 [ 1178.564467] ? dst_output+0x170/0x170 [ 1178.564770] ? __lock_acquire+0x1657/0x5b00 [ 1178.565127] ? perf_trace_lock+0xac/0x490 [ 1178.565455] ? SOFTIRQ_verbose+0x10/0x10 [ 1178.565785] ? __lockdep_reset_lock+0x180/0x180 [ 1178.566170] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1178.566582] ? find_held_lock+0x2c/0x110 [ 1178.566919] ? trace_hardirqs_on+0x5b/0x180 [ 1178.567268] ? dst_output+0x170/0x170 [ 1178.567579] inet_sendmsg+0x11d/0x140 [ 1178.567885] ? inet_send_prepare+0x540/0x540 [ 1178.568235] __sock_sendmsg+0x13c/0x190 [ 1178.568558] ____sys_sendmsg+0x334/0x870 [ 1178.568882] ? sock_write_iter+0x3d0/0x3d0 [ 1178.569219] ? do_recvmmsg+0x6d0/0x6d0 [ 1178.569529] ? perf_trace_lock+0xac/0x490 [ 1178.569864] ? __lockdep_reset_lock+0x180/0x180 [ 1178.570246] ? perf_trace_lock+0xac/0x490 [ 1178.570585] ___sys_sendmsg+0xf3/0x170 [ 1178.570891] ? sendmsg_copy_msghdr+0x160/0x160 [ 1178.571262] ? lock_downgrade+0x6d0/0x6d0 [ 1178.571603] ? lock_downgrade+0x6d0/0x6d0 [ 1178.571943] ? __fget_files+0x296/0x4c0 [ 1178.572269] ? __fget_light+0xea/0x290 [ 1178.572585] __sys_sendmmsg+0x195/0x470 [ 1178.572905] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1178.573248] ? lock_downgrade+0x6d0/0x6d0 [ 1178.573599] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.573990] ? wait_for_completion_io+0x270/0x270 [ 1178.574380] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.574755] ? vfs_write+0x354/0xa70 [ 1178.575053] ? fput_many+0x2f/0x1a0 [ 1178.575348] ? ksys_write+0x1a9/0x260 [ 1178.575653] ? __ia32_sys_read+0xb0/0xb0 [ 1178.575980] __x64_sys_sendmmsg+0x99/0x100 [ 1178.576321] do_syscall_64+0x33/0x40 [ 1178.576624] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.577033] RIP: 0033:0x7f24b3ae7b19 [ 1178.577332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.578791] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1178.579396] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1178.579963] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1178.580532] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.581101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.581669] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:46:12 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x20030, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x136d, &(0x7f0000000040)={0x0, 0x51a1, 0x10, 0x2, 0x111}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0x7f, 0x6}]}) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd=r2, 0x101, 0x6b, 0x1ff, 0x8, 0x0, {0x2}}, 0x8001) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r4, 0x4, 0xc00) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) 07:46:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) 07:46:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 41) 07:46:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x50f0, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:46:12 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b36, &(0x7f0000000000)) 07:46:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 19) 07:46:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x55, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000480), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r3, &(0x7f0000000000), 0x1b4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r5, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x488200, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x5c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x34}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x66}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x50}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x88c0}, 0x4044080) kcmp(r0, r1, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x81, 0x8, 0xfc, 0x7f, 0x0, 0x5, 0x40, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x1, 0x7}, 0x100, 0x7ff, 0x55, 0x5, 0x6, 0x80, 0x7, 0x0, 0x1, 0x0, 0x2fb}, r0, 0x5, r7, 0x9) gettid() process_vm_readv(0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/171, 0x2a}, {&(0x7f0000000280)=""/58, 0x3a}], 0x1000000000000036, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) 07:46:12 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002240)={0x4, 0x80, 0x0, 0x5, 0x74, 0x0, 0x0, 0x80000000, 0x4, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0xc2d, 0x4}, 0x4020a, 0x5, 0x20, 0x7, 0x800, 0x8, 0x1ff, 0x0, 0x1, 0x0, 0x17}, 0x0, 0x7, r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x5, 0xd39, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000180)="08347cd85ec877b4c45e4e523d60489612ea3e5ca5ca440f31e616329b2493829d375d98406ff03f9cee31fa0b77759ebbc9694ce7f3be28a8b745ac8ed8780a7bbc194b8b0f3f1077a2153fa907c2a46ef7290e6201e8e7e20793ba17a38ba33771e1a8967c38c1b2b82059cb476504f4bdf157857bb5c04686f8a3d2e35a294e05a1427a7586a27554c65e2c11045bc305b01d0850519bea2ee322aa26a3c81dd1dc3cc674b51a677eabee223f154b327fff87bd30eb04389d21bcb2cee589", 0xc0}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="b34f35bcc132facc49851fa1a9bd83a25c9da5f5c6078aa2ad8895b73b443bb0b0e7c0e1007701dc2d749c72f854d11eedbf45293edeefa92d2634cfd95f5292576369fc9f8ca44467663622e3cd3cd96ab3b27b6e", 0x55}], 0x3, &(0x7f0000001300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xfffffffa}}, @rthdr_2292={{0x28, 0x29, 0x39, {0xc, 0x2, 0x0, 0x4, 0x0, [@private0]}}}], 0x40}}, {{&(0x7f0000001340)={0xa, 0x4e22, 0x6, @private0, 0x6604}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001380)="04c4494263937b66878821350ad61ce0ac73ba2c7730f42aab0e52c40b8b5b41e6ffcc9ad4b8154bf56431b013f8cc75096b9b2cce5744933555", 0x3a}, {&(0x7f00000013c0)="5e51b746fdd0383e69420f4d34515ddcf98fba44ff672534b0f45978887e435838cc860ab694fadc6dcce6feb213a689c3e99e59c5d9b62613c2ffe5b94eca060ddc200663ba79460756a82e8d1c98acdaac8c6ff65da97b48c6035879d04695d80546bfc3a980db0e912939f37caffb8febdb188a0a4accfc6851a6aac7701ecc942984d84beef1efd73f52b4a0cd42828d7ef1eac414a97d0698389f71f5339e44b4557841c9b01e72dacba70f2dfde55ab84634d89979f42a9ee3b0c5b04a1b0e0c990dbf54ddc089e0cc8fd46cecfd1089635ce8092af0f467ab6089f8bf5b36baee", 0xe4}, {&(0x7f00000014c0)="dbbfe39a718cecc80f18c0b0355a455a2dbfd603a4f6781beb109b1b3733dcbd1491760288119cfa187974f5a27d8b53534f7b3895e175a97008b73a7cd4e9dd013336c404241dac920524f7e503cc39bde93631bbe854fe2422312ab94ac362f0e4904fab565c92d5e566d38ba240efd79b2cce540a84170a43f3f4ef745d8e759148777155ee3bfdbf26ed2db27d6626cc7c49d38067af77af52b131ccd93f068d2f621eef2fe712c78918cce175f0e3b7f662e2003c36857dc6c82ea2d185f5a9f4077465140d672cf316d3423886f3effd6283f9cd44fcd744ad4b9e", 0xde}], 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="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"/704], 0x2c0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000018c0)="606ac6c4f8304fe501ff77b15d76b915c0c0857bd6b441359ef9c684f2489b0f7f18ff11040f59daa48ce391ca79d09091018444f0dd42c66f84139f07c7e1455964ee9943a425e5bfe0a69ff101e73e80da6d9683e2ff469ffbd8dd8cda963cb59ea570cd01b868df9d40e2dcc4", 0x6e}, {&(0x7f0000001940)="99e6f2584a48ef4b4c6cf0003ecd6934f47b37f06fddd62ae94b96fe83d613f772f7cd64522c81b20c3e439022590146cd46d41a93a2b8ddd211ee3c7636ba5bfdb9dc3cacdf225c6ecb27a85da8bca416baefb5b90893d00d3bcf4c029f0a5998d5273d2a3c1a4f45ae5a2ac9d7330f3cb7f373b03cfe6211b0b7dd938dcbd2ddad2381c6d210efab12e8b87e847cf4d0e085bde6e2fbabaa54", 0x9a}, {&(0x7f0000001a00)="7cfa6df952d8f601670e714e4d456d0bc43a5a6b6a6be849671cb2610d5b090b7ef10f28e1d2f9b86c91308df0239034a04a3a4d364dab474c65f86236744693270fd599de581ffa0353d77b942850925c93b693842fc1e43ec18730ff2317185fe2f8cacb701c5d07ad0ada5039e48a0aec220c5bdaea38b50c911b0825575627f970d4feb218a887b3781ed32b7236e53a5ea74ad283ac2ad52dc9e85f3520f1c8c166c588cdb90f07f5ea9e72b7124f58c86380316e497b4d956ffaee58df5e7efe0bd97454d1", 0xc8}], 0x3, &(0x7f0000001b40)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x62, 0x3, '\x00', [@pad1, @calipso={0x7, 0x18, {0x1, 0x4, 0x40, 0x5a0, [0x7, 0x1]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x67, 0x0, '\x00', [@ra={0x5, 0x2, 0x1ff}]}}}], 0x70}}], 0x3, 0x80) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r2, &(0x7f0000000000), 0x1b4000) perf_event_open(&(0x7f00000022c0)={0x4, 0x80, 0x9, 0x4, 0x6, 0x7, 0x0, 0x80000001, 0x400, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x8}, 0x1a8d8, 0x1, 0xfffffff8, 0x5, 0x3, 0x1, 0xbaff, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x10, r2, 0x3) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r1, {0xa4}}, './file0\x00'}) sendmmsg$inet6(r3, &(0x7f0000002200)=[{{&(0x7f0000001cc0)={0xa, 0x4e20, 0x9, @mcast2, 0x2}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001d00)="cb1b349f2a6c9bfe1b38a0cb500188799c5dd6886fe005534e2cf29f0aa71c533c0f5ae40319dcbb4eb5f16bb327dffbf7dbcf7f7537ac3aee6c1ab2b41b9ceda7504bb82dff2490a5bb10ed399c815d5f6d42563d8d47941ebdc42d59746514cc3dcdb583f3cad005a67539cb5da76666d7938a8521eea435cd7a36b9ace9f1ae55d87bb738c79a015ffb2d264892737943cae432a7221c3c163b8d7ab33a6e7a75d5911d93575636c77296295aff8b988082962ceeb943804cb76af8bc5deed594656da62f2a391584c754738d5a08b0e315b6e9132b23f3f229aee022d64444abdaa91a364b58dae63af534d439a361cd8984", 0xf4}, {&(0x7f0000001e00)="dd244d2980f9a3c9125ce2ca20cba28b41b6ae3460166db288d451d91a8226184652364969484a6f82cc7453d8f07d5253a0949afd63440188bea8f8a34b1fcb3ec8a9befde9a43607dcca", 0x4b}, {&(0x7f0000001e80)="0768392a11fd4f53ff56ea24f4fc930492f887c71901a31548711a3cb78d3c599064c228470e5789ed2bf999fbffb2f3447afbcf28bd8d99ae557131d7f3f091332cc9f46fb10541a5cef54c88401130c3cae2a227b752551fb966712b5c726be61f41ef68887172b511e1b84df981bcf2c0203e96fc9388f11b6650214d3ba634e3a3e1f203c9b95084c16f0702aee9f4c59a3304dca6b3f28b66e12538e6ae1c03ab60fd96c8f1dba47eb5829cec4e632ecf394eb793aef125e60b6558be6025afaa58170f2b82ebbf813a1daad7ee96ece860ae7905160863a6e7d033587597df3b23fe7761e6f5b9f31f", 0xec}, {&(0x7f0000001f80)="d302a9df63ccf13a27cbefdc9d92203b8d18926189b61596f31e52f65036c3672482ab2eb50da3ed0c0af32206589427ffa09113c067e551a59dc20d781240fc1d5ee4b3ef1be618fea5416708f3df02cbcfffc8b0c19371b478a94c4d015669283e6d1a360f216620dd92754697416d", 0x70}, {&(0x7f0000002000)="709eb215f1eed67c18d4b3819900b27a3effb495e2e6d7cadd1f86027d7486c2c6c7b3d0c8f03058823ee3abd35d95d819705c29bd76a24233174882bae7b08ec7fa2e3202ee456505aaac096b8ed13840c29b8a", 0x54}, {&(0x7f0000002080)="491ff48a14b97fa6b96597abe5e0edad7dbd668efb85ad1a692ff60f8107e8e0d99415a08b510719cf026c27", 0x2c}, {&(0x7f00000020c0)="7110138afd861c6ba0bbd32e4cac5784bc3afd9ffaf56ca61f5a84c69dc1250f616e51a92617d57dd8f5b7aeb2370f39bd30aed91a578f09b0c362dcea6dba5abe92c774df73164e18e6e34a09d02e9c141f8f82cbeb307a6fb1844889184a5d002dff0f01972b21970dc8726ebe7d15eb808617228943709077982b335e746577c7b66a432b46000adc1c899f562a3a5ff0b8", 0x93}], 0x7}}], 0x1, 0x40) [ 1178.602112] FAULT_INJECTION: forcing a failure. [ 1178.602112] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.604212] CPU: 0 PID: 8563 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1178.605616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.606949] Call Trace: [ 1178.607348] dump_stack+0x107/0x167 [ 1178.607885] should_fail.cold+0x5/0xa [ 1178.608427] ? create_object.isra.0+0x3a/0xa20 [ 1178.609082] should_failslab+0x5/0x20 [ 1178.609644] kmem_cache_alloc+0x5b/0x310 [ 1178.610237] create_object.isra.0+0x3a/0xa20 [ 1178.610874] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.611605] kmem_cache_alloc_node+0x169/0x330 [ 1178.612255] __alloc_skb+0x6d/0x5b0 [ 1178.612814] __ip_append_data+0x2930/0x3310 [ 1178.613445] ? lock_chain_count+0x20/0x20 [ 1178.614044] ? raw_destroy+0x30/0x30 [ 1178.614595] ? ip_finish_output+0x330/0x330 [ 1178.615208] ? lock_release+0x680/0x680 [ 1178.615811] ? ipv4_mtu+0x1ed/0x2c0 [ 1178.616340] ? raw_destroy+0x30/0x30 [ 1178.616867] ip_append_data+0x114/0x1a0 [ 1178.617443] raw_sendmsg+0xaa6/0x29d0 [ 1178.618017] ? dst_output+0x170/0x170 [ 1178.618548] ? __lock_acquire+0x1657/0x5b00 [ 1178.619172] ? perf_trace_lock+0xac/0x490 [ 1178.619763] ? SOFTIRQ_verbose+0x10/0x10 [ 1178.620338] ? __lockdep_reset_lock+0x180/0x180 [ 1178.621017] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1178.621737] ? find_held_lock+0x2c/0x110 [ 1178.622352] ? trace_hardirqs_on+0x5b/0x180 [ 1178.622969] ? dst_output+0x170/0x170 [ 1178.623520] inet_sendmsg+0x11d/0x140 [ 1178.624054] ? inet_send_prepare+0x540/0x540 [ 1178.624687] __sock_sendmsg+0x13c/0x190 [ 1178.625248] ____sys_sendmsg+0x334/0x870 [ 1178.625837] ? sock_write_iter+0x3d0/0x3d0 [ 1178.626438] ? do_recvmmsg+0x6d0/0x6d0 [ 1178.626984] ? perf_trace_lock+0xac/0x490 [ 1178.627585] ? __lockdep_reset_lock+0x180/0x180 [ 1178.628245] ? perf_trace_lock+0xac/0x490 [ 1178.628838] ___sys_sendmsg+0xf3/0x170 [ 1178.629398] ? sendmsg_copy_msghdr+0x160/0x160 [ 1178.630048] ? lock_downgrade+0x6d0/0x6d0 [ 1178.630638] ? lock_downgrade+0x6d0/0x6d0 [ 1178.631241] ? __fget_files+0x296/0x4c0 [ 1178.631815] ? __fget_light+0xea/0x290 [ 1178.632375] __sys_sendmmsg+0x195/0x470 [ 1178.632942] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1178.633548] ? lock_downgrade+0x6d0/0x6d0 [ 1178.634171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.634859] ? wait_for_completion_io+0x270/0x270 [ 1178.635545] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.636193] ? vfs_write+0x354/0xa70 [ 1178.636723] ? fput_many+0x2f/0x1a0 [ 1178.637247] ? ksys_write+0x1a9/0x260 [ 1178.637793] ? __ia32_sys_read+0xb0/0xb0 [ 1178.638393] __x64_sys_sendmmsg+0x99/0x100 [ 1178.639011] do_syscall_64+0x33/0x40 [ 1178.639550] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.640275] RIP: 0033:0x7f62f063ab19 [ 1178.640825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.643397] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1178.644458] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1178.645448] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1178.646463] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.647457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.648445] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:46:12 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x300000c, 0x20030, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x136d, &(0x7f0000000040)={0x0, 0x51a1, 0x10, 0x2, 0x111}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x1, 0x2, 0x7f, 0x6}]}) syz_io_uring_submit(r0, r1, &(0x7f0000000240)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd=r2, 0x101, 0x6b, 0x1ff, 0x8, 0x0, {0x2}}, 0x8001) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r4, 0x4, 0xc00) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) dup2(r3, r4) 07:46:12 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b37, &(0x7f0000000000)) 07:46:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x56b8, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) 07:46:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 42) 07:46:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) (fail_nth: 20) [ 1178.777850] FAULT_INJECTION: forcing a failure. [ 1178.777850] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.778833] CPU: 1 PID: 8587 Comm: syz-executor.0 Not tainted 5.10.214 #1 [ 1178.779376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.780046] Call Trace: [ 1178.780266] dump_stack+0x107/0x167 [ 1178.780566] should_fail.cold+0x5/0xa [ 1178.780891] should_failslab+0x5/0x20 [ 1178.781200] __kmalloc_node_track_caller+0x74/0x3b0 [ 1178.781602] ? __ip_append_data+0x2930/0x3310 [ 1178.781979] __alloc_skb+0xb1/0x5b0 [ 1178.782282] __ip_append_data+0x2930/0x3310 [ 1178.782641] ? lock_chain_count+0x20/0x20 [ 1178.782984] ? raw_destroy+0x30/0x30 [ 1178.783291] ? ip_finish_output+0x330/0x330 [ 1178.783642] ? lock_release+0x680/0x680 [ 1178.783956] ? ipv4_mtu+0x1ed/0x2c0 [ 1178.784252] ? raw_destroy+0x30/0x30 [ 1178.784553] ip_append_data+0x114/0x1a0 [ 1178.784886] raw_sendmsg+0xaa6/0x29d0 [ 1178.785202] ? dst_output+0x170/0x170 [ 1178.785508] ? __lock_acquire+0x1657/0x5b00 [ 1178.785867] ? perf_trace_lock+0xac/0x490 [ 1178.786211] ? SOFTIRQ_verbose+0x10/0x10 [ 1178.786543] ? __lockdep_reset_lock+0x180/0x180 [ 1178.786932] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1178.787340] ? find_held_lock+0x2c/0x110 [ 1178.787678] ? trace_hardirqs_on+0x5b/0x180 [ 1178.788026] ? dst_output+0x170/0x170 [ 1178.788336] inet_sendmsg+0x11d/0x140 [ 1178.788644] ? inet_send_prepare+0x540/0x540 [ 1178.789004] __sock_sendmsg+0x13c/0x190 [ 1178.789327] ____sys_sendmsg+0x334/0x870 [ 1178.789657] ? sock_write_iter+0x3d0/0x3d0 [ 1178.790022] ? do_recvmmsg+0x6d0/0x6d0 [ 1178.790342] ? perf_trace_lock+0xac/0x490 [ 1178.790691] ? __lockdep_reset_lock+0x180/0x180 [ 1178.791067] ? perf_trace_lock+0xac/0x490 [ 1178.791408] ___sys_sendmsg+0xf3/0x170 [ 1178.791725] ? sendmsg_copy_msghdr+0x160/0x160 [ 1178.792103] ? lock_downgrade+0x6d0/0x6d0 [ 1178.792447] ? lock_downgrade+0x6d0/0x6d0 [ 1178.792787] ? __fget_files+0x296/0x4c0 [ 1178.793166] ? __fget_light+0xea/0x290 [ 1178.793671] __sys_sendmmsg+0x195/0x470 [ 1178.794055] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1178.794525] ? lock_downgrade+0x6d0/0x6d0 [ 1178.794875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.795264] ? wait_for_completion_io+0x270/0x270 [ 1178.795658] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.796030] ? vfs_write+0x354/0xa70 [ 1178.796333] ? fput_many+0x2f/0x1a0 [ 1178.796626] ? ksys_write+0x1a9/0x260 [ 1178.796939] ? __ia32_sys_read+0xb0/0xb0 [ 1178.797271] __x64_sys_sendmmsg+0x99/0x100 [ 1178.797617] do_syscall_64+0x33/0x40 [ 1178.797919] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.798340] RIP: 0033:0x7f62f063ab19 [ 1178.798637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.800107] RSP: 002b:00007f62edbb0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1178.800715] RAX: ffffffffffffffda RBX: 00007f62f074df60 RCX: 00007f62f063ab19 [ 1178.801284] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1178.801852] RBP: 00007f62edbb01d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.802456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.803030] R13: 00007fff15e70dff R14: 00007f62edbb0300 R15: 0000000000022000 07:46:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) [ 1178.821728] FAULT_INJECTION: forcing a failure. [ 1178.821728] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.822869] CPU: 1 PID: 8591 Comm: syz-executor.5 Not tainted 5.10.214 #1 [ 1178.823426] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.824108] Call Trace: [ 1178.824328] dump_stack+0x107/0x167 [ 1178.824633] should_fail.cold+0x5/0xa [ 1178.824952] ? create_object.isra.0+0x3a/0xa20 [ 1178.825327] should_failslab+0x5/0x20 [ 1178.825637] kmem_cache_alloc+0x5b/0x310 [ 1178.825987] create_object.isra.0+0x3a/0xa20 [ 1178.826345] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1178.826766] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1178.827176] ? __ip_append_data+0x2930/0x3310 [ 1178.827547] __alloc_skb+0xb1/0x5b0 [ 1178.827850] __ip_append_data+0x2930/0x3310 [ 1178.828203] ? lock_chain_count+0x20/0x20 [ 1178.828546] ? raw_destroy+0x30/0x30 [ 1178.828864] ? ip_finish_output+0x330/0x330 [ 1178.829216] ? lock_release+0x680/0x680 [ 1178.829543] ? ipv4_mtu+0x1ed/0x2c0 [ 1178.829845] ? raw_destroy+0x30/0x30 [ 1178.830154] ip_append_data+0x114/0x1a0 [ 1178.830484] raw_sendmsg+0xaa6/0x29d0 [ 1178.830810] ? dst_output+0x170/0x170 [ 1178.831117] ? __lock_acquire+0x1657/0x5b00 [ 1178.831481] ? perf_trace_lock+0xac/0x490 [ 1178.831818] ? SOFTIRQ_verbose+0x10/0x10 [ 1178.832152] ? __lockdep_reset_lock+0x180/0x180 [ 1178.832545] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1178.832961] ? find_held_lock+0x2c/0x110 [ 1178.833305] ? trace_hardirqs_on+0x5b/0x180 [ 1178.833666] ? dst_output+0x170/0x170 [ 1178.833987] inet_sendmsg+0x11d/0x140 [ 1178.834303] ? inet_send_prepare+0x540/0x540 [ 1178.834661] __sock_sendmsg+0x13c/0x190 [ 1178.834986] ____sys_sendmsg+0x334/0x870 [ 1178.835324] ? sock_write_iter+0x3d0/0x3d0 [ 1178.835679] ? do_recvmmsg+0x6d0/0x6d0 [ 1178.835996] ? perf_trace_lock+0xac/0x490 [ 1178.836346] ? __lockdep_reset_lock+0x180/0x180 [ 1178.836723] ? perf_trace_lock+0xac/0x490 [ 1178.837065] ___sys_sendmsg+0xf3/0x170 [ 1178.837384] ? sendmsg_copy_msghdr+0x160/0x160 [ 1178.837760] ? lock_downgrade+0x6d0/0x6d0 [ 1178.838120] ? lock_downgrade+0x6d0/0x6d0 [ 1178.838467] ? __fget_files+0x296/0x4c0 [ 1178.838806] ? __fget_light+0xea/0x290 [ 1178.839138] __sys_sendmmsg+0x195/0x470 [ 1178.839469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1178.839818] ? lock_downgrade+0x6d0/0x6d0 [ 1178.840175] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1178.840569] ? wait_for_completion_io+0x270/0x270 [ 1178.840965] ? rcu_read_lock_any_held+0x75/0xa0 [ 1178.841352] ? vfs_write+0x354/0xa70 [ 1178.841662] ? fput_many+0x2f/0x1a0 [ 1178.841975] ? ksys_write+0x1a9/0x260 [ 1178.842291] ? __ia32_sys_read+0xb0/0xb0 [ 1178.842635] __x64_sys_sendmmsg+0x99/0x100 [ 1178.842986] do_syscall_64+0x33/0x40 [ 1178.843290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.843712] RIP: 0033:0x7f24b3ae7b19 [ 1178.844018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1178.845510] RSP: 002b:00007f24b105d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1178.846153] RAX: ffffffffffffffda RBX: 00007f24b3bfaf60 RCX: 00007f24b3ae7b19 [ 1178.846731] RDX: 0000000000000001 RSI: 0000000020002040 RDI: 0000000000000005 [ 1178.847310] RBP: 00007f24b105d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.847888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1178.848472] R13: 00007ffeb316812f R14: 00007f24b105d300 R15: 0000000000022000 07:46:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b3a, &(0x7f0000000000)) 07:46:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(r0, 0x27b, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x20, r1, 0x0, 0x100000000, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x2, 0x101]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='*@/\xb9&\x00', &(0x7f0000000140)='./file0\x00', r0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x200, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r2, 0x1, 0x1, 0x4) 07:46:13 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) io_setup(0x0, &(0x7f0000000000)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r3, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x34, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x34}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) r9 = openat(0xffffffffffffffff, &(0x7f0000000080)='/proc/self/exe\x00', 0x107100, 0x0) read(r9, &(0x7f0000000000), 0x1b4000) io_submit(r1, 0x3, &(0x7f0000000480)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x16c6, r2, &(0x7f00000000c0)="ff6dd9d557d01f93c260dd3794d615e6fee846439648bd9fcc283406e40e02e6107aef3fd2c37a524d23d92dcdc0faab0fbe1a6bddea6c9c20de9a79c8e8c164abc15e87c93be0938ca301e7327065f9f5d90fd1e70d074a437eb3e9b8b850987280582011c09f42bf3dce95818d3afd0d40afe18a0f4275774701968ccc2b2542ab941dc66f681c740c0a563683ef", 0x8f, 0x6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xd, 0xffff, r5, &(0x7f00000001c0)="bc148a55e043bbd651360b7354bb43b47a04f6f3ef8101e1100d9e85acc966757139ffae1d6cebad2028142eab0bdd850d8695ceffc8c949e20b2fb309de488afaa7fde85c6276dab1d4e8939158f72167baf4bbb726ab08d8df00f795a4399511b4380741d0900e300c405a49827a90eb59bb570acc09eebbcf1201accf8bdb083b5e0d53b509adb1e481d7d0768874010d34d65d8bbd15f53e594470158cb585f52a3575b24df30d5288e70c5452731a502e7116985c26318900e50b6a785923a8e42eec5c98d7cf834eefa389a705776788aed1a43a9072573d8a577ed1c8f623ad0c8d5d4f9583cb202b35c4cb93dbe619477a", 0xf5, 0x0, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000340)="5beac9459bed39d1b7a6023b9c86e18fb47c7947de1662f138a6d378a5d7016b941a5fc2ed3df8a1e8ddb513a0f865cff9b447c8f23d0ae08571fa002936f8e9cbe6fee8b7a90c9f31c1e3f3548b66c8a0833eabdc4d07a220d8702e2c9391d2d91645ee3f0592871641228de5ab8c8d954294dfa64dbaf04880af92db16eb3d8a116f2a8e453ddd75dbcd14a1e7573c59f302041e41d9e8c9d8a3ef2fa51753c3e247198c329fd24e18160fe7f5bc0c1e3330de9322035548eded03c7afdc4d884a9ec28e8cd5a105d0cc6bed8790f4456c99bac8b91efde74e72428abdabcd2e01615a318ad6af78", 0xe9, 0xfffffffffffff79f, 0x0, 0x2, r9}]) 07:46:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x5c80, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000007000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r3], 0x38}}], 0x1, 0x0) [ 1178.924566] [ 1178.924851] ====================================================== [ 1178.925743] WARNING: possible circular locking dependency detected [ 1178.926640] 5.10.214 #1 Not tainted [ 1178.927150] ------------------------------------------------------ [ 1178.928038] syz-executor.7/8602 is trying to acquire lock: [ 1178.928824] ffff88801b624b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1178.930313] 07:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3], 0x38}}, 0x0) [ 1178.930313] but task is already holding lock: [ 1178.931231] ffffffff8561a8c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1178.932493] [ 1178.932493] which lock already depends on the new lock. [ 1178.932493] [ 1178.933643] [ 1178.933643] the existing dependency chain (in reverse order) is: [ 1178.934703] [ 1178.934703] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1178.935666] __mutex_lock+0x13d/0x10b0 [ 1178.936291] rfkill_register+0x36/0xa10 [ 1178.936928] hci_register_dev+0x42e/0xc00 [ 1178.937596] __vhci_create_device+0x2c8/0x5c0 [ 1178.938316] vhci_open_timeout+0x38/0x50 [ 1178.942917] process_one_work+0x9a9/0x14b0 [ 1178.943590] worker_thread+0x61d/0x1310 [ 1178.944228] kthread+0x38f/0x470 [ 1178.944776] ret_from_fork+0x22/0x30 [ 1178.945367] [ 1178.945367] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1178.946305] __mutex_lock+0x13d/0x10b0 [ 1178.946928] vhci_send_frame+0x63/0xa0 [ 1178.947545] hci_send_frame+0x1b9/0x320 [ 1178.948176] hci_tx_work+0x10af/0x1660 [ 1178.948798] process_one_work+0x9a9/0x14b0 [ 1178.949471] worker_thread+0x61d/0x1310 [ 1178.950109] kthread+0x38f/0x470 [ 1178.950665] ret_from_fork+0x22/0x30 [ 1178.951258] [ 1178.951258] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1178.952372] __flush_work+0x105/0xa90 [ 1178.952978] hci_dev_do_close+0x131/0x1240 [ 1178.953652] hci_unregister_dev+0x149/0x430 [ 1178.954339] vhci_release+0x70/0xf0 [ 1178.954931] __fput+0x285/0x980 [ 1178.955469] task_work_run+0xe2/0x1a0 [ 1178.956076] do_exit+0xb6f/0x2600 [ 1178.956639] do_group_exit+0x125/0x310 [ 1178.957258] get_signal+0x4bc/0x22e0 [ 1178.957857] arch_do_signal_or_restart+0x2b7/0x1990 [ 1178.958646] exit_to_user_mode_prepare+0x10f/0x190 [ 1178.959415] syscall_exit_to_user_mode+0x38/0x1e0 [ 1178.960033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1178.960161] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.960173] [ 1178.960173] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1178.962564] __mutex_lock+0x13d/0x10b0 [ 1178.963185] bg_scan_update+0x82/0x500 [ 1178.963806] process_one_work+0x9a9/0x14b0 [ 1178.964474] worker_thread+0x61d/0x1310 [ 1178.965107] kthread+0x38f/0x470 [ 1178.965659] ret_from_fork+0x22/0x30 [ 1178.966250] [ 1178.966250] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1178.967460] __lock_acquire+0x29e7/0x5b00 [ 1178.968122] lock_acquire+0x197/0x470 [ 1178.968729] __flush_work+0x105/0xa90 [ 1178.969340] __cancel_work_timer+0x368/0x4c0 [ 1178.970047] hci_request_cancel_all+0x73/0x230 [ 1178.970757] hci_dev_do_close+0xd9/0x1240 [ 1178.971411] hci_rfkill_set_block+0x166/0x1a0 [ 1178.972110] rfkill_set_block+0x1fd/0x540 [ 1178.972764] rfkill_fop_write+0x253/0x4b0 [ 1178.973425] vfs_write+0x29a/0xa70 [ 1178.974008] ksys_write+0x1f6/0x260 [ 1178.974593] do_syscall_64+0x33/0x40 [ 1178.975194] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1178.975984] [ 1178.975984] other info that might help us debug this: [ 1178.975984] [ 1178.977108] Chain exists of: [ 1178.977108] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1178.977108] [ 1178.979026] Possible unsafe locking scenario: [ 1178.979026] [ 1178.979871] CPU0 CPU1 [ 1178.980519] ---- ---- [ 1178.981164] lock(rfkill_global_mutex); [ 1178.981745] lock(&data->open_mutex); [ 1178.982649] lock(rfkill_global_mutex); [ 1178.983573] lock((work_completion)(&hdev->bg_scan_update)); [ 1178.984397] [ 1178.984397] *** DEADLOCK *** [ 1178.984397] [ 1178.985243] 1 lock held by syz-executor.7/8602: [ 1178.985891] #0: ffffffff8561a8c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1178.987220] [ 1178.987220] stack backtrace: [ 1178.987855] CPU: 0 PID: 8602 Comm: syz-executor.7 Not tainted 5.10.214 #1 [ 1178.988812] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1178.989988] Call Trace: [ 1178.990367] dump_stack+0x107/0x167 [ 1178.990888] check_noncircular+0x263/0x2e0 [ 1178.991493] ? register_lock_class+0xbb/0x17b0 [ 1178.992147] ? print_circular_bug+0x470/0x470 [ 1178.992796] ? find_first_zero_bit+0x94/0xb0 [ 1178.993421] ? alloc_chain_hlocks+0x342/0x5a0 [ 1178.994072] __lock_acquire+0x29e7/0x5b00 [ 1178.994676] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1178.995415] ? SOFTIRQ_verbose+0x10/0x10 07:46:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b3b, &(0x7f0000000000)) 07:46:13 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r0, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f00000003c0)=""/121, 0x79}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/160, 0xa0}, {&(0x7f0000001640)=""/256, 0x100}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000080)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) lseek(r0, 0x27b, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x20, r1, 0x0, 0x100000000, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x7, 0x8, 0x2, 0x2, 0x2, [0x9, 0x6, 0x2, 0x101]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='*@/\xb9&\x00', &(0x7f0000000140)='./file0\x00', r0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x200, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fadvise64(r2, 0x1, 0x1, 0x4) 07:46:13 executing program 6: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x4b3c, &(0x7f0000000000)) [ 1178.995993] ? __lockdep_reset_lock+0x180/0x180 [ 1178.996757] ? mark_lock+0xf5/0x2df0 [ 1178.997288] lock_acquire+0x197/0x470 [ 1178.997829] ? __flush_work+0xdd/0xa90 [ 1178.998397] ? lock_release+0x680/0x680 [ 1178.998963] ? __flush_work+0x78c/0xa90 [ 1178.999530] ? lock_downgrade+0x6d0/0x6d0 [ 1179.000128] __flush_work+0x105/0xa90 [ 1179.000668] ? __flush_work+0xdd/0xa90 [ 1179.001223] ? lock_chain_count+0x20/0x20 [ 1179.001814] ? queue_delayed_work_on+0xe0/0xe0 [ 1179.002461] ? mark_lock+0xf5/0x2df0 [ 1179.002987] ? lock_acquire+0x197/0x470 [ 1179.003535] ? find_held_lock+0x2c/0x110 [ 1179.004111] ? __wake_up_common_lock+0xde/0x140 [ 1179.004762] ? mark_held_locks+0x9e/0xe0 [ 1179.005334] __cancel_work_timer+0x368/0x4c0 [ 1179.005943] ? cancel_delayed_work+0x20/0x20 [ 1179.006572] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1179.007301] ? __cancel_work+0x1bb/0x2b0 [ 1179.007869] ? try_to_grab_pending+0xe0/0xe0 [ 1179.008491] hci_request_cancel_all+0x73/0x230 [ 1179.009122] hci_dev_do_close+0xd9/0x1240 [ 1179.009705] ? rfkill_set_block+0x18f/0x540 [ 1179.010318] ? hci_dev_open+0x350/0x350 [ 1179.010873] ? mark_held_locks+0x9e/0xe0 [ 1179.011444] hci_rfkill_set_block+0x166/0x1a0 [ 1179.012061] ? hci_power_off+0x20/0x20 [ 1179.012603] rfkill_set_block+0x1fd/0x540 [ 1179.013180] rfkill_fop_write+0x253/0x4b0 [ 1179.013753] ? rfkill_sync_work+0xa0/0xa0 [ 1179.014005] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1179.014342] ? security_file_permission+0x24e/0x570 [ 1179.014366] ? rfkill_sync_work+0xa0/0xa0 [ 1179.016341] vfs_write+0x29a/0xa70 [ 1179.016856] ksys_write+0x1f6/0x260 [ 1179.017383] ? __ia32_sys_read+0xb0/0xb0 [ 1179.017988] do_syscall_64+0x33/0x40 [ 1179.018528] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1179.019263] RIP: 0033:0x7f1e08c5fb19 [ 1179.019797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1179.022414] RSP: 002b:00007f1e061d5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1179.023498] RAX: ffffffffffffffda RBX: 00007f1e08d72f60 RCX: 00007f1e08c5fb19 [ 1179.024513] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1179.025526] RBP: 00007f1e08cb9f6d R08: 0000000000000000 R09: 0000000000000000 [ 1179.026547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1179.027567] R13: 00007ffe5eb9d87f R14: 00007f1e061d5300 R15: 0000000000022000 07:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300"], 0x38}}, 0x0) 07:46:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300"], 0x38}}, 0x0) [ 1179.065445] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1179.291485] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.291981] print_req_error: 6 callbacks suppressed [ 1179.291992] blk_update_request: I/O error, dev sr0, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.293348] blk_update_request: I/O error, dev loop4, sector 2096896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.294188] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1179.300054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.300511] blk_update_request: I/O error, dev sr0, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.301393] blk_update_request: I/O error, dev loop4, sector 2096897 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.302233] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1179.304750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.305206] blk_update_request: I/O error, dev sr0, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.306122] blk_update_request: I/O error, dev loop4, sector 2096898 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.306983] Buffer I/O error on dev loop4, logical block 2096898, async page read [ 1179.308038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.308672] blk_update_request: I/O error, dev sr0, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.309574] blk_update_request: I/O error, dev loop4, sector 2096899 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.310444] Buffer I/O error on dev loop4, logical block 2096899, async page read [ 1179.311312] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.311754] blk_update_request: I/O error, dev sr0, sector 2096900 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.312662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.313101] blk_update_request: I/O error, dev sr0, sector 2096901 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1179.313996] Buffer I/O error on dev loop4, logical block 2096901, async page read [ 1179.314029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.315607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.315672] Buffer I/O error on dev loop4, logical block 2096902, async page read [ 1179.316071] Buffer I/O error on dev loop4, logical block 2096900, async page read [ 1179.317161] Buffer I/O error on dev loop4, logical block 2096903, async page read [ 1179.368629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.369127] Buffer I/O error on dev loop4, logical block 2096896, async page read [ 1179.370397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.370856] Buffer I/O error on dev loop4, logical block 2096897, async page read [ 1179.373917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.374465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.375022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.375618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.376176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1179.376799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer VM DIAGNOSIS: 07:46:13 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822d053c RDI=ffffffff879eb280 RBP=ffffffff879eb240 RSP=ffff88801829f178 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d69d R14=fffffbfff0f3d652 R15=dffffc0000000000 RIP=ffffffff822d0590 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f1e061d5700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5c42efe300 CR3=000000004391a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff8880108379b8 RBX=ffff8880105ba218 RCX=ffffffff8127f2a1 RDX=dffffc0000000000 RSI=ffff88800ec8ba50 RDI=ffff8880105ba248 RBP=ffff8880477330e0 RSP=ffff88804b04f9d0 R8 =0000000000000246 R9 =0000000000000003 R10=ffffed1009609f28 R11=0000000000000001 R12=ffff8880105ba228 R13=ffff888047733128 R14=ffff888047733130 R15=ffff88800ec8ba40 RIP=ffffffff816f4b07 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fa2da9e4700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89c68e33a4 CR3=000000004adb4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000