0ffffffffffffffffffff0000ffffffff46494c453120202020202020007ae770325132510000e770325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020007ae770325132510000e770325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20007ae770325132510000e7703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e2020202020202020202010007ae770325132510000e77032510300000000002e2e20202020202020202010007ae770325132510000e770325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020007ae770325132510000e770325104001a040000", 0x80, 0x15000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x19000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0x1d000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x25000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ebd974fde1f3a18a1f03a856ebd101092ce12f1b1cecd7d081b160eaec9099caba10328c5daa4a00d8a8457d950911534ad438ade8c93f636a02c8a5af76d3539f3e2c2dfdc11792e80d6f470f3fef9117f230c3aa2ce56aff4de3439ed5fd78399358f9a25f99dd833eabf089a62443473683ae74a240fbfce2ecc08eb51935dc78b8fadfd98eaa8f75a3ca71825b7a2097399851c25c048ad7f3e873015a64d553ca26f8"]) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') readlinkat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/143, 0x8f) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x200, 0x5, 0x0, 0x7}}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x103280, 0xc) 04:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) [ 788.462555] netlink: 'syz-executor.6': attribute type 16 has an invalid length. 04:01:34 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be, 0x0, @perf_bp, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {0x0}], 0x2, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) unshare(0x48020200) [ 788.491086] device lo entered promiscuous mode [ 788.520535] EXT4-fs (loop5): re-mounted. Opts: [ 788.534647] device lo left promiscuous mode 04:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:34 executing program 3: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xaa) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xf6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) openat(r2, 0x0, 0x480402, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000000c0)) [ 788.670033] netlink: 'syz-executor.6': attribute type 16 has an invalid length. 04:01:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r1, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/236) [ 788.695957] device lo entered promiscuous mode [ 788.725824] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 0 (only 16 groups) 04:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:34 executing program 4: sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000001b40)=[{&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/104, 0x68}, {&(0x7f0000001700)=""/188, 0xbc}, {&(0x7f00000017c0)=""/190, 0xbe}, {&(0x7f0000001880)=""/119, 0x77}, {&(0x7f0000001900)=""/181, 0xb5}, {&(0x7f00000019c0)=""/191, 0xbf}, {&(0x7f0000001a80)=""/186, 0xba}, {&(0x7f0000000a00)=""/18, 0x12}], 0x9, &(0x7f0000001c00)=""/193, 0xc1}, 0x1ff}, {{&(0x7f0000001d00)=@x25, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/255, 0xff}], 0x1}, 0x33fe}, {{&(0x7f0000003f40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000004400)=[{&(0x7f0000003fc0)=""/28, 0x1c}, {&(0x7f0000004000)=""/197, 0xc5}, {&(0x7f0000004100)=""/81, 0x51}, {&(0x7f0000004180)=""/253, 0xfd}, {&(0x7f0000004280)=""/157, 0x9d}, {&(0x7f0000004340)=""/161, 0xa1}], 0x6, &(0x7f0000004480)=""/154, 0x9a}, 0x4}, {{&(0x7f0000004540)=@tipc=@id, 0x80, &(0x7f0000004600)=[{&(0x7f00000045c0)=""/7, 0x7}], 0x1, &(0x7f0000004640)=""/143, 0x8f}, 0x9}, {{&(0x7f0000004700)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004780)=""/59, 0x3b}], 0x1, &(0x7f0000004800)=""/139, 0x8b}, 0x3}, {{&(0x7f00000048c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004940)=""/29, 0x1d}, {&(0x7f0000004980)=""/79, 0x4f}, {&(0x7f0000004a00)=""/63, 0x3f}, {&(0x7f0000004a40)=""/46, 0x2e}, {&(0x7f0000004a80)=""/240, 0xf0}, {&(0x7f0000004b80)=""/175, 0xaf}, {&(0x7f0000004c40)=""/38, 0x26}, {&(0x7f0000004c80)=""/29, 0x1d}], 0x8, &(0x7f0000004d40)=""/214, 0xd6}, 0x8000}, {{&(0x7f0000004e40)=@tipc, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004ec0)=""/42, 0x2a}], 0x1, &(0x7f0000004f40)=""/185, 0xb9}, 0x100}, {{&(0x7f0000005000)=@hci, 0x80, &(0x7f00000052c0)=[{&(0x7f0000005080)=""/155, 0x9b}, {&(0x7f0000005140)=""/84, 0x54}, {&(0x7f00000051c0)=""/176, 0xb0}, {&(0x7f0000005280)=""/5, 0x5}], 0x4, &(0x7f0000005300)=""/218, 0xda}, 0xffffff96}], 0x8, 0x3, &(0x7f0000005600)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="590f32c186c9e952d64e3a8c3ca4fb470770765b64dc75418d7687e9596249c61b4981ea5fa78828d27a9dc54ca2f60b4b716041826924a79de25c39ac4077", 0x3f}, {&(0x7f0000000340)="0d7862b53ebdc9d7d22624acad7d391661e0026b8b58e99818ddff20dfd216fdd0f321460f207a889ab5cb949bd431f70f9a850e4d054d0e0b7de990ef67f07f74c436f6212834cad24aa9c790c99ca298f5b0bcb66fc0a58083dd4e5d925289b8ba391ed4d526cac5856eaffde8ebaf67d1f970080c205e270c0b04db897e5e14db1053e3251b8c64bfe028031912c20406ae3d753a", 0x96}, {&(0x7f0000000400)="5d1002f254eba26c9ae48c73129ebbab43c4ab63", 0x14}, {&(0x7f0000000440)="9efa7fede128b3013ed9e22120cba7ceb9f91e253a0b26c297967c", 0x1b}, {&(0x7f00000004c0)="de745b97282b262e50e6d4dcede026b2e4e3b6e77bfb982c1f9bdbf51edbe2039e7fd305bba399649c8d54ea24b4b08f7dc8294dfe566a670c78f2b11ea7a5b3af7bc36b4ef7f1efa58f924bb23400ecf8e7aa9ec3f75a593af8521a80848e44da3ca2332187f253f001e4929623eb1b3b2b1669e146bc7f73aafbc43ee8996f8c16efd299c6a10be546618c7611603a6ec47493a6def5f6ca4f82acdf6069b15fb1c7f3b6b2d250f6ad24d5682a652a81a040403210e968caaaea847bf0731fe869e3b9f67e8e7c31c447e8310e67bb20f057244bebf05e0fddb347436cd2c5", 0xe0}, {&(0x7f00000005c0)="23f7ed3f0cdca7dce64d50307db5a778c77a55d94b50ce9b587663517d9be36c043429dc3433bce345b5527f6d854b12d5742cb4f8493f9d4d5ece1302a03eb51aa39c4c327312818538bca639fb37d6d890e454f1077b9e022823d72ce2dcb82b", 0x61}, {&(0x7f0000000640)="7367421c36f743e7ffc3e23d4a353749c73ddf1bcfefae7c075d6f420e7a3939e7d0c2e1ac7dca4aaa8d5b2601daaab0c4cd8ec731358c2e368d9b6d98d205ee5a62cfe3a704b6683306998f5287d7846ae2b76c8639248e9951cfa577ff3236df8ee32c82cdbe337faf30a4e83ac6d24cd99062ef6a03fe9722913bc54f7f163677d627d3156a58649e5c2d19af17a6c247030ff0afc1d7", 0x98}], 0x7, &(0x7f0000000780)}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="038f609196a1fe254e4dab9b41ccc265d7a12d4a964a381c2d1c7871378262faa978dba65d51edcfdbafbf7d57174ff7c1987bc36db86b922f8951c112e967e4b85d9cae505023ffa50dd99aa617aeeaee1f5545309b401354993256c6710c08f24554812348ee7efb9bd6d751f4c6bf36fed899bd2423c5731f7a65755c669aad12bc09b0156060eb1357bd0913655983abb8ff875fcde9296160e2a5740e4c512178ebe6e51bacfeb7e96bee3d6cfa", 0xb0}, {&(0x7f0000000880)="024faa6a18afca05dd4978c729fa75021fba39108780fb6d696f598b71d7e0fead065b030dbb5263c6702c19c34ebe23f812551f3ac338fa1c0c0bff89e1729a66bcafdae47a8e2ec6e050228b09a89086010ffc45c8d34b8ce7d6f82500863b3ff1ff535ed71641624d131db812fb769574fc75babd6d5cab8220eb2ca494fd57", 0x81}, {&(0x7f0000001540)="d538be68b6fce69480bc0880add1d4748c8387ad9dad024776c16ba5e01b2215b8f00730d187e6248a92ca06a2956119f5bbcc60acac9fbd5dd78d9dcbe475c68a6268a00a012d28fa7b1a438deb3d92a81186f4ee922a55afd94b601ad7c318019fa12dfb595646d96c0430f0bc2e98c8", 0x71}, {&(0x7f00000009c0)="f1c6fa6515c7f024a10fbd12fe89b7e2a32687b1d33cef8a784537a92efaec143a15934004081544f1cd36416ef6c20ae8a2a9415c34b98d7b", 0x39}, {&(0x7f00000012c0)="9168e2541a27f4434f26d723a9598a79438ec82afa71a7361d7c94863c4c28b8d982b0911078109cdcce7342e7b77560ab1056", 0x33}], 0x5, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @empty, @rand_addr=0x64010100}}}], 0x20}}, {{&(0x7f0000000b00)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000b40)="b69e64bb0543762ec9aa8fa84d146e4a4abe1db687082c0809fe247f038e7cfe7b282060f74974ebe0987393984cf832ac2a98576303cc6712c2ef34103265d718cda2a9db84cbf9306ea9d8d345688f8fa007b34b0622fc3b81194864059ba2719e4a4bfb2cbf159dedce7d4612343e982f0e9a67d5b234fa1cd244a13a21e5f8215024e993f7deb14657d0c132624707d8f90f0d0c75fab06bfac2be0e783cd412084134f8c149618cfc41ed625256ff63d203585a1c7148eafd3b0d9a5f8f3397ed46e7d21588489d69fd1c4d74528a977b2ded17c41ef4072e972d814e80", 0xe0}, {&(0x7f0000000c40)="02c507ecb814da45", 0x8}, {&(0x7f0000000c80)="c9c4f9b37f6d4308ca01d53ea0ee8a63bf9cc00b8ff539b5dac76a49873c91ac83e82a2f658db57b4695e903bb17294882d7baa44a8f8d6706da0e6401313b56f2426ea842e3aeb56d6dfe36b8ad56d046153fb8292138d69e3224c19dd3af9e612cb869f02eb2831451fa406beea1a690f57665992db3d14262ed3bd5781f7a46fdef85bc035ef7a255899962893ab46fdfc0b91a3b3efbd20acbcb8da87d60a3d8e1deb5d0e0f213a4b086bbe35349e000f40a2070d178b25515d381b2b2c53f4ac3ba3792d4ffff64dfc2a6f2fdbac3ff039f2030dae6f8e756bdb0889d753a699061c0e8c10116a374862f120ea34263", 0xf2}, {&(0x7f0000000d80)="2a063978dff6b8203036ceaf49da6a43e16ec938dd7442730e5a302cba8bf4189534342d6c1093509f77424662c347bc6331283f530ca1f2b5367ec0befdbd6f6a95cbbf38632045290dec536b7a63e5a7c347f481525f6a929a1daa31b38f992935c4a5c5f240c1648387a214373a1e8a7bfdf03d4f48a47e51b97f18ca1c25f57229b2defc8ae9b8020ff1dbb4941c2036e0da4b6112bad9069b79c12610e5b34cd3e383eefd2cfbd532e71b0959107e3e0a63e5ccba009ddbe237bba584879154aceb4413595f8f28bcd86fa0fcbd6b76f475eed72e1be6b84e67b0e80e0632bf93149c52ad40ed0531f8", 0xec}, {&(0x7f0000001e00)="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", 0x1000}, {&(0x7f0000000e80)="ef753a7c53f16046edd4f427a6b8b7d754fe87e39ced41a41b2675874b5b72e96dd722f5b288601b23be5a39ff18e10397497a187084609cb5ff55392dbf1e095c41295095dc6716c7c638c187c40838361965fa759e907a07ec694e15b140ef000ad4c649e82c2871c128fbc54805db9d60b431b95f393d4704c9acb487cdbdedb0f2581d5934baea2bc8c306477d2096f7704338ed75760c2eb6f82d", 0x9d}, {&(0x7f0000000f40)="1fed662a7221032cdf101e469b6e077bec09ac43a57fb3386455209646fd893e6b192ffeafdc229974ee35a9f70e90ca3fc64db47fdf664544aa93ab0934078dca597a74cf8bbb7324f94c5c77200fa9bf0c454f3e555b1469815f61f9817d41f61242b9659e9e1fdf093e9e7b07a1340a08c0323c94c3bfb8de1289a8ea984cee40f3e43deed7b91b66ca97b85050ba1ab43d3bdd744a702e8fda37ac6d1b14778fd208148edc4f3c656ec781c9fa00389855b65ef46b718799a866251a493bcdbd27711c", 0xc5}, {&(0x7f0000001040)="34f1a2affd72e52e729fc2b7e031ece0b3e8a48bf1c0244438bbf4a8daf099fca1fe56a93dc2b02691ee295769e3231b9ab1ecca5f8ab09573eb6b58d0609c9078b28a3f21b2deed38fc7b055d15aaba4d3e40a6312df8f1a488ebb9fe6ce4eedc0db9b51ed20c11816c12d4a5873ce3c8266e803331299f54e16d58ac7a4f26d8", 0x81}, {&(0x7f0000001100)="5ac0f4b41744b92be4ba0beeacf0e98df9cf3c9d7670a8e601", 0x19}], 0x9, &(0x7f0000001200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3b03}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x78}}, {{&(0x7f0000001280)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001500)=[{&(0x7f0000002e00)="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", 0x1000}], 0x1}}], 0x4, 0x48004) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000c, 0x13, r1, 0xd1c7a000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000480)=0x5) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7f, 0x5, 0x1f, 0x60, 0x0, 0xdcfc, 0xc20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x4, @perf_config_ext={0x1, 0x5}, 0x4, 0x0, 0x222a, 0x9, 0x4000000000000, 0x8000, 0x7c8, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x4, r4, 0x2) openat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', 0x424500, 0x40) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000005640)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x824) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000200)={{r1}, {@val, @actul_num={@void, 0x5, 0x65}}}) read(r5, &(0x7f0000000080)=""/65, 0x41) 04:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:34 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001e00)={{r3}, "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"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r3, &(0x7f0000001340)='./file1\x00', 0x200, 0x198) copy_file_range(r5, &(0x7f00000001c0), r4, &(0x7f0000000280)=0x10000, 0x8, 0x0) fstatfs(r5, &(0x7f00000002c0)=""/176) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYBLOB="d2415f30a109a18bb52400"]) copy_file_range(0xffffffffffffffff, &(0x7f0000000240)=0x2, r2, &(0x7f0000000380)=0x1000, 0x18, 0x0) signalfd4(r6, &(0x7f0000000000)={[0x9d9]}, 0x8, 0x80000) write$binfmt_elf64(r6, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYRESOCT=r6, @ANYBLOB="8a7b520c27c73b73e2", @ANYRESHEX=r1], 0xfdef) openat(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x40200, 0x22) fallocate(r6, 0x3, 0x0, 0x8000) 04:01:34 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) msgget$private(0x0, 0x8c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200000000fcdbdf25060000000a00180003854b0303030303000005005300010000000a0018000303030303030000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES16, @ANYBLOB="010000000000000000007e00000008000300", @ANYRES64, @ANYRESOCT=r2, @ANYRES16, @ANYRESHEX=r0], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001c40), 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0xfffe, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000680)=""/258, 0x102, 0x10122, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x0, 0x8000000d0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 04:01:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:35 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) inotify_add_watch(r1, &(0x7f0000000480)='./file0\x00', 0x100) r2 = inotify_init1(0x0) r3 = fcntl$dupfd(r2, 0x0, r2) inotify_add_watch(r3, &(0x7f0000000480)='./file0\x00', 0x100) socket$inet6(0xa, 0x1, 0xffff) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) r5 = clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r6, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r7 = dup2(r4, r1) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x2a}}, './file0\x00'}) finit_module(r4, 0x0, 0x0) r8 = syz_open_dev$vcsu(&(0x7f0000000140), 0xffffffff, 0x2200) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f00000001c0)={r5, 0x0, 0x8}) 04:01:35 executing program 5: r0 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)="fb730d7cbad5e37a2d4c42678a7c4a95b0f05e552eb64f35c51d664afed08223b1f622fcbf5a1c3a2205be3be9d12392a2c3aeab69926d8dbe5e342cf499bebf21a156337523430531e57b3430c4dc2492e59ec6752186d4e2d7f43a1eda7ed7e20f5d3fa432d3f59af4db0cce45c7696b7c369f2f0ec247acdae8959831415eab1e034506a4c3e984b0153fbdea175babf53adb3a63e70022cd58a89e8fba4eeae9cd87c49a8c5c71aee6307cc5b42e05cc1de99e794d9e38f60d170e54ab6c6d3c8c8321149da5507a8a0c0787d7c8ac8141dda17f39934193a840725ea7e2452d14524560ad857ed3c84a6853", 0xee) mount$9p_unix(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1f3000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/157, 0x9d, 0x1000) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, &(0x7f0000000000)=""/157, 0x9d, 0x1000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_uid={'access', 0x3d, 0xee01}}]}}) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x22, &(0x7f0000000680)={0x0, 0xae5f, 0x0, 0x0, 0x1b2}, &(0x7f00000a0000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000180), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000d, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x0, 0x0, 0x0, 0x20020, &(0x7f00000004c0)={[{@nojournal_checksum}]}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0/../file0\x00'}) 04:01:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:35 executing program 4: r0 = getpgrp(0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0xb, 0x4, @tid=r1}, &(0x7f0000000040)) pidfd_open(r1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd, 0x1, @tid=r0}) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x406, r2) fcntl$setpipe(r2, 0x407, 0xfffffffffffffffc) [ 789.511908] audit: type=1400 audit(1678852895.435:32): avc: denied { module_load } for pid=7434 comm="syz-executor.2" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=129 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 789.517477] Module has invalid ELF structures 04:01:51 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x68, 0x6, 0x1f, 0xff, 0x0, 0x881, 0x5021, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000100), 0x2}, 0x18180, 0xec, 0x8, 0x5, 0x4, 0xf1, 0xfffd, 0x0, 0x6, 0x0, 0x101}, 0xffffffffffffffff, 0x5, r0, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, r1, 0xffffffffffffff80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=ANY=[@ANYBLOB="280000001d00210c000000000000000004"], 0x28}}, 0x0) 04:01:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x202, 0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) fchdir(r1) fallocate(0xffffffffffffffff, 0x4, 0x2, 0x7d0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x7ff}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 04:01:51 executing program 3: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000100)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001e00)={{r3}, "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"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x157) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(r3, &(0x7f0000001340)='./file1\x00', 0x200, 0x198) copy_file_range(r5, &(0x7f00000001c0), r4, &(0x7f0000000280)=0x10000, 0x8, 0x0) fstatfs(r5, &(0x7f00000002c0)=""/176) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000680)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYBLOB="d2415f30a109a18bb52400"]) copy_file_range(0xffffffffffffffff, &(0x7f0000000240)=0x2, r2, &(0x7f0000000380)=0x1000, 0x18, 0x0) signalfd4(r6, &(0x7f0000000000)={[0x9d9]}, 0x8, 0x80000) write$binfmt_elf64(r6, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYRESOCT=r6, @ANYBLOB="8a7b520c27c73b73e2", @ANYRESHEX=r1], 0xfdef) openat(0xffffffffffffffff, &(0x7f0000000200)='./file2\x00', 0x40200, 0x22) fallocate(r6, 0x3, 0x0, 0x8000) [ 805.168879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 805.189941] audit: type=1400 audit(1678852911.112:33): avc: denied { watch_reads } for pid=7471 comm="syz-executor.6" path="/syzkaller-testdir418702315/syzkaller.79cndX/86/file0" dev="sda" ino=16048 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 04:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:51 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x2000003) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x82000003) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xa4000004) inotify_rm_watch(0xffffffffffffffff, r5) inotify_rm_watch(0xffffffffffffffff, r5) inotify_rm_watch(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, r5) inotify_rm_watch(0xffffffffffffffff, r5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_generic(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000140)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES64=r3, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r8 = inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x810) inotify_rm_watch(r7, r8) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 04:01:51 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x8701, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@private0}, 0x14) r1 = openat(0xffffffffffffff9c, 0x0, 0x4406e2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f00000003c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x3, 0x0, 0x3, 0x2, 0x1}, 0x7) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, 0x10, 0x1, 0xfffffffd, 0x0, {}, [@generic="7a21446ca7cb03428ccbeb6e09bd0c99b2d2b733068d5a485eac7cca0714", @nested={0x4}]}, 0x38}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d85, 0xa33e, 0x0, &(0x7f0000000480)={[0xffff]}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) 04:01:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000200)={0x10c, 0x3b, 0x200, 0x70bd2d, 0x25dfdbfd, {0xb}, [@nested={0xf8, 0x79, 0x0, 0x1, [@generic="c6755edf381417bb4502f2f05ef0223cf8a3cc04d0c4e0c3add1ca8ad7ce86251276d7abf9c7d79f1899348df9a9ca031e2f7ad7e983992f4379e0ca3e26abedeef0d04a3bcfa02dfe100ad69e97ab5f4a6e45ea55a4d3", @typed={0x8, 0x77, 0x0, 0x0, @pid=r2}, @generic="f08ce5354fcdf02662716ae3df7ab3940a1922e1872628271c2b867257a51edfe96af41655bef57f8b569083cc298d206cb1f98e4f7a72881798c6abc11016f10d32c5ec50170ea423dc072ed3947135df74acf7cfcc17e860944248773de4c4f3475dc6600be4da610efb33c468b50929057ee97ea24a70ce666414b2a87fd52f783787cdd2881a7b7316cf8e", @typed={0x8, 0x64, 0x0, 0x0, @uid=0xffffffffffffffff}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0xc0}, 0x8040) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x150) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x1, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x15, 0x4) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r5 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180)) openat$sr(0xffffffffffffff9c, &(0x7f0000001700), 0x8000, 0x0) syz_mount_image$nfs(&(0x7f0000001740), &(0x7f0000001780)='./file0\x00', 0x1, 0x4, &(0x7f0000001b00)=[{&(0x7f00000017c0)="9f7a157f1f66318d4aa6a43cfb1c643883ec95844ba789814b893dd11b21755329ae88f895cc3d32d6130c6a8626a81a0cda43b5ed1cd28890b4fb804a99a89fd740a8153a88e574d220c0c557cdac6053e0a69b08db39574aa19064b3cd0de5946f99049e27fd5a2158a06ee7adbe66dedcbfedd2f2e63584122a12ad1b85ec17f10c861911765bfb8b6b2cc26a08fbeef15dd55b169334db5d6a95b1b8c81981996909b29b76ee0651eeb7f9ec4a8ea6c477c738085316de8fc8931832ff7be08ebcb14818a2c1bd8203037ae76f29644021014df6618d4925b120", 0xdc, 0x9}, {&(0x7f00000018c0)="042038b86e8cc0512ada1204dd5266613666927af76df6472df86c6ff6b09016035e2646707fce4006f458ac41d53b031dbd541e80d3a71e3275540cbb6028f00583d1d15500004a", 0x48, 0x800}, {&(0x7f0000001940)="cc2d599c5017e5d3194aab3ca1f40fec918782ce0d53efb8e4c9de61ba9be128b1c6cd9124b18a1804aff892343699df97f5b272e442bb740ca9f22e9e53d513b01fc6a606eaa39fb22036697e55cecc911e32d708a90dc62befed03440a13035abf3868420ad205f7de97c08b3947846773a4ac84aa82413dfae4cfae91c35dc6a8fc9d8985902f0eb9ee308ca821fbb9dfc79f08281c2d808f014aa03dbdda34b992d133f2b97c6ec615664eadbf354ef6e7601f25fb50f73351c80387bf00c43bf584ae0ad650695ca092dd00011ec36134978dce32160eaa", 0xda, 0x1}, {&(0x7f0000001a40)="c8a4434ff595ee0fdfa701022ed57c4a4d8a6a75d6ea925af4eda9d45fb4440089d096cde274c93b832ef01603694866f4fe2f9208141cf48bdf8c559323c64dc6b73e243caceb3aa2a57ddcd01b008ee3531837c8ee863468e87c7ecabbe4872077fdfc2113d79582fc1bdd264c6bdfed519db9135429c65b3b4343c10bbbe963a7c38c04295860d38ec443ed1f4e8b40340b8802d02ad2a33eeba031d55060a1caef4d140e36", 0xa7, 0x8}], 0x800400, &(0x7f0000001b80)={[{'/dev/sr0\x00'}, {':'}, {'/dev/zero\x00'}, {'&'}, {'\x00'}, {'-\xd6'}, {'%@${'}], [{@obj_user={'obj_user', 0x3d, '/dev/zero\x00'}}]}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) sendmsg$nl_generic(r8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r8, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000780)={r9, 0xa9, 0x5, 0x1}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f00000006c0)={{r3}, r4, 0x2, @inherit={0x88, &(0x7f0000000600)={0x1, 0x8, 0x7ff, 0x3f, {0x34, 0x10000, 0x200, 0xffffffffffffffff, 0x1}, [0x4, 0x5, 0x7fff, 0x3ff, 0x9, 0xffffffffffffffea, 0x8, 0x8001]}}, @devid=r9}) 04:01:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) syz_io_uring_setup(0x1da5, &(0x7f0000001680)={0x0, 0x21f1, 0x4, 0x0, 0x2db, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x6, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r1) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8943, &(0x7f0000000140)={'lo\x00'}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000001c0)={0x0, 0xffffffffffff643d, 0xd0d}) syz_io_uring_submit(r1, r3, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x3}, 0x800) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r8, 0x7, &(0x7f00000000c0)={0x2, 0x0, 0x1, 0xa5}) fstat(r6, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="2e2f74f76ca5d961"]) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f00000005c0)={r7, "448a0356f2fa4ebfc865460e1965e15e"}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xdc1201, 0x74) 04:01:51 executing program 6: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0xffffffe1, {{0xa, 0x4e22, 0x80, @local, 0x6}}, {{0xa, 0x4e20, 0x3ec, @mcast2, 0x5}}}, 0x108) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000240)=0x23) 04:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) [ 805.360866] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 04:01:51 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000040)={0x8, 0x9, 0x5, 0x1, 0x830, 0x1}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7aba054c9c4ad0a, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000140), &(0x7f0000000180)) unshare(0x48020200) 04:01:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x82) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xe7f}, 0xffffffffffffffff, 0x0, r0, 0x0) 04:01:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:01:51 executing program 6: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "49dd952044bba627f6105046b8cf2691"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b15cd9ac09a46515089141bbf9fe9ff67bed63946f139a94f6c449843184f55b"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x1) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}}, 0x0) 04:01:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x1be) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r3, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r1, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r5, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x800) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000200)=0xfd0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}}) 04:01:51 executing program 4: pipe(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x100) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xc2c3569b75b873a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000100)}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_open_dev$evdev(0x0, 0x10001, 0x4000) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xfffffffffffe0306}}}, 0x14) sendmmsg$sock(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x324, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x80049363, &(0x7f00000000c0)) [ 805.602323] EXT4-fs warning (device sda): ext4_group_extend:1800: can't shrink FS - resize aborted [ 805.640351] EXT4-fs warning (device sda): ext4_group_extend:1800: can't shrink FS - resize aborted 04:02:04 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8000000000000, 0x2, &(0x7f0000000140)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000000180)="8800170000000000001700080000000008007809140b2a3a0802aa3c4328b4bbf1", 0x21, 0xb800}], 0x0, &(0x7f0000000480)) chdir(&(0x7f0000000000)='./file0\x00') 04:02:04 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELOBJ={0x58, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xf}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x8040000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440100001900010000000000000000000a0000002d01008014000000ff02000000000000000000000000000108000000", @ANYRES32, @ANYBLOB="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"], 0x144}}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r3, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_generic(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r7, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004d00), 0x2f, 0x20040000) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0) poll(&(0x7f00000003c0)=[{}, {r3, 0x1}, {r4}, {r5, 0x1020}, {r0}, {r8, 0x84}], 0x6, 0x2) 04:02:04 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r0, 0x0, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfe000000}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x74}, 0x1, 0x0, 0x0, 0x40800}, 0x20044041) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001340)=ANY=[@ANYBLOB="0100410e0000000000000000", @ANYRES32=0xffffffffffffffff, @ANYRESOCT=r0]) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000001140)=0xa2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001380)=ANY=[@ANYBLOB="010000000100000018000001570246ca8e7d20495d4a4986d7a29c6aa61ce398c5e55c3b665f34e9ed23ddf9c0a6f2f9d413680858823a2d31a6a97a0e8d7e67b967c4b768c2101bcdf13c985488766a82d822f45c986a3f44a1097578eff32cf4ff7e4ce6839116bdbd53d54354cef927bb621a9366bbf1280589d9e18ce07c9ac5c281f3aeed623283d3ec9038ae05b4ae909c2c8621f201dca32c28caa9936bd0a6d6f4faceb19902410dcf36d8c45e15c3da415c9c3812d1631283b3febd20aaf2bb7261ecdb183df83c366849403363dfb622ba6050cacaeb5b762a9c9331a50121282728fddef7ca356a4afe28bcf752", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001240), 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, r3, 0x8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/fib_trie\x00') preadv(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/213, 0xd5}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f00000001c0)=""/100, 0x64}], 0x3, 0xfc, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private0}, 0x1c) dup2(0xffffffffffffffff, r2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001200)) creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(r2, &(0x7f0000001180)={0xa, 0x4e21, 0x575e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) 04:02:04 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000002680)=[{&(0x7f00000000c0)="f4bf0e270f3993e8eb603eda9db7a71f62dba113e8915a04fb811458ba234f921b098cd20dc54b6e6c1418610a457f70815ee9467c95c5f9d276c374b1732bdb25eeb65edba0df44619f0945cf4e52da0082bb85a5fafbe5b8973d2895febdff7aedfea11cfb07bccaa555343b10bb968d901af92597f3476096e4bd78c61761178916e66bbd4f97714c5f7ef99c607dcc092acbb1dc609290bfdcc0daf80e77e99b7e62b16cc20f7d69968d308bd952331e022d1af8da60ee7e68ac10a76d4bbd2500ba396607634c579946ab6334b2c0509c7b4264", 0xd6}, {&(0x7f00000001c0)="fa4d4f858dd90864267169b8b6e5ef825c0db64112ccc56c39cde7cb5d5a02e21ff937e80b12ad8a49550385bd23db1eb8b98c5400d67b7b65005058d804fcf7615a321a16b7e78b4399d7fa9f201e09634c6f23570dac10deb5583f9d3149bcbf6f1a39d35751bf1f7d834c5586c36ffa2ad5cce1a3ba27ca8ef5c50a53c03b91af60f125622ffbbe8240353effaf46f1d41b503bee50b9e0fb731519c0a25a6d3e6dd097905645d6", 0xa9}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="666828b1641caca789e39af8dbfa8e80409ecaf83774c570f5326c6db116aa4759bf99be60474d22a46fb2f6016b8853d0e6af07593b043f9bda5702aa04662a523c63e8a9e6d90df026a3070136c364157ca5b9f8cf5b599d519ac277f17fa83fdf8425047eaafabc7e1944460ecf7479fe1e86501f2c9d76942600c51e3162b9823b3545ea9a4a8905614b757973831750f2068e996f4827fa0a6cc801294656fab716b270106c84b126409b", 0xad}, {&(0x7f0000001340)="898ac7bb80aa26016ac424add0a783014a10a1b47ef0efddfdc9f73997e39381aa2a0e7541985a94ce25488c54472172c9c2fcf2b27e845b93512fc63524466dbc9845b42f9da18b1b45549bcd358f70e894704975551f1c99dd5a364a37fc748658a2bf037698a6e1f890c1868ee60829c08c3a81303f8b4f1389d9d648f910e1", 0x81}, {&(0x7f0000001400)="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", 0xff}, {&(0x7f0000001500)="eb54ce3593b93952e7f4eaf6fcc8e5c51f9fc9f64f89e01e91726544e6127b9cc26a480971dd13cede1316aad42f98091a4aaa25211d464cba71b9e975f4c3a6b461efcdb47cb6575b42e31a6d8993a17636b1a5add3c233861d869d6beb4e9da1f172f3b05428607339b7fd467a1fa794597273ee0cf8fb45ce145b269749a34a3def7fa09305e4d8d0976e5b4d5b16f15ab1cfd73364fe5d3ddb23a4ff9f3e2b7fb68f7b99fd94a88ddb97a82b8be4b4d5fdb2d14ac592ce", 0xb9}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="0494f8948fe1e3bd311044a3f10a5e3e9d68fb1e3568ca35445be020751320142ade3ed49c7d47ddfc011f0b4143cc3aed8130dfd3f41b5a756ac48827525a3f67aff0c07240cb807fbe2d265ba6e5d3dc127a8362f64b63e38a5bc321bfc9b96ad03279f8cf02aeb670841310e6d031ed2bf50f8f2febcba248bb5b8f5a40b3cff96950b733b3948f651f6b0c0be34e99ccd9abfc83a20dca9839791da9dab94cab4d4bcfe27a6bd3", 0xa9}], 0x9, &(0x7f0000002740)=[{0x80, 0x103, 0x7fff, "bb66ab62ffeebd28e64478e15dc4f3a060878d03df6789606b4c7db51470ed65c3c81c13f2fed3d795384d997d162c9110c64ab2d5f18f4f008e4e245ffdb7e2f989d79a29e61f0ce54357d502d1a5de2175356e0e6fc002dbf314b5201a358001588118344a6f9ce4f5"}, {0xe0, 0x10c, 0x8000, "36cb9df632b1c3cc43c9ef98dea0cd0072281e7ca28a536975ba0fea61c06f4624185aa9569b1b7811ea013481fdc2976619c60cb9442bfc36e4a99ffa942d97338f00d7e34ec684a3b7ef406f8750e65d18b9993924a1e16ba59b285290b9e0547f7b99dad7b2a2ec2f2800df2c3e53c985cadbd8843fb942a3524e61120bc56a582b265ecd31dda96abb0b6a7d0e048dbc5859cf2eeff543880499717213cf9336891978627ba13a29ea48e1032d0c4ca3ef3cb2cbeb0436c4a2ada7b29458b84cdd5526408a448547b72dfc55"}], 0x160}, 0x4000084) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/17, 0x11, 0x10000) 04:02:04 executing program 1: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) renameat(r4, &(0x7f00000000c0)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') write$binfmt_elf32(r3, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x4, 0x81, 0x9, 0xff, 0x2, 0x3, 0x8, 0x1bd, 0x38, 0x2e4, 0x4, 0x5df, 0x20, 0x1, 0x0, 0x100, 0x9}, [{0x2, 0x9, 0x5, 0x7, 0xfffffc01, 0x400, 0x200, 0x9}], "2aae6b628273e2e2d90bb712ba426630bb1da27b435248a998da2808757ddd8faaf0f92e498e5099f8e559c6419e2edee68c57653313da28ceb60fc32d902ac4a54cd494d2d5b81f11e26304d0ab23ca1bd99546e589b6a1fe486e836c3a654f7e6aabde68ef3cb0e18bc0a2444d37b5709076cb13bfd91cd4e68d227d0c99b8905f4b70", ['\x00', '\x00']}, 0x2dc) close(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/bus/input/devices\x00', 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 04:02:04 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000240), &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x10000000) syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r5, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x50a4, 0x0, 0x0, 0x1a7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000140), 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x4007, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="ff33ad46aaa09104729f3e65cc61c454dd10e80ee5cacfe8c37ab071cbf5cb251588ec3237705c8c84a09ee3cc427ece0c6c828ee04423c99c7efd80f95b79ce13750fbb3d65c116ab74b7d312984f90c0fcd10261b8e552b01b7183acbbe57a41011b0abf326f298bd24359245194c91a1a1541982a128eb286c639a8d8cf50f57702911ae9ac1c90243e042029db3fd6c8e96961760f1075ba39d8ff76485999b3daec4902a33143391dafb32aecbfc3f707730f03a9746aac9bffbba8059fb866c228fe3cd89f6873702a030d861db15090592dc5bddea73a81b2418a587955998eea4b63ec5521fcbb0562", 0xed}], 0x1, 0x7, 0x0, {0x0, r6}}, 0x7f) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) io_submit(0x0, 0x1, &(0x7f00000006c0)=[0x0]) io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080)={0x77359400}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 04:02:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 04:02:04 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/238, 0xee}], 0x9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 818.480083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7537 comm=syz-executor.6 [ 818.503132] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.6'. 04:02:04 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x8, 0x1002, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') syz_open_dev$hiddev(&(0x7f0000000380), 0x20000000009, 0x200200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000340)={'lo\x00'}) dup2(0xffffffffffffffff, r0) mprotect(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x30b840, 0x0) preadv(r1, &(0x7f0000000540)=[{&(0x7f00000011c0)=""/117, 0x75}, {&(0x7f0000000400)=""/119, 0x77}, {&(0x7f0000000480)=""/191, 0xbf}], 0x3, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = fsmount(r0, 0x0, 0x88) sendmmsg$inet6(r2, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/1, 0x1}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/149, 0x95}, {&(0x7f00000002c0)=""/37, 0x25}], 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) 04:02:04 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/238, 0xee}], 0x9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 818.593130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=7537 comm=syz-executor.6 [ 818.593183] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.6'. 04:02:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) 04:02:04 executing program 1: r0 = openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x6, 0x3, 0x7fffffff}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x314, 0x1b, 0x100, 0x70bd25, 0x25dfdbff, {0x20}, [@generic="53cf82072fc1df4ee3787f97528bcb9c82ea4aa789f9504143a459fb93b4540284afc56909c7bf38dea4baea379655321dbc45afdc8207ddd688c4b11d40382d4428335f47992138831812c7a883607d7c2bac427b09b99c4209768690867e03b1ba34c086bec463c1da505eef37c35f14b6c6d1de26b022494d61928970552f7bdb21aaa061eb579e44251e19508191c1abcd", @nested={0x97, 0x5e, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xe, 0x7b, 0x0, 0x0, @str='/dev/null\x00'}, @generic="f54b46ea2679adf7ccc2902ffd60212665671e42f278391f9bb90f3efc25fb63e3d191867ca89ed5b951961730185e5863084500de53290af4f0ea6811ff5ba1993af6a5852476bb0c5e7d668e9955a7b81e2331eaff6dca412b1c93708087138c0a5d9161415891792ce309645fa72a79c96344d25f18c6f14b9e"]}, @generic="94978ffe0d13ba70ec542979c8f3b767a59013c3b4218fadf72988d9e4d1c4096896af3d9db04b167a27e84dd5a23cd8dceee293387b7caee007f8adfb4255650f778270980bbdf0947fe837ab01ab8f80484caf30b2da10e6474762a4c94fcd84b20305a48ea6916a16805e53d25451189a6fcd79be", @nested={0x4, 0x27}, @nested={0x8c, 0x8a, 0x0, 0x1, [@typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@local}, @typed={0x4f, 0x10, 0x0, 0x0, @binary="01febde0ea20f0173d7918760f32499d1e28d502529568dcc20ee6aeef1a040b95b4932fb649b4cc320f060a655f414aa29a81fb732751e606048f5226a7477eedcbad4cd16ea21a6b048c"}, @typed={0x8, 0x26, 0x0, 0x0, @uid}, @typed={0x8, 0x1b, 0x0, 0x0, @fd=r1}, @typed={0x14, 0x76, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @typed={0xc, 0x22, 0x0, 0x0, @u64=0x10001}, @typed={0xbe, 0x44, 0x0, 0x0, @binary="42953fb548e83ff7715671fc5d1febc7ae8c74e390fa74321fca5f746b71d32d022f2eb2e60ab04a065989d4da62dacf1b4c2a023944687ca1cbe14a711a4e54baa7d7e60d3f5950a2d4cfaeb729735c7c2c541eab43dd99322402e5473d17f4cbbd9be531494fc71bab82835466366af3498b210f5e9fafa40a9dbe36c9429aa1d1762ad52aced5638af1d3c4aa1878fa2c8312560d0d33c97e5b944eb74e244782cb60c6e238fd0aaa72cdd286ecfd8a08c74c9863e33f1609"}]}, 0x314}, 0x1, 0x0, 0x0, 0x4040}, 0x8084) r2 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="5eb10828000000f703a000281cbf827fdbdf250700c83ae27fd2364cf466696c65302e2f66696c1b0b0000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x40) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) fallocate(r3, 0x78, 0x9, 0xc000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000180)) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, 0x0) unshare(0x48020200) 04:02:20 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xb, 0x7) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) shutdown(r1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r2, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x20040000) fcntl$dupfd(r2, 0x406, r1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x3}}, 0x80) fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x1000000, [{0x5, 0x400}]}, 0xc, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c1e02, 0x0) ioctl$CDROMRESET(r5, 0x5329) unshare(0x48020200) 04:02:20 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/238, 0xee}], 0x9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) mount$9p_tcp(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x816042, &(0x7f0000000300)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@cache_mmap}, {@cachetag={'cachetag', 0x3d, '\\+}\x8b'}}], [{@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@obj_role={'obj_role', 0x3d, '/%]#}#-6'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '(:)[//:[{%'}}, {@euid_gt={'euid>', r2}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, ']-'}}]}}) sendfile(r0, r1, 0x0, 0x100000001) syz_mount_image$nfs4(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x20, r3, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x401, 0x36}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4890}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x90100012}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r3, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040801) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x1) sendfile(r0, r4, 0x0, 0x80000001) 04:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) 04:02:20 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x1, 0x0) syz_mount_image$nfs4(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000000)='mnt/encrypted_dir\x00', 0x60) 04:02:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e857b29e9ff4e5806ac5fe11", 0x1e) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000040)={0x0, 0x7f, 0x100000000}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) unshare(0x48020200) 04:02:20 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x67) syz_io_uring_setup(0x5568, &(0x7f0000000000)={0x0, 0x42d8, 0x9, 0x0, 0x3c5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = signalfd4(r0, &(0x7f0000000100)={[0x80000000]}, 0x8, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r5, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r3, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00), 0x2f, 0x20040000) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x406, r6) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) sendmsg$nl_generic(r9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r9, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) syz_io_uring_submit(0x0, r1, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r2, r3, r6, r0, r0, r9], 0x6, 0x0, 0x1}, 0x4) 04:02:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r2, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x20040000) fcntl$dupfd(r1, 0x406, r2) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{}, {}, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) 04:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) 04:02:20 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r2, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x20040000) fcntl$dupfd(r1, 0x406, r2) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x50, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {@wo_ht={{}, {}, @broadcast}, 0x0, @default, 0x0, @void, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3}, @void, @void, @void, @void, @void, @void, @void}}]]}, 0x50}}, 0x0) 04:02:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20040000) 04:02:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f00000002c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/255, 0xff}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/238, 0xee}], 0x9) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:37 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) unshare(0x48020200) 04:02:37 executing program 3: perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000010c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x23456}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x406, r0) pread64(r0, &(0x7f0000000080)=""/4095, 0xfff, 0x20000000000) ftruncate(r0, 0x6) 04:02:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = epoll_create(0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x30000000}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f00000001c0)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000), 0x6) execveat(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='/proc/bus/input/handlers\x00', &(0x7f0000000280)='/proc/bus/input/handlers\x00'], &(0x7f0000000380)=[&(0x7f0000000300)='/proc/bus/input/handlers\x00', &(0x7f0000000340)='/proc/bus/input/handlers\x00'], 0x1000) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000880)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x2, 0x5, 0x4, 0x1}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) fallocate(r1, 0x0, 0x10001, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 04:02:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20040000) 04:02:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x100}, &(0x7f0000000240)='./file1\x00', 0x18, 0x0, 0x23456}, 0x1) fcntl$getflags(0xffffffffffffffff, 0x40a) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) fallocate(r0, 0x42, 0x5, 0x6) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.time\x00', 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) setgid(0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x5}, {0x2, 0x0, 0xee01}, {0x2, 0x2}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {}, [{0x8, 0x6}], {0x10, 0x1}}, 0x5c, 0x1) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x4) ioctl$CDROM_SELECT_SPEED(r2, 0x125e, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000380)={{0x1, 0x80}, 0x1, 0x0, 0x4, {0x3f, 0x73}, 0x76, 0xffffffff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) acct(&(0x7f0000000040)='./file0\x00') fremovexattr(0xffffffffffffffff, &(0x7f00000002c0)=@known='system.advise\x00') unshare(0x48020200) 04:02:37 executing program 6: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xb8aa, 0xfffffffb, 0x8001, 0x1a, 0x4}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r1, &(0x7f0000000880)=""/4096, 0x1000) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x406, r2) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000140)={{0x20, 0xffff}, 0x100, './file0\x00'}) 04:02:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a7cfae38de901dad439b8f9c8dc9c6cf71a0000000000000000f7e25897a19e"], 0x24}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x4008240b, &(0x7f0000000000)='\x06\x00\x00\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xece, 0x3}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) acct(0x0) 04:02:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20040000) 04:02:37 executing program 6: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xb8aa, 0xfffffffb, 0x8001, 0x1a, 0x4}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x51) getdents64(r1, &(0x7f0000000880)=""/4096, 0x1000) r2 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r2, 0x406, r2) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000140)={{0x20, 0xffff}, 0x100, './file0\x00'}) [ 851.659938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31786 sclass=netlink_route_socket pid=7636 comm=syz-executor.2 [ 851.687410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7636 comm=syz-executor.2 04:02:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT, 0x5) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0xffff, 0x100) sendmmsg$inet6(r3, &(0x7f0000001a80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @remote, 0x58}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000100)="819a78836d99dad022a7490c9c6b4471a268d514a63e70c37a7be444b2b49916eee0a413383ce652c65fa642481a57d614c2d9854073f9908e8d1d646b9f8c7873652e603c1e3f74558b7e10db262c0e8337295884261aaf19cba6e8011a12ebc31a5fdbcb53759e326382fb9cc6a877fee42580cde60fc3841ce12526c3447964ff6dcefa1fc7ef82e574428f512ccdb813", 0x92}, {&(0x7f0000000300)="ff63d9a920cca3163be9c2502a3dd58223a2056c4d0045ce3ad41cce611b9be0d4acb846cc2c0f21a5f578c0bdb02f6f6cb2a91059413b9c2fb7e8f14c34e4637dff846f0349a811446d9af782348211c77969aebb17e6862a39bae38e0dce7807ee6af05dca159a4d06a6f0ae8a", 0x6e}, {&(0x7f0000000380)="b2a549c39dbcb9a85929bb5327945a11b8d1619c89b1c2b0aee12f126ce27859ec9c0081ef0a50cc72be91f136058e958d75e829d65ec6b55dc91d19a751f9bfea44e591a356fd245a1a8e3d493675c08c573fc97371dcb761807dd7755f3bf7bad8efed0a23bd3e768d4712dff40c", 0x6f}], 0x3, &(0x7f0000000400)=[@rthdrdstopts={{0xd0, 0x29, 0x37, {0x89, 0x17, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim, @pad1, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x9, [0x1000000000, 0x401, 0x20, 0x101, 0x8000, 0x2, 0x401]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x7f, 0x4, [0x7]}}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0xffff, [0x9, 0x40, 0x10000, 0x3]}}, @ra={0x5, 0x2, 0x6}]}}}], 0xd0}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0xb48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000001840)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="b221ff41c117daa786d8112f008beb36978dfa9ce895c9092b266614c432663415ee416295573edbe467250e19468320a26c7714336dd0d6d00aa9767d614988ae690c872ed0001bb9559a8b06d7eb3b8fd1aea4d433bd91ad36ab18f502385e4f652936c6559d73e10cbf8e6cfd69f421b46be3db207b", 0x77}, {&(0x7f0000001640)="990cbdd36869f34c7aca5f9d6b4f261db91c7408db9cbc7e335529ddad479213aff800ae16d242008f62b3f6748fb3ab15007d88f8da44cd0d9aa0f824f640969f07c2291b4ef2408dd818b2a706cd55ba4279f84986c7b97c298caf138432e59e84f57d54b8155a7eb8979f4b66", 0x6e}, {&(0x7f00000016c0)="21fcbaf867ea190055e105407a993af62e798ef3034b8e9f472929f8c0811aa26475e79760969e288ef350568b170367dfa154dc5e7977ef2caf255539309bdff60613d388b4f9cf6507b510cd197cdde9c946c230d13d632268a52097ba6ae68b9bdff56ac572218060d226061fade296cff4fe076e4ecf12282968bc0261dadeb818b33569510354d41d6acda424a9b599b084e273c525", 0x98}, {&(0x7f0000001780)="d797e9fb7659991cb3e6dc1de3a717a22d211bd09ef430f8894424ed4ae15a8d54ea301c42d857a7fbf6d3a72226c5e74e03c74e104d0f5c1fa93fc802d7c4266dd63b935e0b564c98d984a1e73063bfcb4705db86ed4270d568eb550d2e19ad0ae8a3f0d6b40281ecdbe5ba3211a74731845efa5a1d77d0ab0efb0ec49f62510e75fdac2867a69ff948c5606a3954318fda0bbf2f84e67b4c8dbe8708ae6ba9c37041ad37fd0555e84676340939af147acfa5be1e7a3d", 0xb7}], 0x5, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x1a8}}], 0x2, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000040)={0x52, 0x4, 0x7, {0x9, 0x3c}, {0x8}, @period={0x5b, 0x9f88, 0x7, 0x4, 0x7, {0x2, 0x6, 0x6, 0x40}, 0x4, &(0x7f0000000000)=[0x9a, 0x9, 0xe14, 0x6ef8]}}) request_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='logon\x00', 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) stat(&(0x7f0000000900)='.\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=@v3={0x3000000, [{0x2, 0xbdd}, {0x0, 0x9}], r5}, 0x18, 0x3) r6 = fork() perf_event_open(&(0x7f0000001b40)={0x1, 0x80, 0x70, 0x6, 0x1f, 0x20, 0x0, 0x7, 0x22004, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x958f, 0x1, @perf_bp={&(0x7f0000001b00), 0x3}, 0x8282, 0x6e45763f, 0x101, 0xb, 0x44, 0x400, 0x100, 0x0, 0x2, 0x0, 0xae}, r6, 0x2, 0xffffffffffffffff, 0x8) 04:02:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 04:02:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 04:02:37 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) unshare(0x48020200) 04:02:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:37 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9fcaf095bc976bb5729b2902386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r0, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r5, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{}, {0x6}]}, 0x10) 04:02:38 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 852.359998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31786 sclass=netlink_route_socket pid=7679 comm=syz-executor.2 [ 852.362496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7681 comm=syz-executor.2 04:02:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', &(0x7f0000000200)=@random="962905", 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x3, 0x1f, 0x0, 0x1, 0x0, 0x8, 0x1500, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0xc20bd333cf2ec5a5, @perf_config_ext={0x100, 0x5}, 0x800, 0x9, 0x1000, 0x5, 0x100000000, 0x8, 0x8000, 0x0, 0x7f, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r0, 0x3) 04:02:53 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r3, 0x5450, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:02:53 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) unshare(0x48020200) 04:02:53 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000480)="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", 0x119, 0xffffffffffffffff}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat2(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40000, 0x81}, 0x18) mount$cgroup(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) r1 = syz_io_uring_setup(0x22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r6 = syz_io_uring_setup(0x22, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6f651317868af191bdb2"], &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x800000, &(0x7f0000000300)='cgroup\x00') sendfile(r8, r9, 0x0, 0x100000001) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x400) 04:02:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 1) 04:02:53 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x408, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x6cc, 0x26, 0x101, 0x0, 0x0, {}, [@nested={0x6b5, 0x0, 0x0, 0x1, [@generic="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", @typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x6cc}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x4840, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000c40)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000cc0)=""/255, 0xff}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000dc0)=""/108, 0x6c}, {&(0x7f0000000e40)=""/196, 0xc4}], 0x4, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x40012000) clone3(&(0x7f0000001040)={0x802000, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), {}, &(0x7f0000000200)=""/142, 0x8e, &(0x7f0000000b40)=""/202, &(0x7f0000001000)=[r6, 0xffffffffffffffff], 0x2, {r4}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000010c0)={{0x1, 0x1, 0x18}, './file1/file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfec4) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x4000012) pwritev2(r4, &(0x7f00000003c0)=[{&(0x7f0000000340)='t', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)) 04:02:53 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a7cfae38de901dad439b8f9c8dc9c6cf71a0000000000000000f7e25897a19e"], 0x24}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x4008240b, &(0x7f0000000000)='\x06\x00\x00\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xece, 0x3}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) acct(0x0) 04:02:53 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="3e3fc2db0956", 0x6}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6tnl0\x00'}) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002a7cfae38de901dad439b8f9c8dc9c6cf71a0000000000000000f7e25897a19e"], 0x24}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000110}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x4008240b, &(0x7f0000000000)='\x06\x00\x00\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x4c, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xece, 0x3}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008084) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) connect$netlink(r1, &(0x7f0000000140)=@unspec, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) acct(0x0) [ 867.733522] FAULT_INJECTION: forcing a failure. [ 867.733522] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 867.736242] CPU: 1 PID: 7697 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 867.737738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 867.739499] Call Trace: [ 867.740070] dump_stack+0x107/0x167 [ 867.740858] should_fail.cold+0x5/0xa [ 867.741684] _copy_from_user+0x2e/0x1b0 [ 867.742543] __copy_msghdr_from_user+0x91/0x4b0 [ 867.743546] ? __ia32_sys_shutdown+0x80/0x80 [ 867.744515] ? __lock_acquire+0xbb1/0x5b00 [ 867.745448] sendmsg_copy_msghdr+0xa1/0x160 [ 867.746374] ? do_recvmmsg+0x6d0/0x6d0 [ 867.747212] ? perf_trace_lock+0xac/0x490 [ 867.748109] ? __lockdep_reset_lock+0x180/0x180 [ 867.749100] ? perf_trace_lock+0xac/0x490 [ 867.749983] ? __lock_acquire+0x1657/0x5b00 [ 867.750902] ___sys_sendmsg+0xc6/0x170 [ 867.751741] ? sendmsg_copy_msghdr+0x160/0x160 [ 867.752737] ? __fget_files+0x26d/0x4c0 [ 867.753597] ? lock_downgrade+0x6d0/0x6d0 [ 867.754486] ? lock_downgrade+0x6d0/0x6d0 [ 867.755384] ? __fget_files+0x296/0x4c0 [ 867.756253] ? __fget_light+0xea/0x290 [ 867.757107] __sys_sendmmsg+0x195/0x470 [ 867.757956] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 867.758877] ? lock_downgrade+0x6d0/0x6d0 [ 867.759779] ? ksys_write+0x12d/0x260 [ 867.760613] ? __mutex_unlock_slowpath+0xe1/0x600 [ 867.761646] ? wait_for_completion_io+0x270/0x270 [ 867.762691] ? rcu_read_lock_any_held+0x75/0xa0 [ 867.763696] ? vfs_write+0x354/0xa70 [ 867.764506] ? fput_many+0x2f/0x1a0 [ 867.765304] ? ksys_write+0x1a9/0x260 [ 867.765643] netlink: 1704 bytes leftover after parsing attributes in process `syz-executor.3'. [ 867.766132] __x64_sys_sendmmsg+0x99/0x100 [ 867.766162] ? syscall_enter_from_user_mode+0x1d/0x50 [ 867.769898] do_syscall_64+0x33/0x40 [ 867.770703] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 867.771796] RIP: 0033:0x7f6639ba0b19 [ 867.772593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.776550] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 867.778198] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 867.779740] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 867.781287] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.782822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.784360] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 867.791618] FAT-fs (loop5): bogus number of reserved sectors [ 867.792973] FAT-fs (loop5): Can't find a valid FAT filesystem [ 867.867624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31786 sclass=netlink_route_socket pid=7707 comm=syz-executor.4 [ 867.897159] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7707 comm=syz-executor.4 [ 867.929544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31786 sclass=netlink_route_socket pid=7700 comm=syz-executor.2 04:02:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 2) [ 867.974990] FAT-fs (loop5): Unrecognized mount option "./file0" or missing value [ 867.983138] netlink: 1704 bytes leftover after parsing attributes in process `syz-executor.3'. 04:02:53 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 868.012623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7720 comm=syz-executor.2 [ 868.109442] FAULT_INJECTION: forcing a failure. [ 868.109442] name failslab, interval 1, probability 0, space 0, times 1 [ 868.111804] CPU: 1 PID: 7727 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 868.113212] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 868.114903] Call Trace: [ 868.115448] dump_stack+0x107/0x167 [ 868.116204] should_fail.cold+0x5/0xa [ 868.117009] ? __alloc_skb+0x6d/0x5b0 [ 868.117797] should_failslab+0x5/0x20 [ 868.118588] kmem_cache_alloc_node+0x55/0x380 [ 868.119508] __alloc_skb+0x6d/0x5b0 [ 868.120253] ? __lockdep_reset_lock+0x180/0x180 [ 868.121221] alloc_skb_with_frags+0x92/0x570 [ 868.122140] ? find_held_lock+0x2c/0x110 [ 868.122977] sock_alloc_send_pskb+0x7af/0x930 [ 868.123909] ? sk_alloc+0x350/0x350 [ 868.124659] ? perf_trace_lock+0xac/0x490 [ 868.125527] ? lock_chain_count+0x20/0x20 [ 868.126383] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 868.127428] ? ip6_mtu+0x1bb/0x3d0 [ 868.128154] ? lock_downgrade+0x6d0/0x6d0 [ 868.129003] ? ip_frag_init+0x350/0x350 [ 868.129826] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 868.130771] ? ip6_mtu+0x1e9/0x3d0 [ 868.131506] ? ip6_setup_cork+0xfb7/0x1740 [ 868.132387] ip6_make_skb+0x2de/0x4e0 [ 868.133172] ? ip_frag_init+0x350/0x350 [ 868.133992] ? ip_frag_init+0x350/0x350 [ 868.134806] ? ip6_push_pending_frames+0xf0/0xf0 [ 868.135790] ? ip6_dst_hoplimit+0x199/0x440 [ 868.136678] ? lock_downgrade+0x6d0/0x6d0 [ 868.137557] udpv6_sendmsg+0x2060/0x2a00 [ 868.138388] ? ip_frag_init+0x350/0x350 [ 868.139210] ? udp_v6_push_pending_frames+0x360/0x360 [ 868.140261] ? _down_write_nest_lock+0x160/0x160 [ 868.141242] ? vmacache_update+0xce/0x140 [ 868.142093] ? do_user_addr_fault+0x5b0/0xc60 [ 868.143006] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 868.144076] ? asm_exc_page_fault+0x1e/0x30 [ 868.144960] ? sock_has_perm+0x1ea/0x280 [ 868.145812] ? __import_iovec+0x458/0x590 [ 868.146651] ? udp_v6_push_pending_frames+0x360/0x360 [ 868.147699] inet6_sendmsg+0x105/0x140 [ 868.148490] ? inet6_compat_ioctl+0x320/0x320 [ 868.149409] sock_sendmsg+0xf2/0x190 [ 868.150168] ____sys_sendmsg+0x334/0x870 [ 868.150995] ? kernel_sendmsg+0x50/0x50 [ 868.151799] ? do_recvmmsg+0x6d0/0x6d0 [ 868.152588] ? perf_trace_lock+0xac/0x490 [ 868.153445] ? __lockdep_reset_lock+0x180/0x180 [ 868.154389] ? perf_trace_lock+0xac/0x490 [ 868.155228] ? __lock_acquire+0x1657/0x5b00 [ 868.156108] ___sys_sendmsg+0xf3/0x170 [ 868.156918] ? sendmsg_copy_msghdr+0x160/0x160 [ 868.157852] ? __fget_files+0x26d/0x4c0 [ 868.158660] ? lock_downgrade+0x6d0/0x6d0 [ 868.159516] ? lock_downgrade+0x6d0/0x6d0 [ 868.160366] ? __fget_files+0x296/0x4c0 [ 868.161194] ? __fget_light+0xea/0x290 [ 868.161994] __sys_sendmmsg+0x195/0x470 [ 868.162808] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 868.163689] ? lock_downgrade+0x6d0/0x6d0 [ 868.164552] ? __mutex_unlock_slowpath+0xe1/0x600 [ 868.165547] ? wait_for_completion_io+0x270/0x270 [ 868.166528] ? rcu_read_lock_any_held+0x75/0xa0 [ 868.167470] ? vfs_write+0x354/0xa70 [ 868.168234] ? fput_many+0x2f/0x1a0 [ 868.168979] ? ksys_write+0x1a9/0x260 [ 868.169765] __x64_sys_sendmmsg+0x99/0x100 [ 868.170621] ? syscall_enter_from_user_mode+0x1d/0x50 [ 868.171670] do_syscall_64+0x33/0x40 [ 868.172433] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 868.173476] RIP: 0033:0x7f6639ba0b19 [ 868.174233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 868.177959] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 868.179501] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 868.180957] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 868.182399] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 868.183841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.185294] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:10 executing program 2: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x806, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'ipvlan0\x00', 0x4}, 0x18) ftruncate(r0, 0x1000003) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x1, 0x1, 0x0, 0xfffffffffffffffc}) getpgrp(0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000400)=0x200) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\x00'}}, {@version_L}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'security.capability\x00'}}]}}) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) dup2(r0, r1) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 04:03:10 executing program 4: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000280)=0x3) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[@ANYBLOB="14"]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)="01", 0x1) creat(&(0x7f00000001c0)='./file1\x00', 0x24) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r1, r2, 0x0, 0x20d315) ftruncate(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x8) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x44800, 0x0) fcntl$dupfd(r0, 0x0, r4) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)='system_u:object_r:inetd_exec_t:s0\x00', 0x22, 0x0) 04:03:10 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @private0, 0x2}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/103, &(0x7f00000000c0)=0x67) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$nl_generic(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r5, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) sendmmsg$inet6(r5, &(0x7f0000002e00)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x20, @mcast2, 0xfffffff9}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000000180)="4a6df05e39f5317e6de13cabf096f79c63bcd406114a21200559f5371038bfcc585d702dbea2a96bd798c3021e3785279894578903d41e897ea310a2bbccc7a2f24e1e77724c05e13c8b5049b6f8163c7e99840a361d4fd7315b56125646a10a08d64f7284882532a333558ba3d1b686c66c4943b90fbbbfdf3b04b6fad481", 0x7f}, {&(0x7f0000000200)="63e13556ae45c7dc0e713ec397582b5f397b4d1f1c0f75538df91cb54221ac15f03935be53cd4a46e494c8c7a569883525dab17c0c26629f7c978eadcc2c265c994f8d440ecf44a67790641062a7ffe2bbe063df3e5b9de5731223f8a83147da9a191486e4634c8e460ab90d0f3e0aee8ba29d296210a614d76fc3588fa5e5fe6ebb", 0x82}, {&(0x7f00000002c0)}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000300)="248c4789c2216e02aab8f8d9e95031d57584a30874c3a7abdf47db22abc381153899d8fd40f25fcd0890d9030dbc439d782591b3b1f2b19ed4dab317db6b5a44ebf116c483a456e9e23debb9d2397e87f2b206f22b51a9e72537e2ccfffc72bbb05c6ed1ac689fd093e0ef", 0x6b}, {&(0x7f0000000380)="4107f91bc4087bd6d849a47dcbcb5c6a92f59e0fb2486dcfc17700702731d5ce7d44bdb27a892ab7fee44004753499199e363061685daf0df255ea53dcd32965ce982604cd07b00b216884a6f99f3ec0c36c1639366cb01a6f14362f4b977d5c189c7435ba4192a62d365af9475121f7d77e1a1677871be456d763a9e99827de87d7e016b9d0e336e075b656791aece86294ae3c233e77d883642704e5246bb47a0cd62663361d41eba703611d2dfb9280973bf54e428b0c1f1195b2de924c02fa7263b3fa4c3d", 0xc7}, {&(0x7f0000000500)="8bbedaef6db35fddc84f7d6474f07b3a2e2486fbdb3e2601dd928d6c7e3cd2420cb3e3632f23d7db0013e69db54b09c3f1f9a03ae68fae0e3a0c787999b86e8eb227b8c6d14797362c41217515db34c77a2eb0db6406b369ba1eb436922c03e4a2415165c4c4691b3083ae1095dd8bb7cbcd1b7b4bda5d50a472e9fe0b242cadd6ddfd028b18aec888d761bd635c8329d77ca9d3", 0x94}, {&(0x7f0000001640)="8a175e25e0b58726a409027f415cb3bc19b72940900752be3a9e55a7d349019a1f312b5384abccb5cb3ebfe2c366b506644ac6203516e5292de0b8121c76f3a984ac86575de87af4ea059ed865efd14db5886182de6a7cee9110ff8e9f7cd0f73ef7b9ed3dbc30925a58a9254df10b79b2da2dafc5f54724f8ddc2f96e45bcc659b8f596de82d7997fc72c7c077b58aa4a", 0x91}], 0x8, &(0x7f0000001780)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0xffffffba}}, @flowinfo={{0x14, 0x29, 0xb, 0x2fc}}, @dstopts={{0x28, 0x29, 0x37, {0x33, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @jumbo={0xc2, 0x4, 0x10001}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x2c, 0x2, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0xff, [0x7]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x10000}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x80}]}}}], 0x110}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x4, @remote, 0x3}, 0x1c, &(0x7f0000002b80)=[{&(0x7f00000018c0)="93b076ff271531345510d9f77acb32b36b470537fe3f148941ece838ca819a8802919e229f1f1a920b28354d2c6817ced140384eaed3d95850dc3a60c0bee2f30777588e2a1a503556c2086ec2eb43a3148498b2498b5851af97534e11546e4108221208f60441424d2c79e35ac893fe93fcd5bdda4e57dde657a8507596dc330eb7053bc184ac50e8bcf6648070f15b3990799541de1831875f35f73542ade6a867806e8c9b", 0xa6}, {&(0x7f0000001980)="4ef8d9099ba16047e8e68d1236f97b987ae2f3ac5ed92269c2e401a82c282a21ca6dc02830e83d6274ad2c229905f22947751d4c70b3d42c246b02b6aa8fe880aa26cbd01a258cdd4ed539a6e7478c354b61034ce805c2f4b7c7042056577dac0cf12c0b4e4eff39", 0x68}, {&(0x7f0000001a00)="a1686696f8197af428fe79424848d3bd02cc5a8fd41c4939dc3c6a989426bd4cf97c1c1d1e24d7fdd604c9d5312dc461252b7dad88ad6dc4771ee4c3a88f9efc982c9a9292097e2125ec2bd4ab6742d3519f332b9ab13173803da8", 0x5b}, {&(0x7f0000001a80)="d7de46b5e704a80233dd2d21e9c9157825029d93617354d9012dfcfced3a1c88abf040605c1240ba09abede2f3cfc5b57f0ba6416cb7ae585673efee2feba2d8fadbc735c0375173c8abb4374b67558e0cdf6bd43068c154413caba2f5b8a4405c64c9d4a930a57974b74e4d4c38cb4fb229272625d2a68941c27cef8d0e35891b530d82c6dbe7e74f0e73e424def8d6d44c5832120d0f4a2f71600addd82abb31d0a64f9ce4c46b579087dc3286da22d59a7d30628a353b65d6c15f7453a4870d83abb066750792b257e6ef8000fe3f1b7ddabee0", 0xd5}, {&(0x7f0000001b80)="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", 0x1000}], 0x5, &(0x7f00000005c0)}}, {{&(0x7f0000002c00)={0xa, 0x4e23, 0x5, @loopback, 0x7}, 0x1c, &(0x7f0000002d80)=[{&(0x7f0000002c40)="fb66bff1d9bdfdf601727c4e6443d2b6e232d0f6c28ab2098b696412bf2c6c06e80a213ad96a17726474fc00950dad30fe8a20d40ccd24a3554e79dd8d122fafc9a2fd6826430eedfcd779035e712e82220cf54c73e19ed2ce06290cc2b3d4808a7c37bf88204fce5aa685e8bf3fd32d4051a9c3ff3217e5321c82590b5fb19e1ba2908f9d738e88e80ad68b87589653c81af39af17e7a198cec938a1db804b48a8679d8173dd3b3abdecdcd", 0xac}, {&(0x7f0000002d00)="4c9c581f053712be5d1251751ae8304366238e1ca5e8ad32545c2bbb91a066fe2fa0d3cdc96e91b7adb4b0154e5db2007d4c24ed203f0614e382bd94ab49be8e16e592aba11b", 0x46}], 0x2, &(0x7f0000002dc0)}}], 0x3, 0x0) dup2(r0, r2) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 04:03:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 3) 04:03:10 executing program 6: openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x0, 0x8}, 0x80000000, 0x8}}, &(0x7f00000002c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000040000000000000000000004000000000000000000000000000000000000000100"/192]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) unshare(0x48020200) 04:03:10 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) unshare(0x48020200) 04:03:10 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 885.016556] 9pnet: Insufficient options for proto=fd [ 885.028834] FAULT_INJECTION: forcing a failure. [ 885.028834] name failslab, interval 1, probability 0, space 0, times 0 [ 885.030974] CPU: 0 PID: 7740 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 885.032165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 885.033616] Call Trace: [ 885.034081] dump_stack+0x107/0x167 [ 885.034726] should_fail.cold+0x5/0xa [ 885.035390] ? create_object.isra.0+0x3a/0xa20 [ 885.036185] ? create_object.isra.0+0x3a/0xa20 [ 885.036999] should_failslab+0x5/0x20 [ 885.037664] kmem_cache_alloc+0x5b/0x360 [ 885.038376] ? __lock_acquire+0xbb1/0x5b00 [ 885.039116] create_object.isra.0+0x3a/0xa20 [ 885.039885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 885.040777] kmem_cache_alloc_node+0x169/0x380 [ 885.041600] __alloc_skb+0x6d/0x5b0 [ 885.042235] ? __lockdep_reset_lock+0x180/0x180 [ 885.043049] alloc_skb_with_frags+0x92/0x570 [ 885.043818] ? find_held_lock+0x2c/0x110 [ 885.044562] sock_alloc_send_pskb+0x7af/0x930 [ 885.045368] ? sk_alloc+0x350/0x350 [ 885.046032] ? perf_trace_lock+0xac/0x490 [ 885.046780] ? lock_chain_count+0x20/0x20 [ 885.047511] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 885.048416] ? ip6_mtu+0x1bb/0x3d0 [ 885.049046] ? lock_downgrade+0x6d0/0x6d0 [ 885.049808] ? ip_frag_init+0x350/0x350 [ 885.050574] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 885.051441] ? ip6_mtu+0x1e9/0x3d0 [ 885.052096] ? ip6_setup_cork+0xfb7/0x1740 [ 885.052887] ip6_make_skb+0x2de/0x4e0 [ 885.053582] ? ip_frag_init+0x350/0x350 [ 885.054328] ? ip_frag_init+0x350/0x350 [ 885.055045] ? ip6_push_pending_frames+0xf0/0xf0 [ 885.055906] ? ip6_dst_hoplimit+0x199/0x440 [ 885.056694] ? lock_downgrade+0x6d0/0x6d0 [ 885.057473] udpv6_sendmsg+0x2060/0x2a00 [ 885.058225] ? ip_frag_init+0x350/0x350 [ 885.058966] ? udp_v6_push_pending_frames+0x360/0x360 [ 885.059927] ? _down_write_nest_lock+0x160/0x160 [ 885.060767] ? vmacache_update+0xce/0x140 [ 885.061532] ? do_user_addr_fault+0x5b0/0xc60 [ 885.062335] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 885.063306] ? asm_exc_page_fault+0x1e/0x30 [ 885.064101] ? sock_has_perm+0x1ea/0x280 [ 885.064870] ? __import_iovec+0x458/0x590 [ 885.065630] ? udp_v6_push_pending_frames+0x360/0x360 [ 885.066515] inet6_sendmsg+0x105/0x140 [ 885.067206] ? inet6_compat_ioctl+0x320/0x320 [ 885.067996] sock_sendmsg+0xf2/0x190 [ 885.068667] ____sys_sendmsg+0x334/0x870 04:03:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x808a}, 0x1c) listen(r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40086607, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x3}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x4, 0x3ff, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001340), 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote}, &(0x7f00000011c0)=0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000001400)=ANY=[@ANYBLOB="0100975905c73f20391ed7f959b300b200011331d3d4d5619ef5ebca6286061554ba4069ddb5fcbeba5be55ae1276c81afb2ae49037cdc2c3823b5273a35", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00./file1\x00\x00\x00\x00\x00\x00']) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_open_dev$sg(&(0x7f0000001200), 0x7ff, 0x120000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001300)={&(0x7f0000001240)=""/153, 0x99}) lstat(0x0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup2(r0, r1) chown(&(0x7f00000013c0)='./file1\x00', r3, r4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/partitions\x00', 0x0, 0x0) pread64(r6, &(0x7f0000000040)=""/4117, 0x1015, 0x120000) accept4$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0xffffffffffffffe6, 0x800) [ 885.069387] ? kernel_sendmsg+0x50/0x50 [ 885.070222] ? do_recvmmsg+0x6d0/0x6d0 [ 885.070912] ? perf_trace_lock+0xac/0x490 [ 885.071625] ? __lockdep_reset_lock+0x180/0x180 [ 885.072462] ? perf_trace_lock+0xac/0x490 [ 885.073181] ? __lock_acquire+0x1657/0x5b00 [ 885.073951] ___sys_sendmsg+0xf3/0x170 [ 885.074616] ? sendmsg_copy_msghdr+0x160/0x160 [ 885.075455] ? __fget_files+0x26d/0x4c0 [ 885.076129] ? lock_downgrade+0x6d0/0x6d0 [ 885.076869] ? lock_downgrade+0x6d0/0x6d0 [ 885.077591] ? __fget_files+0x296/0x4c0 [ 885.078321] ? __fget_light+0xea/0x290 [ 885.079006] __sys_sendmmsg+0x195/0x470 [ 885.079714] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 885.080459] ? lock_downgrade+0x6d0/0x6d0 [ 885.081203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 885.082042] ? wait_for_completion_io+0x270/0x270 [ 885.082878] ? rcu_read_lock_any_held+0x75/0xa0 [ 885.083680] ? vfs_write+0x354/0xa70 [ 885.084328] ? fput_many+0x2f/0x1a0 [ 885.084969] ? ksys_write+0x1a9/0x260 [ 885.085657] __x64_sys_sendmmsg+0x99/0x100 [ 885.086386] ? syscall_enter_from_user_mode+0x1d/0x50 [ 885.087304] do_syscall_64+0x33/0x40 [ 885.087949] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 885.088854] RIP: 0033:0x7f6639ba0b19 [ 885.089500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.092588] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 885.093899] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 885.095111] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 885.096316] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.097517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.098741] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 885.209927] 9pnet: Insufficient options for proto=fd 04:03:11 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ftruncate(0xffffffffffffffff, 0x10000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$unix(0x1, 0x5, 0x0) openat(r2, &(0x7f0000000140)='./file0\x00', 0x500, 0x100) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) pwrite64(r3, &(0x7f0000000240)="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", 0xa02, 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_generic(r7, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r7, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) timerfd_gettime(r2, &(0x7f00000001c0)) 04:03:11 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 4) 04:03:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "49dd952044bba627f6105046b8cf2691"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b15cd9ac09a46515089141bbf9fe9ff67bed63946f139a94f6c449843184f55b"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8050}, 0x1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r2) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r4, @ANYBLOB="01002abd700001dbdf250600000014000300ff020000000000000000000000000001260007"], 0xcc}}, 0x0) [ 885.411531] FAULT_INJECTION: forcing a failure. [ 885.411531] name failslab, interval 1, probability 0, space 0, times 0 [ 885.413132] CPU: 0 PID: 7770 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 885.414052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 885.415153] Call Trace: [ 885.415517] dump_stack+0x107/0x167 [ 885.416035] should_fail.cold+0x5/0xa [ 885.416649] should_failslab+0x5/0x20 [ 885.417177] __kmalloc_node_track_caller+0x74/0x310 [ 885.417854] ? alloc_skb_with_frags+0x92/0x570 [ 885.418465] __alloc_skb+0xb1/0x5b0 [ 885.418954] alloc_skb_with_frags+0x92/0x570 [ 885.419550] ? find_held_lock+0x2c/0x110 [ 885.420105] sock_alloc_send_pskb+0x7af/0x930 [ 885.420721] ? sk_alloc+0x350/0x350 [ 885.421226] ? perf_trace_lock+0xac/0x490 [ 885.421789] ? lock_chain_count+0x20/0x20 [ 885.422363] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 885.423061] ? ip6_mtu+0x1bb/0x3d0 [ 885.423545] ? lock_downgrade+0x6d0/0x6d0 [ 885.424115] ? ip_frag_init+0x350/0x350 [ 885.424670] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 885.425324] ? ip6_mtu+0x1e9/0x3d0 [ 885.425814] ? ip6_setup_cork+0xfb7/0x1740 [ 885.426394] ip6_make_skb+0x2de/0x4e0 [ 885.426916] ? ip_frag_init+0x350/0x350 [ 885.427464] ? ip_frag_init+0x350/0x350 [ 885.428004] ? ip6_push_pending_frames+0xf0/0xf0 [ 885.428661] ? ip6_dst_hoplimit+0x199/0x440 [ 885.429267] ? lock_downgrade+0x6d0/0x6d0 [ 885.429852] udpv6_sendmsg+0x2060/0x2a00 [ 885.430403] ? ip_frag_init+0x350/0x350 [ 885.430949] ? udp_v6_push_pending_frames+0x360/0x360 [ 885.431648] ? _down_write_nest_lock+0x160/0x160 [ 885.432301] ? vmacache_update+0xce/0x140 [ 885.432881] ? do_user_addr_fault+0x5b0/0xc60 [ 885.433510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 885.434224] ? asm_exc_page_fault+0x1e/0x30 [ 885.434812] ? sock_has_perm+0x1ea/0x280 [ 885.435383] ? __import_iovec+0x458/0x590 [ 885.435948] ? udp_v6_push_pending_frames+0x360/0x360 [ 885.436652] inet6_sendmsg+0x105/0x140 [ 885.437186] ? inet6_compat_ioctl+0x320/0x320 [ 885.437792] sock_sendmsg+0xf2/0x190 [ 885.438296] ____sys_sendmsg+0x334/0x870 [ 885.438846] ? kernel_sendmsg+0x50/0x50 [ 885.439374] ? do_recvmmsg+0x6d0/0x6d0 [ 885.439903] ? perf_trace_lock+0xac/0x490 [ 885.440464] ? __lockdep_reset_lock+0x180/0x180 [ 885.441109] ? perf_trace_lock+0xac/0x490 [ 885.441673] ? __lock_acquire+0x1657/0x5b00 [ 885.442255] ___sys_sendmsg+0xf3/0x170 [ 885.442783] ? sendmsg_copy_msghdr+0x160/0x160 [ 885.443396] ? __fget_files+0x26d/0x4c0 [ 885.443927] ? lock_downgrade+0x6d0/0x6d0 [ 885.444490] ? lock_downgrade+0x6d0/0x6d0 [ 885.445064] ? __fget_files+0x296/0x4c0 [ 885.445608] ? __fget_light+0xea/0x290 [ 885.446136] __sys_sendmmsg+0x195/0x470 [ 885.446680] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 885.447264] ? lock_downgrade+0x6d0/0x6d0 [ 885.447840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 885.448499] ? wait_for_completion_io+0x270/0x270 [ 885.449156] ? rcu_read_lock_any_held+0x75/0xa0 [ 885.449777] ? vfs_write+0x354/0xa70 [ 885.450277] ? fput_many+0x2f/0x1a0 [ 885.450738] ? ksys_write+0x1a9/0x260 [ 885.451222] __x64_sys_sendmmsg+0x99/0x100 [ 885.451756] ? syscall_enter_from_user_mode+0x1d/0x50 [ 885.452400] do_syscall_64+0x33/0x40 [ 885.452873] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 885.453564] RIP: 0033:0x7f6639ba0b19 [ 885.454032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 885.456412] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 885.457377] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 885.458291] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 885.459210] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 885.460126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.461062] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:11 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) 04:03:11 executing program 6: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000ace670325132510000e670325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000ace670325132510000e670325107000a00000041", 0xa1, 0x600}], 0x0, &(0x7f0000010d00)) mount$cgroup(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='release_agent=./file1,c_children,context=root,rootcontext=user_u,appraise_type=imasig,smackfsdef=\x00,subj_type=vfat\x00,fsmagic=0x0000000000000007,audit,\x00\x00\x00\x00\x00']) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r0, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) openat(r0, &(0x7f00000001c0)='./file1\x00', 0x40000, 0x45) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0x9286, 0x10000, 0xc39, 0xa6219d3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) sendfile(r4, r2, &(0x7f0000000140)=0x7, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="60010000100001000020000000005fc1c513aa83ea33000000000000000000000000000000000000000000810000000000000000748244af95a598277e7f3a4026e17b849f081e3afec4559429a230112139e5b368edbba1aac054890f903a4569c9d84a570e920347ed701a748444d38de50ae24da4fe4c13027458c61e0db3f2cdbcc46c0b1247d5c896d8104a209934125b49ed513cf053d55cd64a8fc77717c860e3dfef9bd2634f", @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000032000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040000000976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"], 0x160}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) [ 885.533933] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 885.543674] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 04:03:11 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 885.602616] FAT-fs (loop6): Directory bread(block 6) failed [ 885.643794] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.6'. [ 885.671218] attempt to access beyond end of device [ 885.671218] loop6: rw=0, want=13, limit=6 [ 885.687065] cgroup: Unknown subsys name 'c_children' [ 885.690875] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 885.691743] FAT-fs (loop6): Filesystem has been set read-only 04:03:27 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x80000000) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 04:03:27 executing program 4: fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)='./file0/../file0\x00', 0x11, 0x2) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, 0x0, 0x450745c438580058) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063800)={0x84, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r0}], 0x2, "7c1793b29af822"}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$DVD_READ_STRUCT(r1, 0x5390, &(0x7f00000004c0)=@bca={0x3, 0xbc, "1df7b2d0b3c2b6beaf6f141a1eda086c238d11ae18ddd0843385545923e96246f1441b511152185190dfba34c506ee9d74a1681f9337360dc80b97ad383e52f5fcf9fd7dfdb4908fc88a32daafbf121f99adf3ab3ed0bb659df1d161fa84c629aa3e3cea981b635678af414d6ba71e0aab74087e324b00ec826fcd5bb2fe0c7a21ca35002f997ef5187842166ddc79b994a831b5461ffb5a76e6c43807977a604dcfa9627972b01b5a9644a54d61d7535468785673f89d6190a650d7"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 04:03:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 5) 04:03:27 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:27 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) 04:03:27 executing program 3: r0 = gettid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000640)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r3, @ANYBLOB="00000000000000072e2f59717ac6300009467b260329116d9f4244f655924adb241166d4a1a029f266aec3f12b8343fa279940237f97bb77abd905413ea1d968b3fa361b0a348a3746fc"]) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x4, 0xa5, 0x1, 0x20, 0x0, 0x9, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x7, 0x107}, 0x50000, 0x0, 0x400, 0x0, 0x9428, 0x3f, 0x7ff, 0x0, 0x6, 0x0, 0x5}, r0, 0x3, r3, 0x3) r4 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x180) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x20040080) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc090}, 0x0) timer_create(0x0, &(0x7f0000000380)={0x0, 0xb, 0x4, @thr={&(0x7f0000000240)="12b01dbf4e51a2b350de495a6929f09e3ac176be2da5b0ce5cd9", &(0x7f00000003c0)="20638b997077bd2bb711cc72e58b5016e55202f63a3955ca52df6c07ac4590025c1897611acff3d890a7361b6a215c3788211cc9c111a9950a479988bd3b50"}}, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x11, 0x0, @tid=r6}, &(0x7f0000000200)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000000180)={{r8, r9+60000000}, {0x0, 0x3938700}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000005c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 04:03:27 executing program 5: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040020}, 0x1) syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x2800) r0 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r0, 0x0, r0) openat(0xffffffffffffffff, 0x0, 0xdaa00, 0x3419f89651ab6128) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) syz_open_pts(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000400)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f96200510f53a9bb14031b9f1a0d79e89c5f5a8dfac961ff1e665c70c3e286c331bb78bed5a157", @ANYRES32=r3, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) sendto(r3, &(0x7f0000000140)="11e3e4df7eff4cb3ff3667453088728f38d83844c08fe894d68e094a8493c0e6967757673416761dce3851d909aeb988882b59200d406b3624109553b3eeac196298937ca8e7975ad664cac1315774b5a5cf6dff0d02f1416595698a1da2bac94b39a348fcbc1beaa29e", 0x6a, 0x800, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 04:03:27 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) [ 901.727098] FAULT_INJECTION: forcing a failure. [ 901.727098] name failslab, interval 1, probability 0, space 0, times 0 [ 901.729497] CPU: 0 PID: 7812 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 901.730885] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 901.732567] Call Trace: [ 901.733107] dump_stack+0x107/0x167 [ 901.733866] should_fail.cold+0x5/0xa [ 901.734643] ? create_object.isra.0+0x3a/0xa20 [ 901.735575] should_failslab+0x5/0x20 [ 901.736351] kmem_cache_alloc+0x5b/0x360 [ 901.737198] create_object.isra.0+0x3a/0xa20 [ 901.738100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 901.739148] __kmalloc_node_track_caller+0x1a6/0x310 [ 901.740181] ? alloc_skb_with_frags+0x92/0x570 [ 901.741121] __alloc_skb+0xb1/0x5b0 [ 901.741886] alloc_skb_with_frags+0x92/0x570 [ 901.742785] ? find_held_lock+0x2c/0x110 [ 901.743617] sock_alloc_send_pskb+0x7af/0x930 [ 901.744550] ? sk_alloc+0x350/0x350 [ 901.745332] ? perf_trace_lock+0xac/0x490 [ 901.746164] ? lock_chain_count+0x20/0x20 [ 901.746995] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 901.747991] ? ip6_mtu+0x1bb/0x3d0 [ 901.748694] ? lock_downgrade+0x6d0/0x6d0 [ 901.749523] ? ip_frag_init+0x350/0x350 [ 901.750340] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 901.751278] ? ip6_mtu+0x1e9/0x3d0 [ 901.751998] ? ip6_setup_cork+0xfb7/0x1740 [ 901.752859] ip6_make_skb+0x2de/0x4e0 [ 901.753651] ? ip_frag_init+0x350/0x350 [ 901.754465] ? ip_frag_init+0x350/0x350 [ 901.755282] ? ip6_push_pending_frames+0xf0/0xf0 [ 901.756248] ? ip6_dst_hoplimit+0x199/0x440 [ 901.757127] ? lock_downgrade+0x6d0/0x6d0 [ 901.757995] udpv6_sendmsg+0x2060/0x2a00 [ 901.758825] ? ip_frag_init+0x350/0x350 [ 901.759647] ? udp_v6_push_pending_frames+0x360/0x360 [ 901.760699] ? _down_write_nest_lock+0x160/0x160 [ 901.761690] ? vmacache_update+0xce/0x140 [ 901.762546] ? do_user_addr_fault+0x5b0/0xc60 [ 901.763466] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 901.764540] ? asm_exc_page_fault+0x1e/0x30 [ 901.765429] ? sock_has_perm+0x1ea/0x280 [ 901.766286] ? __import_iovec+0x458/0x590 [ 901.767126] ? udp_v6_push_pending_frames+0x360/0x360 [ 901.768182] inet6_sendmsg+0x105/0x140 [ 901.768970] ? inet6_compat_ioctl+0x320/0x320 [ 901.769906] sock_sendmsg+0xf2/0x190 [ 901.770667] ____sys_sendmsg+0x334/0x870 [ 901.771501] ? kernel_sendmsg+0x50/0x50 [ 901.772307] ? do_recvmmsg+0x6d0/0x6d0 [ 901.773107] ? perf_trace_lock+0xac/0x490 [ 901.773969] ? __lockdep_reset_lock+0x180/0x180 [ 901.774911] ? perf_trace_lock+0xac/0x490 [ 901.775753] ? __lock_acquire+0x1657/0x5b00 [ 901.776637] ___sys_sendmsg+0xf3/0x170 [ 901.777437] ? sendmsg_copy_msghdr+0x160/0x160 [ 901.778371] ? __fget_files+0x26d/0x4c0 [ 901.779178] ? lock_downgrade+0x6d0/0x6d0 [ 901.780024] ? lock_downgrade+0x6d0/0x6d0 [ 901.780873] ? __fget_files+0x296/0x4c0 [ 901.781705] ? __fget_light+0xea/0x290 [ 901.782511] __sys_sendmmsg+0x195/0x470 [ 901.783323] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 901.784199] ? lock_downgrade+0x6d0/0x6d0 [ 901.785057] ? __mutex_unlock_slowpath+0xe1/0x600 [ 901.786045] ? wait_for_completion_io+0x270/0x270 [ 901.787018] ? rcu_read_lock_any_held+0x75/0xa0 [ 901.787952] ? vfs_write+0x354/0xa70 [ 901.788707] ? fput_many+0x2f/0x1a0 [ 901.789463] ? ksys_write+0x1a9/0x260 [ 901.790248] __x64_sys_sendmmsg+0x99/0x100 [ 901.791107] ? syscall_enter_from_user_mode+0x1d/0x50 [ 901.792153] do_syscall_64+0x33/0x40 [ 901.792916] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 901.793958] RIP: 0033:0x7f6639ba0b19 [ 901.794715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 901.798433] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 901.799965] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 901.801420] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 901.802865] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 901.804304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.805744] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 901.831551] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 04:03:27 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:27 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:27 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) fchmodat(r1, &(0x7f0000000180)='./file0\x00', 0x58) 04:03:27 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 6) 04:03:28 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) 04:03:28 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) [ 902.144374] FAULT_INJECTION: forcing a failure. [ 902.144374] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 902.147237] CPU: 1 PID: 7836 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 902.148651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 902.150373] Call Trace: [ 902.150925] dump_stack+0x107/0x167 [ 902.151695] should_fail.cold+0x5/0xa [ 902.152482] __alloc_pages_nodemask+0x182/0x690 [ 902.153435] ? lock_chain_count+0x20/0x20 [ 902.154285] ? __alloc_pages_slowpath.constprop.0+0x2230/0x2230 [ 902.155502] ? perf_trace_lock+0xac/0x490 [ 902.156354] alloc_pages_vma+0xbb/0x410 [ 902.157187] wp_page_copy+0xee7/0x1f00 [ 902.157997] ? print_bad_pte+0x5a0/0x5a0 [ 902.158844] ? lock_downgrade+0x6d0/0x6d0 [ 902.159687] ? vm_normal_page+0x162/0x2e0 [ 902.160541] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 902.161631] do_wp_page+0x27b/0x1390 [ 902.162408] handle_mm_fault+0x1ce6/0x3520 [ 902.163264] ? __lock_acquire+0x1657/0x5b00 [ 902.164143] ? __pmd_alloc+0x5e0/0x5e0 [ 902.164952] ? vmacache_find+0x55/0x2a0 [ 902.165781] do_user_addr_fault+0x56e/0xc60 [ 902.166688] exc_page_fault+0xa2/0x1a0 [ 902.167488] asm_exc_page_fault+0x1e/0x30 [ 902.168333] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 902.169369] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca e9 e1 8b 1d 02 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c2 8b 1d 02 66 90 48 bb f9 ef ff ff ff 7f [ 902.173132] RSP: 0018:ffff888049f8fcf0 EFLAGS: 00050293 [ 902.174245] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020004d38 [ 902.175688] RDX: 0000000000040000 RSI: ffffffff83107bb2 RDI: ffff88801af708a8 [ 902.177154] RBP: 0000000000040000 R08: 0000000000000000 R09: 0000000000000000 [ 902.178628] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 902.180089] R13: 0000000020004d00 R14: 000000000000002f R15: 000000000000002e [ 902.181562] ? __sys_sendmmsg+0x1c2/0x470 [ 902.182433] __sys_sendmmsg+0x1cf/0x470 [ 902.183236] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 902.184099] ? lock_downgrade+0x6d0/0x6d0 [ 902.184990] ? __mutex_unlock_slowpath+0xe1/0x600 [ 902.186003] ? wait_for_completion_io+0x270/0x270 [ 902.187007] ? rcu_read_lock_any_held+0x75/0xa0 [ 902.187936] ? vfs_write+0x354/0xa70 [ 902.188707] ? fput_many+0x2f/0x1a0 [ 902.189460] ? ksys_write+0x1a9/0x260 [ 902.190254] __x64_sys_sendmmsg+0x99/0x100 [ 902.191112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 902.192162] do_syscall_64+0x33/0x40 [ 902.192911] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 902.193951] RIP: 0033:0x7f6639ba0b19 [ 902.194706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 902.198440] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 902.199955] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 902.201412] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 902.202875] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 902.204309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.205765] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:28 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:28 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfff, 0x8) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r2, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x3f, 0x1, 0x40, 0x81, 0x0, 0x9, 0x80, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x30a8, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x1001, 0x1, 0x442279da, 0x5, 0xfffffffffffffffc, 0x400, 0x2, 0x0, 0x100, 0x0, 0x6}, 0x0, 0xa, r1, 0x0) acct(&(0x7f0000000040)='./file0\x00') unshare(0x48020200) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1d, 0x6}) 04:03:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xea\x98\x10', 0x0) pwritev2(r0, &(0x7f0000000380)=[{&(0x7f0000000080)='D', 0x1}], 0x1, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$nl_generic(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r3, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r1, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x20040000) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2e45, 0x1, &(0x7f0000000200)=[{&(0x7f0000000580)="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", 0x1000, 0x4}], 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="6772706a71756f74613d2e2f66696c65302c6e6f696e69745f697461626c652c736d61636b0000726f6f743dffff2c00"]) r5 = syz_mount_image$iso9660(&(0x7f00000017c0), &(0x7f0000001800)='./file1\x00', 0x3, 0x1, &(0x7f0000001900)=[{&(0x7f0000001840)="64071bcf3f29ad7aeb46a04afb73766a2594d890d1afd1696efc733e82222a6ca93949864edaa655c0da2e5ce7a71422b8edbd9664ea00d14d9d68ac68e733611a8ad9f47b4395539f87806fe801bc7b0d6b23149b464fad671426388fcf530dd6aa36ad0c7b0c146f161753207ec81e3d84537bb2e7fef0940625b4802d5062686f3cd355ebf3f807ee9cd921514cef", 0x90, 0x7fffffff}], 0x202000, &(0x7f0000001940)={[{@gid={'gid', 0x3d, 0xee01}}, {@unhide}, {@overriderock}], [{@seclabel}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) close_range(r5, r4, 0x2) 04:03:43 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) 04:03:43 executing program 6: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4005e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x800}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x114}], 0x1}, 0x0) sendto(r0, &(0x7f0000001e00)="8c3d0c4fbb20b43429b8a84b6e77ec8f3fb9ac18f616c844ba0ec427a7b29e8b650fa7821958e526f33de37fb8a7f858686815a6c57175ade15f789e4ddee5740204019830d7e7d828c426a02402598dd34c03faf8c06eb80732ec21bb536b267e61096eb21c9c83ff06d7f7d489e820e1123bdff263e8d4c0b35c07dac9703542534e25f74d1a0e3ebc818f84a65627cd8435c2bf8c8dbea2ce6e1e810de4b85574f5c9a231ed48bd2fecc7cfe14a66b9d753ef1c8605e91525650b58dd8c9ba5386afb7583d5a72e5228ac80920d344def693481f9eaa48a94aa195f28bfb74cf93449586aae488636684135fc86483a2ebe6f1b1d8bddb64ad9482470ae3474f04099d68fd905f789ba87256e8b8c56e55eda605528c5e22b63dc7980c6bc9755fafc27db765279871bd448891749ab96b4467ec8f56fcb75fccfac8dbb91de491e9b3964c5327d36caa0779735177a3cf1ccb3d36849eab648f8900b54474846165f735405f2e5b08eab5e23a7dbe5a931f32b39121b4d87cf18e64e59faf979f799cdbdf050738bbf6523deba905ecfac5124239a2b44e8d54d19b091254636ab59d0a51f7304d4323a12e5a5c4fd3c1a7f453989bd7529842bd1ac0fb1c25d751bb24201a23b395f2ab23c9ed70407853ee6ae8450974de6d8cbd7264ee6e707c24f311a9328b3e80b23d62b57a2db220361546ec7aeea8cc26e48b1f60ce1523537d4c0d5c362362bdb6904cf9bb27de50d73af72187a83e01292032d03ac54491edd489c4ca012f4e3ae2834efc866ad1a642b96137f33413088c9983ca610e80544420061697cfbab098d105a6a862aebf4857967a6ef73ece60e22a7b9f59ee5a9e9308da4c40c1f38bef2d3ae56bde28dacea19d8ee712a16cb9f334d12469af0aa88c82ee648b6342c3f6ecda04f1f438df6668403c2206391bc945f67dd290cfbc2f06a88fa4f733e64714a30a31a3e5d27a6f1f5ee8d7e0b232607abcc9ce1bd89c44c2058b4b9ccf0c3fe3c677e9b16c25597413af32371e12b532c7d8c01bcc20d18dd6a7e22fff3d21ca9c74fdcefbc6197d16919078f81cb97a5c5344e9d2bf69bb15ba3b8ae6bce5fd16ebc3cbed5fa296d8e096705a90806adf369e21bddc44026037220c7511d6ce0d6420982d331f7ba711da266752e2312be17c8adb1cc7cc1683eb6d003c7fa162b059022f94b3bb2a06c5a3e01019a045dbac4fa7c03212d14e178736508059455f30d6fcc5cf1813d8de6f45548cdab7e9958df267234ac36fb42607636e894910f8f5f75fec5fe93d572c50b888d69dab4e4760a2c31257b59567a0cf9862c1ab09155e67839631905a4bb87ab88a9a3f81f3042d8359c54113559f1cd57fbd606affc0a10936407a70eb4c66abb970a256feb8a4d14fd6418adb3d0b0d7a450a0262d01abe365f61b104745297e76796c6e50f39194d2e44ebecc8dbde517eaffbe0b12547bc68307b36971c9437a84b0bddffa0e595320caa83e0ab08e4593a2ed33b22bab19f2db996eae38252e30075d9daa871902dd4848f908505127731385905c9c583e2fb1efaddce519304d00c566e65b81678d0a7029dab47e7f12d1693712f686023fa6e5a676125c4fb3333baabb6d6ee564ecb61be31eae7ac5e3c4eef2a5a576dcbec4db9c1d46d09ad6528fc1df7ac0aa9d628220760fb754ce3a5dddb11ca51162687921c5ee2412c49ac2e38b3d468351c3978e3601468b31a40a4a1ac6a7c76adcd58d3fdf9e96c7b038c539f7db1b3bd44d22940b0bb64db265520f51d71ec7a96a483018b4cd5d9ce81d6c34ddb56a5a74b98f5a2290b8ca96f7e487825f625ae1f29468b2b3cbbc48cf5e75d47a3cd4a32d6f06abf91fc77f3491509447433c89695ddd0bd1945fb041ca08159814da8d41cae2ec7e0cf619fe4258831be5d8c9c59ff6165bc2b0b087f74eb4e2e85f5b7b3bb688ec8abe9b610fc91070f5101a31e16272e8f4ec46fc531d8a75606d36c4e3f33291bcb50edcb227e00207532b4907306d928e9076bb6f670eb4938fc8a3973372d62bf84bdafd921b2c04db6483ba7a6d7219c9b661ffde30868ad5cd81275a44172033661ed40c7bd4694619df5ce180e0e310cb7d7fc7fda20aca530b75d371ae252726368a378ab18d01dfd6affde5bf9bc4bd928434cd307442b563cf5c33655eb2826157cf4de35a25e11f4138fe1ab0e90c6e2c81db9495bc4bae4a903fb862c8c65863c37c7b88f19a0ee90710d0680b51cd498fb4acf5f70d3a41022eacf8c2605b2430fe31a85c1fb7c0415b59ec5de9ab93143dd2d9b16586aab7e0151acdc20502bdd1bb9552d124bfb63a39a969b8aabb63eadb19341acbc026f514d6289e71a76d10650ece1b6ee912233aef596095f5b404294b015b7c9a2ea480171eec1214ae96bfa4416badbcc780729b92dfa75c6420269d2eb518023a8c3edb50dbade7011ed76c304ce0de760d7753caeed38dba71688a852a378ed7a763a5d2037023f5a4bc67e5677052466e4700b5e906b04be22714102155e56752b4faf9a16eaf29462f99ed647b52f36ef7ff21960e9f9e539fa7f1b4172188c42fbfbb332735d34845716a4a8a8ee82606699a8dff4f3fdeb74fd6132f19f4bd5d83ce5e601f20ae7c56603f3d52f5cf8b48e1dfcd8f02e5698b1c15af11e2d214238355ce321574a02dbaa4faef5c6aacd2629d217ad6380e8f397f402b6aaf5900299e4afa4fab2e17a39e78a8cbf88a7386696979bd0525409b10e650d69030300958a2ee79d0ea0114c6fb72b18a6631c8a5e461c8907f1fffbda66345b30a3136f3ee716cd51636b760967a7422812a224c2fcb72767e45a2f430d31108ca2d62a6a1fb6dbd79bbb5ce3268fb6936f41b8d73d832a9384b2f88fea4c41c993f4c90e698cc78e6027893dcd052da6b7db05aa14ddfb0d005676f8bd6960b8f2b663f6b1b1b72bce6c0d111f9a168a7408a39b3ee32765210c476bf5eff964c2d8fd11837daf16cb92facc32dffb459214161e295ec5122be0cc30f9a855b2e3ecb43379ddde53f8e6d3c57e80ffd83fd30f1814f0daa095d7869ee8b2e15cd7499bb01e5f651c0ff2a4768473b3a176551f7e8daaffba02525dddf7ad778f04cd3e28d9978eeae816052d028ac2f7d8d1ab4ebb62c4ca99c679b71b253c7a533f4cea8a1328326d1f0247c5c9e7e5d74eae1ae525c47ee4a518220bd7088f9aac893f39ddbd7854d6111dd42f64bf7248df89c56ff97087a163269610c7c8154e12ea2216ff14d79b7dd45c62437b82c1ef4ed4bb9f21514b89196165d90b5bc595e42a26cb71c0152474e02e30e5f591a3acc268c83fc4210f85fe8a0050e7a44fb5da893efde387835c806cc469702169682641901057cdb84912b7fb3ae52c3b0100cdb1cea1022881603097d5b4fd4d9e2d5f07d8c3143855ddfac3ebc3f3058275598531b73a703f7d7b1347e6802980a40c3aea197135a615d0599bee5c3b21608882b5200656230d54962c0d12ca1718f7fe17aca960f63b3fac05300e3e8e6012bcc796440618ace1dff9908d116487eda40135f50314fe60cf77e871235dbfefe8a5f92e8c92becb5fbfb7f13310db0a30018205e4862b4d2277b007c30e61626ea991d4112a51aec73ae49fac58f6ab1ee114d365e408a7a2f69ef1f0d655920cf29cd744f0c0a39debbd808892ab419eafcbff5821a5f0bae3bc100bb353ae3063fb21142605b52d7fa2a08b7d38f52cb3b0dc077d98c226686e392fd2e4edc00047e10b754e405e3305fac64fdefbdac225180ae5eac0f98a8c28f40f4fe47ad634c02547eff48547f4778e34759cbea64e0ea6761f66dfd620e391bd0e4323067d043d68760115ebbff46a647035aabea5ec474fcb63078a18c15643e4f75bf70e807edf773b07ebe83f16438f4ac342af2cd2eecb9e3ea7332c3d2fb3fd09a3f3da7ca798a21235dd07ffa0f8af99eaf846fc7430264a548cf61a1cb869f518278732e700fe34fb595b568e71362cf8700b8b2c4f8e291a7a217a267c2eed8bf0172b2bade09d7a453d0ce60c1a1aff6ac7c8158419f3289846cfc26058c9e385ed0d3c411ab02d2c9b99d1135d1ec8056e47aa46dd8d32cdb58aad84281a044f2ea063dfec4da92a5d87f48e841f215bc10a6cdb175bba78abdee0769a7d9ad7499ceb141ba6ef2c2fc5b66818244ef7345623d1f0557cec342d58cda49a922dc16b26d2e3c05ff78a4bc7feae637ac4254d4010713bfb07eaf57b3231f45bc0de6da7705338bc87666f73a2ecc01f0b46d64cda4b26dbdefdc18b9d047c7a8d1f5c5069eed625375cbce13bfee7131529709177e23df092083950398b64c9f15e79f9c8d6525777571d3314a67191c1887d7e26bd0374f987e9b6a12e0dc34c7624380e1f77c9978b86021410201371033c199c7d6875fb788abcc5e4b01a101447b81c1788fb29cb679acc906a4bf96a63387973827034ef9a0b438206b0ac168899590e1861d26a1e8148a3092ed7b502b91b72e2dc9b2b23dd968b76bc0890c1cb107903093b013e7a22154a398a3f7b42dbcf0f630f27e32964a87c1f600b6a6be8ff7ff81d77b1665dea584b7e353ef3e8f94c2e99275d30a5ceaeab6bcfaa9b807f3441e5de3ad4770cf41963cbb4487869ddc4d57b65bf682dc2f4ef308ec6416f831b436d2237285bbaba8923857bb739c4f718d909cb345ef564175291f6928dddede50c7ca995e43a0aa6489e355cd0506b28cd9af23a609d80223067f4a93e98eba41fcb69016470ace02f64efc64cc6baf5d4bb3a0f1dc423fdfcaac4cbaea3458deb19836c6fdfb8611c9877ee566c05f143e81ff4b1b881c32c516436be6edbdb8b7e0b41608a76bc3742d817721882935c908aa0263ef945f2e0b0a9a8fd280998013ff7b78d0e6101e1899443a19b400ac3aed2fc08d016976bcc5d9bfc2bfea90906768360817db7b5a13966323dbd9815459e67ee976a2e990ee02692767c112bebb4c4fffa7c763c85b2ec29acedc4beb17ee4a7cb6300b6d8642f58f9f4ab31ddd78c6cba39355460c696dc7f5f70c5ffdbc2fde88be44a585f8799cc815491086997d1b9996492b267de88e5d8ea77aedb8a300ae913f01e98959cd7c188413def0a8fa8c6f88d423fd00a67d975ab687d7deefdbc4c7fcedeac620e07b2b5f728e620e95d6e8e12a6f9af455db74b530ed129d106db06615e30bde36d0e86fcc676537a1a40aa88213a236863b5422f394f33c6ecd06f40f79f4bb00e196eb4aac049a00c721c7d2e122ee8a09454c724b7d19d22a8ca0d912d4ecb66b795903f4d37f24a89dfe53fe00c311b98a44c888d341ca806411eaf41c814a7cc296df8a786c65c7ce7b481d2f33d91affec2672b70f89b3e314cfeb5e564ae2c4ee0d6b92e21faee43929763825821d7c49676539bccc5a3913d60368ef9e700e713da240e6c1dbae83341aba622e3ee9546c718434579340023219c207eb413beeebbcfa3a3c6ad6c6888665a72433747a95bb1ff6ed955ceceb1c2eb5dc50bacd3c42838682131b8270893a37ad7117dea461e4a483bef65209084e78441ca50d13748dbd019a5106341aeabd6a0f800b16d63f675ba723543b6ba25d7882f2e4383a9ec13e651c0358dce4e256e8594f185796ccb235107f7b3149f4e2eb959c50273ea9fc4357deb1d62b5d22e487110552a57ecc044e2d0d4d863912e7affd7b83d8224c6b89042039b7076369f5d35fbece666d545b7ee6b27bb56697d133fc8dd7f88e2abff6f9cee3e51f1b49d681b0c658bf593ca9dae782350d6775b3776dcded9f35151165892714d81f2b01ea22e2e484aa9a1d", 0x103f, 0x0, &(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e23, 0x8, @loopback, 0x5}}}, 0x80) ftruncate(r0, 0x10000) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4, 0x6) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f00000000c0)=0x1, 0x8, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, r1, 0x0, 0x9bbb) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000280)={0x101, {{0xa, 0x4e23, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x831a}}, {{0xa, 0x4e22, 0x3ff, @empty, 0xfc1}}}, 0x108) get_mempolicy(&(0x7f0000000200), &(0x7f0000000240), 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x0) 04:03:43 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x2ad00, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0xf7, &(0x7f0000000000)=0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000000c0)={@empty, 0x77, r3}) io_submit(r1, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 04:03:43 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) 04:03:43 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 7) 04:03:43 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd_index=0xa, 0x55f, 0x3d, 0x0, 0x2, 0x0, {0x1}}, 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @random="aeb481414a86", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}, @dest_unreach={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}}}}}}, 0x0) [ 918.102382] FAULT_INJECTION: forcing a failure. [ 918.102382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.104839] CPU: 0 PID: 7880 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 918.106230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 918.107913] Call Trace: [ 918.108457] dump_stack+0x107/0x167 [ 918.109209] should_fail.cold+0x5/0xa [ 918.110006] _copy_from_user+0x2e/0x1b0 [ 918.110824] __copy_msghdr_from_user+0x91/0x4b0 [ 918.111772] ? __ia32_sys_shutdown+0x80/0x80 [ 918.112682] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 918.113774] ? perf_trace_lock+0xac/0x490 [ 918.114626] sendmsg_copy_msghdr+0xa1/0x160 [ 918.115492] ? do_recvmmsg+0x6d0/0x6d0 [ 918.116282] ? handle_mm_fault+0xa05/0x3520 [ 918.117160] ? find_held_lock+0x2c/0x110 [ 918.118018] ___sys_sendmsg+0xc6/0x170 [ 918.118821] ? sendmsg_copy_msghdr+0x160/0x160 [ 918.119751] ? vmacache_find+0x55/0x2a0 [ 918.120580] ? do_user_addr_fault+0x5b0/0xc60 [ 918.121518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 918.122582] ? exc_page_fault+0xca/0x1a0 [ 918.123418] ? trace_hardirqs_on+0x5b/0x180 [ 918.124305] ? exc_page_fault+0xca/0x1a0 [ 918.125134] ? asm_exc_page_fault+0x1e/0x30 [ 918.126050] __sys_sendmmsg+0x195/0x470 [ 918.126877] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 918.127754] ? lock_downgrade+0x6d0/0x6d0 [ 918.128617] ? __mutex_unlock_slowpath+0xe1/0x600 [ 918.129599] ? wait_for_completion_io+0x270/0x270 [ 918.130579] ? rcu_read_lock_any_held+0x75/0xa0 [ 918.131512] ? vfs_write+0x354/0xa70 [ 918.132277] ? fput_many+0x2f/0x1a0 [ 918.133024] ? ksys_write+0x1a9/0x260 [ 918.133828] __x64_sys_sendmmsg+0x99/0x100 [ 918.134696] ? syscall_enter_from_user_mode+0x1d/0x50 [ 918.135757] do_syscall_64+0x33/0x40 [ 918.136514] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 918.137554] RIP: 0033:0x7f6639ba0b19 [ 918.138312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.142028] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 918.143563] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 918.144998] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 918.146456] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.147900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.149350] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:44 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 918.272814] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:03:44 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000000080)="20000000000000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000000000000000", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000300)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff065a1189829c7e0d3c38b010ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x40e, 0xc00}, {&(0x7f0000000140)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pidfd_open(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) openat(r4, &(0x7f0000000a00)='./file0/file0\x00', 0x400000, 0x118) r5 = syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x61, 0x2, &(0x7f0000000280)=[{&(0x7f0000000740)="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", 0xff, 0x7030b3e5}, {&(0x7f0000000840)="ce7d29628a982f8d97c30f144044debc1a698382e006651c53879b310cd3b17d6b041f43370e78acad8138a57aa44354c077af72bc2d8f3c025ce582a59f9e442077cac3bd77a7672ae52c1665251c0f46afc1ba8a69225f556d4fee6ec25dd4509f552b9db134ecdd003809db75c0f64dce2b61910721d0717a2d4fb198ac9e25ca5af61bab049b77011cf13a4c6c3f076b9ca1563e58eb86af40469744a468945fdff102e008a15e8c0a3d9b2a3240801b4fba89722a2de31f9b0770dbbdae305eddeb3a48", 0xc6, 0x3}], 0x4, &(0x7f0000000940)={[{@huge_always}, {@huge_advise}], [{@euid_lt}, {@hash}, {@seclabel}]}) openat(r5, &(0x7f00000009c0)='./file0/file0\x00', 0x1bdac0, 0x4) 04:03:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="09000000182200ffff000000"], 0x28}}, 0x0) 04:03:44 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 04:03:44 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:44 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) close_range(0xffffffffffffffff, r3, 0x2) [ 918.457952] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 04:03:44 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) 04:03:58 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) 04:03:58 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x153}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40), 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000000080)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/226, 0xe2}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x0, 0x0) unshare(0x48020200) 04:03:58 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="04005b00"], 0x20}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) 04:03:58 executing program 4: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x3ff, @any, 0x9, 0x2}, 0xe) r3 = inotify_init1(0x0) fcntl$dupfd(r3, 0x0, r3) io_submit(0x0, 0x1, &(0x7f0000000300)=[0x0]) syz_open_pts(0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 04:03:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 8) 04:03:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000400)={0x0, 0x1, 0x2000000000000, 0xff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT], 0xfdef) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd, 0x101, 0x0, 0x81, 0x0, 0x1, {0x0, r5}}, 0x10000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) accept4$unix(r2, &(0x7f0000000200), &(0x7f0000000300)=0x6e, 0x80000) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, @perf_config_ext={0x0, 0xffffffffffff0bde}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x3, 0x4077, 0x8000) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x40741, 0x0) fgetxattr(r4, &(0x7f0000000180)=@random={'osx.', '/dev/vcsu\x00'}, &(0x7f0000000340)=""/89, 0x59) [ 932.779400] FAULT_INJECTION: forcing a failure. [ 932.779400] name failslab, interval 1, probability 0, space 0, times 0 [ 932.780827] CPU: 0 PID: 7942 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 932.781650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 932.782651] Call Trace: [ 932.782970] dump_stack+0x107/0x167 [ 932.783417] should_fail.cold+0x5/0xa [ 932.783879] ? __alloc_skb+0x6d/0x5b0 [ 932.784339] should_failslab+0x5/0x20 [ 932.784801] kmem_cache_alloc_node+0x55/0x380 [ 932.785335] __alloc_skb+0x6d/0x5b0 [ 932.785797] alloc_skb_with_frags+0x92/0x570 [ 932.786332] ? find_held_lock+0x2c/0x110 [ 932.786839] sock_alloc_send_pskb+0x7af/0x930 [ 932.787385] ? sk_alloc+0x350/0x350 [ 932.787825] ? perf_trace_lock+0xac/0x490 [ 932.788315] ? lock_chain_count+0x20/0x20 [ 932.788807] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 932.789418] ? ip6_mtu+0x1bb/0x3d0 [ 932.789853] ? lock_downgrade+0x6d0/0x6d0 [ 932.790329] ? ip_frag_init+0x350/0x350 [ 932.790805] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 932.791349] ? ip6_mtu+0x1e9/0x3d0 [ 932.791763] ? ip6_setup_cork+0xfb7/0x1740 [ 932.792260] ip6_make_skb+0x2de/0x4e0 [ 932.792715] ? ip_frag_init+0x350/0x350 [ 932.793193] ? ip_frag_init+0x350/0x350 [ 932.793663] ? ip6_push_pending_frames+0xf0/0xf0 [ 932.794240] ? ip6_dst_hoplimit+0x199/0x440 [ 932.794760] ? lock_downgrade+0x6d0/0x6d0 [ 932.795256] udpv6_sendmsg+0x2060/0x2a00 [ 932.795734] ? ip_frag_init+0x350/0x350 [ 932.796209] ? udp_v6_push_pending_frames+0x360/0x360 [ 932.796798] ? __lockdep_reset_lock+0x180/0x180 [ 932.797361] ? __lockdep_reset_lock+0x180/0x180 [ 932.797935] ? find_held_lock+0x2c/0x110 [ 932.798433] ? sock_has_perm+0x1ea/0x280 [ 932.798935] ? __import_iovec+0x458/0x590 [ 932.799428] ? udp_v6_push_pending_frames+0x360/0x360 [ 932.800034] inet6_sendmsg+0x105/0x140 [ 932.800495] ? inet6_compat_ioctl+0x320/0x320 [ 932.801016] sock_sendmsg+0xf2/0x190 [ 932.801453] ____sys_sendmsg+0x334/0x870 [ 932.801946] ? kernel_sendmsg+0x50/0x50 [ 932.802417] ? do_recvmmsg+0x6d0/0x6d0 [ 932.802874] ? handle_mm_fault+0xa05/0x3520 [ 932.803388] ? find_held_lock+0x2c/0x110 [ 932.803865] ___sys_sendmsg+0xf3/0x170 [ 932.804310] ? sendmsg_copy_msghdr+0x160/0x160 [ 932.804847] ? vmacache_find+0x55/0x2a0 [ 932.805315] ? do_user_addr_fault+0x5b0/0xc60 [ 932.805858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 932.806451] ? exc_page_fault+0xca/0x1a0 [ 932.806940] ? trace_hardirqs_on+0x5b/0x180 [ 932.807456] ? exc_page_fault+0xca/0x1a0 [ 932.807932] ? asm_exc_page_fault+0x1e/0x30 [ 932.808445] __sys_sendmmsg+0x195/0x470 [ 932.808903] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 932.809419] ? lock_downgrade+0x6d0/0x6d0 [ 932.809924] ? __mutex_unlock_slowpath+0xe1/0x600 [ 932.810488] ? wait_for_completion_io+0x270/0x270 [ 932.811055] ? rcu_read_lock_any_held+0x75/0xa0 [ 932.811586] ? vfs_write+0x354/0xa70 [ 932.812016] ? fput_many+0x2f/0x1a0 [ 932.812449] ? ksys_write+0x1a9/0x260 [ 932.812899] __x64_sys_sendmmsg+0x99/0x100 [ 932.813385] ? syscall_enter_from_user_mode+0x1d/0x50 [ 932.813994] do_syscall_64+0x33/0x40 [ 932.814424] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 932.815006] RIP: 0033:0x7f6639ba0b19 [ 932.815439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 932.817545] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 932.818446] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 932.819262] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 932.820089] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 932.820900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.821729] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:58 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) 04:03:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 9) 04:03:58 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) close_range(r3, r6, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000080)) 04:03:58 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:58 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/block', 0x0, 0x180) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x80000000, @private0}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/sockcreate\x00') r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) dup2(r2, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast1, 0x2, 0x5, 0x0, 0x400, 0x8, 0x2000040, r4}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = dup2(r0, r5) accept4$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, 0x0, 0x800) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)={r2}) epoll_create1(0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cgroups\x00', 0x0, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private2, 0x4}, 0x1c) 04:03:58 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 933.000847] FAULT_INJECTION: forcing a failure. [ 933.000847] name failslab, interval 1, probability 0, space 0, times 0 [ 933.003263] CPU: 1 PID: 7958 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 933.004651] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.006348] Call Trace: [ 933.006898] dump_stack+0x107/0x167 [ 933.007649] should_fail.cold+0x5/0xa 04:03:58 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) [ 933.008413] ? create_object.isra.0+0x3a/0xa20 [ 933.009454] should_failslab+0x5/0x20 [ 933.010252] kmem_cache_alloc+0x5b/0x360 [ 933.011079] create_object.isra.0+0x3a/0xa20 [ 933.011979] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 933.013014] kmem_cache_alloc_node+0x169/0x380 [ 933.013974] __alloc_skb+0x6d/0x5b0 [ 933.014727] alloc_skb_with_frags+0x92/0x570 [ 933.015612] ? find_held_lock+0x2c/0x110 [ 933.016453] sock_alloc_send_pskb+0x7af/0x930 [ 933.017389] ? sk_alloc+0x350/0x350 [ 933.018144] ? perf_trace_lock+0xac/0x490 [ 933.019012] ? lock_chain_count+0x20/0x20 [ 933.019867] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 933.020884] ? ip6_mtu+0x1bb/0x3d0 [ 933.021607] ? lock_downgrade+0x6d0/0x6d0 [ 933.022455] ? ip_frag_init+0x350/0x350 [ 933.023269] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 933.024234] ? ip6_mtu+0x1e9/0x3d0 [ 933.024957] ? ip6_setup_cork+0xfb7/0x1740 [ 933.025829] ip6_make_skb+0x2de/0x4e0 [ 933.026612] ? ip_frag_init+0x350/0x350 [ 933.027428] ? ip_frag_init+0x350/0x350 [ 933.028230] ? ip6_push_pending_frames+0xf0/0xf0 [ 933.029186] ? ip6_dst_hoplimit+0x199/0x440 [ 933.030059] ? lock_downgrade+0x6d0/0x6d0 [ 933.030908] udpv6_sendmsg+0x2060/0x2a00 [ 933.031752] ? ip_frag_init+0x350/0x350 [ 933.032585] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.033634] ? __lockdep_reset_lock+0x180/0x180 [ 933.034583] ? __lockdep_reset_lock+0x180/0x180 [ 933.035533] ? find_held_lock+0x2c/0x110 [ 933.036371] ? sock_has_perm+0x1ea/0x280 [ 933.037232] ? __import_iovec+0x458/0x590 [ 933.038095] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.039161] inet6_sendmsg+0x105/0x140 [ 933.039971] ? inet6_compat_ioctl+0x320/0x320 [ 933.040875] sock_sendmsg+0xf2/0x190 [ 933.041652] ____sys_sendmsg+0x334/0x870 [ 933.042492] ? kernel_sendmsg+0x50/0x50 [ 933.043301] ? do_recvmmsg+0x6d0/0x6d0 [ 933.044091] ? handle_mm_fault+0xa05/0x3520 [ 933.044975] ? find_held_lock+0x2c/0x110 [ 933.045839] ___sys_sendmsg+0xf3/0x170 [ 933.046626] ? sendmsg_copy_msghdr+0x160/0x160 [ 933.047553] ? vmacache_find+0x55/0x2a0 [ 933.048376] ? do_user_addr_fault+0x5b0/0xc60 [ 933.049294] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 933.050355] ? exc_page_fault+0xca/0x1a0 [ 933.051166] ? trace_hardirqs_on+0x5b/0x180 [ 933.052037] ? exc_page_fault+0xca/0x1a0 [ 933.053039] ? asm_exc_page_fault+0x1e/0x30 [ 933.053971] __sys_sendmmsg+0x195/0x470 [ 933.054800] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 933.054819] ? lock_downgrade+0x6d0/0x6d0 [ 933.054859] ? __mutex_unlock_slowpath+0xe1/0x600 [ 933.054883] ? wait_for_completion_io+0x270/0x270 [ 933.054905] ? rcu_read_lock_any_held+0x75/0xa0 [ 933.054922] ? vfs_write+0x354/0xa70 [ 933.054944] ? fput_many+0x2f/0x1a0 [ 933.054964] ? ksys_write+0x1a9/0x260 [ 933.054995] __x64_sys_sendmmsg+0x99/0x100 [ 933.055012] ? syscall_enter_from_user_mode+0x1d/0x50 04:03:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) [ 933.055032] do_syscall_64+0x33/0x40 [ 933.055053] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 933.055066] RIP: 0033:0x7f6639ba0b19 [ 933.055085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.055095] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.055117] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 933.055128] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 933.055139] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.055149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.055160] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:59 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 933.425124] FAULT_INJECTION: forcing a failure. [ 933.425124] name failslab, interval 1, probability 0, space 0, times 0 [ 933.427588] CPU: 1 PID: 7994 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 933.428975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.430700] Call Trace: [ 933.431250] dump_stack+0x107/0x167 04:03:59 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:59 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:59 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:03:59 executing program 7: r0 = syz_io_uring_setup(0x24, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 10) [ 933.432193] should_fail.cold+0x5/0xa [ 933.433027] should_failslab+0x5/0x20 [ 933.433795] __kmalloc_node_track_caller+0x74/0x310 [ 933.434812] ? alloc_skb_with_frags+0x92/0x570 [ 933.435757] __alloc_skb+0xb1/0x5b0 [ 933.436502] alloc_skb_with_frags+0x92/0x570 [ 933.437392] ? find_held_lock+0x2c/0x110 [ 933.438224] sock_alloc_send_pskb+0x7af/0x930 [ 933.439139] ? sk_alloc+0x350/0x350 [ 933.439878] ? perf_trace_lock+0xac/0x490 [ 933.440721] ? lock_chain_count+0x20/0x20 [ 933.441566] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 933.442619] ? ip6_mtu+0x1bb/0x3d0 [ 933.443342] ? lock_downgrade+0x6d0/0x6d0 [ 933.444173] ? ip_frag_init+0x350/0x350 [ 933.444986] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 933.445941] ? ip6_mtu+0x1e9/0x3d0 [ 933.446687] ? ip6_setup_cork+0xfb7/0x1740 04:03:59 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x153}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8be}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = gettid() process_vm_readv(r1, &(0x7f0000001a40), 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000000080)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/226, 0xe2}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x0, 0x0) unshare(0x48020200) [ 933.447551] ip6_make_skb+0x2de/0x4e0 [ 933.448374] ? ip_frag_init+0x350/0x350 [ 933.449186] ? ip_frag_init+0x350/0x350 [ 933.450061] ? ip6_push_pending_frames+0xf0/0xf0 [ 933.451044] ? ip6_dst_hoplimit+0x199/0x440 [ 933.451893] ? lock_downgrade+0x6d0/0x6d0 [ 933.452733] udpv6_sendmsg+0x2060/0x2a00 [ 933.453549] ? ip_frag_init+0x350/0x350 [ 933.454364] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.455377] ? __lockdep_reset_lock+0x180/0x180 [ 933.456331] ? __lockdep_reset_lock+0x180/0x180 [ 933.457258] ? find_held_lock+0x2c/0x110 [ 933.458115] ? sock_has_perm+0x1ea/0x280 [ 933.458946] ? __import_iovec+0x458/0x590 [ 933.459757] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.460811] inet6_sendmsg+0x105/0x140 [ 933.461617] ? inet6_compat_ioctl+0x320/0x320 [ 933.462499] sock_sendmsg+0xf2/0x190 [ 933.463267] ____sys_sendmsg+0x334/0x870 [ 933.464073] ? kernel_sendmsg+0x50/0x50 [ 933.464885] ? do_recvmmsg+0x6d0/0x6d0 [ 933.465688] ? handle_mm_fault+0xa05/0x3520 [ 933.466549] ? find_held_lock+0x2c/0x110 [ 933.467393] ___sys_sendmsg+0xf3/0x170 [ 933.468191] ? sendmsg_copy_msghdr+0x160/0x160 [ 933.469111] ? vmacache_find+0x55/0x2a0 [ 933.469929] ? do_user_addr_fault+0x5b0/0xc60 [ 933.470844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 933.471907] ? exc_page_fault+0xca/0x1a0 [ 933.472723] ? trace_hardirqs_on+0x5b/0x180 [ 933.473590] ? exc_page_fault+0xca/0x1a0 [ 933.474401] ? asm_exc_page_fault+0x1e/0x30 [ 933.475284] __sys_sendmmsg+0x195/0x470 [ 933.476079] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 933.476947] ? lock_downgrade+0x6d0/0x6d0 [ 933.477813] ? __mutex_unlock_slowpath+0xe1/0x600 [ 933.478769] ? vfs_write+0x344/0xa70 [ 933.479499] ? wait_for_completion_io+0x270/0x270 [ 933.480459] ? rcu_read_lock_any_held+0x75/0xa0 [ 933.481385] ? vfs_write+0x354/0xa70 [ 933.482150] ? fput_many+0x2f/0x1a0 [ 933.482887] ? ksys_write+0x1a9/0x260 [ 933.483662] __x64_sys_sendmmsg+0x99/0x100 [ 933.484518] ? syscall_enter_from_user_mode+0x1d/0x50 [ 933.485543] do_syscall_64+0x33/0x40 [ 933.486311] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 933.487349] RIP: 0033:0x7f6639ba0b19 [ 933.488106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.491851] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.493396] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 933.494840] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 933.496281] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.497733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.499160] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:03:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 11) 04:03:59 executing program 7: r0 = syz_io_uring_setup(0x24, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:03:59 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) 04:03:59 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) [ 933.673090] FAULT_INJECTION: forcing a failure. [ 933.673090] name failslab, interval 1, probability 0, space 0, times 0 [ 933.674471] CPU: 0 PID: 8010 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 933.675213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 933.676096] Call Trace: [ 933.676394] dump_stack+0x107/0x167 [ 933.676815] should_fail.cold+0x5/0xa [ 933.677239] ? create_object.isra.0+0x3a/0xa20 [ 933.677748] should_failslab+0x5/0x20 [ 933.678158] kmem_cache_alloc+0x5b/0x360 [ 933.678610] create_object.isra.0+0x3a/0xa20 [ 933.679100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 933.679662] __kmalloc_node_track_caller+0x1a6/0x310 [ 933.680236] ? alloc_skb_with_frags+0x92/0x570 [ 933.680732] __alloc_skb+0xb1/0x5b0 [ 933.681132] alloc_skb_with_frags+0x92/0x570 [ 933.681617] ? find_held_lock+0x2c/0x110 [ 933.682062] sock_alloc_send_pskb+0x7af/0x930 [ 933.682567] ? sk_alloc+0x350/0x350 [ 933.682969] ? perf_trace_lock+0xac/0x490 [ 933.683430] ? lock_chain_count+0x20/0x20 [ 933.683888] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 933.684444] ? ip6_mtu+0x1bb/0x3d0 [ 933.684835] ? lock_downgrade+0x6d0/0x6d0 [ 933.685290] ? ip_frag_init+0x350/0x350 [ 933.685744] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 933.686257] ? ip6_mtu+0x1e9/0x3d0 [ 933.686649] ? ip6_setup_cork+0xfb7/0x1740 [ 933.687122] ip6_make_skb+0x2de/0x4e0 [ 933.687542] ? ip_frag_init+0x350/0x350 [ 933.687980] ? ip_frag_init+0x350/0x350 [ 933.688417] ? ip6_push_pending_frames+0xf0/0xf0 [ 933.688946] ? ip6_dst_hoplimit+0x199/0x440 [ 933.689414] ? lock_downgrade+0x6d0/0x6d0 [ 933.689893] udpv6_sendmsg+0x2060/0x2a00 [ 933.690334] ? ip_frag_init+0x350/0x350 [ 933.690784] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.691339] ? __lockdep_reset_lock+0x180/0x180 [ 933.691861] ? __lockdep_reset_lock+0x180/0x180 [ 933.692369] ? find_held_lock+0x2c/0x110 [ 933.692828] ? sock_has_perm+0x1ea/0x280 [ 933.693283] ? __import_iovec+0x458/0x590 [ 933.693744] ? udp_v6_push_pending_frames+0x360/0x360 [ 933.694298] inet6_sendmsg+0x105/0x140 [ 933.694734] ? inet6_compat_ioctl+0x320/0x320 [ 933.695217] sock_sendmsg+0xf2/0x190 [ 933.695631] ____sys_sendmsg+0x334/0x870 [ 933.696080] ? kernel_sendmsg+0x50/0x50 [ 933.696519] ? do_recvmmsg+0x6d0/0x6d0 [ 933.696938] ? handle_mm_fault+0xa05/0x3520 [ 933.697414] ? find_held_lock+0x2c/0x110 [ 933.697871] ___sys_sendmsg+0xf3/0x170 [ 933.698300] ? sendmsg_copy_msghdr+0x160/0x160 [ 933.698799] ? vmacache_find+0x55/0x2a0 [ 933.699244] ? do_user_addr_fault+0x5b0/0xc60 [ 933.699736] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 933.700318] ? exc_page_fault+0xca/0x1a0 [ 933.700759] ? trace_hardirqs_on+0x5b/0x180 [ 933.701235] ? exc_page_fault+0xca/0x1a0 [ 933.701689] ? asm_exc_page_fault+0x1e/0x30 [ 933.702178] __sys_sendmmsg+0x195/0x470 [ 933.702612] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 933.703090] ? lock_downgrade+0x6d0/0x6d0 [ 933.703555] ? __mutex_unlock_slowpath+0xe1/0x600 [ 933.704094] ? wait_for_completion_io+0x270/0x270 [ 933.704619] ? rcu_read_lock_any_held+0x75/0xa0 [ 933.705130] ? vfs_write+0x354/0xa70 [ 933.705531] ? fput_many+0x2f/0x1a0 [ 933.705939] ? ksys_write+0x1a9/0x260 [ 933.706358] __x64_sys_sendmmsg+0x99/0x100 [ 933.706829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 933.707393] do_syscall_64+0x33/0x40 [ 933.707806] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 933.708357] RIP: 0033:0x7f6639ba0b19 [ 933.708771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 933.710754] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 933.711591] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 933.712380] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 933.713175] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 933.713966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 933.714761] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:04:14 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x80}, 'port0\x00'}) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x5, 0x8, 0x8, 0x40, 0x0, 0x3, 0x94002, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp, 0x0, 0xf9fa, 0xff, 0x16053127483323be, 0x7, 0x1, 0x9, 0x0, 0x1ff, 0x0, 0x6}, r1, 0xa, 0xffffffffffffffff, 0x9) 04:04:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 12) 04:04:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x4010, r1, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f0000000080)={0x1, 0x200, 0x1a1, 0x800, 0x8, 0x6}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e23, 0x8, @private0, 0x8}}, 0x0, 0x0, 0x2f, 0x0, "aa3262f5718a75c5e4c107b36be5b731cc4ae77e17704e82b2f5a9337ad14b50884654f3309f0ef8bd0753b6aa533ec31376d261e48a66f039d98a9ac4d5d3ad5ba22181cac531a7c335b46ce3d875ce"}, 0xd8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0xffffffffffffff00) sendto(r2, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r2, &(0x7f0000001a00), 0x0, 0x10062, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x7f, 0x1, 0x4, 0x7, 0x0, 0xffffffff, 0x2401, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0xb4, 0x20000001}, 0x0, 0xdb, 0x4827, 0x5, 0x4, 0x4, 0x3, 0x0, 0x7, 0x0, 0x200000000000800}, 0x0, 0x2, 0xffffffffffffffff, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001e00)={0x0, 0x1}) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) fallocate(r3, 0x10, 0x0, 0x8000) fcntl$dupfd(r0, 0x0, r3) 04:04:14 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:04:14 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:04:14 executing program 7: r0 = syz_io_uring_setup(0x24, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:14 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) chown(&(0x7f0000000140)='./file1\x00', 0xee01, 0xee01) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x8420, &(0x7f0000000100)={[{@huge_advise}]}) 04:04:14 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) [ 948.645566] FAULT_INJECTION: forcing a failure. [ 948.645566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.648392] CPU: 0 PID: 8038 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 948.649794] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 948.651815] Call Trace: [ 948.652368] dump_stack+0x107/0x167 [ 948.653263] should_fail.cold+0x5/0xa [ 948.654087] _copy_from_user+0x2e/0x1b0 [ 948.655066] __copy_msghdr_from_user+0x91/0x4b0 [ 948.656022] ? __ia32_sys_shutdown+0x80/0x80 [ 948.657064] ? udp_v6_push_pending_frames+0x360/0x360 [ 948.658125] ? inet6_sendmsg+0xbd/0x140 [ 948.658924] ? inet6_compat_ioctl+0x320/0x320 [ 948.659825] ? sock_sendmsg+0x55/0x190 [ 948.660615] sendmsg_copy_msghdr+0xa1/0x160 [ 948.661536] ? do_recvmmsg+0x6d0/0x6d0 [ 948.662387] ? __lock_acquire+0x1657/0x5b00 [ 948.663318] ___sys_sendmsg+0xc6/0x170 [ 948.664148] ? sendmsg_copy_msghdr+0x160/0x160 [ 948.665108] ? vmacache_find+0x55/0x2a0 [ 948.665977] ? __lockdep_reset_lock+0x180/0x180 [ 948.666970] ? find_held_lock+0x2c/0x110 [ 948.667838] ? __might_fault+0xd3/0x180 [ 948.668681] ? lock_downgrade+0x6d0/0x6d0 [ 948.669555] ? asm_exc_page_fault+0x1e/0x30 [ 948.670502] __sys_sendmmsg+0x195/0x470 [ 948.671353] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 948.672261] ? lock_downgrade+0x6d0/0x6d0 [ 948.673173] ? __mutex_unlock_slowpath+0xe1/0x600 [ 948.674231] ? wait_for_completion_io+0x270/0x270 [ 948.675276] ? rcu_read_lock_any_held+0x75/0xa0 [ 948.676267] ? vfs_write+0x354/0xa70 [ 948.677071] ? fput_many+0x2f/0x1a0 [ 948.677860] ? ksys_write+0x1a9/0x260 [ 948.678696] __x64_sys_sendmmsg+0x99/0x100 [ 948.679688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 948.680912] do_syscall_64+0x33/0x40 [ 948.681807] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 948.683002] RIP: 0033:0x7f6639ba0b19 [ 948.683874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 948.688215] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 948.690037] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 948.691651] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 948.693174] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 04:04:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$nl_generic(r2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r2, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) [ 948.694726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 948.694738] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 965.610597] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 965.634217] FAULT_INJECTION: forcing a failure. [ 965.634217] name failslab, interval 1, probability 0, space 0, times 0 [ 965.636467] CPU: 1 PID: 8067 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 965.637789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.639634] Call Trace: [ 965.640168] dump_stack+0x107/0x167 [ 965.640876] should_fail.cold+0x5/0xa [ 965.641619] ? __alloc_skb+0x6d/0x5b0 [ 965.642351] should_failslab+0x5/0x20 [ 965.643080] kmem_cache_alloc_node+0x55/0x380 [ 965.643949] __alloc_skb+0x6d/0x5b0 [ 965.644653] alloc_skb_with_frags+0x92/0x570 [ 965.645486] ? find_held_lock+0x2c/0x110 [ 965.646450] sock_alloc_send_pskb+0x7af/0x930 [ 965.647445] ? sk_alloc+0x350/0x350 04:04:31 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:04:31 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 04:04:31 executing program 4: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private0}, 0x14) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000100001c2c3000000000000000000000005000000000000000c000080080010000465e06db3a09b877f19b94219460a8d9b8283bcbfaead3ecbdd68572049711a9d2ccd432d74e9454d1302ab036df4f9", @ANYRESDEC, @ANYBLOB="5dc07f5882428b8bd1bf4c5d06f04fe9295d791481adc131040127d140d0e99c9353d6f4044c4f9ed3f18bfe7dc5bab1eb8b715681cda47f106ff7f95996681ee5dfd08d38775905f2f2ac589c2242eaf951bb67fbcc83b23faea07afdd5756d4e5c0c3a924d979d39b933d01e6595e0fea421e6874457d241c1f6b5554b8839d7a86cc6d451eb8405f5d1b61b5d36a586ca8181b444af5063b1386848405ac0dd05235311248d7e3a6e8e145fff4973b046bd182c70ddc3c3e0bf8caedd04a8946dc8a4a249cce37dbcaa55ad3f7ba31d20e8024540806bd4245edc62531b804b8bf78e1cebd249a36c5c812bc9d2e755ad"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x4, 0x85, 0x52, 0x0, 0x26, @empty, @mcast2, 0x1, 0x80, 0x402, 0xa273}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x894c, 0x7}, 0x0, 0x0, 0x1004, 0x7, 0x0, 0xfffd7fff, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000200)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) 04:04:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 13) 04:04:31 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:31 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:04:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) [ 965.648244] ? perf_trace_lock+0xac/0x490 [ 965.649145] ? lock_chain_count+0x20/0x20 [ 965.649964] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 965.651040] ? ip6_mtu+0x1bb/0x3d0 [ 965.651714] ? lock_downgrade+0x6d0/0x6d0 [ 965.652483] ? ip_frag_init+0x350/0x350 ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000000c0)={{}, "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"}) r1 = openat(0xffffffffffffffff, &(0x7f0000001100)='./file0\x00', 0x600000, 0x2) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x2200, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) fallocate(r4, 0x4a, 0x3, 0x3) r5 = fcntl$dupfd(r4, 0x0, r3) name_to_handle_at(r5, &(0x7f0000001180)='./file1\x00', &(0x7f00000011c0)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x100000000, 0x0, 0x1, 0x20, 0x4, 0x7}}, &(0x7f0000001200), 0x3400) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000001240)=0x1ff) r6 = openat$incfs(r3, &(0x7f0000001280)='.log\x00', 0x450400, 0x10a) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f00000012c0)={{0x1, 0x1, 0x18, r7, {0xfffffffe}}, './file1\x00'}) pipe(&(0x7f0000001300)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001400)={'ip6tnl0\x00', &(0x7f0000001380)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x8, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x460069a90aa63fe6, 0x700, 0x3, 0x8000}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001500)={&(0x7f0000001440)={0xb4, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x34}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x80}, @ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x76}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4) r10 = socket(0x1, 0x4, 0x7) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000001900)=@req={0x7, 0x1, 0x0, 0xffff7fff}, 0x10) r11 = dup(r0) fspick(r11, &(0x7f0000001940)='./file0\x00', 0x0) 04:04:31 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) [ 965.653251] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 965.654514] ? ip6_mtu+0x1e9/0x3d0 [ 965.655386] ? ip6_setup_cork+0xfb7/0x1740 [ 965.656420] ip6_make_skb+0x2de/0x4e0 [ 965.657341] ? ip_frag_init+0x350/0x350 [ 965.658328] ? ip_frag_init+0x350/0x350 [ 965.659300] ? ip6_push_pending_frames+0xf0/0xf0 [ 965.660458] ? ip6_dst_hoplimit+0x199/0x440 [ 965.661511] ? lock_downgrade+0x6d0/0x6d0 [ 965.662550] udpv6_sendmsg+0x2060/0x2a00 [ 965.663528] ? ip_frag_init+0x350/0x350 [ 965.664503] ? udp_v6_push_pending_frames+0x360/0x360 [ 965.665737] ? __lockdep_reset_lock+0x180/0x180 [ 965.666893] ? __lockdep_reset_lock+0x180/0x180 [ 965.668028] ? find_held_lock+0x2c/0x110 [ 965.669037] ? sock_has_perm+0x1ea/0x280 [ 965.670061] ? __import_iovec+0x458/0x590 [ 965.671063] ? udp_v6_push_pending_frames+0x360/0x360 [ 965.672302] inet6_sendmsg+0x105/0x140 [ 965.673240] ? inet6_compat_ioctl+0x320/0x320 [ 965.674332] sock_sendmsg+0xf2/0x190 [ 965.675217] ____sys_sendmsg+0x334/0x870 [ 965.676194] ? kernel_sendmsg+0x50/0x50 [ 965.677139] ? do_recvmmsg+0x6d0/0x6d0 [ 965.678085] ? __lock_acquire+0x1657/0x5b00 [ 965.679144] ___sys_sendmsg+0xf3/0x170 [ 965.680068] ? sendmsg_copy_msghdr+0x160/0x160 [ 965.681158] ? vmacache_find+0x55/0x2a0 [ 965.682120] ? __lockdep_reset_lock+0x180/0x180 [ 965.683244] ? find_held_lock+0x2c/0x110 [ 965.684217] ? __might_fault+0xd3/0x180 [ 965.685173] ? lock_downgrade+0x6d0/0x6d0 [ 965.686177] ? asm_exc_page_fault+0x1e/0x30 [ 965.687212] __sys_sendmmsg+0x195/0x470 [ 965.688179] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 965.689208] ? lock_downgrade+0x6d0/0x6d0 [ 965.690237] ? __mutex_unlock_slowpath+0xe1/0x600 [ 965.691390] ? wait_for_completion_io+0x270/0x270 [ 965.692539] ? rcu_read_lock_any_held+0x75/0xa0 [ 965.693648] ? vfs_write+0x354/0xa70 [ 965.694578] ? fput_many+0x2f/0x1a0 [ 965.695448] ? ksys_write+0x1a9/0x260 [ 965.696376] __x64_sys_sendmmsg+0x99/0x100 [ 965.697389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 965.698631] do_syscall_64+0x33/0x40 [ 965.699527] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 965.700738] RIP: 0033:0x7f6639ba0b19 [ 965.701627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.705914] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 965.707715] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 965.709386] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 965.711131] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 965.712689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.714235] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 965.717560] device lo entered promiscuous mode [ 965.753622] device lo left promiscuous mode [ 965.794193] netlink: 'syz-executor.4': attribute type 16 has an invalid length. 04:04:31 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 14) 04:04:31 executing program 5: r0 = syz_io_uring_setup(0x32c4, &(0x7f0000000080)={0x0, 0xfffffffc}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE, 0x4) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, r3+60000000}}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/cgroup.procs/file0\x00', 0x0, 0x0, 0x0) [ 965.943848] FAULT_INJECTION: forcing a failure. [ 965.943848] name failslab, interval 1, probability 0, space 0, times 0 [ 965.946549] CPU: 0 PID: 8093 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 965.948128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.950070] Call Trace: [ 965.950686] dump_stack+0x107/0x167 [ 965.951546] should_fail.cold+0x5/0xa [ 965.952440] ? create_object.isra.0+0x3a/0xa20 [ 965.953506] should_failslab+0x5/0x20 [ 965.954401] kmem_cache_alloc+0x5b/0x360 [ 965.955344] create_object.isra.0+0x3a/0xa20 [ 965.956351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 965.957525] kmem_cache_alloc_node+0x169/0x380 [ 965.958591] __alloc_skb+0x6d/0x5b0 [ 965.959440] alloc_skb_with_frags+0x92/0x570 [ 965.960474] ? find_held_lock+0x2c/0x110 [ 965.961425] sock_alloc_send_pskb+0x7af/0x930 [ 965.962489] ? sk_alloc+0x350/0x350 [ 965.963338] ? perf_trace_lock+0xac/0x490 [ 965.964291] ? lock_chain_count+0x20/0x20 [ 965.965262] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 965.966432] ? ip6_mtu+0x1bb/0x3d0 [ 965.967260] ? lock_downgrade+0x6d0/0x6d0 [ 965.968209] ? ip_frag_init+0x350/0x350 [ 965.969142] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 965.970224] ? ip6_mtu+0x1e9/0x3d0 [ 965.971043] ? ip6_setup_cork+0xfb7/0x1740 [ 965.972016] ip6_make_skb+0x2de/0x4e0 [ 965.972886] ? ip_frag_init+0x350/0x350 [ 965.973796] ? ip_frag_init+0x350/0x350 [ 965.974717] ? ip6_push_pending_frames+0xf0/0xf0 [ 965.975808] ? ip6_dst_hoplimit+0x199/0x440 [ 965.976790] ? lock_downgrade+0x6d0/0x6d0 [ 965.977756] udpv6_sendmsg+0x2060/0x2a00 [ 965.978692] ? ip_frag_init+0x350/0x350 [ 965.979615] ? udp_v6_push_pending_frames+0x360/0x360 [ 965.980796] ? __lockdep_reset_lock+0x180/0x180 [ 965.981872] ? __lockdep_reset_lock+0x180/0x180 [ 965.983000] ? find_held_lock+0x2c/0x110 [ 965.983954] ? sock_has_perm+0x1ea/0x280 [ 965.984918] ? __import_iovec+0x458/0x590 [ 965.985852] ? udp_v6_push_pending_frames+0x360/0x360 [ 965.987026] inet6_sendmsg+0x105/0x140 [ 965.987906] ? inet6_compat_ioctl+0x320/0x320 [ 965.988916] sock_sendmsg+0xf2/0x190 [ 965.989755] ____sys_sendmsg+0x334/0x870 [ 965.990691] ? kernel_sendmsg+0x50/0x50 [ 965.991583] ? do_recvmmsg+0x6d0/0x6d0 [ 965.992485] ? __lock_acquire+0x1657/0x5b00 [ 965.993471] ___sys_sendmsg+0xf3/0x170 [ 965.994357] ? sendmsg_copy_msghdr+0x160/0x160 [ 965.995382] ? vmacache_find+0x55/0x2a0 [ 965.996279] ? __lockdep_reset_lock+0x180/0x180 [ 965.997334] ? find_held_lock+0x2c/0x110 [ 965.998266] ? __might_fault+0xd3/0x180 [ 965.999155] ? lock_downgrade+0x6d0/0x6d0 [ 966.000088] ? asm_exc_page_fault+0x1e/0x30 [ 966.001070] __sys_sendmmsg+0x195/0x470 [ 966.001984] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 966.002962] ? lock_downgrade+0x6d0/0x6d0 [ 966.003900] ? __mutex_unlock_slowpath+0xe1/0x600 [ 966.004977] ? wait_for_completion_io+0x270/0x270 [ 966.006068] ? rcu_read_lock_any_held+0x75/0xa0 [ 966.007104] ? vfs_write+0x354/0xa70 [ 966.007943] ? fput_many+0x2f/0x1a0 [ 966.008756] ? ksys_write+0x1a9/0x260 [ 966.009619] __x64_sys_sendmmsg+0x99/0x100 [ 966.010583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 966.011733] do_syscall_64+0x33/0x40 [ 966.012566] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 966.013706] RIP: 0033:0x7f6639ba0b19 [ 966.014534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 966.018617] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 966.020295] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 966.021864] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 966.023432] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 966.024999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 966.026572] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:04:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:04:48 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:04:48 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 15) 04:04:48 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:04:48 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:04:48 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 04:04:48 executing program 4: mq_unlink(&(0x7f0000000000)='\xf4\x00') mq_unlink(&(0x7f0000000040)='\xf4\x00') mq_unlink(&(0x7f0000000080)='\xf4\x00') mq_unlink(&(0x7f00000000c0)='\xf4\x00') mq_unlink(&(0x7f0000000100)='\xf4\x00') mq_unlink(&(0x7f0000000140)='\xf4\x00') mq_unlink(&(0x7f0000000180)='\xf4\x00') mq_unlink(&(0x7f00000001c0)='\xf4\x00') mq_unlink(&(0x7f0000000200)='\xf4\x00') mq_unlink(&(0x7f0000000240)='&,\\/:\'k{\x00') mq_unlink(&(0x7f0000000280)='&,\\/:\'k{\x00') mq_unlink(&(0x7f00000002c0)='\xf4\x00') mq_unlink(&(0x7f0000000300)='\xf4\x00') mq_unlink(&(0x7f0000000340)='@^-\'}\\$\x00') mq_unlink(&(0x7f0000000380)='@^-\'}\\$\x00') mq_unlink(&(0x7f00000003c0)='!&\x00') mq_unlink(&(0x7f0000000400)='@^-\'}\\$\x00') mq_unlink(&(0x7f0000000440)='!&\x00') mq_unlink(&(0x7f0000000480)='\x00') mq_unlink(&(0x7f00000004c0)='!&\x00') [ 982.683635] FAULT_INJECTION: forcing a failure. [ 982.683635] name failslab, interval 1, probability 0, space 0, times 0 [ 982.686037] CPU: 1 PID: 8117 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 982.687440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.689124] Call Trace: [ 982.689669] dump_stack+0x107/0x167 [ 982.690431] should_fail.cold+0x5/0xa [ 982.691209] ? create_object.isra.0+0x3a/0xa20 [ 982.692146] should_failslab+0x5/0x20 [ 982.692924] kmem_cache_alloc+0x5b/0x360 [ 982.693753] create_object.isra.0+0x3a/0xa20 [ 982.694643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 982.695687] kmem_cache_alloc_node+0x169/0x380 [ 982.696634] __alloc_skb+0x6d/0x5b0 [ 982.697371] alloc_skb_with_frags+0x92/0x570 [ 982.698285] ? find_held_lock+0x2c/0x110 [ 982.699130] sock_alloc_send_pskb+0x7af/0x930 [ 982.700063] ? sk_alloc+0x350/0x350 [ 982.700814] ? perf_trace_lock+0xac/0x490 [ 982.701656] ? lock_chain_count+0x20/0x20 [ 982.702530] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 982.703547] ? ip6_mtu+0x1bb/0x3d0 [ 982.704266] ? lock_downgrade+0x6d0/0x6d0 [ 982.705112] ? ip_frag_init+0x350/0x350 [ 982.705935] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 982.706883] ? ip6_mtu+0x1e9/0x3d0 [ 982.707619] ? ip6_setup_cork+0xfb7/0x1740 [ 982.708475] ip6_make_skb+0x2de/0x4e0 [ 982.709234] ? ip_frag_init+0x350/0x350 [ 982.710038] ? ip_frag_init+0x350/0x350 [ 982.710859] ? ip6_push_pending_frames+0xf0/0xf0 [ 982.711818] ? ip6_dst_hoplimit+0x199/0x440 [ 982.712688] ? lock_downgrade+0x6d0/0x6d0 [ 982.713545] udpv6_sendmsg+0x2060/0x2a00 [ 982.714379] ? ip_frag_init+0x350/0x350 [ 982.715191] ? udp_v6_push_pending_frames+0x360/0x360 [ 982.716223] ? __lockdep_reset_lock+0x180/0x180 [ 982.717169] ? __lockdep_reset_lock+0x180/0x180 [ 982.718108] ? find_held_lock+0x2c/0x110 [ 982.718947] ? sock_has_perm+0x1ea/0x280 [ 982.719786] ? __import_iovec+0x458/0x590 [ 982.720616] ? udp_v6_push_pending_frames+0x360/0x360 [ 982.721649] inet6_sendmsg+0x105/0x140 [ 982.722455] ? inet6_compat_ioctl+0x320/0x320 [ 982.723349] sock_sendmsg+0xf2/0x190 [ 982.724097] ____sys_sendmsg+0x334/0x870 [ 982.724919] ? kernel_sendmsg+0x50/0x50 [ 982.725714] ? do_recvmmsg+0x6d0/0x6d0 [ 982.726516] ? __lock_acquire+0x1657/0x5b00 [ 982.727400] ___sys_sendmsg+0xf3/0x170 [ 982.728178] ? sendmsg_copy_msghdr+0x160/0x160 [ 982.729089] ? vmacache_find+0x55/0x2a0 [ 982.729890] ? __lockdep_reset_lock+0x180/0x180 [ 982.730851] ? find_held_lock+0x2c/0x110 [ 982.731677] ? __might_fault+0xd3/0x180 [ 982.732478] ? lock_downgrade+0x6d0/0x6d0 [ 982.733309] ? asm_exc_page_fault+0x1e/0x30 [ 982.734210] __sys_sendmmsg+0x195/0x470 [ 982.735036] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 982.735927] ? lock_downgrade+0x6d0/0x6d0 [ 982.736806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 982.737795] ? wait_for_completion_io+0x270/0x270 [ 982.738793] ? rcu_read_lock_any_held+0x75/0xa0 [ 982.739742] ? vfs_write+0x354/0xa70 [ 982.740510] ? fput_many+0x2f/0x1a0 [ 982.741253] ? ksys_write+0x1a9/0x260 [ 982.742049] __x64_sys_sendmmsg+0x99/0x100 [ 982.742927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.743986] do_syscall_64+0x33/0x40 [ 982.744751] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 982.745801] RIP: 0033:0x7f6639ba0b19 [ 982.746573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.750275] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 982.751796] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 982.753233] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 982.754697] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 982.754709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 982.754720] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:04:48 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:04:48 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:48 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:04:48 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:04:48 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 04:04:48 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) 04:04:48 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:04:48 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000880)}], 0x8, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x200) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000a40)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8256}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000a80)="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", 0x1000}], 0x1, &(0x7f0000001e00)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r3}}}, @rthdrdstopts={{0x2a0, 0x29, 0x37, {0x1, 0x51, '\x00', [@generic={0x9, 0x4c, "cd04b2c5645df2cc3b4088734de8d46fa266e4ff22516e96f4195dfd6962f5ab2c2e014124d1175c375cf76efd4704a84b256154e08f115dec7fef9a2614c98dcfdecd727f447f507e947bb3"}, @generic={0x80, 0x9c, "a2bb1b27b5af9a6da2d01fb4491121cdd0adcd12115559b838a79263d96e3facbd864b595be034cc25394feb49579110afa5e01e5b95027eabdfc2247a553544d4ffa8e4369402c9f58f8958d58add1d7381cd41a4cc253ce8087d57aa14fd7239042f8dbb12a036a2fabdb7edd7ad1280e2c6179f03f91aa0cd431600785e3378f7e8855ea9e74959e6c700f4dd00bbaac3b2e55c080fd5f44d9ccf"}, @ra={0x5, 0x2, 0x1921}, @jumbo={0xc2, 0x4, 0x3}, @generic={0x1f, 0xa8, "6bcabb628e9a2194323435336b7fe4fbab62b3f313f940a4203bd20bb62a7d46cd7da880363a3068ea8a34404544b43915e8bb1e1895d69c9f6ee48b10c344218d62139c3f499b8679f049dd264711cdcc3ac79c54e15be26a0abf0faa7ae4e8fa50df0da5fcac6e6216d50a85f72e100db71255ca51175116f9eafc9e3dda050d060e9bde9df74d2352e2953757e5fd8c884ae00cc156c856e002a8b79886054640e416ad3d937b"}, @generic={0x81, 0x50, "b265d6d11c5022e3194649302547dcd0e1d1c8462d640815f16d6bfd65ea2e8b9bba6e21c050b8026280a7fe4c644eb1c840ee29fc6dd8fa30f64c3c1e4888a98c6652a4b6cff95cb8514e2f35efbf66"}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x1, 0x91, "6e01730c2ed9baff1ce589224d79fd678bf6a0e2eaddfe055577e58f7bd4ab9fe8e58fa5eef86b87612799d56203cf2a1e7d89429910e7678c6b5cd3e10f9712260af1938bf8c295688a2bb6ad3a18144c0d54ad15842851fe494e09e2601811d902574e486f9aa8d99d6357f9db9c54666c0526109dcefa6377784eca8caf9ac684fca134b0a82ac62cf0c561d9b7a863"}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x2b, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x318}}], 0x1, 0x8051) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r4, 0x10, 0x0, 0x1000002) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendmsg$nl_generic(r7, 0x0, 0x0) sendmsg$AUDIT_GET(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000804}, 0x4080000) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r7, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) connect$inet6(r5, &(0x7f0000000540)={0xa, 0xfffe, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004d00), 0x2f, 0x20040000) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0xb6, @private1, 0x8}, 0x1c) 04:04:48 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:04:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 16) [ 983.149126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=8147 comm=syz-executor.6 [ 983.221931] FAULT_INJECTION: forcing a failure. [ 983.221931] name failslab, interval 1, probability 0, space 0, times 0 [ 983.224329] CPU: 0 PID: 8157 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 983.225724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 983.227425] Call Trace: [ 983.227968] dump_stack+0x107/0x167 [ 983.228720] should_fail.cold+0x5/0xa [ 983.229497] ? create_object.isra.0+0x3a/0xa20 [ 983.230441] should_failslab+0x5/0x20 [ 983.231222] kmem_cache_alloc+0x5b/0x360 [ 983.232047] create_object.isra.0+0x3a/0xa20 [ 983.232931] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 983.233959] __kmalloc_node_track_caller+0x1a6/0x310 [ 983.234984] ? alloc_skb_with_frags+0x92/0x570 [ 983.235910] __alloc_skb+0xb1/0x5b0 [ 983.236649] alloc_skb_with_frags+0x92/0x570 [ 983.237531] ? find_held_lock+0x2c/0x110 [ 983.238384] sock_alloc_send_pskb+0x7af/0x930 [ 983.239307] ? sk_alloc+0x350/0x350 [ 983.240048] ? perf_trace_lock+0xac/0x490 [ 983.240887] ? lock_chain_count+0x20/0x20 [ 983.241733] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 983.242762] ? ip6_mtu+0x1bb/0x3d0 [ 983.243479] ? lock_downgrade+0x6d0/0x6d0 [ 983.244315] ? ip_frag_init+0x350/0x350 [ 983.245133] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 983.246069] ? ip6_mtu+0x1e9/0x3d0 [ 983.246801] ? ip6_setup_cork+0xfb7/0x1740 [ 983.247663] ip6_make_skb+0x2de/0x4e0 [ 983.248428] ? ip_frag_init+0x350/0x350 [ 983.249237] ? ip_frag_init+0x350/0x350 [ 983.250048] ? ip6_push_pending_frames+0xf0/0xf0 [ 983.251030] ? ip6_dst_hoplimit+0x199/0x440 [ 983.251906] ? lock_downgrade+0x6d0/0x6d0 [ 983.252762] udpv6_sendmsg+0x2060/0x2a00 [ 983.253588] ? ip_frag_init+0x350/0x350 [ 983.254415] ? udp_v6_push_pending_frames+0x360/0x360 [ 983.255450] ? __lockdep_reset_lock+0x180/0x180 [ 983.256400] ? __lockdep_reset_lock+0x180/0x180 [ 983.257344] ? find_held_lock+0x2c/0x110 [ 983.258181] ? sock_has_perm+0x1ea/0x280 [ 983.259063] ? __import_iovec+0x458/0x590 [ 983.259899] ? udp_v6_push_pending_frames+0x360/0x360 [ 983.260961] inet6_sendmsg+0x105/0x140 [ 983.261744] ? inet6_compat_ioctl+0x320/0x320 [ 983.262652] sock_sendmsg+0xf2/0x190 [ 983.263413] ____sys_sendmsg+0x334/0x870 [ 983.264236] ? kernel_sendmsg+0x50/0x50 [ 983.265049] ? do_recvmmsg+0x6d0/0x6d0 [ 983.265072] ? __lock_acquire+0x1657/0x5b00 [ 983.265114] ___sys_sendmsg+0xf3/0x170 [ 983.267606] ? sendmsg_copy_msghdr+0x160/0x160 [ 983.268524] ? vmacache_find+0x55/0x2a0 [ 983.269333] ? __lockdep_reset_lock+0x180/0x180 [ 983.270285] ? find_held_lock+0x2c/0x110 [ 983.271114] ? __might_fault+0xd3/0x180 [ 983.271919] ? lock_downgrade+0x6d0/0x6d0 [ 983.272767] ? asm_exc_page_fault+0x1e/0x30 [ 983.273664] __sys_sendmmsg+0x195/0x470 [ 983.274507] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 983.275386] ? lock_downgrade+0x6d0/0x6d0 [ 983.276245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 983.277222] ? wait_for_completion_io+0x270/0x270 [ 983.278202] ? rcu_read_lock_any_held+0x75/0xa0 [ 983.279147] ? vfs_write+0x354/0xa70 [ 983.279905] ? fput_many+0x2f/0x1a0 [ 983.280643] ? ksys_write+0x1a9/0x260 [ 983.281433] __x64_sys_sendmmsg+0x99/0x100 [ 983.282310] ? syscall_enter_from_user_mode+0x1d/0x50 [ 983.283357] do_syscall_64+0x33/0x40 [ 983.284111] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 983.285141] RIP: 0033:0x7f6639ba0b19 [ 983.285892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 983.289639] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 983.289659] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 983.289670] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 983.289681] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 983.289691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.289702] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 983.316661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=8147 comm=syz-executor.6 04:05:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 17) 04:05:03 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) close_range(r3, r6, 0x0) 04:05:03 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:03 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:03 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) 04:05:03 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:05:03 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:05:03 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) close_range(r3, 0xffffffffffffffff, 0x0) [ 997.893336] FAULT_INJECTION: forcing a failure. [ 997.893336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.895772] CPU: 0 PID: 8175 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 997.897136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 997.898791] Call Trace: [ 997.899326] dump_stack+0x107/0x167 [ 997.900061] should_fail.cold+0x5/0xa [ 997.900835] _copy_from_user+0x2e/0x1b0 [ 997.901635] __copy_msghdr_from_user+0x91/0x4b0 [ 997.902589] ? __ia32_sys_shutdown+0x80/0x80 [ 997.903490] ? udp_v6_push_pending_frames+0x360/0x360 [ 997.904519] ? inet6_sendmsg+0xbd/0x140 [ 997.905465] ? inet6_compat_ioctl+0x320/0x320 [ 997.906352] ? sock_sendmsg+0x55/0x190 [ 997.907154] sendmsg_copy_msghdr+0xa1/0x160 [ 997.908008] ? do_recvmmsg+0x6d0/0x6d0 [ 997.908786] ? __lock_acquire+0x1657/0x5b00 [ 997.909655] ___sys_sendmsg+0xc6/0x170 [ 997.910429] ? sendmsg_copy_msghdr+0x160/0x160 [ 997.911338] ? vmacache_find+0x55/0x2a0 [ 997.912131] ? __lockdep_reset_lock+0x180/0x180 [ 997.913064] ? find_held_lock+0x2c/0x110 [ 997.913877] ? __might_fault+0xd3/0x180 [ 997.914670] ? lock_downgrade+0x6d0/0x6d0 [ 997.915491] ? asm_exc_page_fault+0x1e/0x30 [ 997.916364] __sys_sendmmsg+0x195/0x470 [ 997.917158] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 997.918013] ? lock_downgrade+0x6d0/0x6d0 [ 997.918875] ? __mutex_unlock_slowpath+0xe1/0x600 [ 997.919839] ? wait_for_completion_io+0x270/0x270 [ 997.920801] ? rcu_read_lock_any_held+0x75/0xa0 [ 997.921720] ? vfs_write+0x354/0xa70 [ 997.922467] ? fput_many+0x2f/0x1a0 [ 997.923191] ? ksys_write+0x1a9/0x260 [ 997.923959] __x64_sys_sendmmsg+0x99/0x100 [ 997.924799] ? syscall_enter_from_user_mode+0x1d/0x50 [ 997.925824] do_syscall_64+0x33/0x40 [ 997.926576] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 997.927586] RIP: 0033:0x7f6639ba0b19 [ 997.928328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 997.931968] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 997.933481] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 997.934884] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 997.936621] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 997.938048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 997.939755] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:03 executing program 2: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:05:04 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:05:04 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:04 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:04 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) 04:05:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 18) 04:05:04 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) 04:05:04 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) [ 998.292940] FAULT_INJECTION: forcing a failure. [ 998.292940] name failslab, interval 1, probability 0, space 0, times 0 [ 998.294301] CPU: 1 PID: 8213 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 998.295098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 998.296061] Call Trace: [ 998.296368] dump_stack+0x107/0x167 [ 998.296799] should_fail.cold+0x5/0xa [ 998.297238] ? __alloc_skb+0x6d/0x5b0 [ 998.297678] should_failslab+0x5/0x20 [ 998.298119] kmem_cache_alloc_node+0x55/0x380 [ 998.298652] __alloc_skb+0x6d/0x5b0 [ 998.299077] alloc_skb_with_frags+0x92/0x570 [ 998.299586] ? find_held_lock+0x2c/0x110 [ 998.300071] sock_alloc_send_pskb+0x7af/0x930 [ 998.300599] ? sk_alloc+0x350/0x350 [ 998.301029] ? perf_trace_lock+0xac/0x490 [ 998.301512] ? SOFTIRQ_verbose+0x10/0x10 [ 998.301984] ? lock_chain_count+0x20/0x20 [ 998.302486] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 998.303083] ? ip6_mtu+0x1bb/0x3d0 [ 998.303485] ? lock_downgrade+0x6d0/0x6d0 [ 998.303965] ? ip_frag_init+0x350/0x350 [ 998.304437] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 998.304976] ? ip6_mtu+0x1e9/0x3d0 [ 998.305389] ? ip6_setup_cork+0xfb7/0x1740 [ 998.305882] ip6_make_skb+0x2de/0x4e0 [ 998.306327] ? ip_frag_init+0x350/0x350 [ 998.306803] ? ip_frag_init+0x350/0x350 [ 998.307268] ? ip6_push_pending_frames+0xf0/0xf0 [ 998.307823] ? ip6_dst_hoplimit+0x199/0x440 [ 998.308322] ? lock_downgrade+0x6d0/0x6d0 [ 998.308794] udpv6_sendmsg+0x2060/0x2a00 [ 998.309266] ? ip_frag_init+0x350/0x350 [ 998.309735] ? udp_v6_push_pending_frames+0x360/0x360 [ 998.310330] ? __lockdep_reset_lock+0x180/0x180 [ 998.310857] ? lock_chain_count+0x20/0x20 [ 998.311333] ? find_held_lock+0x2c/0x110 [ 998.311803] ? sock_has_perm+0x1ea/0x280 [ 998.312284] ? __import_iovec+0x458/0x590 [ 998.312765] ? udp_v6_push_pending_frames+0x360/0x360 [ 998.313353] inet6_sendmsg+0x105/0x140 [ 998.313785] ? inet6_compat_ioctl+0x320/0x320 [ 998.314291] sock_sendmsg+0xf2/0x190 [ 998.314732] ____sys_sendmsg+0x334/0x870 [ 998.315208] ? kernel_sendmsg+0x50/0x50 [ 998.315665] ? do_recvmmsg+0x6d0/0x6d0 [ 998.316111] ? __lock_acquire+0x1657/0x5b00 [ 998.316611] ___sys_sendmsg+0xf3/0x170 [ 998.317055] ? sendmsg_copy_msghdr+0x160/0x160 [ 998.317591] ? __lockdep_reset_lock+0x180/0x180 [ 998.318124] ? trace_hardirqs_on+0x5b/0x180 [ 998.318634] ? find_held_lock+0x2c/0x110 [ 998.319101] ? __might_fault+0xd3/0x180 [ 998.319553] ? lock_downgrade+0x6d0/0x6d0 [ 998.320026] ? io_schedule_timeout+0x140/0x140 [ 998.320564] __sys_sendmmsg+0x195/0x470 [ 998.321018] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 998.321509] ? lock_downgrade+0x6d0/0x6d0 [ 998.321988] ? __mutex_unlock_slowpath+0xe1/0x600 [ 998.322551] ? wait_for_completion_io+0x270/0x270 [ 998.323102] ? rcu_read_lock_any_held+0x75/0xa0 [ 998.323633] ? vfs_write+0x354/0xa70 [ 998.324050] ? fput_many+0x2f/0x1a0 [ 998.324468] ? ksys_write+0x1a9/0x260 [ 998.324910] __x64_sys_sendmmsg+0x99/0x100 [ 998.325389] ? syscall_enter_from_user_mode+0x1d/0x50 [ 998.325964] do_syscall_64+0x33/0x40 [ 998.326386] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 998.326973] RIP: 0033:0x7f6639ba0b19 [ 998.327405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 998.329437] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 998.330306] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 998.331122] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 998.331925] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 998.332730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 998.333536] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 19) 04:05:19 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:19 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:19 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:19 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 04:05:19 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) 04:05:19 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r3, r6, 0x0) 04:05:19 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) [ 1013.470411] FAULT_INJECTION: forcing a failure. [ 1013.470411] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.472985] CPU: 1 PID: 8226 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1013.474349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.476012] Call Trace: [ 1013.476542] dump_stack+0x107/0x167 [ 1013.477395] should_fail.cold+0x5/0xa [ 1013.478164] ? __alloc_skb+0x6d/0x5b0 [ 1013.479101] should_failslab+0x5/0x20 [ 1013.479866] kmem_cache_alloc_node+0x55/0x380 [ 1013.480937] __alloc_skb+0x6d/0x5b0 [ 1013.481676] alloc_skb_with_frags+0x92/0x570 [ 1013.482730] ? find_held_lock+0x2c/0x110 [ 1013.483562] sock_alloc_send_pskb+0x7af/0x930 [ 1013.484643] ? sk_alloc+0x350/0x350 [ 1013.485381] ? perf_trace_lock+0xac/0x490 [ 1013.486369] ? lock_chain_count+0x20/0x20 [ 1013.487223] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1013.488427] ? ip6_mtu+0x1bb/0x3d0 [ 1013.489140] ? lock_downgrade+0x6d0/0x6d0 [ 1013.489995] ? ip_frag_init+0x350/0x350 [ 1013.490830] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1013.491748] ? ip6_mtu+0x1e9/0x3d0 [ 1013.492466] ? ip6_setup_cork+0xfb7/0x1740 [ 1013.493303] ip6_make_skb+0x2de/0x4e0 [ 1013.494060] ? ip_frag_init+0x350/0x350 [ 1013.494853] ? ip_frag_init+0x350/0x350 [ 1013.495648] ? ip6_push_pending_frames+0xf0/0xf0 [ 1013.496590] ? ip6_dst_hoplimit+0x199/0x440 [ 1013.497446] ? lock_downgrade+0x6d0/0x6d0 [ 1013.498280] udpv6_sendmsg+0x2060/0x2a00 [ 1013.499106] ? ip_frag_init+0x350/0x350 [ 1013.499900] ? udp_v6_push_pending_frames+0x360/0x360 [ 1013.500928] ? __lockdep_reset_lock+0x180/0x180 [ 1013.501858] ? __lockdep_reset_lock+0x180/0x180 [ 1013.502806] ? find_held_lock+0x2c/0x110 [ 1013.503630] ? sock_has_perm+0x1ea/0x280 [ 1013.504474] ? __import_iovec+0x458/0x590 [ 1013.505294] ? udp_v6_push_pending_frames+0x360/0x360 [ 1013.506325] inet6_sendmsg+0x105/0x140 [ 1013.507102] ? inet6_compat_ioctl+0x320/0x320 [ 1013.508002] sock_sendmsg+0xf2/0x190 [ 1013.508745] ____sys_sendmsg+0x334/0x870 [ 1013.509598] ? kernel_sendmsg+0x50/0x50 [ 1013.510431] ? do_recvmmsg+0x6d0/0x6d0 [ 1013.511284] ? __lock_acquire+0x1657/0x5b00 [ 1013.512208] ___sys_sendmsg+0xf3/0x170 [ 1013.513120] ? sendmsg_copy_msghdr+0x160/0x160 [ 1013.514036] ? vmacache_find+0x55/0x2a0 [ 1013.514999] ? __lockdep_reset_lock+0x180/0x180 [ 1013.515943] ? find_held_lock+0x2c/0x110 [ 1013.516920] ? __might_fault+0xd3/0x180 [ 1013.517725] ? lock_downgrade+0x6d0/0x6d0 [ 1013.518711] ? asm_exc_page_fault+0x1e/0x30 [ 1013.519586] __sys_sendmmsg+0x195/0x470 [ 1013.520391] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1013.521242] ? lock_downgrade+0x6d0/0x6d0 [ 1013.522089] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1013.523067] ? wait_for_completion_io+0x270/0x270 [ 1013.524039] ? rcu_read_lock_any_held+0x75/0xa0 [ 1013.524955] ? vfs_write+0x354/0xa70 [ 1013.525700] ? fput_many+0x2f/0x1a0 [ 1013.526418] ? ksys_write+0x1a9/0x260 [ 1013.527191] __x64_sys_sendmmsg+0x99/0x100 [ 1013.528021] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1013.529054] do_syscall_64+0x33/0x40 [ 1013.529796] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1013.530841] RIP: 0033:0x7f6639ba0b19 [ 1013.531580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.535250] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1013.536759] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1013.538172] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1013.539587] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.540987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.542402] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:19 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:19 executing program 6: clone3(&(0x7f00000004c0)={0x283020040, &(0x7f00000001c0), 0x0, &(0x7f0000000280), {0x12}, &(0x7f00000002c0)=""/180, 0xb4, &(0x7f0000000380)=""/241, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x8}, 0x58) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="aacb37005aff7afc0000a8bb080065"], &(0x7f0000000180)={0x1, 0x4, [0x108, 0xb7e, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000800)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}], 0x1) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000200)='./file0\x00', 0xffffffff8f3322e0, 0x4, &(0x7f0000000780)=[{&(0x7f0000000540)="c528e2cadf925e44544fa0ddf51b03b728e7646103f33875dfc3e7ec0f017fe85770c273cd284a7d3a06222f696a5db417489f221ff322b7", 0x38, 0x9}, {&(0x7f0000000580)="7de7eb566e930dd9d425951c3a716aacdbf1e628eb2b0c49949b7cd89f34ef8a92cff6ecb3a2634c481626946bb48e42e765f36e49b6336d2db87f8a51ed25637a761b7117fba6fd8a96a8df0b37f5f947c7a00d5727c69d209c355214c9f495a6532b71d701aefd8562d42cc4bef255fec1ed92f9d62cf7164404e074e81e86aaa185873cb3e8425fc837a87f459b85738bc094b879ff481396368a6b3faa74d096f5180d419105ec1f879b51a204c167e7f14b7ec48103f785ffa5277f502fd16a764ad65f66426d66c3168a89aa62e7dc7f66c30dbf27447582310f583257c6346187c3c818c4f5b26dc88edc", 0xee, 0xfffffffffffffc00}, {&(0x7f0000000680)="3c47f2a73dc7bb7eeb19cddde74355aecea9a98d71f3fb952f2e74dd71013cb7a0d7725ca756aa7eb66adc057b575435f56a99aff18e14d1ab2417549cf2596348a88c61746c5438aa711f4bf645cd7a54d17be9e91b20bc2fce4ddd681975d5cd193fb970a7f2fd9c53acf009be134c9b1bd5012c014cae2ee4d472bc1b5e8aa697f5fa4dfafc1d66724fc73a09", 0x8e, 0x7}, {&(0x7f0000000740)="6f67493942df0ed4cd07ec0b08fc4e87fce1995fcb90d8e00f9e4793d025e23b049245b03675e6a3da0bbe4266a0b88ee85c4864e53d", 0x36, 0x7fff}], 0x101d030, &(0x7f0000000840)={[{@minixdf}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}) openat(r2, &(0x7f0000000880)='./file0\x00', 0x86800, 0x10) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) dup2(r1, r3) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e28, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x2f, 0x20040000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) 04:05:19 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r6, 0x541d, 0x0) 04:05:19 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) 04:05:19 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:19 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 04:05:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 20) 04:05:19 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1013.919661] FAULT_INJECTION: forcing a failure. [ 1013.919661] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.921986] CPU: 0 PID: 8269 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1013.923633] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1013.925280] Call Trace: [ 1013.925912] dump_stack+0x107/0x167 [ 1013.926665] should_fail.cold+0x5/0xa [ 1013.927585] should_failslab+0x5/0x20 [ 1013.928353] __kmalloc_node_track_caller+0x74/0x310 [ 1013.929540] ? alloc_skb_with_frags+0x92/0x570 [ 1013.930462] __alloc_skb+0xb1/0x5b0 [ 1013.931415] alloc_skb_with_frags+0x92/0x570 [ 1013.932401] ? find_held_lock+0x2c/0x110 [ 1013.933337] sock_alloc_send_pskb+0x7af/0x930 [ 1013.934366] ? sk_alloc+0x350/0x350 [ 1013.935209] ? perf_trace_lock+0xac/0x490 [ 1013.936131] ? SOFTIRQ_verbose+0x10/0x10 [ 1013.937036] ? lock_chain_count+0x20/0x20 [ 1013.937979] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1013.939143] ? ip6_mtu+0x1bb/0x3d0 [ 1013.939939] ? lock_downgrade+0x6d0/0x6d0 [ 1013.940865] ? ip_frag_init+0x350/0x350 [ 1013.941772] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1013.942818] ? ip6_mtu+0x1e9/0x3d0 [ 1013.943622] ? ip6_setup_cork+0xfb7/0x1740 [ 1013.944579] ip6_make_skb+0x2de/0x4e0 [ 1013.945427] ? ip_frag_init+0x350/0x350 [ 1013.946328] ? ip_frag_init+0x350/0x350 [ 1013.947253] ? ip6_push_pending_frames+0xf0/0xf0 [ 1013.948325] ? ip6_dst_hoplimit+0x199/0x440 [ 1013.949290] ? lock_downgrade+0x6d0/0x6d0 [ 1013.950240] udpv6_sendmsg+0x2060/0x2a00 [ 1013.951155] ? ip_frag_init+0x350/0x350 [ 1013.952063] ? udp_v6_push_pending_frames+0x360/0x360 [ 1013.953209] ? __lockdep_reset_lock+0x180/0x180 [ 1013.954262] ? __lockdep_reset_lock+0x180/0x180 [ 1013.955337] ? find_held_lock+0x2c/0x110 [ 1013.956266] ? sock_has_perm+0x1ea/0x280 [ 1013.957209] ? __import_iovec+0x458/0x590 [ 1013.958134] ? udp_v6_push_pending_frames+0x360/0x360 [ 1013.959308] inet6_sendmsg+0x105/0x140 [ 1013.960182] ? inet6_compat_ioctl+0x320/0x320 [ 1013.961179] sock_sendmsg+0xf2/0x190 [ 1013.962011] ____sys_sendmsg+0x334/0x870 [ 1013.962945] ? kernel_sendmsg+0x50/0x50 [ 1013.963834] ? do_recvmmsg+0x6d0/0x6d0 [ 1013.964712] ? __lock_acquire+0x1657/0x5b00 [ 1013.965697] ___sys_sendmsg+0xf3/0x170 [ 1013.966570] ? sendmsg_copy_msghdr+0x160/0x160 [ 1013.967606] ? vmacache_find+0x55/0x2a0 [ 1013.968496] ? __lockdep_reset_lock+0x180/0x180 [ 1013.969547] ? find_held_lock+0x2c/0x110 [ 1013.970470] ? __might_fault+0xd3/0x180 [ 1013.971376] ? lock_downgrade+0x6d0/0x6d0 [ 1013.972298] ? asm_exc_page_fault+0x1e/0x30 [ 1013.973285] __sys_sendmmsg+0x195/0x470 [ 1013.974184] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1013.975168] ? lock_downgrade+0x6d0/0x6d0 [ 1013.976118] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1013.977197] ? wait_for_completion_io+0x270/0x270 [ 1013.978276] ? rcu_read_lock_any_held+0x75/0xa0 [ 1013.979335] ? vfs_write+0x354/0xa70 [ 1013.980182] ? fput_many+0x2f/0x1a0 [ 1013.980995] ? ksys_write+0x1a9/0x260 [ 1013.981861] __x64_sys_sendmmsg+0x99/0x100 [ 1013.982833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1013.983993] do_syscall_64+0x33/0x40 [ 1013.984828] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1013.985967] RIP: 0033:0x7f6639ba0b19 [ 1013.986819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1013.990898] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1013.992589] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1013.994176] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1013.995790] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1013.997380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.998985] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:33 executing program 6: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3f, 0x2, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00.-file1/file0\x00']) r2 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x103843, 0x130) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r2, &(0x7f0000000140)="ee", 0x1, 0x800000}]) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) fcntl$setstatus(r4, 0x4, 0x44400) io_submit(r5, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x8, 0x1, 0x0, r4, 0x0, 0x4000}]) 04:05:33 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:05:33 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 21) 04:05:33 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:05:33 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:33 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:33 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1027.908187] FAULT_INJECTION: forcing a failure. [ 1027.908187] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.910957] CPU: 0 PID: 8295 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1027.912599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1027.914585] Call Trace: [ 1027.915247] dump_stack+0x107/0x167 [ 1027.916135] should_fail.cold+0x5/0xa [ 1027.917057] ? create_object.isra.0+0x3a/0xa20 [ 1027.918095] should_failslab+0x5/0x20 [ 1027.918864] kmem_cache_alloc+0x5b/0x360 [ 1027.919684] create_object.isra.0+0x3a/0xa20 [ 1027.920564] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1027.921581] __kmalloc_node_track_caller+0x1a6/0x310 [ 1027.922590] ? alloc_skb_with_frags+0x92/0x570 [ 1027.923530] __alloc_skb+0xb1/0x5b0 [ 1027.924260] alloc_skb_with_frags+0x92/0x570 [ 1027.925132] ? find_held_lock+0x2c/0x110 [ 1027.925954] sock_alloc_send_pskb+0x7af/0x930 [ 1027.926869] ? sk_alloc+0x350/0x350 [ 1027.927610] ? perf_trace_lock+0xac/0x490 [ 1027.928443] ? lock_chain_count+0x20/0x20 [ 1027.929333] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1027.930400] ? ip6_mtu+0x1bb/0x3d0 [ 1027.931165] ? lock_downgrade+0x6d0/0x6d0 [ 1027.932035] ? ip_frag_init+0x350/0x350 [ 1027.932887] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1027.933867] ? ip6_mtu+0x1e9/0x3d0 [ 1027.934625] ? ip6_setup_cork+0xfb7/0x1740 [ 1027.935541] ip6_make_skb+0x2de/0x4e0 [ 1027.936343] ? ip_frag_init+0x350/0x350 [ 1027.937188] ? ip_frag_init+0x350/0x350 [ 1027.938034] ? ip6_push_pending_frames+0xf0/0xf0 [ 1027.939056] ? ip6_dst_hoplimit+0x199/0x440 [ 1027.939965] ? lock_downgrade+0x6d0/0x6d0 [ 1027.940864] udpv6_sendmsg+0x2060/0x2a00 [ 1027.941726] ? ip_frag_init+0x350/0x350 [ 1027.942580] ? udp_v6_push_pending_frames+0x360/0x360 [ 1027.943689] ? __lockdep_reset_lock+0x180/0x180 [ 1027.944683] ? __lockdep_reset_lock+0x180/0x180 [ 1027.945676] ? find_held_lock+0x2c/0x110 [ 1027.946555] ? sock_has_perm+0x1ea/0x280 [ 1027.947455] ? __import_iovec+0x458/0x590 [ 1027.948329] ? udp_v6_push_pending_frames+0x360/0x360 [ 1027.949417] inet6_sendmsg+0x105/0x140 [ 1027.950238] ? inet6_compat_ioctl+0x320/0x320 [ 1027.951206] sock_sendmsg+0xf2/0x190 [ 1027.951996] ____sys_sendmsg+0x334/0x870 [ 1027.952858] ? kernel_sendmsg+0x50/0x50 [ 1027.953698] ? do_recvmmsg+0x6d0/0x6d0 [ 1027.954527] ? __lock_acquire+0x1657/0x5b00 [ 1027.955467] ___sys_sendmsg+0xf3/0x170 [ 1027.956296] ? sendmsg_copy_msghdr+0x160/0x160 [ 1027.957258] ? vmacache_find+0x55/0x2a0 [ 1027.958104] ? __lockdep_reset_lock+0x180/0x180 [ 1027.959107] ? find_held_lock+0x2c/0x110 [ 1027.959970] ? __might_fault+0xd3/0x180 [ 1027.960812] ? lock_downgrade+0x6d0/0x6d0 [ 1027.961682] ? asm_exc_page_fault+0x1e/0x30 [ 1027.962618] __sys_sendmmsg+0x195/0x470 [ 1027.963481] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1027.964391] ? lock_downgrade+0x6d0/0x6d0 [ 1027.965287] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1027.966311] ? wait_for_completion_io+0x270/0x270 [ 1027.967342] ? rcu_read_lock_any_held+0x75/0xa0 [ 1027.968318] ? vfs_write+0x354/0xa70 [ 1027.969112] ? fput_many+0x2f/0x1a0 [ 1027.969884] ? ksys_write+0x1a9/0x260 [ 1027.970698] __x64_sys_sendmmsg+0x99/0x100 [ 1027.971608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1027.972698] do_syscall_64+0x33/0x40 [ 1027.973489] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1027.974567] RIP: 0033:0x7f6639ba0b19 [ 1027.975363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1027.979243] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1027.980850] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1027.982356] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1027.983864] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1027.985367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1027.986879] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:33 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:33 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:05:34 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:05:34 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) 04:05:34 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:05:34 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:34 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:34 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 22) 04:05:34 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:34 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:34 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:05:34 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:34 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:34 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) [ 1028.547094] FAULT_INJECTION: forcing a failure. [ 1028.547094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.549454] CPU: 0 PID: 8340 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1028.550818] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1028.552513] Call Trace: [ 1028.553055] dump_stack+0x107/0x167 [ 1028.553793] should_fail.cold+0x5/0xa [ 1028.554563] _copy_from_user+0x2e/0x1b0 [ 1028.555565] __copy_msghdr_from_user+0x91/0x4b0 [ 1028.556527] ? __ia32_sys_shutdown+0x80/0x80 [ 1028.557559] ? udp_v6_push_pending_frames+0x360/0x360 [ 1028.558598] ? inet6_sendmsg+0xbd/0x140 [ 1028.559414] ? inet6_compat_ioctl+0x320/0x320 [ 1028.560311] ? sock_sendmsg+0x55/0x190 [ 1028.561100] sendmsg_copy_msghdr+0xa1/0x160 [ 1028.561974] ? do_recvmmsg+0x6d0/0x6d0 [ 1028.562769] ? __lock_acquire+0x1657/0x5b00 [ 1028.563655] ___sys_sendmsg+0xc6/0x170 [ 1028.564435] ? sendmsg_copy_msghdr+0x160/0x160 [ 1028.565345] ? vmacache_find+0x55/0x2a0 [ 1028.566145] ? __lockdep_reset_lock+0x180/0x180 [ 1028.567087] ? find_held_lock+0x2c/0x110 [ 1028.567901] ? __might_fault+0xd3/0x180 [ 1028.568695] ? lock_downgrade+0x6d0/0x6d0 [ 1028.569530] ? asm_exc_page_fault+0x1e/0x30 [ 1028.570421] __sys_sendmmsg+0x195/0x470 [ 1028.571235] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1028.572095] ? lock_downgrade+0x6d0/0x6d0 [ 1028.572947] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1028.573924] ? wait_for_completion_io+0x270/0x270 [ 1028.574896] ? rcu_read_lock_any_held+0x75/0xa0 [ 1028.575821] ? vfs_write+0x354/0xa70 [ 1028.576580] ? fput_many+0x2f/0x1a0 [ 1028.577304] ? ksys_write+0x1a9/0x260 [ 1028.578072] __x64_sys_sendmmsg+0x99/0x100 [ 1028.578926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1028.579953] do_syscall_64+0x33/0x40 [ 1028.580709] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1028.581746] RIP: 0033:0x7f6639ba0b19 [ 1028.582488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1028.586169] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1028.587708] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1028.589131] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1028.590571] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1028.592028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1028.593448] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:50 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4, 0x0, 0x0, {0x0, r5}}, 0x7) 04:05:50 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:05:50 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 23) [ 1044.243102] FAULT_INJECTION: forcing a failure. [ 1044.243102] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.244533] CPU: 1 PID: 8365 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1044.245372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1044.246510] Call Trace: 04:05:50 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:05:50 executing program 6: syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) ftruncate(r1, 0x1000003) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$nl_generic(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000280)=ANY=[@ANYBLOB="0000018700000000000000b833b1a99e7e80efa67f565bc332f7612e6c90a7c90a2d19c041bb64a7f6109674d3753f2bafa87b18dd9b2903386bd64038cc6a24c81b38150eb4bf73abfc4d6036e618bc216b72857cc5f9025eb2d31c618d53f9", @ANYRES32=r4, @ANYBLOB="f8ffffff090000002e2f66696c653000"]) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x30, r5, 0x800, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x61}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) unlinkat(r0, &(0x7f0000000380)='./file0\x00', 0x200) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x9}) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000004200205024bd7000fcdbdf2516000000cdb44f07384785a72011d58404697265aa7af437c1d44b4c226aede38347d36fdeb906f35e098ce7d64970da3d5299845b8ad7c551525af95446469939362fcb4651f63508ca6d33cc9f89ed9e00fc5e26e9dcf8c26f39567622964f791bd715ef18fc286ab93ae98ee1f1ad71f0626d9dd77e90ca051c231d0381c2fb71ce388e4b3b730a233d5545c01234dcceffedd2f8e1"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) 04:05:50 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:05:50 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:05:50 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) [ 1044.246864] dump_stack+0x107/0x167 [ 1044.247441] should_fail.cold+0x5/0xa [ 1044.247920] ? __alloc_skb+0x6d/0x5b0 [ 1044.248412] should_failslab+0x5/0x20 [ 1044.248896] kmem_cache_alloc_node+0x55/0x380 [ 1044.249468] __alloc_skb+0x6d/0x5b0 [ 1044.249933] alloc_skb_with_frags+0x92/0x570 [ 1044.250482] ? find_held_lock+0x2c/0x110 [ 1044.251001] sock_alloc_send_pskb+0x7af/0x930 [ 1044.251590] ? sk_alloc+0x350/0x350 [ 1044.252059] ? perf_trace_lock+0xac/0x490 [ 1044.252575] ? lock_chain_count+0x20/0x20 [ 1044.253087] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1044.253730] ? ip6_mtu+0x1bb/0x3d0 [ 1044.254176] ? lock_downgrade+0x6d0/0x6d0 [ 1044.254696] ? ip_frag_init+0x350/0x350 [ 1044.255213] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1044.255798] ? ip6_mtu+0x1e9/0x3d0 [ 1044.256248] ? ip6_setup_cork+0xfb7/0x1740 [ 1044.256783] ip6_make_skb+0x2de/0x4e0 [ 1044.257260] ? ip_frag_init+0x350/0x350 [ 1044.257771] ? ip_frag_init+0x350/0x350 [ 1044.258263] ? ip6_push_pending_frames+0xf0/0xf0 [ 1044.258868] ? ip6_dst_hoplimit+0x199/0x440 [ 1044.259430] ? lock_downgrade+0x6d0/0x6d0 [ 1044.259964] udpv6_sendmsg+0x2060/0x2a00 [ 1044.260476] ? ip_frag_init+0x350/0x350 [ 1044.260984] ? udp_v6_push_pending_frames+0x360/0x360 [ 1044.261629] ? lock_chain_count+0x20/0x20 [ 1044.262163] ? __lockdep_reset_lock+0x180/0x180 [ 1044.262744] ? lock_chain_count+0x20/0x20 [ 1044.263280] ? find_held_lock+0x2c/0x110 [ 1044.263801] ? sock_has_perm+0x1ea/0x280 [ 1044.264329] ? __import_iovec+0x458/0x590 [ 1044.264844] ? udp_v6_push_pending_frames+0x360/0x360 [ 1044.265501] inet6_sendmsg+0x105/0x140 [ 1044.265988] ? inet6_compat_ioctl+0x320/0x320 [ 1044.266543] sock_sendmsg+0xf2/0x190 [ 1044.267012] ____sys_sendmsg+0x334/0x870 [ 1044.267543] ? kernel_sendmsg+0x50/0x50 [ 1044.268035] ? do_recvmmsg+0x6d0/0x6d0 [ 1044.268508] ? __lock_acquire+0x1657/0x5b00 [ 1044.269062] ___sys_sendmsg+0xf3/0x170 [ 1044.269563] ? sendmsg_copy_msghdr+0x160/0x160 [ 1044.270137] ? __lockdep_reset_lock+0x180/0x180 [ 1044.270731] ? trace_hardirqs_on+0x5b/0x180 [ 1044.271290] ? find_held_lock+0x2c/0x110 [ 1044.271805] ? __might_fault+0xd3/0x180 [ 1044.272302] ? lock_downgrade+0x6d0/0x6d0 [ 1044.272822] ? io_schedule_timeout+0x140/0x140 [ 1044.273404] __sys_sendmmsg+0x195/0x470 [ 1044.273905] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1044.274444] ? lock_downgrade+0x6d0/0x6d0 [ 1044.274971] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1044.275588] ? wait_for_completion_io+0x270/0x270 [ 1044.276228] ? rcu_read_lock_any_held+0x75/0xa0 [ 1044.276799] ? vfs_write+0x354/0xa70 [ 1044.277270] ? fput_many+0x2f/0x1a0 [ 1044.277728] ? ksys_write+0x1a9/0x260 [ 1044.278209] __x64_sys_sendmmsg+0x99/0x100 [ 1044.278734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1044.279407] do_syscall_64+0x33/0x40 [ 1044.279893] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1044.280569] RIP: 0033:0x7f6639ba0b19 [ 1044.281074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1044.283455] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1044.284363] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1044.285206] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1044.286056] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1044.286897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1044.287760] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:05:50 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:05:50 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:04 executing program 5: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:06:04 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:04 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 24) 04:06:04 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:04 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:04 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:06:04 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) [ 1058.905939] FAULT_INJECTION: forcing a failure. [ 1058.905939] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.907189] CPU: 1 PID: 8404 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1058.907943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1058.908864] Call Trace: [ 1058.909153] dump_stack+0x107/0x167 [ 1058.909573] should_fail.cold+0x5/0xa [ 1058.909997] ? __alloc_skb+0x6d/0x5b0 [ 1058.910424] should_failslab+0x5/0x20 [ 1058.910833] kmem_cache_alloc_node+0x55/0x380 [ 1058.911340] __alloc_skb+0x6d/0x5b0 [ 1058.911739] alloc_skb_with_frags+0x92/0x570 [ 1058.912217] ? find_held_lock+0x2c/0x110 [ 1058.912657] sock_alloc_send_pskb+0x7af/0x930 [ 1058.913159] ? sk_alloc+0x350/0x350 [ 1058.913562] ? perf_trace_lock+0xac/0x490 [ 1058.914008] ? lock_chain_count+0x20/0x20 [ 1058.914484] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1058.915024] ? ip6_mtu+0x1bb/0x3d0 [ 1058.915453] ? lock_downgrade+0x6d0/0x6d0 [ 1058.915890] ? ip_frag_init+0x350/0x350 [ 1058.916346] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1058.916840] ? ip6_mtu+0x1e9/0x3d0 [ 1058.917244] ? ip6_setup_cork+0xfb7/0x1740 [ 1058.917698] ip6_make_skb+0x2de/0x4e0 [ 1058.918121] ? ip_frag_init+0x350/0x350 [ 1058.918548] ? ip_frag_init+0x350/0x350 [ 1058.919002] ? ip6_push_pending_frames+0xf0/0xf0 [ 1058.919517] ? ip6_dst_hoplimit+0x199/0x440 [ 1058.920002] ? lock_downgrade+0x6d0/0x6d0 [ 1058.920451] udpv6_sendmsg+0x2060/0x2a00 [ 1058.920903] ? ip_frag_init+0x350/0x350 [ 1058.921328] ? udp_v6_push_pending_frames+0x360/0x360 [ 1058.921911] ? lock_chain_count+0x20/0x20 [ 1058.922353] ? __lockdep_reset_lock+0x180/0x180 [ 1058.922886] ? find_held_lock+0x2c/0x110 [ 1058.923406] ? sock_has_perm+0x1ea/0x280 [ 1058.923869] ? __import_iovec+0x458/0x590 [ 1058.924326] ? udp_v6_push_pending_frames+0x360/0x360 [ 1058.924903] inet6_sendmsg+0x105/0x140 [ 1058.925337] ? inet6_compat_ioctl+0x320/0x320 [ 1058.925836] sock_sendmsg+0xf2/0x190 [ 1058.926252] ____sys_sendmsg+0x334/0x870 [ 1058.926703] ? kernel_sendmsg+0x50/0x50 [ 1058.927147] ? do_recvmmsg+0x6d0/0x6d0 [ 1058.927597] ? find_held_lock+0x2c/0x110 [ 1058.928057] ___sys_sendmsg+0xf3/0x170 [ 1058.928499] ? sendmsg_copy_msghdr+0x160/0x160 [ 1058.929004] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1058.929598] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1058.930079] ? trace_hardirqs_on+0x5b/0x180 [ 1058.930573] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1058.931061] ? finish_task_switch+0x126/0x5d0 [ 1058.931574] ? finish_task_switch+0xef/0x5d0 [ 1058.932064] ? __switch_to+0x572/0x1000 [ 1058.932499] ? __switch_to_asm+0x3a/0x60 [ 1058.932953] ? __switch_to_asm+0x34/0x60 [ 1058.933410] ? __schedule+0x82c/0x1f00 [ 1058.933851] ? io_schedule_timeout+0x140/0x140 [ 1058.934367] __sys_sendmmsg+0x195/0x470 [ 1058.934812] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1058.935307] ? lock_downgrade+0x6d0/0x6d0 [ 1058.935783] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1058.936325] ? wait_for_completion_io+0x270/0x270 [ 1058.936867] ? rcu_read_lock_any_held+0x75/0xa0 [ 1058.937379] ? vfs_write+0x354/0xa70 [ 1058.937793] ? fput_many+0x2f/0x1a0 [ 1058.938198] ? ksys_write+0x1a9/0x260 [ 1058.938629] __x64_sys_sendmmsg+0x99/0x100 [ 1058.939101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1058.939691] do_syscall_64+0x33/0x40 [ 1058.940110] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1058.940685] RIP: 0033:0x7f6639ba0b19 [ 1058.941108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1058.943145] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1058.944013] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1058.944805] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1058.945593] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1058.946380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1058.947168] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:04 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:04 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:04 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:05 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 25) 04:06:05 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1059.140200] FAULT_INJECTION: forcing a failure. [ 1059.140200] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1059.141579] CPU: 1 PID: 8428 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1059.142335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1059.143234] Call Trace: [ 1059.143539] dump_stack+0x107/0x167 [ 1059.143946] should_fail.cold+0x5/0xa [ 1059.144373] __alloc_pages_nodemask+0x182/0x690 [ 1059.144894] ? __alloc_pages_slowpath.constprop.0+0x2230/0x2230 [ 1059.145560] ? kmem_cache_alloc+0x34c/0x360 [ 1059.146038] alloc_pages_current+0x187/0x280 [ 1059.146532] allocate_slab+0x26f/0x380 [ 1059.146960] ___slab_alloc+0x470/0x700 [ 1059.147394] ? create_object.isra.0+0x3a/0xa20 [ 1059.147899] ? create_object.isra.0+0x3a/0xa20 [ 1059.148400] ? kmem_cache_alloc+0x34c/0x360 [ 1059.148872] kmem_cache_alloc+0x34c/0x360 [ 1059.149337] create_object.isra.0+0x3a/0xa20 [ 1059.149825] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1059.150387] kmem_cache_alloc_node+0x169/0x380 [ 1059.150899] __alloc_skb+0x6d/0x5b0 [ 1059.151305] alloc_skb_with_frags+0x92/0x570 [ 1059.151791] ? find_held_lock+0x2c/0x110 [ 1059.152246] sock_alloc_send_pskb+0x7af/0x930 [ 1059.152750] ? sk_alloc+0x350/0x350 [ 1059.153160] ? perf_trace_lock+0xac/0x490 [ 1059.153622] ? lock_chain_count+0x20/0x20 [ 1059.154100] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1059.154665] ? ip6_mtu+0x1bb/0x3d0 [ 1059.155059] ? lock_downgrade+0x6d0/0x6d0 [ 1059.155522] ? ip_frag_init+0x350/0x350 [ 1059.155972] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1059.156490] ? ip6_mtu+0x1e9/0x3d0 [ 1059.156888] ? ip6_setup_cork+0xfb7/0x1740 [ 1059.157365] ip6_make_skb+0x2de/0x4e0 [ 1059.157786] ? ip_frag_init+0x350/0x350 [ 1059.158254] ? ip_frag_init+0x350/0x350 [ 1059.158721] ? ip6_push_pending_frames+0xf0/0xf0 [ 1059.159254] ? ip6_dst_hoplimit+0x199/0x440 [ 1059.159735] ? lock_downgrade+0x6d0/0x6d0 [ 1059.160207] udpv6_sendmsg+0x2060/0x2a00 [ 1059.160663] ? ip_frag_init+0x350/0x350 [ 1059.161108] ? udp_v6_push_pending_frames+0x360/0x360 [ 1059.161677] ? __lockdep_reset_lock+0x180/0x180 [ 1059.162187] ? __lockdep_reset_lock+0x180/0x180 [ 1059.162706] ? find_held_lock+0x2c/0x110 [ 1059.163159] ? sock_has_perm+0x1ea/0x280 [ 1059.163638] ? __import_iovec+0x458/0x590 [ 1059.164095] ? udp_v6_push_pending_frames+0x360/0x360 [ 1059.164671] inet6_sendmsg+0x105/0x140 [ 1059.165113] ? inet6_compat_ioctl+0x320/0x320 [ 1059.165619] sock_sendmsg+0xf2/0x190 [ 1059.166044] ____sys_sendmsg+0x334/0x870 [ 1059.166507] ? kernel_sendmsg+0x50/0x50 [ 1059.166958] ? do_recvmmsg+0x6d0/0x6d0 [ 1059.167425] ? __lock_acquire+0x1657/0x5b00 [ 1059.167935] ___sys_sendmsg+0xf3/0x170 [ 1059.168387] ? sendmsg_copy_msghdr+0x160/0x160 [ 1059.168919] ? vmacache_find+0x55/0x2a0 [ 1059.169376] ? __lockdep_reset_lock+0x180/0x180 [ 1059.169907] ? find_held_lock+0x2c/0x110 [ 1059.170370] ? __might_fault+0xd3/0x180 [ 1059.170832] ? lock_downgrade+0x6d0/0x6d0 [ 1059.171321] ? asm_exc_page_fault+0x1e/0x30 [ 1059.171822] __sys_sendmmsg+0x195/0x470 [ 1059.172279] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1059.172776] ? lock_downgrade+0x6d0/0x6d0 [ 1059.173263] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1059.173814] ? wait_for_completion_io+0x270/0x270 [ 1059.174372] ? rcu_read_lock_any_held+0x75/0xa0 [ 1059.174901] ? vfs_write+0x354/0xa70 [ 1059.175348] ? fput_many+0x2f/0x1a0 [ 1059.175761] ? ksys_write+0x1a9/0x260 [ 1059.176202] __x64_sys_sendmmsg+0x99/0x100 [ 1059.176685] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1059.177284] do_syscall_64+0x33/0x40 [ 1059.177712] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1059.178308] RIP: 0033:0x7f6639ba0b19 [ 1059.178735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1059.180865] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1059.181745] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1059.182563] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1059.183392] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1059.184212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1059.185034] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:05 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:06:20 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x105142, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="00fb480201d47ac117e3e534c94cd14b2b6c9efcf4d091d669f58d92d4457fc97fa127b679140c3e00b7a0b5239570d9086543589c3eb8c4fb78172a7b068ca4c4952dba8120874a"], 0x48, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xfb, 0x9e, 0x4, 0xd0, "5eb05038d4a3f376f3c80444f3a0a0bb", "684a67efa54db6ecbe1bc9771ad929be621d3bc182d803755c2e09e2632401e75a4336d4a2a9953820a724a93901769dc1fae3b190043471b1ac75b6845ea04979d70fe50a896ce639ab296ae905ebb8f56f8f758912d8480eeafd5be70e295a80e7d5668d6a849bb72a8fc172b0950af2f40311bc5ab6847066b25b717a068f4b41ed3b36db6c9c32"}, 0x9e, 0x2) dup(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x100000001) 04:06:20 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:20 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:20 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:20 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 26) 04:06:20 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:20 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1074.164689] FAULT_INJECTION: forcing a failure. [ 1074.164689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1074.166500] CPU: 1 PID: 8450 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1074.167541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1074.168782] Call Trace: [ 1074.169182] dump_stack+0x107/0x167 [ 1074.169733] should_fail.cold+0x5/0xa [ 1074.170318] __alloc_pages_nodemask+0x182/0x690 [ 1074.171033] ? __alloc_pages_slowpath.constprop.0+0x2230/0x2230 [ 1074.171947] ? __kmalloc_node_track_caller+0x2ec/0x310 [ 1074.172744] alloc_pages_current+0x187/0x280 [ 1074.173416] allocate_slab+0x26f/0x380 [ 1074.174004] ___slab_alloc+0x470/0x700 [ 1074.174612] ? alloc_skb_with_frags+0x92/0x570 [ 1074.175305] ? __kmalloc_node_track_caller+0x2ec/0x310 [ 1074.176106] __kmalloc_node_track_caller+0x2ec/0x310 [ 1074.176869] ? alloc_skb_with_frags+0x92/0x570 [ 1074.177562] __alloc_skb+0xb1/0x5b0 [ 1074.178117] alloc_skb_with_frags+0x92/0x570 [ 1074.178779] ? find_held_lock+0x2c/0x110 [ 1074.179400] sock_alloc_send_pskb+0x7af/0x930 [ 1074.180095] ? sk_alloc+0x350/0x350 [ 1074.180641] ? perf_trace_lock+0xac/0x490 [ 1074.181258] ? lock_chain_count+0x20/0x20 [ 1074.181889] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1074.182636] ? ip6_mtu+0x1bb/0x3d0 [ 1074.183167] ? lock_downgrade+0x6d0/0x6d0 [ 1074.183801] ? ip_frag_init+0x350/0x350 [ 1074.184409] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1074.185103] ? ip6_mtu+0x1e9/0x3d0 [ 1074.185626] ? ip6_setup_cork+0xfb7/0x1740 [ 1074.186257] ip6_make_skb+0x2de/0x4e0 [ 1074.186816] ? ip_frag_init+0x350/0x350 [ 1074.187405] ? ip_frag_init+0x350/0x350 [ 1074.188011] ? ip6_push_pending_frames+0xf0/0xf0 [ 1074.188712] ? ip6_dst_hoplimit+0x199/0x440 [ 1074.189355] ? lock_downgrade+0x6d0/0x6d0 [ 1074.189978] udpv6_sendmsg+0x2060/0x2a00 [ 1074.190587] ? ip_frag_init+0x350/0x350 [ 1074.191181] ? udp_v6_push_pending_frames+0x360/0x360 [ 1074.191950] ? __lockdep_reset_lock+0x180/0x180 [ 1074.192647] ? __lockdep_reset_lock+0x180/0x180 [ 1074.193340] ? find_held_lock+0x2c/0x110 [ 1074.193976] ? sock_has_perm+0x1ea/0x280 [ 1074.194598] ? __import_iovec+0x458/0x590 [ 1074.195208] ? udp_v6_push_pending_frames+0x360/0x360 [ 1074.195988] inet6_sendmsg+0x105/0x140 [ 1074.196562] ? inet6_compat_ioctl+0x320/0x320 [ 1074.197226] sock_sendmsg+0xf2/0x190 [ 1074.197799] ____sys_sendmsg+0x334/0x870 [ 1074.198440] ? kernel_sendmsg+0x50/0x50 [ 1074.199072] ? do_recvmmsg+0x6d0/0x6d0 [ 1074.199706] ? __lock_acquire+0x1657/0x5b00 [ 1074.200407] ___sys_sendmsg+0xf3/0x170 [ 1074.201027] ? sendmsg_copy_msghdr+0x160/0x160 [ 1074.201754] ? vmacache_find+0x55/0x2a0 [ 1074.202391] ? __lockdep_reset_lock+0x180/0x180 [ 1074.203145] ? find_held_lock+0x2c/0x110 [ 1074.203809] ? __might_fault+0xd3/0x180 [ 1074.204444] ? lock_downgrade+0x6d0/0x6d0 [ 1074.205096] ? asm_exc_page_fault+0x1e/0x30 [ 1074.205789] __sys_sendmmsg+0x195/0x470 [ 1074.206407] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1074.207057] ? lock_downgrade+0x6d0/0x6d0 [ 1074.207700] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1074.208414] ? wait_for_completion_io+0x270/0x270 [ 1074.209119] ? rcu_read_lock_any_held+0x75/0xa0 [ 1074.209802] ? vfs_write+0x354/0xa70 [ 1074.210352] ? fput_many+0x2f/0x1a0 [ 1074.210891] ? ksys_write+0x1a9/0x260 [ 1074.211468] __x64_sys_sendmmsg+0x99/0x100 [ 1074.212086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1074.212847] do_syscall_64+0x33/0x40 [ 1074.213395] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1074.214178] RIP: 0033:0x7f6639ba0b19 [ 1074.214736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1074.217448] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1074.218563] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1074.219647] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1074.220702] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1074.221770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.222841] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 27) 04:06:20 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:20 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:20 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:20 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1074.409314] FAULT_INJECTION: forcing a failure. [ 1074.409314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.410854] CPU: 0 PID: 8471 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1074.411703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1074.412710] Call Trace: [ 1074.413034] dump_stack+0x107/0x167 [ 1074.413482] should_fail.cold+0x5/0xa [ 1074.413958] _copy_from_user+0x2e/0x1b0 [ 1074.414453] __copy_msghdr_from_user+0x91/0x4b0 [ 1074.415021] ? __ia32_sys_shutdown+0x80/0x80 [ 1074.415563] ? udp_v6_push_pending_frames+0x360/0x360 [ 1074.416190] ? inet6_sendmsg+0xbd/0x140 [ 1074.416662] ? inet6_compat_ioctl+0x320/0x320 [ 1074.417202] ? sock_sendmsg+0x55/0x190 [ 1074.417681] sendmsg_copy_msghdr+0xa1/0x160 [ 1074.418198] ? do_recvmmsg+0x6d0/0x6d0 [ 1074.418673] ? __lock_acquire+0x1657/0x5b00 [ 1074.419200] ___sys_sendmsg+0xc6/0x170 [ 1074.419684] ? sendmsg_copy_msghdr+0x160/0x160 [ 1074.420222] ? vmacache_find+0x55/0x2a0 [ 1074.420699] ? __lockdep_reset_lock+0x180/0x180 [ 1074.421257] ? find_held_lock+0x2c/0x110 [ 1074.421745] ? __might_fault+0xd3/0x180 [ 1074.422216] ? lock_downgrade+0x6d0/0x6d0 [ 1074.422711] ? asm_exc_page_fault+0x1e/0x30 [ 1074.423235] __sys_sendmmsg+0x195/0x470 [ 1074.423718] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1074.424230] ? lock_downgrade+0x6d0/0x6d0 [ 1074.424735] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1074.425300] ? wait_for_completion_io+0x270/0x270 [ 1074.425879] ? rcu_read_lock_any_held+0x75/0xa0 [ 1074.426424] ? vfs_write+0x354/0xa70 [ 1074.426870] ? fput_many+0x2f/0x1a0 [ 1074.427293] ? ksys_write+0x1a9/0x260 [ 1074.427769] __x64_sys_sendmmsg+0x99/0x100 [ 1074.428273] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1074.428888] do_syscall_64+0x33/0x40 [ 1074.429337] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1074.429948] RIP: 0033:0x7f6639ba0b19 [ 1074.430396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1074.432603] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1074.433517] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1074.434372] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1074.435229] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1074.436098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1074.436941] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:20 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:20 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:20 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:20 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:20 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:35 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:35 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:35 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:35 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:35 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:35 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 28) 04:06:35 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) [ 1089.154302] FAULT_INJECTION: forcing a failure. [ 1089.154302] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.155727] CPU: 0 PID: 8512 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1089.156550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1089.157555] Call Trace: [ 1089.157877] dump_stack+0x107/0x167 [ 1089.158323] should_fail.cold+0x5/0xa [ 1089.158788] ? __alloc_skb+0x6d/0x5b0 [ 1089.159254] should_failslab+0x5/0x20 [ 1089.159723] kmem_cache_alloc_node+0x55/0x380 [ 1089.160272] __alloc_skb+0x6d/0x5b0 [ 1089.160720] alloc_skb_with_frags+0x92/0x570 [ 1089.161247] ? find_held_lock+0x2c/0x110 [ 1089.161748] sock_alloc_send_pskb+0x7af/0x930 [ 1089.162301] ? sk_alloc+0x350/0x350 [ 1089.162742] ? perf_trace_lock+0xac/0x490 [ 1089.163246] ? lock_chain_count+0x20/0x20 [ 1089.163759] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1089.164373] ? ip6_mtu+0x1bb/0x3d0 [ 1089.164801] ? lock_downgrade+0x6d0/0x6d0 [ 1089.165295] ? ip_frag_init+0x350/0x350 [ 1089.165780] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1089.166333] ? ip6_mtu+0x1e9/0x3d0 [ 1089.166764] ? ip6_setup_cork+0xfb7/0x1740 [ 1089.167278] ip6_make_skb+0x2de/0x4e0 [ 1089.167747] ? ip_frag_init+0x350/0x350 [ 1089.168225] ? ip_frag_init+0x350/0x350 [ 1089.168708] ? ip6_push_pending_frames+0xf0/0xf0 [ 1089.169277] ? ip6_dst_hoplimit+0x199/0x440 [ 1089.169793] ? lock_downgrade+0x6d0/0x6d0 [ 1089.170302] udpv6_sendmsg+0x2060/0x2a00 [ 1089.170792] ? ip_frag_init+0x350/0x350 [ 1089.171279] ? udp_v6_push_pending_frames+0x360/0x360 [ 1089.171908] ? __lockdep_reset_lock+0x180/0x180 [ 1089.172472] ? __lockdep_reset_lock+0x180/0x180 [ 1089.173030] ? find_held_lock+0x2c/0x110 [ 1089.173530] ? sock_has_perm+0x1ea/0x280 [ 1089.174010] ? __import_iovec+0x458/0x590 [ 1089.174480] ? udp_v6_push_pending_frames+0x360/0x360 [ 1089.175065] inet6_sendmsg+0x105/0x140 [ 1089.175506] ? inet6_compat_ioctl+0x320/0x320 [ 1089.176024] sock_sendmsg+0xf2/0x190 [ 1089.176450] ____sys_sendmsg+0x334/0x870 [ 1089.176909] ? kernel_sendmsg+0x50/0x50 [ 1089.177359] ? do_recvmmsg+0x6d0/0x6d0 [ 1089.177802] ? __lock_acquire+0x1657/0x5b00 [ 1089.178300] ___sys_sendmsg+0xf3/0x170 [ 1089.178741] ? sendmsg_copy_msghdr+0x160/0x160 [ 1089.179250] ? vmacache_find+0x55/0x2a0 [ 1089.179768] ? __lockdep_reset_lock+0x180/0x180 [ 1089.180369] ? find_held_lock+0x2c/0x110 [ 1089.180907] ? __might_fault+0xd3/0x180 [ 1089.181394] ? lock_downgrade+0x6d0/0x6d0 [ 1089.181901] ? asm_exc_page_fault+0x1e/0x30 [ 1089.182440] __sys_sendmmsg+0x195/0x470 [ 1089.182939] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1089.183469] ? lock_downgrade+0x6d0/0x6d0 [ 1089.184001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1089.184595] ? wait_for_completion_io+0x270/0x270 [ 1089.185193] ? rcu_read_lock_any_held+0x75/0xa0 [ 1089.185759] ? vfs_write+0x354/0xa70 [ 1089.186213] ? fput_many+0x2f/0x1a0 [ 1089.186658] ? ksys_write+0x1a9/0x260 [ 1089.187130] __x64_sys_sendmmsg+0x99/0x100 [ 1089.187643] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1089.188298] do_syscall_64+0x33/0x40 [ 1089.188755] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1089.189380] RIP: 0033:0x7f6639ba0b19 [ 1089.189830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1089.192065] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1089.192990] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1089.193856] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1089.194718] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1089.195585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1089.196454] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:35 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:35 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:35 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:35 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:51 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:51 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:51 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:51 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:06:51 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:51 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:51 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 29) [ 1105.779861] FAULT_INJECTION: forcing a failure. [ 1105.779861] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.782207] CPU: 1 PID: 8558 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1105.783565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1105.785235] Call Trace: [ 1105.785764] dump_stack+0x107/0x167 [ 1105.786506] should_fail.cold+0x5/0xa [ 1105.787268] ? create_object.isra.0+0x3a/0xa20 [ 1105.788195] should_failslab+0x5/0x20 [ 1105.788951] kmem_cache_alloc+0x5b/0x360 [ 1105.789772] create_object.isra.0+0x3a/0xa20 [ 1105.790646] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1105.791656] kmem_cache_alloc_node+0x169/0x380 [ 1105.792575] __alloc_skb+0x6d/0x5b0 [ 1105.793307] alloc_skb_with_frags+0x92/0x570 [ 1105.794177] ? find_held_lock+0x2c/0x110 [ 1105.795004] sock_alloc_send_pskb+0x7af/0x930 [ 1105.795922] ? sk_alloc+0x350/0x350 [ 1105.796654] ? perf_trace_lock+0xac/0x490 [ 1105.797475] ? lock_chain_count+0x20/0x20 [ 1105.798504] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1105.799525] ? ip6_mtu+0x1bb/0x3d0 [ 1105.800272] ? lock_downgrade+0x6d0/0x6d0 [ 1105.801262] ? ip_frag_init+0x350/0x350 [ 1105.802079] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1105.803183] ? ip6_mtu+0x1e9/0x3d0 [ 1105.803917] ? ip6_setup_cork+0xfb7/0x1740 [ 1105.804758] ip6_make_skb+0x2de/0x4e0 [ 1105.805672] ? ip_frag_init+0x350/0x350 [ 1105.806478] ? ip_frag_init+0x350/0x350 [ 1105.807429] ? ip6_push_pending_frames+0xf0/0xf0 [ 1105.808398] ? ip6_dst_hoplimit+0x199/0x440 [ 1105.809428] ? lock_downgrade+0x6d0/0x6d0 [ 1105.810276] udpv6_sendmsg+0x2060/0x2a00 [ 1105.811244] ? ip_frag_init+0x350/0x350 [ 1105.812067] ? udp_v6_push_pending_frames+0x360/0x360 [ 1105.813290] ? __lockdep_reset_lock+0x180/0x180 [ 1105.814237] ? __lockdep_reset_lock+0x180/0x180 [ 1105.815356] ? find_held_lock+0x2c/0x110 [ 1105.816207] ? sock_has_perm+0x1ea/0x280 [ 1105.817207] ? __import_iovec+0x458/0x590 [ 1105.818031] ? udp_v6_push_pending_frames+0x360/0x360 [ 1105.819260] inet6_sendmsg+0x105/0x140 [ 1105.820066] ? inet6_compat_ioctl+0x320/0x320 [ 1105.821130] sock_sendmsg+0xf2/0x190 [ 1105.821876] ____sys_sendmsg+0x334/0x870 [ 1105.822849] ? kernel_sendmsg+0x50/0x50 [ 1105.823637] ? do_recvmmsg+0x6d0/0x6d0 [ 1105.824572] ? __lock_acquire+0x1657/0x5b00 [ 1105.825453] ___sys_sendmsg+0xf3/0x170 [ 1105.826375] ? sendmsg_copy_msghdr+0x160/0x160 [ 1105.827282] ? vmacache_find+0x55/0x2a0 [ 1105.828237] ? __lockdep_reset_lock+0x180/0x180 [ 1105.829173] ? find_held_lock+0x2c/0x110 [ 1105.830145] ? __might_fault+0xd3/0x180 [ 1105.830937] ? lock_downgrade+0x6d0/0x6d0 [ 1105.831946] ? asm_exc_page_fault+0x1e/0x30 [ 1105.832990] __sys_sendmmsg+0x195/0x470 [ 1105.833796] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1105.834824] ? lock_downgrade+0x6d0/0x6d0 [ 1105.835678] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1105.836838] ? wait_for_completion_io+0x270/0x270 [ 1105.837807] ? rcu_read_lock_any_held+0x75/0xa0 [ 1105.838908] ? vfs_write+0x354/0xa70 [ 1105.839657] ? fput_many+0x2f/0x1a0 [ 1105.840540] ? ksys_write+0x1a9/0x260 [ 1105.841331] __x64_sys_sendmmsg+0x99/0x100 [ 1105.842330] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1105.843360] do_syscall_64+0x33/0x40 [ 1105.844254] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1105.845285] RIP: 0033:0x7f6639ba0b19 [ 1105.846171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1105.849801] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1105.851604] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1105.853303] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1105.854993] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1105.856703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1105.858399] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:51 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:06:51 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:06:51 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:51 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:06:51 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 04:06:51 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:06:51 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 04:06:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 30) 04:06:52 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:06:52 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1106.153013] FAULT_INJECTION: forcing a failure. [ 1106.153013] name failslab, interval 1, probability 0, space 0, times 0 [ 1106.155357] CPU: 0 PID: 8591 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1106.156737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1106.158392] Call Trace: [ 1106.158921] dump_stack+0x107/0x167 [ 1106.159656] should_fail.cold+0x5/0xa [ 1106.160427] ? create_object.isra.0+0x3a/0xa20 [ 1106.161339] should_failslab+0x5/0x20 [ 1106.162103] kmem_cache_alloc+0x5b/0x360 [ 1106.162921] create_object.isra.0+0x3a/0xa20 [ 1106.163795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1106.164816] kmem_cache_alloc_node+0x169/0x380 [ 1106.165727] __alloc_skb+0x6d/0x5b0 [ 1106.166456] alloc_skb_with_frags+0x92/0x570 [ 1106.167348] ? find_held_lock+0x2c/0x110 [ 1106.168191] sock_alloc_send_pskb+0x7af/0x930 [ 1106.169101] ? sk_alloc+0x350/0x350 [ 1106.169831] ? perf_trace_lock+0xac/0x490 [ 1106.170657] ? lock_chain_count+0x20/0x20 [ 1106.171495] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1106.172508] ? ip6_mtu+0x1bb/0x3d0 [ 1106.173222] ? lock_downgrade+0x6d0/0x6d0 [ 1106.174044] ? ip_frag_init+0x350/0x350 [ 1106.174857] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1106.175790] ? ip6_mtu+0x1e9/0x3d0 [ 1106.176522] ? ip6_setup_cork+0xfb7/0x1740 [ 1106.177376] ip6_make_skb+0x2de/0x4e0 [ 1106.178138] ? ip_frag_init+0x350/0x350 [ 1106.178939] ? ip_frag_init+0x350/0x350 [ 1106.179738] ? ip6_push_pending_frames+0xf0/0xf0 [ 1106.180798] ? ip6_dst_hoplimit+0x199/0x440 [ 1106.181671] ? lock_downgrade+0x6d0/0x6d0 [ 1106.182642] udpv6_sendmsg+0x2060/0x2a00 [ 1106.183456] ? ip_frag_init+0x350/0x350 [ 1106.184281] ? udp_v6_push_pending_frames+0x360/0x360 [ 1106.185307] ? lock_chain_count+0x20/0x20 [ 1106.186146] ? __lockdep_reset_lock+0x180/0x180 [ 1106.187071] ? lock_chain_count+0x20/0x20 [ 1106.187909] ? find_held_lock+0x2c/0x110 [ 1106.188736] ? sock_has_perm+0x1ea/0x280 [ 1106.189574] ? __import_iovec+0x458/0x590 [ 1106.190395] ? udp_v6_push_pending_frames+0x360/0x360 [ 1106.191421] inet6_sendmsg+0x105/0x140 [ 1106.192212] ? inet6_compat_ioctl+0x320/0x320 [ 1106.193099] sock_sendmsg+0xf2/0x190 [ 1106.193838] ____sys_sendmsg+0x334/0x870 [ 1106.194653] ? kernel_sendmsg+0x50/0x50 [ 1106.195439] ? do_recvmmsg+0x6d0/0x6d0 [ 1106.196228] ? find_held_lock+0x2c/0x110 [ 1106.197044] ___sys_sendmsg+0xf3/0x170 [ 1106.197824] ? sendmsg_copy_msghdr+0x160/0x160 [ 1106.198733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1106.199775] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1106.200688] ? trace_hardirqs_on+0x5b/0x180 [ 1106.201548] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1106.202439] ? finish_task_switch+0x126/0x5d0 [ 1106.203326] ? finish_task_switch+0xef/0x5d0 [ 1106.204206] ? __switch_to+0x572/0x1000 [ 1106.204996] ? __switch_to_asm+0x3a/0x60 [ 1106.205798] ? __switch_to_asm+0x34/0x60 [ 1106.206608] ? __schedule+0x82c/0x1f00 [ 1106.207389] ? io_schedule_timeout+0x140/0x140 [ 1106.208340] __sys_sendmmsg+0x195/0x470 [ 1106.209197] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1106.210112] ? lock_downgrade+0x6d0/0x6d0 [ 1106.211011] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1106.212059] ? wait_for_completion_io+0x270/0x270 [ 1106.213087] ? rcu_read_lock_any_held+0x75/0xa0 [ 1106.214065] ? vfs_write+0x354/0xa70 [ 1106.214857] ? fput_many+0x2f/0x1a0 [ 1106.215629] ? ksys_write+0x1a9/0x260 [ 1106.216462] __x64_sys_sendmmsg+0x99/0x100 [ 1106.217359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1106.218447] do_syscall_64+0x33/0x40 [ 1106.219241] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1106.220333] RIP: 0033:0x7f6639ba0b19 [ 1106.221119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1106.224995] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1106.226598] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1106.228110] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1106.229609] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.231105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.232620] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:06:52 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:06:52 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:07 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:07 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:07 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:07:07 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:07 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 31) 04:07:07 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1121.851422] FAULT_INJECTION: forcing a failure. [ 1121.851422] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.853779] CPU: 1 PID: 8623 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1121.855433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1121.857111] Call Trace: [ 1121.857757] dump_stack+0x107/0x167 [ 1121.858500] should_fail.cold+0x5/0xa [ 1121.859427] should_failslab+0x5/0x20 [ 1121.860222] __kmalloc_node_track_caller+0x74/0x310 [ 1121.861419] ? alloc_skb_with_frags+0x92/0x570 [ 1121.862341] __alloc_skb+0xb1/0x5b0 [ 1121.863224] alloc_skb_with_frags+0x92/0x570 [ 1121.864119] ? find_held_lock+0x2c/0x110 [ 1121.864946] sock_alloc_send_pskb+0x7af/0x930 [ 1121.865856] ? sk_alloc+0x350/0x350 [ 1121.866586] ? perf_trace_lock+0xac/0x490 [ 1121.867408] ? lock_chain_count+0x20/0x20 [ 1121.868251] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1121.869254] ? ip6_mtu+0x1bb/0x3d0 [ 1121.869958] ? lock_downgrade+0x6d0/0x6d0 [ 1121.870789] ? ip_frag_init+0x350/0x350 [ 1121.871598] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1121.872535] ? ip6_mtu+0x1e9/0x3d0 [ 1121.873248] ? ip6_setup_cork+0xfb7/0x1740 [ 1121.874098] ip6_make_skb+0x2de/0x4e0 [ 1121.874857] ? ip_frag_init+0x350/0x350 [ 1121.875659] ? ip_frag_init+0x350/0x350 [ 1121.876467] ? ip6_push_pending_frames+0xf0/0xf0 [ 1121.877417] ? ip6_dst_hoplimit+0x199/0x440 [ 1121.878278] ? lock_downgrade+0x6d0/0x6d0 [ 1121.879128] udpv6_sendmsg+0x2060/0x2a00 [ 1121.879941] ? ip_frag_init+0x350/0x350 [ 1121.880765] ? udp_v6_push_pending_frames+0x360/0x360 [ 1121.881796] ? __lockdep_reset_lock+0x180/0x180 [ 1121.882735] ? __lockdep_reset_lock+0x180/0x180 [ 1121.883673] ? find_held_lock+0x2c/0x110 [ 1121.884522] ? sock_has_perm+0x1ea/0x280 [ 1121.885359] ? __import_iovec+0x458/0x590 [ 1121.886179] ? udp_v6_push_pending_frames+0x360/0x360 [ 1121.887203] inet6_sendmsg+0x105/0x140 [ 1121.887975] ? inet6_compat_ioctl+0x320/0x320 [ 1121.888868] sock_sendmsg+0xf2/0x190 [ 1121.889605] ____sys_sendmsg+0x334/0x870 [ 1121.890409] ? kernel_sendmsg+0x50/0x50 [ 1121.891191] ? do_recvmmsg+0x6d0/0x6d0 [ 1121.891964] ? __lock_acquire+0x1657/0x5b00 [ 1121.892848] ___sys_sendmsg+0xf3/0x170 [ 1121.893751] ? sendmsg_copy_msghdr+0x160/0x160 [ 1121.894676] ? vmacache_find+0x55/0x2a0 [ 1121.895634] ? __lockdep_reset_lock+0x180/0x180 [ 1121.896590] ? find_held_lock+0x2c/0x110 [ 1121.897573] ? __might_fault+0xd3/0x180 [ 1121.898379] ? lock_downgrade+0x6d0/0x6d0 [ 1121.899374] ? asm_exc_page_fault+0x1e/0x30 [ 1121.900283] __sys_sendmmsg+0x195/0x470 [ 1121.901246] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1121.902110] ? lock_downgrade+0x6d0/0x6d0 [ 1121.903060] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1121.904026] ? wait_for_completion_io+0x270/0x270 [ 1121.905008] ? rcu_read_lock_any_held+0x75/0xa0 [ 1121.905958] ? vfs_write+0x354/0xa70 [ 1121.906711] ? fput_many+0x2f/0x1a0 [ 1121.907584] ? ksys_write+0x1a9/0x260 [ 1121.908384] __x64_sys_sendmmsg+0x99/0x100 [ 1121.909397] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1121.910450] do_syscall_64+0x33/0x40 [ 1121.911349] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1121.912395] RIP: 0033:0x7f6639ba0b19 [ 1121.913291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1121.916965] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1121.918788] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1121.920520] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1121.922228] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1121.923931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1121.925653] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:07:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:07 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:07 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:08 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:08 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 04:07:08 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:07:08 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:22 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:22 executing program 6: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r2, 0x2, 0x2, 0x6985) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 04:07:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 32) 04:07:22 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:07:22 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) [ 1136.189841] FAULT_INJECTION: forcing a failure. [ 1136.189841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1136.192844] CPU: 0 PID: 8696 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1136.194477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.196467] Call Trace: [ 1136.197099] dump_stack+0x107/0x167 [ 1136.197978] should_fail.cold+0x5/0xa [ 1136.198903] _copy_from_user+0x2e/0x1b0 [ 1136.199855] __copy_msghdr_from_user+0x91/0x4b0 [ 1136.200978] ? __ia32_sys_shutdown+0x80/0x80 [ 1136.202034] ? perf_trace_lock+0xac/0x490 [ 1136.203012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1136.204261] sendmsg_copy_msghdr+0xa1/0x160 [ 1136.205291] ? do_recvmmsg+0x6d0/0x6d0 [ 1136.206221] ? find_held_lock+0x2c/0x110 [ 1136.207196] ___sys_sendmsg+0xc6/0x170 [ 1136.208121] ? sendmsg_copy_msghdr+0x160/0x160 [ 1136.209218] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1136.210445] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1136.211507] ? trace_hardirqs_on+0x5b/0x180 [ 1136.212527] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1136.213587] ? finish_task_switch+0x126/0x5d0 [ 1136.214621] ? finish_task_switch+0xef/0x5d0 [ 1136.215653] ? __switch_to+0x572/0x1000 [ 1136.216583] ? __switch_to_asm+0x3a/0x60 [ 1136.217530] ? __switch_to_asm+0x34/0x60 [ 1136.218479] ? __schedule+0x82c/0x1f00 [ 1136.219407] ? io_schedule_timeout+0x140/0x140 [ 1136.220488] __sys_sendmmsg+0x195/0x470 [ 1136.221428] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1136.222423] ? lock_downgrade+0x6d0/0x6d0 [ 1136.223416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1136.224564] ? wait_for_completion_io+0x270/0x270 [ 1136.225702] ? rcu_read_lock_any_held+0x75/0xa0 [ 1136.226772] ? vfs_write+0x354/0xa70 [ 1136.227648] ? fput_many+0x2f/0x1a0 [ 1136.228500] ? ksys_write+0x1a9/0x260 [ 1136.229405] __x64_sys_sendmmsg+0x99/0x100 [ 1136.230381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1136.231593] do_syscall_64+0x33/0x40 [ 1136.232478] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1136.233693] RIP: 0033:0x7f6639ba0b19 [ 1136.234558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.238886] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1136.240659] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1136.242322] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1136.243966] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.245629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.247293] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:07:22 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:22 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:22 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) fallocate(0xffffffffffffffff, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:22 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:22 executing program 3: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:07:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:22 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) fallocate(0xffffffffffffffff, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 33) 04:07:22 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:22 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1136.607640] FAULT_INJECTION: forcing a failure. [ 1136.607640] name failslab, interval 1, probability 0, space 0, times 0 [ 1136.610402] CPU: 0 PID: 8749 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1136.611925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1136.613776] Call Trace: [ 1136.614368] dump_stack+0x107/0x167 [ 1136.615181] should_fail.cold+0x5/0xa [ 1136.616026] ? __alloc_skb+0x6d/0x5b0 [ 1136.616881] should_failslab+0x5/0x20 [ 1136.617724] kmem_cache_alloc_node+0x55/0x380 [ 1136.618720] __alloc_skb+0x6d/0x5b0 [ 1136.619535] alloc_skb_with_frags+0x92/0x570 [ 1136.620527] ? find_held_lock+0x2c/0x110 [ 1136.621443] sock_alloc_send_pskb+0x7af/0x930 [ 1136.622453] ? sk_alloc+0x350/0x350 [ 1136.623265] ? perf_trace_lock+0xac/0x490 [ 1136.624184] ? lock_chain_count+0x20/0x20 [ 1136.625120] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1136.626238] ? ip6_mtu+0x1bb/0x3d0 [ 1136.627025] ? lock_downgrade+0x6d0/0x6d0 [ 1136.627934] ? ip_frag_init+0x350/0x350 [ 1136.628838] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1136.629855] ? ip6_mtu+0x1e9/0x3d0 [ 1136.630636] ? ip6_setup_cork+0xfb7/0x1740 [ 1136.631567] ip6_make_skb+0x2de/0x4e0 [ 1136.632407] ? ip_frag_init+0x350/0x350 [ 1136.633286] ? ip_frag_init+0x350/0x350 [ 1136.634162] ? ip6_push_pending_frames+0xf0/0xf0 [ 1136.635208] ? ip6_dst_hoplimit+0x199/0x440 [ 1136.636153] ? lock_downgrade+0x6d0/0x6d0 [ 1136.637093] udpv6_sendmsg+0x2060/0x2a00 [ 1136.637986] ? ip_frag_init+0x350/0x350 [ 1136.638874] ? udp_v6_push_pending_frames+0x360/0x360 [ 1136.640001] ? __lockdep_reset_lock+0x180/0x180 [ 1136.641056] ? __lockdep_reset_lock+0x180/0x180 [ 1136.642081] ? find_held_lock+0x2c/0x110 [ 1136.642986] ? sock_has_perm+0x1ea/0x280 [ 1136.643901] ? __import_iovec+0x458/0x590 [ 1136.644807] ? udp_v6_push_pending_frames+0x360/0x360 [ 1136.645932] inet6_sendmsg+0x105/0x140 [ 1136.646779] ? inet6_compat_ioctl+0x320/0x320 [ 1136.647750] sock_sendmsg+0xf2/0x190 [ 1136.648565] ____sys_sendmsg+0x334/0x870 [ 1136.649453] ? kernel_sendmsg+0x50/0x50 [ 1136.650318] ? do_recvmmsg+0x6d0/0x6d0 [ 1136.651174] ? __lock_acquire+0x1657/0x5b00 [ 1136.652131] ___sys_sendmsg+0xf3/0x170 [ 1136.653000] ? sendmsg_copy_msghdr+0x160/0x160 [ 1136.653990] ? vmacache_find+0x55/0x2a0 [ 1136.654861] ? __lockdep_reset_lock+0x180/0x180 [ 1136.655882] ? find_held_lock+0x2c/0x110 [ 1136.656776] ? __might_fault+0xd3/0x180 [ 1136.657635] ? lock_downgrade+0x6d0/0x6d0 [ 1136.658530] ? asm_exc_page_fault+0x1e/0x30 [ 1136.659488] __sys_sendmmsg+0x195/0x470 [ 1136.660357] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1136.661286] ? lock_downgrade+0x6d0/0x6d0 [ 1136.662203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1136.663247] ? wait_for_completion_io+0x270/0x270 [ 1136.664312] ? rcu_read_lock_any_held+0x75/0xa0 [ 1136.665312] ? vfs_write+0x354/0xa70 [ 1136.666120] ? fput_many+0x2f/0x1a0 [ 1136.666904] ? ksys_write+0x1a9/0x260 [ 1136.667737] __x64_sys_sendmmsg+0x99/0x100 [ 1136.668654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1136.669756] do_syscall_64+0x33/0x40 [ 1136.670554] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1136.671652] RIP: 0033:0x7f6639ba0b19 [ 1136.672460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1136.676397] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1136.678029] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1136.679556] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1136.681091] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1136.682613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1136.684127] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:07:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 34) 04:07:36 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:07:36 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r2, 0xffffffffffffffff, 0x0) 04:07:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:36 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:36 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) fallocate(0xffffffffffffffff, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:36 executing program 5: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) [ 1150.196716] FAULT_INJECTION: forcing a failure. [ 1150.196716] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.199361] CPU: 0 PID: 8765 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1150.200903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1150.202635] Call Trace: [ 1150.203259] dump_stack+0x107/0x167 [ 1150.204040] should_fail.cold+0x5/0xa [ 1150.204915] ? create_object.isra.0+0x3a/0xa20 [ 1150.205971] should_failslab+0x5/0x20 [ 1150.206833] kmem_cache_alloc+0x5b/0x360 [ 1150.207667] create_object.isra.0+0x3a/0xa20 [ 1150.208642] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1150.209764] kmem_cache_alloc_node+0x169/0x380 [ 1150.210721] __alloc_skb+0x6d/0x5b0 [ 1150.211610] alloc_skb_with_frags+0x92/0x570 [ 1150.212548] ? find_held_lock+0x2c/0x110 [ 1150.213408] sock_alloc_send_pskb+0x7af/0x930 [ 1150.214362] ? sk_alloc+0x350/0x350 [ 1150.215126] ? perf_trace_lock+0xac/0x490 [ 1150.215993] ? lock_chain_count+0x20/0x20 [ 1150.216881] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1150.217940] ? ip6_mtu+0x1bb/0x3d0 [ 1150.218685] ? lock_downgrade+0x6d0/0x6d0 [ 1150.219538] ? ip_frag_init+0x350/0x350 [ 1150.220385] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1150.221358] ? ip6_mtu+0x1e9/0x3d0 [ 1150.222100] ? ip6_setup_cork+0xfb7/0x1740 [ 1150.222989] ip6_make_skb+0x2de/0x4e0 [ 1150.223778] ? ip_frag_init+0x350/0x350 [ 1150.224627] ? ip_frag_init+0x350/0x350 [ 1150.225457] ? ip6_push_pending_frames+0xf0/0xf0 [ 1150.226442] ? ip6_dst_hoplimit+0x199/0x440 [ 1150.227336] ? lock_downgrade+0x6d0/0x6d0 [ 1150.228208] udpv6_sendmsg+0x2060/0x2a00 [ 1150.229065] ? ip_frag_init+0x350/0x350 [ 1150.229905] ? udp_v6_push_pending_frames+0x360/0x360 [ 1150.230970] ? __lockdep_reset_lock+0x180/0x180 [ 1150.231945] ? __lockdep_reset_lock+0x180/0x180 [ 1150.232936] ? find_held_lock+0x2c/0x110 [ 1150.233798] ? sock_has_perm+0x1ea/0x280 [ 1150.234673] ? __import_iovec+0x458/0x590 [ 1150.235533] ? udp_v6_push_pending_frames+0x360/0x360 [ 1150.236627] inet6_sendmsg+0x105/0x140 [ 1150.237436] ? inet6_compat_ioctl+0x320/0x320 [ 1150.238361] sock_sendmsg+0xf2/0x190 [ 1150.239139] ____sys_sendmsg+0x334/0x870 [ 1150.239981] ? kernel_sendmsg+0x50/0x50 [ 1150.240815] ? do_recvmmsg+0x6d0/0x6d0 [ 1150.241632] ? __lock_acquire+0x1657/0x5b00 [ 1150.242545] ___sys_sendmsg+0xf3/0x170 [ 1150.243354] ? sendmsg_copy_msghdr+0x160/0x160 [ 1150.244294] ? vmacache_find+0x55/0x2a0 [ 1150.245142] ? __lockdep_reset_lock+0x180/0x180 [ 1150.246122] ? find_held_lock+0x2c/0x110 [ 1150.246968] ? __might_fault+0xd3/0x180 [ 1150.247793] ? lock_downgrade+0x6d0/0x6d0 [ 1150.248673] ? asm_exc_page_fault+0x1e/0x30 [ 1150.249586] __sys_sendmmsg+0x195/0x470 [ 1150.250418] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1150.251318] ? lock_downgrade+0x6d0/0x6d0 [ 1150.252197] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1150.253217] ? wait_for_completion_io+0x270/0x270 [ 1150.254220] ? rcu_read_lock_any_held+0x75/0xa0 [ 1150.255178] ? vfs_write+0x354/0xa70 [ 1150.255955] ? fput_many+0x2f/0x1a0 [ 1150.256725] ? ksys_write+0x1a9/0x260 [ 1150.257526] __x64_sys_sendmmsg+0x99/0x100 [ 1150.258410] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1150.259474] do_syscall_64+0x33/0x40 [ 1150.260375] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1150.261453] RIP: 0033:0x7f6639ba0b19 [ 1150.262351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1150.266126] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1150.267697] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1150.269169] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1150.270642] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1150.272111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1150.273584] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:07:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:36 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:07:36 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:36 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:51 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:07:51 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:07:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 35) 04:07:51 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:07:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:51 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:07:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) [ 1165.620557] FAULT_INJECTION: forcing a failure. [ 1165.620557] name failslab, interval 1, probability 0, space 0, times 0 [ 1165.623068] CPU: 0 PID: 8807 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1165.624553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1165.626364] Call Trace: [ 1165.626944] dump_stack+0x107/0x167 [ 1165.627768] should_fail.cold+0x5/0xa [ 1165.628609] ? __alloc_skb+0x6d/0x5b0 [ 1165.629469] should_failslab+0x5/0x20 [ 1165.630319] kmem_cache_alloc_node+0x55/0x380 [ 1165.631473] __alloc_skb+0x6d/0x5b0 [ 1165.632489] alloc_skb_with_frags+0x92/0x570 [ 1165.633736] ? find_held_lock+0x2c/0x110 [ 1165.634887] sock_alloc_send_pskb+0x7af/0x930 [ 1165.636007] ? sk_alloc+0x350/0x350 [ 1165.636850] ? perf_trace_lock+0xac/0x490 [ 1165.637750] ? lock_chain_count+0x20/0x20 [ 1165.638690] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1165.639788] ? ip6_mtu+0x1bb/0x3d0 [ 1165.640576] ? lock_downgrade+0x6d0/0x6d0 [ 1165.641502] ? ip_frag_init+0x350/0x350 [ 1165.642408] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1165.643417] ? ip6_mtu+0x1e9/0x3d0 [ 1165.644207] ? ip6_setup_cork+0xfb7/0x1740 [ 1165.645143] ip6_make_skb+0x2de/0x4e0 [ 1165.645969] ? ip_frag_init+0x350/0x350 [ 1165.646854] ? ip_frag_init+0x350/0x350 [ 1165.647735] ? ip6_push_pending_frames+0xf0/0xf0 [ 1165.648796] ? ip6_dst_hoplimit+0x199/0x440 [ 1165.649738] ? lock_downgrade+0x6d0/0x6d0 [ 1165.650673] udpv6_sendmsg+0x2060/0x2a00 [ 1165.651570] ? ip_frag_init+0x350/0x350 [ 1165.652453] ? udp_v6_push_pending_frames+0x360/0x360 [ 1165.653606] ? __lockdep_reset_lock+0x180/0x180 [ 1165.654648] ? __lockdep_reset_lock+0x180/0x180 [ 1165.655680] ? find_held_lock+0x2c/0x110 [ 1165.656585] ? sock_has_perm+0x1ea/0x280 [ 1165.657522] ? __import_iovec+0x458/0x590 [ 1165.658440] ? udp_v6_push_pending_frames+0x360/0x360 [ 1165.659552] inet6_sendmsg+0x105/0x140 [ 1165.660413] ? inet6_compat_ioctl+0x320/0x320 [ 1165.661392] sock_sendmsg+0xf2/0x190 [ 1165.662228] ____sys_sendmsg+0x334/0x870 [ 1165.663115] ? kernel_sendmsg+0x50/0x50 [ 1165.663976] ? do_recvmmsg+0x6d0/0x6d0 [ 1165.664845] ? __lock_acquire+0x1657/0x5b00 [ 1165.665818] ___sys_sendmsg+0xf3/0x170 [ 1165.666699] ? sendmsg_copy_msghdr+0x160/0x160 [ 1165.667698] ? vmacache_find+0x55/0x2a0 [ 1165.668580] ? __lockdep_reset_lock+0x180/0x180 [ 1165.669622] ? find_held_lock+0x2c/0x110 [ 1165.670534] ? __might_fault+0xd3/0x180 [ 1165.671407] ? lock_downgrade+0x6d0/0x6d0 [ 1165.672321] ? asm_exc_page_fault+0x1e/0x30 [ 1165.673288] __sys_sendmmsg+0x195/0x470 [ 1165.674188] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1165.675140] ? lock_downgrade+0x6d0/0x6d0 [ 1165.676064] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1165.677157] ? wait_for_completion_io+0x270/0x270 [ 1165.678217] ? rcu_read_lock_any_held+0x75/0xa0 [ 1165.679235] ? vfs_write+0x354/0xa70 [ 1165.680045] ? fput_many+0x2f/0x1a0 [ 1165.680867] ? ksys_write+0x1a9/0x260 [ 1165.681712] __x64_sys_sendmmsg+0x99/0x100 [ 1165.682657] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1165.683791] do_syscall_64+0x33/0x40 [ 1165.684619] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1165.685747] RIP: 0033:0x7f6639ba0b19 [ 1165.686585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1165.690579] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1165.692251] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1165.693815] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1165.695399] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1165.696991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1165.698585] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:07:51 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:07:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:07:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:06 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:06 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:06 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:08:06 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 36) 04:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:06 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1180.570439] FAULT_INJECTION: forcing a failure. [ 1180.570439] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.573016] CPU: 1 PID: 8855 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1180.574421] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1180.576117] Call Trace: [ 1180.576663] dump_stack+0x107/0x167 [ 1180.577444] should_fail.cold+0x5/0xa [ 1180.578219] ? create_object.isra.0+0x3a/0xa20 [ 1180.579142] should_failslab+0x5/0x20 [ 1180.579913] kmem_cache_alloc+0x5b/0x360 [ 1180.580752] create_object.isra.0+0x3a/0xa20 [ 1180.581656] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1180.582685] __kmalloc_node_track_caller+0x1a6/0x310 [ 1180.583747] ? alloc_skb_with_frags+0x92/0x570 [ 1180.584675] __alloc_skb+0xb1/0x5b0 [ 1180.585439] alloc_skb_with_frags+0x92/0x570 [ 1180.586349] ? find_held_lock+0x2c/0x110 [ 1180.587184] sock_alloc_send_pskb+0x7af/0x930 [ 1180.588123] ? sk_alloc+0x350/0x350 [ 1180.588887] ? perf_trace_lock+0xac/0x490 [ 1180.589740] ? lock_chain_count+0x20/0x20 [ 1180.590610] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1180.591642] ? ip6_mtu+0x1bb/0x3d0 [ 1180.592368] ? lock_downgrade+0x6d0/0x6d0 [ 1180.593237] ? ip_frag_init+0x350/0x350 [ 1180.594056] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1180.594993] ? ip6_mtu+0x1e9/0x3d0 [ 1180.595718] ? ip6_setup_cork+0xfb7/0x1740 [ 1180.596576] ip6_make_skb+0x2de/0x4e0 [ 1180.597372] ? ip_frag_init+0x350/0x350 [ 1180.598182] ? ip_frag_init+0x350/0x350 [ 1180.599029] ? ip6_push_pending_frames+0xf0/0xf0 [ 1180.599978] ? ip6_dst_hoplimit+0x199/0x440 [ 1180.600906] ? lock_downgrade+0x6d0/0x6d0 [ 1180.601754] udpv6_sendmsg+0x2060/0x2a00 [ 1180.602593] ? ip_frag_init+0x350/0x350 [ 1180.603405] ? udp_v6_push_pending_frames+0x360/0x360 [ 1180.604454] ? lock_chain_count+0x20/0x20 [ 1180.605300] ? __lockdep_reset_lock+0x180/0x180 [ 1180.606267] ? find_held_lock+0x2c/0x110 [ 1180.607094] ? sock_has_perm+0x1ea/0x280 [ 1180.607950] ? __import_iovec+0x458/0x590 [ 1180.608788] ? udp_v6_push_pending_frames+0x360/0x360 [ 1180.609848] inet6_sendmsg+0x105/0x140 [ 1180.610642] ? inet6_compat_ioctl+0x320/0x320 [ 1180.611554] sock_sendmsg+0xf2/0x190 [ 1180.612316] ____sys_sendmsg+0x334/0x870 [ 1180.613150] ? kernel_sendmsg+0x50/0x50 [ 1180.613958] ? do_recvmmsg+0x6d0/0x6d0 [ 1180.614748] ? __lock_acquire+0x1657/0x5b00 [ 1180.615643] ___sys_sendmsg+0xf3/0x170 [ 1180.616435] ? sendmsg_copy_msghdr+0x160/0x160 [ 1180.617380] ? __lockdep_reset_lock+0x180/0x180 [ 1180.618326] ? trace_hardirqs_on+0x5b/0x180 [ 1180.619217] ? find_held_lock+0x2c/0x110 [ 1180.620049] ? __might_fault+0xd3/0x180 04:08:06 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1180.620882] ? lock_downgrade+0x6d0/0x6d0 [ 1180.621916] ? io_schedule_timeout+0x140/0x140 [ 1180.622865] __sys_sendmmsg+0x195/0x470 [ 1180.623682] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1180.624561] ? lock_downgrade+0x6d0/0x6d0 [ 1180.625437] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1180.626428] ? wait_for_completion_io+0x270/0x270 [ 1180.627414] ? rcu_read_lock_any_held+0x75/0xa0 [ 1180.628359] ? vfs_write+0x354/0xa70 [ 1180.629145] ? fput_many+0x2f/0x1a0 [ 1180.629891] ? ksys_write+0x1a9/0x260 [ 1180.630682] __x64_sys_sendmmsg+0x99/0x100 [ 1180.631546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1180.632600] do_syscall_64+0x33/0x40 [ 1180.633372] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1180.634422] RIP: 0033:0x7f6639ba0b19 [ 1180.635186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1180.638943] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1180.640496] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1180.641969] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1180.643427] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.644894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1180.646354] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:06 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:21 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:08:21 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 37) 04:08:21 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:21 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:08:21 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:21 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1196.068068] FAULT_INJECTION: forcing a failure. [ 1196.068068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.069580] CPU: 0 PID: 8887 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1196.070403] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.071403] Call Trace: [ 1196.071732] dump_stack+0x107/0x167 [ 1196.072180] should_fail.cold+0x5/0xa [ 1196.072657] _copy_from_user+0x2e/0x1b0 [ 1196.073150] __copy_msghdr_from_user+0x91/0x4b0 [ 1196.073716] ? __ia32_sys_shutdown+0x80/0x80 [ 1196.074246] ? udp_v6_push_pending_frames+0x360/0x360 [ 1196.074892] ? inet6_sendmsg+0xbd/0x140 [ 1196.075377] ? inet6_compat_ioctl+0x320/0x320 [ 1196.075932] ? sock_sendmsg+0x55/0x190 [ 1196.076403] sendmsg_copy_msghdr+0xa1/0x160 [ 1196.076937] ? do_recvmmsg+0x6d0/0x6d0 [ 1196.077439] ? __lock_acquire+0x1657/0x5b00 [ 1196.077979] ___sys_sendmsg+0xc6/0x170 [ 1196.078459] ? sendmsg_copy_msghdr+0x160/0x160 [ 1196.079020] ? vmacache_find+0x55/0x2a0 [ 1196.079509] ? __lockdep_reset_lock+0x180/0x180 [ 1196.080086] ? find_held_lock+0x2c/0x110 [ 1196.080592] ? __might_fault+0xd3/0x180 [ 1196.081092] ? lock_downgrade+0x6d0/0x6d0 [ 1196.081601] ? asm_exc_page_fault+0x1e/0x30 [ 1196.082145] __sys_sendmmsg+0x195/0x470 [ 1196.082642] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1196.083174] ? lock_downgrade+0x6d0/0x6d0 [ 1196.083697] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.084297] ? wait_for_completion_io+0x270/0x270 [ 1196.084892] ? rcu_read_lock_any_held+0x75/0xa0 [ 1196.085509] ? vfs_write+0x354/0xa70 [ 1196.085973] ? fput_many+0x2f/0x1a0 [ 1196.086428] ? ksys_write+0x1a9/0x260 [ 1196.086902] __x64_sys_sendmmsg+0x99/0x100 [ 1196.087420] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.088050] do_syscall_64+0x33/0x40 [ 1196.088508] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1196.089147] RIP: 0033:0x7f6639ba0b19 [ 1196.089607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.091849] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.092782] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1196.093671] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1196.094550] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.095421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.096291] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:21 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:22 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:08:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:22 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 38) 04:08:22 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:08:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:22 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x80, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:22 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:22 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 1196.428284] FAULT_INJECTION: forcing a failure. [ 1196.428284] name failslab, interval 1, probability 0, space 0, times 0 [ 1196.430790] CPU: 1 PID: 8931 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1196.432249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1196.434034] Call Trace: [ 1196.434604] dump_stack+0x107/0x167 [ 1196.435393] should_fail.cold+0x5/0xa [ 1196.436215] ? __alloc_skb+0x6d/0x5b0 [ 1196.437042] should_failslab+0x5/0x20 [ 1196.437875] kmem_cache_alloc_node+0x55/0x380 [ 1196.438840] __alloc_skb+0x6d/0x5b0 [ 1196.439624] alloc_skb_with_frags+0x92/0x570 [ 1196.440562] ? find_held_lock+0x2c/0x110 [ 1196.441465] sock_alloc_send_pskb+0x7af/0x930 [ 1196.442443] ? sk_alloc+0x350/0x350 [ 1196.443228] ? perf_trace_lock+0xac/0x490 [ 1196.444114] ? lock_chain_count+0x20/0x20 [ 1196.445016] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1196.446112] ? ip6_mtu+0x1bb/0x3d0 [ 1196.446873] ? lock_downgrade+0x6d0/0x6d0 [ 1196.447756] ? ip_frag_init+0x350/0x350 [ 1196.448623] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1196.449626] ? ip6_mtu+0x1e9/0x3d0 [ 1196.450389] ? ip6_setup_cork+0xfb7/0x1740 [ 1196.451298] ip6_make_skb+0x2de/0x4e0 [ 1196.452108] ? ip_frag_init+0x350/0x350 [ 1196.452967] ? ip_frag_init+0x350/0x350 [ 1196.453827] ? ip6_push_pending_frames+0xf0/0xf0 [ 1196.454845] ? ip6_dst_hoplimit+0x199/0x440 [ 1196.455770] ? lock_downgrade+0x6d0/0x6d0 [ 1196.456697] udpv6_sendmsg+0x2060/0x2a00 [ 1196.457589] ? ip_frag_init+0x350/0x350 [ 1196.458453] ? udp_v6_push_pending_frames+0x360/0x360 [ 1196.459553] ? lock_chain_count+0x20/0x20 [ 1196.460455] ? __lockdep_reset_lock+0x180/0x180 [ 1196.461456] ? lock_chain_count+0x20/0x20 [ 1196.462350] ? find_held_lock+0x2c/0x110 [ 1196.463240] ? sock_has_perm+0x1ea/0x280 [ 1196.464138] ? __import_iovec+0x458/0x590 [ 1196.465026] ? udp_v6_push_pending_frames+0x360/0x360 [ 1196.466136] inet6_sendmsg+0x105/0x140 [ 1196.466969] ? inet6_compat_ioctl+0x320/0x320 [ 1196.467925] sock_sendmsg+0xf2/0x190 [ 1196.468725] ____sys_sendmsg+0x334/0x870 [ 1196.469614] ? kernel_sendmsg+0x50/0x50 [ 1196.470465] ? do_recvmmsg+0x6d0/0x6d0 [ 1196.471302] ? __lock_acquire+0x1657/0x5b00 [ 1196.472240] ___sys_sendmsg+0xf3/0x170 [ 1196.473080] ? sendmsg_copy_msghdr+0x160/0x160 [ 1196.474063] ? __lockdep_reset_lock+0x180/0x180 [ 1196.475058] ? trace_hardirqs_on+0x5b/0x180 [ 1196.475991] ? find_held_lock+0x2c/0x110 [ 1196.476867] ? __might_fault+0xd3/0x180 [ 1196.477727] ? lock_downgrade+0x6d0/0x6d0 [ 1196.478615] ? io_schedule_timeout+0x140/0x140 [ 1196.479612] __sys_sendmmsg+0x195/0x470 [ 1196.480469] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1196.481404] ? lock_downgrade+0x6d0/0x6d0 [ 1196.482314] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1196.483348] ? wait_for_completion_io+0x270/0x270 [ 1196.484379] ? rcu_read_lock_any_held+0x75/0xa0 [ 1196.485377] ? vfs_write+0x354/0xa70 [ 1196.486177] ? fput_many+0x2f/0x1a0 [ 1196.487015] ? ksys_write+0x1a9/0x260 [ 1196.488053] __x64_sys_sendmmsg+0x99/0x100 [ 1196.489214] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1196.490590] do_syscall_64+0x33/0x40 [ 1196.491583] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1196.492849] RIP: 0033:0x7f6639ba0b19 [ 1196.493689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1196.497721] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1196.499341] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1196.500857] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1196.502395] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1196.503911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1196.505437] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:37 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 39) 04:08:37 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:37 executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:08:37 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1211.423124] FAULT_INJECTION: forcing a failure. [ 1211.423124] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.424854] CPU: 1 PID: 8961 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1211.425851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.427065] Call Trace: [ 1211.427456] dump_stack+0x107/0x167 [ 1211.427996] should_fail.cold+0x5/0xa [ 1211.428552] ? create_object.isra.0+0x3a/0xa20 [ 1211.429230] should_failslab+0x5/0x20 [ 1211.429790] kmem_cache_alloc+0x5b/0x360 [ 1211.430392] create_object.isra.0+0x3a/0xa20 [ 1211.431036] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1211.431780] kmem_cache_alloc_node+0x169/0x380 [ 1211.432445] __alloc_skb+0x6d/0x5b0 [ 1211.432970] alloc_skb_with_frags+0x92/0x570 [ 1211.433629] ? find_held_lock+0x2c/0x110 [ 1211.434220] sock_alloc_send_pskb+0x7af/0x930 [ 1211.434879] ? sk_alloc+0x350/0x350 [ 1211.435415] ? perf_trace_lock+0xac/0x490 [ 1211.436024] ? SOFTIRQ_verbose+0x10/0x10 [ 1211.436615] ? lock_chain_count+0x20/0x20 [ 1211.437227] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1211.437996] ? ip6_mtu+0x1bb/0x3d0 [ 1211.438527] ? lock_downgrade+0x6d0/0x6d0 [ 1211.439148] ? ip_frag_init+0x350/0x350 [ 1211.439748] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1211.440442] ? ip6_mtu+0x1e9/0x3d0 [ 1211.440968] ? ip6_setup_cork+0xfb7/0x1740 [ 1211.441623] ip6_make_skb+0x2de/0x4e0 [ 1211.442174] ? ip_frag_init+0x350/0x350 [ 1211.442777] ? ip_frag_init+0x350/0x350 [ 1211.443366] ? ip6_push_pending_frames+0xf0/0xf0 [ 1211.444073] ? ip6_dst_hoplimit+0x199/0x440 [ 1211.444712] ? lock_downgrade+0x6d0/0x6d0 [ 1211.445350] udpv6_sendmsg+0x2060/0x2a00 [ 1211.445944] ? ip_frag_init+0x350/0x350 [ 1211.446540] ? udp_v6_push_pending_frames+0x360/0x360 [ 1211.447282] ? __lockdep_reset_lock+0x180/0x180 [ 1211.447986] ? __lockdep_reset_lock+0x180/0x180 [ 1211.448692] ? find_held_lock+0x2c/0x110 [ 1211.449317] ? sock_has_perm+0x1ea/0x280 [ 1211.449933] ? __import_iovec+0x458/0x590 [ 1211.450506] ? udp_v6_push_pending_frames+0x360/0x360 [ 1211.451266] inet6_sendmsg+0x105/0x140 [ 1211.451795] ? inet6_compat_ioctl+0x320/0x320 [ 1211.452412] sock_sendmsg+0xf2/0x190 [ 1211.452918] ____sys_sendmsg+0x334/0x870 [ 1211.453495] ? kernel_sendmsg+0x50/0x50 [ 1211.454034] ? do_recvmmsg+0x6d0/0x6d0 [ 1211.454579] ? __lock_acquire+0x1657/0x5b00 [ 1211.455178] ___sys_sendmsg+0xf3/0x170 [ 1211.455713] ? sendmsg_copy_msghdr+0x160/0x160 [ 1211.456349] ? vmacache_find+0x55/0x2a0 [ 1211.456918] ? __lockdep_reset_lock+0x180/0x180 [ 1211.457609] ? find_held_lock+0x2c/0x110 [ 1211.458203] ? __might_fault+0xd3/0x180 [ 1211.458771] ? lock_downgrade+0x6d0/0x6d0 [ 1211.459355] ? asm_exc_page_fault+0x1e/0x30 [ 1211.459982] __sys_sendmmsg+0x195/0x470 [ 1211.460545] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1211.461188] ? lock_downgrade+0x6d0/0x6d0 [ 1211.461801] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1211.462508] ? wait_for_completion_io+0x270/0x270 [ 1211.463211] ? rcu_read_lock_any_held+0x75/0xa0 [ 1211.463894] ? vfs_write+0x354/0xa70 [ 1211.464439] ? fput_many+0x2f/0x1a0 [ 1211.464961] ? ksys_write+0x1a9/0x260 [ 1211.465535] __x64_sys_sendmmsg+0x99/0x100 [ 1211.466140] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.466851] do_syscall_64+0x33/0x40 [ 1211.467386] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1211.468079] RIP: 0033:0x7f6639ba0b19 [ 1211.468605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.471076] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1211.472102] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1211.473065] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1211.474039] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.474989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.475963] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:37 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:37 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:37 executing program 4: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:08:37 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:37 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:08:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 40) 04:08:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) [ 1211.653588] FAULT_INJECTION: forcing a failure. [ 1211.653588] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.655110] CPU: 1 PID: 8982 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1211.655957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1211.656992] Call Trace: [ 1211.657327] dump_stack+0x107/0x167 [ 1211.657791] should_fail.cold+0x5/0xa [ 1211.658254] should_failslab+0x5/0x20 [ 1211.658706] __kmalloc_node_track_caller+0x74/0x310 [ 1211.659292] ? alloc_skb_with_frags+0x92/0x570 [ 1211.659830] __alloc_skb+0xb1/0x5b0 [ 1211.660273] alloc_skb_with_frags+0x92/0x570 [ 1211.660796] ? find_held_lock+0x2c/0x110 [ 1211.661304] sock_alloc_send_pskb+0x7af/0x930 [ 1211.661848] ? sk_alloc+0x350/0x350 [ 1211.662287] ? perf_trace_lock+0xac/0x490 [ 1211.662779] ? lock_chain_count+0x20/0x20 [ 1211.663305] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1211.663945] ? ip6_mtu+0x1bb/0x3d0 [ 1211.664385] ? lock_downgrade+0x6d0/0x6d0 [ 1211.664912] ? ip_frag_init+0x350/0x350 [ 1211.665423] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1211.665995] ? ip6_mtu+0x1e9/0x3d0 [ 1211.666417] ? ip6_setup_cork+0xfb7/0x1740 [ 1211.666942] ip6_make_skb+0x2de/0x4e0 [ 1211.667412] ? ip_frag_init+0x350/0x350 [ 1211.667915] ? ip_frag_init+0x350/0x350 [ 1211.668414] ? ip6_push_pending_frames+0xf0/0xf0 [ 1211.669007] ? ip6_dst_hoplimit+0x199/0x440 [ 1211.669554] ? lock_downgrade+0x6d0/0x6d0 [ 1211.670078] udpv6_sendmsg+0x2060/0x2a00 [ 1211.670581] ? ip_frag_init+0x350/0x350 [ 1211.671084] ? udp_v6_push_pending_frames+0x360/0x360 [ 1211.671720] ? __lockdep_reset_lock+0x180/0x180 [ 1211.672297] ? __lockdep_reset_lock+0x180/0x180 [ 1211.672852] ? find_held_lock+0x2c/0x110 [ 1211.673387] ? sock_has_perm+0x1ea/0x280 [ 1211.673912] ? __import_iovec+0x458/0x590 [ 1211.674429] ? udp_v6_push_pending_frames+0x360/0x360 [ 1211.675074] inet6_sendmsg+0x105/0x140 [ 1211.675546] ? inet6_compat_ioctl+0x320/0x320 [ 1211.676088] sock_sendmsg+0xf2/0x190 [ 1211.676550] ____sys_sendmsg+0x334/0x870 [ 1211.677050] ? kernel_sendmsg+0x50/0x50 [ 1211.677551] ? do_recvmmsg+0x6d0/0x6d0 [ 1211.678021] ? __lock_acquire+0x1657/0x5b00 [ 1211.678554] ___sys_sendmsg+0xf3/0x170 [ 1211.679034] ? sendmsg_copy_msghdr+0x160/0x160 [ 1211.679591] ? vmacache_find+0x55/0x2a0 [ 1211.680076] ? __lockdep_reset_lock+0x180/0x180 [ 1211.680649] ? find_held_lock+0x2c/0x110 [ 1211.681146] ? __might_fault+0xd3/0x180 [ 1211.681645] ? lock_downgrade+0x6d0/0x6d0 [ 1211.682157] ? asm_exc_page_fault+0x1e/0x30 [ 1211.682697] __sys_sendmmsg+0x195/0x470 [ 1211.683162] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1211.683690] ? lock_downgrade+0x6d0/0x6d0 [ 1211.684210] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1211.684802] ? wait_for_completion_io+0x270/0x270 [ 1211.685415] ? rcu_read_lock_any_held+0x75/0xa0 [ 1211.685984] ? vfs_write+0x354/0xa70 [ 1211.686450] ? fput_many+0x2f/0x1a0 [ 1211.686891] ? ksys_write+0x1a9/0x260 [ 1211.687367] __x64_sys_sendmmsg+0x99/0x100 [ 1211.687899] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1211.688534] do_syscall_64+0x33/0x40 [ 1211.688985] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1211.689617] RIP: 0033:0x7f6639ba0b19 [ 1211.690071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1211.692299] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1211.693231] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1211.694058] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1211.694938] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1211.695805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.696676] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:54 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:08:54 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:08:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:54 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:08:54 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 41) 04:08:54 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) [ 1228.707169] FAULT_INJECTION: forcing a failure. [ 1228.707169] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.709344] CPU: 1 PID: 9011 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1228.710572] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1228.712062] Call Trace: [ 1228.712544] dump_stack+0x107/0x167 [ 1228.713205] should_fail.cold+0x5/0xa [ 1228.713905] should_failslab+0x5/0x20 [ 1228.714587] __kmalloc_node_track_caller+0x74/0x310 [ 1228.715468] ? alloc_skb_with_frags+0x92/0x570 [ 1228.716290] __alloc_skb+0xb1/0x5b0 [ 1228.716943] alloc_skb_with_frags+0x92/0x570 [ 1228.717739] ? find_held_lock+0x2c/0x110 [ 1228.718475] sock_alloc_send_pskb+0x7af/0x930 [ 1228.719286] ? sk_alloc+0x350/0x350 [ 1228.719955] ? perf_trace_lock+0xac/0x490 [ 1228.720686] ? SOFTIRQ_verbose+0x10/0x10 [ 1228.721418] ? lock_chain_count+0x20/0x20 [ 1228.722172] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1228.723073] ? ip6_mtu+0x1bb/0x3d0 [ 1228.723705] ? lock_downgrade+0x6d0/0x6d0 [ 1228.724435] ? ip_frag_init+0x350/0x350 [ 1228.725157] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1228.725984] ? ip6_mtu+0x1e9/0x3d0 [ 1228.726622] ? ip6_setup_cork+0xfb7/0x1740 [ 1228.727378] ip6_make_skb+0x2de/0x4e0 [ 1228.728083] ? ip_frag_init+0x350/0x350 [ 1228.728800] ? ip_frag_init+0x350/0x350 [ 1228.729569] ? ip6_push_pending_frames+0xf0/0xf0 [ 1228.730424] ? ip6_dst_hoplimit+0x199/0x440 [ 1228.731232] ? lock_downgrade+0x6d0/0x6d0 [ 1228.731992] udpv6_sendmsg+0x2060/0x2a00 [ 1228.732766] ? ip_frag_init+0x350/0x350 [ 1228.733489] ? udp_v6_push_pending_frames+0x360/0x360 [ 1228.734477] ? __lockdep_reset_lock+0x180/0x180 [ 1228.735290] ? lock_chain_count+0x20/0x20 [ 1228.736069] ? find_held_lock+0x2c/0x110 [ 1228.736802] ? sock_has_perm+0x1ea/0x280 [ 1228.737561] ? __import_iovec+0x458/0x590 [ 1228.738286] ? udp_v6_push_pending_frames+0x360/0x360 [ 1228.739192] inet6_sendmsg+0x105/0x140 [ 1228.739872] ? inet6_compat_ioctl+0x320/0x320 [ 1228.740652] sock_sendmsg+0xf2/0x190 [ 1228.741306] ____sys_sendmsg+0x334/0x870 [ 1228.742031] ? kernel_sendmsg+0x50/0x50 [ 1228.742722] ? do_recvmmsg+0x6d0/0x6d0 [ 1228.743411] ? __lock_acquire+0x1657/0x5b00 [ 1228.744186] ___sys_sendmsg+0xf3/0x170 [ 1228.744870] ? sendmsg_copy_msghdr+0x160/0x160 [ 1228.745678] ? __lockdep_reset_lock+0x180/0x180 [ 1228.746493] ? trace_hardirqs_on+0x5b/0x180 [ 1228.747260] ? find_held_lock+0x2c/0x110 [ 1228.747977] ? __might_fault+0xd3/0x180 [ 1228.748671] ? lock_downgrade+0x6d0/0x6d0 [ 1228.749452] ? io_schedule_timeout+0x140/0x140 [ 1228.750293] __sys_sendmmsg+0x195/0x470 [ 1228.751048] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1228.751801] ? lock_downgrade+0x6d0/0x6d0 [ 1228.752598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1228.753445] ? wait_for_completion_io+0x270/0x270 [ 1228.754301] ? rcu_read_lock_any_held+0x75/0xa0 [ 1228.755102] ? vfs_write+0x354/0xa70 [ 1228.755750] ? fput_many+0x2f/0x1a0 [ 1228.756387] ? ksys_write+0x1a9/0x260 [ 1228.757059] __x64_sys_sendmmsg+0x99/0x100 [ 1228.757837] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1228.758734] do_syscall_64+0x33/0x40 [ 1228.759398] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1228.760280] RIP: 0033:0x7f6639ba0b19 [ 1228.760957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1228.764130] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1228.765438] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1228.766703] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1228.767956] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1228.769212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1228.770458] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:08:54 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:08:54 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:08:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:08:54 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:08:54 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:08:54 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:10 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:09:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:10 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 42) 04:09:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:10 executing program 1: r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd=r0, 0x8, 0x0, 0x4}, 0x7) 04:09:10 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) [ 1244.655099] FAULT_INJECTION: forcing a failure. [ 1244.655099] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.656641] CPU: 1 PID: 9069 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1244.657498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1244.658538] Call Trace: [ 1244.658881] dump_stack+0x107/0x167 [ 1244.659356] should_fail.cold+0x5/0xa [ 1244.659852] ? create_object.isra.0+0x3a/0xa20 [ 1244.660427] should_failslab+0x5/0x20 [ 1244.660896] kmem_cache_alloc+0x5b/0x360 [ 1244.661408] create_object.isra.0+0x3a/0xa20 [ 1244.661957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1244.662595] __kmalloc_node_track_caller+0x1a6/0x310 [ 1244.663233] ? alloc_skb_with_frags+0x92/0x570 [ 1244.663807] __alloc_skb+0xb1/0x5b0 [ 1244.664271] alloc_skb_with_frags+0x92/0x570 [ 1244.664843] ? find_held_lock+0x2c/0x110 [ 1244.665384] sock_alloc_send_pskb+0x7af/0x930 [ 1244.665991] ? sk_alloc+0x350/0x350 [ 1244.666458] ? perf_trace_lock+0xac/0x490 [ 1244.666990] ? lock_chain_count+0x20/0x20 [ 1244.667526] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1244.668166] ? ip6_mtu+0x1bb/0x3d0 [ 1244.668614] ? lock_downgrade+0x6d0/0x6d0 [ 1244.669141] ? ip_frag_init+0x350/0x350 [ 1244.669659] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1244.670250] ? ip6_mtu+0x1e9/0x3d0 [ 1244.670686] ? ip6_setup_cork+0xfb7/0x1740 [ 1244.671210] ip6_make_skb+0x2de/0x4e0 [ 1244.671675] ? ip_frag_init+0x350/0x350 [ 1244.672160] ? ip_frag_init+0x350/0x350 [ 1244.672649] ? ip6_push_pending_frames+0xf0/0xf0 [ 1244.673228] ? ip6_dst_hoplimit+0x199/0x440 [ 1244.673763] ? lock_downgrade+0x6d0/0x6d0 [ 1244.674291] udpv6_sendmsg+0x2060/0x2a00 [ 1244.674798] ? ip_frag_init+0x350/0x350 [ 1244.675299] ? udp_v6_push_pending_frames+0x360/0x360 [ 1244.675926] ? __lockdep_reset_lock+0x180/0x180 [ 1244.676496] ? __lockdep_reset_lock+0x180/0x180 [ 1244.677074] ? find_held_lock+0x2c/0x110 [ 1244.677606] ? sock_has_perm+0x1ea/0x280 [ 1244.678141] ? __import_iovec+0x458/0x590 [ 1244.678684] ? udp_v6_push_pending_frames+0x360/0x360 [ 1244.679345] inet6_sendmsg+0x105/0x140 [ 1244.679835] ? inet6_compat_ioctl+0x320/0x320 [ 1244.680402] sock_sendmsg+0xf2/0x190 [ 1244.680880] ____sys_sendmsg+0x334/0x870 [ 1244.681388] ? kernel_sendmsg+0x50/0x50 [ 1244.681897] ? do_recvmmsg+0x6d0/0x6d0 [ 1244.682388] ? __lock_acquire+0x1657/0x5b00 [ 1244.682945] ___sys_sendmsg+0xf3/0x170 [ 1244.683445] ? sendmsg_copy_msghdr+0x160/0x160 [ 1244.684024] ? vmacache_find+0x55/0x2a0 [ 1244.684540] ? __lockdep_reset_lock+0x180/0x180 [ 1244.685143] ? find_held_lock+0x2c/0x110 [ 1244.685657] ? __might_fault+0xd3/0x180 [ 1244.686156] ? lock_downgrade+0x6d0/0x6d0 [ 1244.686680] ? asm_exc_page_fault+0x1e/0x30 [ 1244.687246] __sys_sendmmsg+0x195/0x470 [ 1244.687761] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1244.688307] ? lock_downgrade+0x6d0/0x6d0 [ 1244.688846] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1244.689458] ? wait_for_completion_io+0x270/0x270 [ 1244.690074] ? rcu_read_lock_any_held+0x75/0xa0 [ 1244.690660] ? vfs_write+0x354/0xa70 [ 1244.691110] ? fput_many+0x2f/0x1a0 [ 1244.691567] ? ksys_write+0x1a9/0x260 [ 1244.692059] __x64_sys_sendmmsg+0x99/0x100 [ 1244.692587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1244.693248] do_syscall_64+0x33/0x40 [ 1244.693735] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1244.694373] RIP: 0033:0x7f6639ba0b19 [ 1244.694843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1244.697156] RSP: 002b:00007f6637116188 EFLAGS: 00000246 [ 1244.697179] perf: interrupt took too long (4040 > 3986), lowering kernel.perf_event_max_sample_rate to 49000 [ 1244.697185] ORIG_RAX: 0000000000000133 [ 1244.697203] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1244.700996] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1244.701906] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1244.702798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1244.703691] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:09:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:10 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:10 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:10 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:09:10 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:09:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 43) 04:09:25 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:09:25 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:25 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:25 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:25 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:25 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:25 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) [ 1259.991459] FAULT_INJECTION: forcing a failure. [ 1259.991459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.993309] CPU: 0 PID: 9104 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1259.994371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1259.995615] Call Trace: [ 1259.996014] dump_stack+0x107/0x167 [ 1259.996589] should_fail.cold+0x5/0xa [ 1259.997170] _copy_from_user+0x2e/0x1b0 [ 1259.997767] __copy_msghdr_from_user+0x91/0x4b0 [ 1259.998489] ? __ia32_sys_shutdown+0x80/0x80 [ 1259.999119] ? udp_v6_push_pending_frames+0x360/0x360 [ 1259.999748] ? inet6_sendmsg+0xbd/0x140 [ 1260.000239] ? inet6_compat_ioctl+0x320/0x320 [ 1260.000793] ? sock_sendmsg+0x55/0x190 [ 1260.001268] sendmsg_copy_msghdr+0xa1/0x160 [ 1260.001796] ? do_recvmmsg+0x6d0/0x6d0 [ 1260.002290] ? __lock_acquire+0x1657/0x5b00 [ 1260.002834] ___sys_sendmsg+0xc6/0x170 [ 1260.003295] ? sendmsg_copy_msghdr+0x160/0x160 [ 1260.003846] ? __lockdep_reset_lock+0x180/0x180 [ 1260.004400] ? trace_hardirqs_on+0x5b/0x180 [ 1260.004909] ? find_held_lock+0x2c/0x110 [ 1260.005400] ? __might_fault+0xd3/0x180 [ 1260.005872] ? lock_downgrade+0x6d0/0x6d0 [ 1260.006389] ? io_schedule_timeout+0x140/0x140 [ 1260.006945] __sys_sendmmsg+0x195/0x470 [ 1260.007419] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1260.007928] ? lock_downgrade+0x6d0/0x6d0 [ 1260.008429] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1260.009003] ? wait_for_completion_io+0x270/0x270 [ 1260.009578] ? rcu_read_lock_any_held+0x75/0xa0 [ 1260.010151] ? vfs_write+0x354/0xa70 [ 1260.010590] ? fput_many+0x2f/0x1a0 [ 1260.011013] ? ksys_write+0x1a9/0x260 [ 1260.011473] __x64_sys_sendmmsg+0x99/0x100 [ 1260.011963] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.012577] do_syscall_64+0x33/0x40 [ 1260.013023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1260.013617] RIP: 0033:0x7f6639ba0b19 [ 1260.014077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.016219] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1260.017122] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1260.017970] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1260.018794] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.019623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.020442] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:09:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:26 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:26 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) 04:09:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:26 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 44) 04:09:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 1) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:26 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) [ 1260.237205] FAULT_INJECTION: forcing a failure. [ 1260.237205] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.239798] CPU: 1 PID: 9138 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1260.241274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.243071] Call Trace: [ 1260.243642] dump_stack+0x107/0x167 [ 1260.244434] should_fail.cold+0x5/0xa [ 1260.245250] ? create_object.isra.0+0x3a/0xa20 [ 1260.246244] should_failslab+0x5/0x20 [ 1260.247070] kmem_cache_alloc+0x5b/0x360 [ 1260.247954] create_object.isra.0+0x3a/0xa20 [ 1260.248908] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1260.250013] kmem_cache_alloc_node+0x169/0x380 [ 1260.250995] __alloc_skb+0x6d/0x5b0 [ 1260.251784] alloc_skb_with_frags+0x92/0x570 [ 1260.252717] ? find_held_lock+0x2c/0x110 [ 1260.253605] sock_alloc_send_pskb+0x7af/0x930 [ 1260.254598] ? sk_alloc+0x350/0x350 [ 1260.255385] ? perf_trace_lock+0xac/0x490 [ 1260.256272] ? lock_chain_count+0x20/0x20 [ 1260.257180] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1260.258270] ? ip6_mtu+0x1bb/0x3d0 [ 1260.259039] ? lock_downgrade+0x6d0/0x6d0 [ 1260.259932] ? ip_frag_init+0x350/0x350 [ 1260.260812] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1260.261808] ? ip6_mtu+0x1e9/0x3d0 [ 1260.262587] ? ip6_setup_cork+0xfb7/0x1740 [ 1260.263495] ip6_make_skb+0x2de/0x4e0 [ 1260.264306] ? ip_frag_init+0x350/0x350 [ 1260.265156] ? ip_frag_init+0x350/0x350 [ 1260.266033] ? ip6_push_pending_frames+0xf0/0xf0 [ 1260.267066] ? ip6_dst_hoplimit+0x199/0x440 [ 1260.268004] ? lock_downgrade+0x6d0/0x6d0 [ 1260.268923] udpv6_sendmsg+0x2060/0x2a00 [ 1260.269811] ? ip_frag_init+0x350/0x350 [ 1260.270697] ? udp_v6_push_pending_frames+0x360/0x360 [ 1260.271817] ? lock_chain_count+0x20/0x20 [ 1260.272728] ? __lockdep_reset_lock+0x180/0x180 [ 1260.273734] ? lock_chain_count+0x20/0x20 [ 1260.274655] ? find_held_lock+0x2c/0x110 [ 1260.275561] ? sock_has_perm+0x1ea/0x280 [ 1260.276473] ? __import_iovec+0x458/0x590 [ 1260.277375] ? udp_v6_push_pending_frames+0x360/0x360 [ 1260.278506] inet6_sendmsg+0x105/0x140 [ 1260.279350] ? inet6_compat_ioctl+0x320/0x320 [ 1260.280318] sock_sendmsg+0xf2/0x190 [ 1260.281128] ____sys_sendmsg+0x334/0x870 [ 1260.282033] ? kernel_sendmsg+0x50/0x50 [ 1260.282896] ? do_recvmmsg+0x6d0/0x6d0 [ 1260.283748] ? __lock_acquire+0x1657/0x5b00 [ 1260.284705] ___sys_sendmsg+0xf3/0x170 [ 1260.285553] ? sendmsg_copy_msghdr+0x160/0x160 [ 1260.286556] ? __lockdep_reset_lock+0x180/0x180 [ 1260.287567] ? trace_hardirqs_on+0x5b/0x180 [ 1260.288516] ? find_held_lock+0x2c/0x110 [ 1260.289403] ? __might_fault+0xd3/0x180 [ 1260.290290] ? lock_downgrade+0x6d0/0x6d0 [ 1260.291187] ? io_schedule_timeout+0x140/0x140 [ 1260.292180] __sys_sendmmsg+0x195/0x470 [ 1260.293032] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1260.293958] ? lock_downgrade+0x6d0/0x6d0 [ 1260.294862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1260.295890] ? wait_for_completion_io+0x270/0x270 [ 1260.296915] ? rcu_read_lock_any_held+0x75/0xa0 [ 1260.297899] ? vfs_write+0x354/0xa70 [ 1260.298709] ? fput_many+0x2f/0x1a0 [ 1260.299500] ? ksys_write+0x1a9/0x260 [ 1260.300339] __x64_sys_sendmmsg+0x99/0x100 [ 1260.301259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.302389] do_syscall_64+0x33/0x40 [ 1260.303203] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1260.304309] RIP: 0033:0x7f6639ba0b19 [ 1260.305118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.309099] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1260.310764] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1260.312305] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1260.313854] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.315403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1260.316952] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1260.331565] FAULT_INJECTION: forcing a failure. [ 1260.331565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1260.334100] CPU: 1 PID: 9146 Comm: syz-executor.5 Not tainted 5.10.173 #1 [ 1260.335559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1260.337320] Call Trace: [ 1260.337884] dump_stack+0x107/0x167 [ 1260.338681] should_fail.cold+0x5/0xa [ 1260.339507] _copy_from_user+0x2e/0x1b0 [ 1260.340364] do_ipt_get_ctl+0x4a3/0x960 [ 1260.341216] ? mutex_lock_io_nested+0xf30/0xf30 [ 1260.342238] ? get_info+0x5a0/0x5a0 [ 1260.343012] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1260.344049] ? find_held_lock+0x2c/0x110 [ 1260.344942] ? wait_for_completion_io+0x270/0x270 [ 1260.346002] ? lock_downgrade+0x6d0/0x6d0 [ 1260.346897] ? __fget_files+0x26d/0x4c0 [ 1260.347778] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1260.348926] nf_getsockopt+0x78/0xd0 [ 1260.349738] ip_getsockopt+0x168/0x1c0 [ 1260.350606] ? do_ip_getsockopt+0x1900/0x1900 [ 1260.351596] tcp_getsockopt+0x8c/0xd0 [ 1260.352433] ? sock_def_destruct+0x10/0x10 [ 1260.353348] __sys_getsockopt+0x14c/0x250 [ 1260.354244] ? __ia32_sys_setsockopt+0x150/0x150 [ 1260.355275] ? fput_many+0x2f/0x1a0 [ 1260.356053] ? ksys_write+0x1a9/0x260 [ 1260.356891] __x64_sys_getsockopt+0xba/0x160 [ 1260.357827] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1260.358959] do_syscall_64+0x33/0x40 [ 1260.359771] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1260.360882] RIP: 0033:0x7f059b3ecb19 [ 1260.361678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1260.365685] RSP: 002b:00007f0598962188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1260.367344] RAX: ffffffffffffffda RBX: 00007f059b4fff60 RCX: 00007f059b3ecb19 [ 1260.368898] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1260.370418] RBP: 00007f05989621d0 R08: 0000000020000140 R09: 0000000000000000 [ 1260.371928] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1260.373440] R13: 00007ffd68c58d0f R14: 00007f0598962300 R15: 0000000000022000 04:09:26 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:26 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:26 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:26 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:26 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a91ce6ccb5e3206389", 0x27) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:26 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:26 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:26 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 45) 04:09:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:43 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:09:43 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:43 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1277.492263] FAULT_INJECTION: forcing a failure. [ 1277.492263] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.494754] CPU: 1 PID: 9184 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1277.496143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1277.497847] Call Trace: [ 1277.498398] dump_stack+0x107/0x167 [ 1277.499159] should_fail.cold+0x5/0xa [ 1277.499949] should_failslab+0x5/0x20 [ 1277.500733] __kmalloc_node_track_caller+0x74/0x310 [ 1277.501759] ? alloc_skb_with_frags+0x92/0x570 [ 1277.502701] __alloc_skb+0xb1/0x5b0 [ 1277.503450] alloc_skb_with_frags+0x92/0x570 [ 1277.504338] ? find_held_lock+0x2c/0x110 [ 1277.505183] sock_alloc_send_pskb+0x7af/0x930 [ 1277.506110] ? sk_alloc+0x350/0x350 [ 1277.506870] ? perf_trace_lock+0xac/0x490 [ 1277.507718] ? lock_chain_count+0x20/0x20 [ 1277.508576] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1277.509599] ? ip6_mtu+0x1bb/0x3d0 [ 1277.510331] ? lock_downgrade+0x6d0/0x6d0 [ 1277.511165] ? ip_frag_init+0x350/0x350 [ 1277.511982] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1277.512921] ? ip6_mtu+0x1e9/0x3d0 [ 1277.513657] ? ip6_setup_cork+0xfb7/0x1740 [ 1277.514538] ip6_make_skb+0x2de/0x4e0 [ 1277.515315] ? ip_frag_init+0x350/0x350 [ 1277.516124] ? ip_frag_init+0x350/0x350 [ 1277.516936] ? ip6_push_pending_frames+0xf0/0xf0 [ 1277.517901] ? ip6_dst_hoplimit+0x199/0x440 [ 1277.518785] ? lock_downgrade+0x6d0/0x6d0 [ 1277.519643] udpv6_sendmsg+0x2060/0x2a00 [ 1277.520468] ? ip_frag_init+0x350/0x350 [ 1277.521284] ? udp_v6_push_pending_frames+0x360/0x360 [ 1277.522336] ? lock_chain_count+0x20/0x20 [ 1277.523185] ? __lockdep_reset_lock+0x180/0x180 [ 1277.524130] ? lock_chain_count+0x20/0x20 [ 1277.524976] ? find_held_lock+0x2c/0x110 [ 1277.525820] ? sock_has_perm+0x1ea/0x280 [ 1277.526685] ? __import_iovec+0x458/0x590 [ 1277.527522] ? udp_v6_push_pending_frames+0x360/0x360 [ 1277.528566] inet6_sendmsg+0x105/0x140 [ 1277.529353] ? inet6_compat_ioctl+0x320/0x320 [ 1277.530263] sock_sendmsg+0xf2/0x190 [ 1277.531016] ____sys_sendmsg+0x334/0x870 [ 1277.531839] ? kernel_sendmsg+0x50/0x50 [ 1277.532638] ? do_recvmmsg+0x6d0/0x6d0 [ 1277.533427] ? __lock_acquire+0x1657/0x5b00 [ 1277.534325] ___sys_sendmsg+0xf3/0x170 [ 1277.535112] ? sendmsg_copy_msghdr+0x160/0x160 [ 1277.536038] ? __lockdep_reset_lock+0x180/0x180 [ 1277.536976] ? trace_hardirqs_on+0x5b/0x180 [ 1277.537855] ? find_held_lock+0x2c/0x110 [ 1277.538692] ? __might_fault+0xd3/0x180 [ 1277.539495] ? lock_downgrade+0x6d0/0x6d0 [ 1277.540334] ? io_schedule_timeout+0x140/0x140 [ 1277.541271] __sys_sendmmsg+0x195/0x470 [ 1277.542080] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1277.542997] ? lock_downgrade+0x6d0/0x6d0 [ 1277.543854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1277.544831] ? wait_for_completion_io+0x270/0x270 [ 1277.545807] ? rcu_read_lock_any_held+0x75/0xa0 [ 1277.546751] ? vfs_write+0x354/0xa70 [ 1277.547506] ? fput_many+0x2f/0x1a0 [ 1277.548243] ? ksys_write+0x1a9/0x260 [ 1277.549024] __x64_sys_sendmmsg+0x99/0x100 [ 1277.549877] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1277.550934] do_syscall_64+0x33/0x40 [ 1277.551689] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1277.552727] RIP: 0033:0x7f6639ba0b19 [ 1277.553481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1277.557186] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1277.558728] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1277.560164] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1277.561598] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1277.563054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1277.564494] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:09:43 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:09:43 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:43 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:43 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 46) [ 1277.836865] FAULT_INJECTION: forcing a failure. [ 1277.836865] name failslab, interval 1, probability 0, space 0, times 0 [ 1277.839199] CPU: 1 PID: 9214 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1277.840605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1277.842315] Call Trace: [ 1277.842856] dump_stack+0x107/0x167 [ 1277.843599] should_fail.cold+0x5/0xa [ 1277.844370] ? create_object.isra.0+0x3a/0xa20 [ 1277.845292] should_failslab+0x5/0x20 [ 1277.846061] kmem_cache_alloc+0x5b/0x360 [ 1277.846898] create_object.isra.0+0x3a/0xa20 [ 1277.847784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1277.848811] __kmalloc_node_track_caller+0x1a6/0x310 [ 1277.849824] ? alloc_skb_with_frags+0x92/0x570 [ 1277.850771] __alloc_skb+0xb1/0x5b0 [ 1277.851512] alloc_skb_with_frags+0x92/0x570 [ 1277.852393] ? find_held_lock+0x2c/0x110 [ 1277.853226] sock_alloc_send_pskb+0x7af/0x930 [ 1277.854148] ? sk_alloc+0x350/0x350 [ 1277.854898] ? perf_trace_lock+0xac/0x490 [ 1277.855731] ? lock_chain_count+0x20/0x20 [ 1277.856593] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1277.857618] ? ip6_mtu+0x1bb/0x3d0 [ 1277.858345] ? lock_downgrade+0x6d0/0x6d0 [ 1277.859185] ? ip_frag_init+0x350/0x350 [ 1277.860006] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1277.860943] ? ip6_mtu+0x1e9/0x3d0 [ 1277.861666] ? ip6_setup_cork+0xfb7/0x1740 [ 1277.862552] ip6_make_skb+0x2de/0x4e0 [ 1277.863318] ? ip_frag_init+0x350/0x350 [ 1277.864130] ? ip_frag_init+0x350/0x350 [ 1277.864945] ? ip6_push_pending_frames+0xf0/0xf0 [ 1277.865905] ? ip6_dst_hoplimit+0x199/0x440 [ 1277.866785] ? lock_downgrade+0x6d0/0x6d0 [ 1277.867643] udpv6_sendmsg+0x2060/0x2a00 [ 1277.868471] ? ip_frag_init+0x350/0x350 [ 1277.869287] ? udp_v6_push_pending_frames+0x360/0x360 [ 1277.870336] ? lock_chain_count+0x20/0x20 [ 1277.871195] ? __lockdep_reset_lock+0x180/0x180 [ 1277.872135] ? lock_chain_count+0x20/0x20 [ 1277.872979] ? find_held_lock+0x2c/0x110 [ 1277.873821] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1277.874926] ? sock_has_perm+0x1ea/0x280 [ 1277.875777] ? __import_iovec+0x458/0x590 [ 1277.876621] ? udp_v6_push_pending_frames+0x360/0x360 [ 1277.877663] inet6_sendmsg+0x105/0x140 [ 1277.878464] ? inet6_compat_ioctl+0x320/0x320 [ 1277.879364] sock_sendmsg+0xf2/0x190 [ 1277.880116] ____sys_sendmsg+0x334/0x870 [ 1277.880943] ? kernel_sendmsg+0x50/0x50 [ 1277.881739] ? do_recvmmsg+0x6d0/0x6d0 [ 1277.882547] ? __lock_acquire+0x1657/0x5b00 [ 1277.883572] ___sys_sendmsg+0xf3/0x170 [ 1277.884358] ? sendmsg_copy_msghdr+0x160/0x160 [ 1277.885391] ? __lockdep_reset_lock+0x180/0x180 [ 1277.886372] ? trace_hardirqs_on+0x5b/0x180 [ 1277.887421] ? find_held_lock+0x2c/0x110 [ 1277.888257] ? __might_fault+0xd3/0x180 [ 1277.889066] ? lock_downgrade+0x6d0/0x6d0 [ 1277.889905] ? io_schedule_timeout+0x140/0x140 [ 1277.890862] __sys_sendmmsg+0x195/0x470 [ 1277.891673] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1277.892548] ? lock_downgrade+0x6d0/0x6d0 [ 1277.893408] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1277.894400] ? wait_for_completion_io+0x270/0x270 [ 1277.895380] ? rcu_read_lock_any_held+0x75/0xa0 [ 1277.896324] ? vfs_write+0x354/0xa70 [ 1277.897081] ? fput_many+0x2f/0x1a0 [ 1277.897845] ? ksys_write+0x1a9/0x260 [ 1277.898634] __x64_sys_sendmmsg+0x99/0x100 [ 1277.899486] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1277.900526] do_syscall_64+0x33/0x40 [ 1277.901283] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1277.902339] RIP: 0033:0x7f6639ba0b19 [ 1277.903093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1277.906805] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1277.908339] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1277.909773] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1277.911212] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1277.912650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1277.914085] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:09:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:58 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:09:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:09:58 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:09:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:09:58 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 04:09:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 47) 04:09:58 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) [ 1292.854309] FAULT_INJECTION: forcing a failure. [ 1292.854309] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.856909] CPU: 1 PID: 9227 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1292.858181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1292.859715] Call Trace: [ 1292.860206] dump_stack+0x107/0x167 [ 1292.860874] should_fail.cold+0x5/0xa [ 1292.861582] should_failslab+0x5/0x20 [ 1292.862280] kmem_cache_alloc_bulk+0x4b/0x320 [ 1292.863124] io_submit_sqes+0x7099/0x86e0 [ 1292.863883] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1292.864791] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1292.865685] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1292.866573] ? lock_downgrade+0x6d0/0x6d0 [ 1292.867319] ? find_held_lock+0x2c/0x110 [ 1292.868067] ? io_submit_sqes+0x86e0/0x86e0 [ 1292.868868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1292.869739] ? wait_for_completion_io+0x270/0x270 [ 1292.870621] ? rcu_read_lock_any_held+0x75/0xa0 [ 1292.871471] ? vfs_write+0x354/0xa70 [ 1292.872150] ? fput_many+0x2f/0x1a0 [ 1292.872818] ? ksys_write+0x1a9/0x260 [ 1292.873532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1292.874511] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1292.875471] do_syscall_64+0x33/0x40 [ 1292.876155] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1292.877124] RIP: 0033:0x7f204d574b19 [ 1292.877813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1292.881171] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1292.882543] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1292.883811] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1292.885081] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1292.886381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.887658] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:09:58 executing program 6: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:09:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) [ 1293.002945] FAULT_INJECTION: forcing a failure. [ 1293.002945] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.004805] CPU: 1 PID: 9248 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1293.005891] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1293.007217] Call Trace: [ 1293.007640] dump_stack+0x107/0x167 [ 1293.008218] should_fail.cold+0x5/0xa [ 1293.008830] ? create_object.isra.0+0x3a/0xa20 [ 1293.009559] should_failslab+0x5/0x20 [ 1293.010153] kmem_cache_alloc+0x5b/0x360 [ 1293.010808] create_object.isra.0+0x3a/0xa20 [ 1293.011503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1293.012310] __kmalloc_node_track_caller+0x1a6/0x310 [ 1293.013103] ? alloc_skb_with_frags+0x92/0x570 [ 1293.013830] __alloc_skb+0xb1/0x5b0 [ 1293.014425] alloc_skb_with_frags+0x92/0x570 [ 1293.015119] ? find_held_lock+0x2c/0x110 [ 1293.015762] sock_alloc_send_pskb+0x7af/0x930 [ 1293.016505] ? sk_alloc+0x350/0x350 [ 1293.017092] ? perf_trace_lock+0xac/0x490 [ 1293.017772] ? lock_chain_count+0x20/0x20 [ 1293.018456] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1293.019272] ? ip6_mtu+0x1bb/0x3d0 [ 1293.019844] ? lock_downgrade+0x6d0/0x6d0 04:09:58 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) [ 1293.020505] ? ip_frag_init+0x350/0x350 [ 1293.021298] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1293.022024] ? ip6_mtu+0x1e9/0x3d0 [ 1293.022598] ? ip6_setup_cork+0xfb7/0x1740 [ 1293.023255] ip6_make_skb+0x2de/0x4e0 [ 1293.023841] ? ip_frag_init+0x350/0x350 [ 1293.024457] ? ip_frag_init+0x350/0x350 [ 1293.025075] ? ip6_push_pending_frames+0xf0/0xf0 [ 1293.025805] ? ip6_dst_hoplimit+0x199/0x440 [ 1293.026486] ? lock_downgrade+0x6d0/0x6d0 [ 1293.027141] udpv6_sendmsg+0x2060/0x2a00 [ 1293.027775] ? ip_frag_init+0x350/0x350 [ 1293.028404] ? udp_v6_push_pending_frames+0x360/0x360 [ 1293.029205] ? __lockdep_reset_lock+0x180/0x180 [ 1293.029940] ? __lockdep_reset_lock+0x180/0x180 [ 1293.030684] ? find_held_lock+0x2c/0x110 [ 1293.031322] ? sock_has_perm+0x1ea/0x280 [ 1293.031976] ? __import_iovec+0x458/0x590 [ 1293.032605] ? udp_v6_push_pending_frames+0x360/0x360 [ 1293.033391] inet6_sendmsg+0x105/0x140 [ 1293.033985] ? inet6_compat_ioctl+0x320/0x320 [ 1293.034691] sock_sendmsg+0xf2/0x190 [ 1293.035269] ____sys_sendmsg+0x334/0x870 [ 1293.035893] ? kernel_sendmsg+0x50/0x50 [ 1293.036502] ? do_recvmmsg+0x6d0/0x6d0 [ 1293.037102] ? __lock_acquire+0x1657/0x5b00 [ 1293.037777] ___sys_sendmsg+0xf3/0x170 [ 1293.038376] ? sendmsg_copy_msghdr+0x160/0x160 [ 1293.039098] ? vmacache_find+0x55/0x2a0 [ 1293.039710] ? __lockdep_reset_lock+0x180/0x180 [ 1293.040426] ? find_held_lock+0x2c/0x110 [ 1293.041048] ? __might_fault+0xd3/0x180 [ 1293.041651] ? lock_downgrade+0x6d0/0x6d0 [ 1293.042278] ? asm_exc_page_fault+0x1e/0x30 [ 1293.042974] __sys_sendmmsg+0x195/0x470 [ 1293.043581] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1293.044234] ? lock_downgrade+0x6d0/0x6d0 [ 1293.044878] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1293.045622] ? wait_for_completion_io+0x270/0x270 [ 1293.046377] ? rcu_read_lock_any_held+0x75/0xa0 [ 1293.047088] ? vfs_write+0x354/0xa70 [ 1293.047657] ? fput_many+0x2f/0x1a0 [ 1293.048207] ? ksys_write+0x1a9/0x260 [ 1293.048796] __x64_sys_sendmmsg+0x99/0x100 [ 1293.049438] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1293.050221] do_syscall_64+0x33/0x40 [ 1293.050798] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1293.051581] RIP: 0033:0x7f6639ba0b19 [ 1293.052141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1293.054921] RSP: 002b:00007f66370f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1293.056071] RAX: ffffffffffffffda RBX: 00007f6639cb4020 RCX: 00007f6639ba0b19 [ 1293.057150] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1293.058228] RBP: 00007f66370f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1293.059317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1293.060409] R13: 00007ffdf756f66f R14: 00007f66370f5300 R15: 0000000000022000 04:10:15 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:10:15 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 48) 04:10:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:10:15 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 04:10:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x2, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:15 executing program 6: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:10:15 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:10:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) [ 1309.124355] FAULT_INJECTION: forcing a failure. [ 1309.124355] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.126632] CPU: 0 PID: 9263 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1309.127987] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.129665] Call Trace: [ 1309.130192] dump_stack+0x107/0x167 [ 1309.130954] should_fail.cold+0x5/0xa [ 1309.131709] ? create_object.isra.0+0x3a/0xa20 [ 1309.132627] should_failslab+0x5/0x20 [ 1309.133386] kmem_cache_alloc+0x5b/0x360 [ 1309.134195] create_object.isra.0+0x3a/0xa20 [ 1309.135077] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.136082] __kmalloc_node_track_caller+0x1a6/0x310 [ 1309.137108] ? alloc_skb_with_frags+0x92/0x570 [ 1309.138072] __alloc_skb+0xb1/0x5b0 [ 1309.138816] alloc_skb_with_frags+0x92/0x570 [ 1309.139698] ? find_held_lock+0x2c/0x110 [ 1309.140525] sock_alloc_send_pskb+0x7af/0x930 [ 1309.141442] ? sk_alloc+0x350/0x350 [ 1309.142178] ? perf_trace_lock+0xac/0x490 [ 1309.143024] ? SOFTIRQ_verbose+0x10/0x10 [ 1309.143839] ? lock_chain_count+0x20/0x20 [ 1309.144681] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1309.145693] ? ip6_mtu+0x1bb/0x3d0 [ 1309.146406] ? lock_downgrade+0x6d0/0x6d0 [ 1309.147240] ? ip_frag_init+0x350/0x350 [ 1309.148053] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1309.148986] ? ip6_mtu+0x1e9/0x3d0 [ 1309.149696] ? ip6_setup_cork+0xfb7/0x1740 [ 1309.150556] ip6_make_skb+0x2de/0x4e0 [ 1309.151332] ? ip_frag_init+0x350/0x350 [ 1309.152142] ? ip_frag_init+0x350/0x350 [ 1309.152947] ? ip6_push_pending_frames+0xf0/0xf0 [ 1309.153906] ? ip6_dst_hoplimit+0x199/0x440 [ 1309.154782] ? lock_downgrade+0x6d0/0x6d0 [ 1309.155639] udpv6_sendmsg+0x2060/0x2a00 [ 1309.156460] ? ip_frag_init+0x350/0x350 [ 1309.157274] ? udp_v6_push_pending_frames+0x360/0x360 [ 1309.158312] ? __lockdep_reset_lock+0x180/0x180 [ 1309.159266] ? __lockdep_reset_lock+0x180/0x180 [ 1309.160213] ? find_held_lock+0x2c/0x110 [ 1309.161053] ? sock_has_perm+0x1ea/0x280 [ 1309.161896] ? __import_iovec+0x458/0x590 [ 1309.162750] ? udp_v6_push_pending_frames+0x360/0x360 [ 1309.163785] inet6_sendmsg+0x105/0x140 [ 1309.164567] ? inet6_compat_ioctl+0x320/0x320 [ 1309.165457] sock_sendmsg+0xf2/0x190 [ 1309.166225] ____sys_sendmsg+0x334/0x870 [ 1309.167065] ? kernel_sendmsg+0x50/0x50 [ 1309.167857] ? do_recvmmsg+0x6d0/0x6d0 [ 1309.168635] ? __lock_acquire+0x1657/0x5b00 [ 1309.169513] ___sys_sendmsg+0xf3/0x170 [ 1309.170291] ? sendmsg_copy_msghdr+0x160/0x160 [ 1309.171202] ? vmacache_find+0x55/0x2a0 [ 1309.172000] ? __lockdep_reset_lock+0x180/0x180 [ 1309.172938] ? find_held_lock+0x2c/0x110 [ 1309.173755] ? __might_fault+0xd3/0x180 [ 1309.174549] ? lock_downgrade+0x6d0/0x6d0 [ 1309.175390] ? asm_exc_page_fault+0x1e/0x30 [ 1309.176274] __sys_sendmmsg+0x195/0x470 [ 1309.177077] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1309.177939] ? lock_downgrade+0x6d0/0x6d0 [ 1309.178799] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1309.179767] ? wait_for_completion_io+0x270/0x270 [ 1309.180733] ? rcu_read_lock_any_held+0x75/0xa0 [ 1309.181659] ? vfs_write+0x354/0xa70 [ 1309.182408] ? fput_many+0x2f/0x1a0 [ 1309.183147] ? ksys_write+0x1a9/0x260 [ 1309.183924] __x64_sys_sendmmsg+0x99/0x100 [ 1309.184769] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.185804] do_syscall_64+0x33/0x40 [ 1309.186550] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1309.187592] RIP: 0033:0x7f6639ba0b19 [ 1309.188340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.192032] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1309.193556] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1309.194985] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1309.196409] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.197828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1309.199269] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1309.210908] FAULT_INJECTION: forcing a failure. [ 1309.210908] name failslab, interval 1, probability 0, space 0, times 0 [ 1309.213018] CPU: 1 PID: 9266 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1309.214161] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1309.215547] Call Trace: [ 1309.216004] dump_stack+0x107/0x167 [ 1309.216633] should_fail.cold+0x5/0xa [ 1309.217280] ? create_object.isra.0+0x3a/0xa20 [ 1309.218045] should_failslab+0x5/0x20 [ 1309.218704] kmem_cache_alloc+0x5b/0x360 [ 1309.219452] create_object.isra.0+0x3a/0xa20 [ 1309.220250] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1309.221175] kmem_cache_alloc_bulk+0x168/0x320 [ 1309.222016] io_submit_sqes+0x7099/0x86e0 [ 1309.222777] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1309.223721] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1309.224632] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1309.225514] ? lock_downgrade+0x6d0/0x6d0 [ 1309.226263] ? find_held_lock+0x2c/0x110 [ 1309.227038] ? io_submit_sqes+0x86e0/0x86e0 [ 1309.227849] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1309.228734] ? wait_for_completion_io+0x270/0x270 [ 1309.229621] ? rcu_read_lock_any_held+0x75/0xa0 [ 1309.230462] ? vfs_write+0x354/0xa70 [ 1309.231142] ? fput_many+0x2f/0x1a0 [ 1309.231817] ? ksys_write+0x1a9/0x260 [ 1309.232527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1309.233479] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1309.234433] do_syscall_64+0x33/0x40 [ 1309.235104] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1309.236035] RIP: 0033:0x7f204d574b19 [ 1309.236716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1309.240068] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1309.241469] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1309.242765] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1309.244077] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.245358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1309.246640] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:10:15 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x3, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:15 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x6, 0x0, @fd, 0x8, 0x0, 0x4}, 0x7) 04:10:15 executing program 6: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 04:10:15 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:10:36 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 49) 04:10:36 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, 0x0, 0x7) 04:10:36 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x2, 0x2, 0x6985) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 04:10:36 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:10:36 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:10:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x4, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:36 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 04:10:36 executing program 6: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x7ff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) [ 1330.918255] FAULT_INJECTION: forcing a failure. [ 1330.918255] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.920993] CPU: 1 PID: 9310 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1330.922503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1330.924360] Call Trace: [ 1330.924958] dump_stack+0x107/0x167 [ 1330.925785] should_fail.cold+0x5/0xa [ 1330.926640] ? create_object.isra.0+0x3a/0xa20 [ 1330.927681] should_failslab+0x5/0x20 [ 1330.928524] kmem_cache_alloc+0x5b/0x360 [ 1330.929428] ? mark_held_locks+0x9e/0xe0 [ 1330.930336] create_object.isra.0+0x3a/0xa20 [ 1330.931342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1330.932471] kmem_cache_alloc_bulk+0x168/0x320 [ 1330.933490] io_submit_sqes+0x7099/0x86e0 [ 1330.934418] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1330.935561] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1330.936655] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1330.937721] ? lock_downgrade+0x6d0/0x6d0 [ 1330.938625] ? find_held_lock+0x2c/0x110 [ 1330.939537] ? io_submit_sqes+0x86e0/0x86e0 [ 1330.940504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1330.941569] ? wait_for_completion_io+0x270/0x270 [ 1330.942629] ? rcu_read_lock_any_held+0x75/0xa0 [ 1330.943658] ? vfs_write+0x354/0xa70 [ 1330.944490] ? fput_many+0x2f/0x1a0 [ 1330.945296] ? ksys_write+0x1a9/0x260 [ 1330.946151] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1330.947302] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1330.948450] do_syscall_64+0x33/0x40 [ 1330.949268] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1330.950380] RIP: 0033:0x7f204d574b19 [ 1330.951206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1330.955124] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1330.956788] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1330.958344] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1330.959902] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.961458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1330.963019] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:10:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x5, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1330.997435] FAULT_INJECTION: forcing a failure. [ 1330.997435] name failslab, interval 1, probability 0, space 0, times 0 [ 1330.999912] CPU: 1 PID: 9324 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1331.001371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.003177] Call Trace: [ 1331.003743] dump_stack+0x107/0x167 [ 1331.004528] should_fail.cold+0x5/0xa [ 1331.005348] ? __alloc_skb+0x6d/0x5b0 [ 1331.006169] should_failslab+0x5/0x20 [ 1331.006994] kmem_cache_alloc_node+0x55/0x380 [ 1331.007943] __alloc_skb+0x6d/0x5b0 [ 1331.008716] alloc_skb_with_frags+0x92/0x570 [ 1331.009637] ? find_held_lock+0x2c/0x110 [ 1331.010507] sock_alloc_send_pskb+0x7af/0x930 [ 1331.011479] ? sk_alloc+0x350/0x350 [ 1331.012257] ? perf_trace_lock+0xac/0x490 [ 1331.013129] ? SOFTIRQ_verbose+0x10/0x10 [ 1331.013987] ? lock_chain_count+0x20/0x20 [ 1331.014895] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1331.015961] ? ip6_mtu+0x1bb/0x3d0 [ 1331.016709] ? lock_downgrade+0x6d0/0x6d0 [ 1331.017581] ? ip_frag_init+0x350/0x350 [ 1331.018446] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1331.019430] ? ip6_mtu+0x1e9/0x3d0 [ 1331.020179] ? ip6_setup_cork+0xfb7/0x1740 [ 1331.021073] ip6_make_skb+0x2de/0x4e0 [ 1331.021871] ? ip_frag_init+0x350/0x350 [ 1331.022713] ? ip_frag_init+0x350/0x350 [ 1331.023560] ? ip6_push_pending_frames+0xf0/0xf0 [ 1331.024561] ? ip6_dst_hoplimit+0x199/0x440 [ 1331.025461] ? lock_downgrade+0x6d0/0x6d0 [ 1331.026350] udpv6_sendmsg+0x2060/0x2a00 [ 1331.027217] ? ip_frag_init+0x350/0x350 [ 1331.028060] ? udp_v6_push_pending_frames+0x360/0x360 [ 1331.029148] ? __lockdep_reset_lock+0x180/0x180 [ 1331.030116] ? lock_chain_count+0x20/0x20 [ 1331.030995] ? find_held_lock+0x2c/0x110 [ 1331.031860] ? sock_has_perm+0x1ea/0x280 [ 1331.032736] ? __import_iovec+0x458/0x590 [ 1331.033600] ? udp_v6_push_pending_frames+0x360/0x360 [ 1331.034674] inet6_sendmsg+0x105/0x140 [ 1331.035495] ? inet6_compat_ioctl+0x320/0x320 [ 1331.036417] sock_sendmsg+0xf2/0x190 [ 1331.037191] ____sys_sendmsg+0x334/0x870 [ 1331.038036] ? kernel_sendmsg+0x50/0x50 [ 1331.038851] ? do_recvmmsg+0x6d0/0x6d0 [ 1331.039684] ? __lock_acquire+0x1657/0x5b00 [ 1331.040595] ___sys_sendmsg+0xf3/0x170 [ 1331.041402] ? sendmsg_copy_msghdr+0x160/0x160 [ 1331.042351] ? __lockdep_reset_lock+0x180/0x180 [ 1331.043312] ? trace_hardirqs_on+0x5b/0x180 [ 1331.044211] ? find_held_lock+0x2c/0x110 [ 1331.045052] ? __might_fault+0xd3/0x180 [ 1331.045877] ? lock_downgrade+0x6d0/0x6d0 [ 1331.046734] ? io_schedule_timeout+0x140/0x140 [ 1331.047708] __sys_sendmmsg+0x195/0x470 [ 1331.048534] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1331.049423] ? lock_downgrade+0x6d0/0x6d0 [ 1331.050298] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.051296] ? wait_for_completion_io+0x270/0x270 [ 1331.052292] ? rcu_read_lock_any_held+0x75/0xa0 [ 1331.053247] ? vfs_write+0x354/0xa70 [ 1331.054017] ? fput_many+0x2f/0x1a0 [ 1331.054771] ? ksys_write+0x1a9/0x260 [ 1331.055584] __x64_sys_sendmmsg+0x99/0x100 [ 1331.056457] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.057547] do_syscall_64+0x33/0x40 [ 1331.058311] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1331.059364] RIP: 0033:0x7f6639ba0b19 [ 1331.060119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.063823] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1331.065390] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1331.066832] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1331.068342] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1331.069797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1331.071280] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1331.095738] FAULT_INJECTION: forcing a failure. [ 1331.095738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1331.097037] CPU: 0 PID: 9329 Comm: syz-executor.6 Not tainted 5.10.173 #1 [ 1331.097759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1331.098629] Call Trace: [ 1331.098940] dump_stack+0x107/0x167 [ 1331.099379] should_fail.cold+0x5/0xa [ 1331.099827] _copy_from_user+0x2e/0x1b0 [ 1331.100300] do_ipt_get_ctl+0x4a3/0x960 [ 1331.100774] ? mutex_lock_io_nested+0xf30/0xf30 [ 1331.101341] ? get_info+0x5a0/0x5a0 [ 1331.101774] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1331.102362] ? find_held_lock+0x2c/0x110 [ 1331.102849] ? wait_for_completion_io+0x270/0x270 [ 1331.103432] ? lock_downgrade+0x6d0/0x6d0 [ 1331.103920] ? __fget_files+0x26d/0x4c0 [ 1331.104409] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1331.105046] nf_getsockopt+0x78/0xd0 [ 1331.105486] ip_getsockopt+0x168/0x1c0 [ 1331.105954] ? do_ip_getsockopt+0x1900/0x1900 [ 1331.106479] tcp_getsockopt+0x8c/0xd0 [ 1331.106940] ? sock_def_destruct+0x10/0x10 [ 1331.107437] __sys_getsockopt+0x14c/0x250 [ 1331.107924] ? __ia32_sys_setsockopt+0x150/0x150 [ 1331.108479] ? fput_many+0x2f/0x1a0 [ 1331.108911] ? ksys_write+0x1a9/0x260 [ 1331.109368] __x64_sys_getsockopt+0xba/0x160 [ 1331.109885] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1331.110501] do_syscall_64+0x33/0x40 [ 1331.110954] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1331.111559] RIP: 0033:0x7fd6076fcb19 [ 1331.112002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1331.114183] RSP: 002b:00007fd604c72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1331.115101] RAX: ffffffffffffffda RBX: 00007fd60780ff60 RCX: 00007fd6076fcb19 [ 1331.115945] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1331.116741] RBP: 00007fd604c721d0 R08: 0000000020000140 R09: 0000000000000000 [ 1331.117538] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1331.118386] R13: 00007fffc625dc7f R14: 00007fd604c72300 R15: 0000000000022000 04:10:37 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x2, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:37 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 1) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:37 executing program 1: openat(0xffffffffffffffff, 0x0, 0x0, 0xe1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:10:37 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:10:37 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:10:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x6, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:37 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1348.968329] FAULT_INJECTION: forcing a failure. [ 1348.968329] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.970747] CPU: 1 PID: 9360 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1348.972145] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1348.973822] Call Trace: [ 1348.974367] dump_stack+0x107/0x167 [ 1348.975130] should_fail.cold+0x5/0xa [ 1348.975916] should_failslab+0x5/0x20 [ 1348.976697] __kmalloc_node_track_caller+0x74/0x310 [ 1348.977721] ? alloc_skb_with_frags+0x92/0x570 [ 1348.978658] __alloc_skb+0xb1/0x5b0 [ 1348.979431] alloc_skb_with_frags+0x92/0x570 [ 1348.980324] ? find_held_lock+0x2c/0x110 [ 1348.981166] sock_alloc_send_pskb+0x7af/0x930 [ 1348.982096] ? sk_alloc+0x350/0x350 [ 1348.982848] ? perf_trace_lock+0xac/0x490 [ 1348.983704] ? lock_chain_count+0x20/0x20 [ 1348.984562] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1348.985598] ? ip6_mtu+0x1bb/0x3d0 [ 1348.986327] ? lock_downgrade+0x6d0/0x6d0 [ 1348.987176] ? ip_frag_init+0x350/0x350 [ 1348.988002] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1348.988948] ? ip6_mtu+0x1e9/0x3d0 [ 1348.989674] ? ip6_setup_cork+0xfb7/0x1740 [ 1348.990539] ip6_make_skb+0x2de/0x4e0 [ 1348.991330] ? ip_frag_init+0x350/0x350 [ 1348.992145] ? ip_frag_init+0x350/0x350 [ 1348.992960] ? ip6_push_pending_frames+0xf0/0xf0 [ 1348.993937] ? ip6_dst_hoplimit+0x199/0x440 04:10:54 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 04:10:54 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:10:54 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:10:54 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x2, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:54 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 2) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x7, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:54 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:10:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 50) [ 1348.995050] ? lock_downgrade+0x6d0/0x6d0 [ 1348.996254] udpv6_sendmsg+0x2060/0x2a00 [ 1348.997238] ? ip_frag_init+0x350/0x350 [ 1348.998209] ? udp_v6_push_pending_frames+0x360/0x360 [ 1348.999485] ? lock_chain_count+0x20/0x20 [ 1349.000493] ? __lockdep_reset_lock+0x180/0x180 [ 1349.001605] ? lock_chain_count+0x20/0x20 [ 1349.002608] ? find_held_lock+0x2c/0x110 [ 1349.003628] ? sock_has_perm+0x1ea/0x280 [ 1349.004637] ? __import_iovec+0x458/0x590 [ 1349.005622] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.006862] inet6_sendmsg+0x105/0x140 [ 1349.007817] ? inet6_compat_ioctl+0x320/0x320 [ 1349.008893] sock_sendmsg+0xf2/0x190 [ 1349.009782] ____sys_sendmsg+0x334/0x870 [ 1349.010762] ? kernel_sendmsg+0x50/0x50 [ 1349.011747] ? do_recvmmsg+0x6d0/0x6d0 [ 1349.012558] ? __lock_acquire+0x1657/0x5b00 [ 1349.013445] ___sys_sendmsg+0xf3/0x170 [ 1349.014246] ? sendmsg_copy_msghdr+0x160/0x160 [ 1349.015193] ? __lockdep_reset_lock+0x180/0x180 [ 1349.016138] ? trace_hardirqs_on+0x5b/0x180 [ 1349.017023] ? find_held_lock+0x2c/0x110 [ 1349.017855] ? __might_fault+0xd3/0x180 [ 1349.018664] ? lock_downgrade+0x6d0/0x6d0 [ 1349.019531] ? io_schedule_timeout+0x140/0x140 [ 1349.020478] __sys_sendmmsg+0x195/0x470 [ 1349.021290] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1349.022164] ? lock_downgrade+0x6d0/0x6d0 [ 1349.023025] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.024039] ? wait_for_completion_io+0x270/0x270 [ 1349.025020] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.025962] ? vfs_write+0x354/0xa70 [ 1349.026722] ? fput_many+0x2f/0x1a0 [ 1349.027484] ? ksys_write+0x1a9/0x260 [ 1349.028270] __x64_sys_sendmmsg+0x99/0x100 [ 1349.029127] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.030176] do_syscall_64+0x33/0x40 [ 1349.030931] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1349.031992] RIP: 0033:0x7f6639ba0b19 [ 1349.032751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.036518] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.038072] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1349.039539] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1349.040982] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.042426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.043892] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1349.057113] FAULT_INJECTION: forcing a failure. [ 1349.057113] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.059469] CPU: 1 PID: 9361 Comm: syz-executor.6 Not tainted 5.10.173 #1 [ 1349.060881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.062542] Call Trace: [ 1349.063091] dump_stack+0x107/0x167 [ 1349.063857] should_fail.cold+0x5/0xa [ 1349.064627] ? __request_module+0x2e0/0x9f0 [ 1349.065501] ? do_ipt_get_ctl+0x86c/0x960 [ 1349.066338] should_failslab+0x5/0x20 [ 1349.067155] kmem_cache_alloc_trace+0x55/0x2c0 [ 1349.067468] FAULT_INJECTION: forcing a failure. [ 1349.067468] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.068108] ? do_ipt_get_ctl+0x86c/0x960 [ 1349.068125] __request_module+0x2e0/0x9f0 [ 1349.068151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.073407] ? free_modprobe_argv+0x90/0x90 [ 1349.074329] ? match_revfn+0x1de/0x270 [ 1349.075171] ? match_revfn+0x1de/0x270 [ 1349.075996] ? xt_find_revision+0x11f/0x210 [ 1349.076870] ? match_revfn+0x270/0x270 [ 1349.077674] do_ipt_get_ctl+0x86c/0x960 [ 1349.078485] ? mutex_lock_io_nested+0xf30/0xf30 [ 1349.079470] ? get_info+0x5a0/0x5a0 [ 1349.080207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.081193] ? wait_for_completion_io+0x270/0x270 [ 1349.082171] ? lock_downgrade+0x6d0/0x6d0 [ 1349.083017] ? __fget_files+0x26d/0x4c0 [ 1349.083872] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1349.084948] nf_getsockopt+0x78/0xd0 [ 1349.085708] ip_getsockopt+0x168/0x1c0 [ 1349.086504] ? do_ip_getsockopt+0x1900/0x1900 [ 1349.087451] tcp_getsockopt+0x8c/0xd0 [ 1349.088227] ? sock_def_destruct+0x10/0x10 [ 1349.089081] __sys_getsockopt+0x14c/0x250 [ 1349.089929] ? __ia32_sys_setsockopt+0x150/0x150 [ 1349.090887] ? fput_many+0x2f/0x1a0 [ 1349.091668] ? ksys_write+0x1a9/0x260 [ 1349.092450] __x64_sys_getsockopt+0xba/0x160 [ 1349.093351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.094393] do_syscall_64+0x33/0x40 [ 1349.095190] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1349.096229] RIP: 0033:0x7fd6076fcb19 [ 1349.096999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.100728] RSP: 002b:00007fd604c72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1349.102289] RAX: ffffffffffffffda RBX: 00007fd60780ff60 RCX: 00007fd6076fcb19 [ 1349.103759] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000003 [ 1349.105201] RBP: 00007fd604c721d0 R08: 0000000020000140 R09: 0000000000000000 [ 1349.106656] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1349.108133] R13: 00007fffc625dc7f R14: 00007fd604c72300 R15: 0000000000022000 [ 1349.109610] CPU: 0 PID: 9373 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1349.111192] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.112858] Call Trace: [ 1349.113391] dump_stack+0x107/0x167 [ 1349.114134] should_fail.cold+0x5/0xa [ 1349.114902] ? create_object.isra.0+0x3a/0xa20 [ 1349.115838] ? create_object.isra.0+0x3a/0xa20 [ 1349.116776] should_failslab+0x5/0x20 [ 1349.117548] kmem_cache_alloc+0x5b/0x360 [ 1349.118383] create_object.isra.0+0x3a/0xa20 [ 1349.119292] kmemleak_alloc_percpu+0xa0/0x100 [ 1349.120213] pcpu_alloc+0x4e2/0x1360 [ 1349.120990] __percpu_counter_init+0x10d/0x2d0 [ 1349.121920] io_uring_alloc_task_context+0xcc/0x6a0 [ 1349.122929] ? io_sqe_buffer_register+0x13d0/0x13d0 [ 1349.123945] ? find_held_lock+0x2c/0x110 [ 1349.124771] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1349.125755] __io_uring_add_tctx_node+0x2c6/0x520 [ 1349.126733] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1349.127839] __do_sys_io_uring_enter+0x136d/0x17b0 [ 1349.128836] ? lock_downgrade+0x6d0/0x6d0 [ 1349.129669] ? find_held_lock+0x2c/0x110 [ 1349.130489] ? io_submit_sqes+0x86e0/0x86e0 [ 1349.131497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.132663] ? wait_for_completion_io+0x270/0x270 [ 1349.133823] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.134933] ? vfs_write+0x354/0xa70 [ 1349.135856] ? fput_many+0x2f/0x1a0 [ 1349.136729] ? ksys_write+0x1a9/0x260 [ 1349.137653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.138903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.140152] do_syscall_64+0x33/0x40 [ 1349.141047] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1349.142269] RIP: 0033:0x7f204d574b19 [ 1349.143168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.147594] RSP: 002b:00007f204aac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1349.149208] RAX: ffffffffffffffda RBX: 00007f204d688020 RCX: 00007f204d574b19 [ 1349.150646] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1349.152099] RBP: 00007f204aac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.153544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.154993] R13: 00007ffea5cdb19f R14: 00007f204aac9300 R15: 0000000000022000 04:10:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x300, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:10:55 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:10:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:55 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:55 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 51) 04:10:55 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 04:10:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x500, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:55 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1349.502983] FAULT_INJECTION: forcing a failure. [ 1349.502983] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.505277] CPU: 1 PID: 9405 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1349.506599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.508228] Call Trace: [ 1349.508745] dump_stack+0x107/0x167 [ 1349.509456] should_fail.cold+0x5/0xa [ 1349.510201] ? create_object.isra.0+0x3a/0xa20 [ 1349.511095] should_failslab+0x5/0x20 [ 1349.511856] kmem_cache_alloc+0x5b/0x360 [ 1349.512647] create_object.isra.0+0x3a/0xa20 [ 1349.513511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.514487] __kmalloc_node_track_caller+0x1a6/0x310 [ 1349.515475] ? alloc_skb_with_frags+0x92/0x570 [ 1349.516344] __alloc_skb+0xb1/0x5b0 [ 1349.517056] alloc_skb_with_frags+0x92/0x570 [ 1349.517903] ? find_held_lock+0x2c/0x110 [ 1349.518701] sock_alloc_send_pskb+0x7af/0x930 [ 1349.519591] ? sk_alloc+0x350/0x350 [ 1349.520308] ? perf_trace_lock+0xac/0x490 [ 1349.521117] ? lock_chain_count+0x20/0x20 [ 1349.521935] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1349.522913] ? ip6_mtu+0x1bb/0x3d0 [ 1349.523612] ? lock_downgrade+0x6d0/0x6d0 [ 1349.524406] ? ip_frag_init+0x350/0x350 [ 1349.525193] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1349.526089] ? ip6_mtu+0x1e9/0x3d0 [ 1349.526781] ? ip6_setup_cork+0xfb7/0x1740 [ 1349.527613] ip6_make_skb+0x2de/0x4e0 [ 1349.528350] ? ip_frag_init+0x350/0x350 [ 1349.529130] ? ip_frag_init+0x350/0x350 [ 1349.529907] ? ip6_push_pending_frames+0xf0/0xf0 [ 1349.530826] ? ip6_dst_hoplimit+0x199/0x440 [ 1349.531668] ? lock_downgrade+0x6d0/0x6d0 [ 1349.532467] udpv6_sendmsg+0x2060/0x2a00 [ 1349.533239] ? ip_frag_init+0x350/0x350 [ 1349.534026] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.535007] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.536026] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1349.537060] ? __lockdep_reset_lock+0x180/0x180 [ 1349.537958] ? find_held_lock+0x2c/0x110 [ 1349.538754] ? sock_has_perm+0x1ea/0x280 [ 1349.539563] ? __import_iovec+0x458/0x590 [ 1349.540347] ? udp_v6_push_pending_frames+0x360/0x360 [ 1349.541321] inet6_sendmsg+0x105/0x140 [ 1349.542063] ? inet6_compat_ioctl+0x320/0x320 [ 1349.542903] sock_sendmsg+0xf2/0x190 [ 1349.543613] ____sys_sendmsg+0x334/0x870 [ 1349.544394] ? kernel_sendmsg+0x50/0x50 [ 1349.545150] ? do_recvmmsg+0x6d0/0x6d0 [ 1349.545883] ? __lock_acquire+0x1657/0x5b00 [ 1349.546710] ___sys_sendmsg+0xf3/0x170 [ 1349.547464] ? sendmsg_copy_msghdr+0x160/0x160 [ 1349.548327] ? vmacache_find+0x55/0x2a0 [ 1349.549073] ? __lockdep_reset_lock+0x180/0x180 [ 1349.549958] ? find_held_lock+0x2c/0x110 [ 1349.550732] ? __might_fault+0xd3/0x180 [ 1349.551483] ? lock_downgrade+0x6d0/0x6d0 [ 1349.552244] ? asm_exc_page_fault+0x1e/0x30 [ 1349.553067] __sys_sendmmsg+0x195/0x470 [ 1349.553811] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1349.554618] ? lock_downgrade+0x6d0/0x6d0 [ 1349.555413] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.556313] ? wait_for_completion_io+0x270/0x270 [ 1349.557210] ? rcu_read_lock_any_held+0x75/0xa0 [ 1349.558076] ? vfs_write+0x354/0xa70 [ 1349.558791] ? fput_many+0x2f/0x1a0 [ 1349.559489] ? ksys_write+0x1a9/0x260 [ 1349.560236] __x64_sys_sendmmsg+0x99/0x100 [ 1349.561016] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.562230] do_syscall_64+0x33/0x40 [ 1349.562924] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1349.563891] RIP: 0033:0x7f6639ba0b19 [ 1349.564591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.568001] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.569402] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1349.570722] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1349.572051] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.573358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.574668] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:10:55 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) [ 1349.643877] FAULT_INJECTION: forcing a failure. [ 1349.643877] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.645967] CPU: 1 PID: 9413 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1349.647235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1349.648727] Call Trace: [ 1349.649211] dump_stack+0x107/0x167 [ 1349.649869] should_fail.cold+0x5/0xa [ 1349.650565] ? create_object.isra.0+0x3a/0xa20 [ 1349.651384] should_failslab+0x5/0x20 [ 1349.652074] kmem_cache_alloc+0x5b/0x360 [ 1349.652779] ? mark_held_locks+0x9e/0xe0 [ 1349.653539] create_object.isra.0+0x3a/0xa20 [ 1349.654337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1349.655300] kmem_cache_alloc_bulk+0x168/0x320 [ 1349.656143] io_submit_sqes+0x7099/0x86e0 [ 1349.656905] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1349.657830] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1349.658705] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1349.659604] ? lock_downgrade+0x6d0/0x6d0 [ 1349.660359] ? find_held_lock+0x2c/0x110 [ 1349.661109] ? io_submit_sqes+0x86e0/0x86e0 [ 1349.661914] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1349.662789] ? wait_for_completion_io+0x270/0x270 [ 1349.663682] ? rcu_read_lock_any_held+0x75/0xa0 04:10:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x600, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1349.664513] ? vfs_write+0x354/0xa70 [ 1349.665363] ? fput_many+0x2f/0x1a0 [ 1349.666034] ? ksys_write+0x1a9/0x260 [ 1349.666743] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1349.667654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1349.668602] do_syscall_64+0x33/0x40 [ 1349.669249] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1349.670187] RIP: 0033:0x7f204d574b19 [ 1349.670838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1349.674152] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1349.675553] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1349.676852] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1349.678146] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.679459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1349.680722] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:10:55 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:10:55 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 52) 04:11:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x700, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1367.505391] FAULT_INJECTION: forcing a failure. [ 1367.505391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.507924] CPU: 0 PID: 9439 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1367.509299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.510994] Call Trace: [ 1367.511547] dump_stack+0x107/0x167 [ 1367.512299] should_fail.cold+0x5/0xa [ 1367.513089] _copy_from_user+0x2e/0x1b0 [ 1367.513912] __copy_msghdr_from_user+0x91/0x4b0 [ 1367.514864] ? __ia32_sys_shutdown+0x80/0x80 [ 1367.515806] ? udp_v6_push_pending_frames+0x360/0x360 [ 1367.516910] ? inet6_sendmsg+0xbd/0x140 [ 1367.517849] ? inet6_compat_ioctl+0x320/0x320 [ 1367.518912] ? sock_sendmsg+0x55/0x190 [ 1367.519858] sendmsg_copy_msghdr+0xa1/0x160 [ 1367.520872] ? do_recvmmsg+0x6d0/0x6d0 [ 1367.521811] ? __lock_acquire+0x1657/0x5b00 [ 1367.522864] ___sys_sendmsg+0xc6/0x170 [ 1367.523806] ? sendmsg_copy_msghdr+0x160/0x160 [ 1367.524897] ? __lockdep_reset_lock+0x180/0x180 [ 1367.526003] ? trace_hardirqs_on+0x5b/0x180 [ 1367.527038] ? find_held_lock+0x2c/0x110 [ 1367.528035] ? __might_fault+0xd3/0x180 [ 1367.528986] ? lock_downgrade+0x6d0/0x6d0 [ 1367.529979] ? io_schedule_timeout+0x140/0x140 [ 1367.531089] __sys_sendmmsg+0x195/0x470 [ 1367.532055] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1367.533086] ? lock_downgrade+0x6d0/0x6d0 [ 1367.534099] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1367.535256] ? wait_for_completion_io+0x270/0x270 [ 1367.536444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1367.537548] ? vfs_write+0x354/0xa70 [ 1367.538440] ? fput_many+0x2f/0x1a0 [ 1367.539312] ? ksys_write+0x1a9/0x260 [ 1367.540238] __x64_sys_sendmmsg+0x99/0x100 [ 1367.541241] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1367.542467] do_syscall_64+0x33/0x40 [ 1367.543363] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1367.544582] RIP: 0033:0x7f6639ba0b19 [ 1367.545468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.549823] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1367.551638] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1367.553330] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1367.555022] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1367.556721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1367.558400] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:11:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 1) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:11:13 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:13 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1367.604970] FAULT_INJECTION: forcing a failure. [ 1367.604970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1367.608148] CPU: 0 PID: 9449 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1367.609757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.611727] Call Trace: [ 1367.612357] dump_stack+0x107/0x167 [ 1367.613230] should_fail.cold+0x5/0xa [ 1367.614140] _copy_from_user+0x2e/0x1b0 [ 1367.615110] do_ipt_get_ctl+0x4a3/0x960 [ 1367.616063] ? mutex_lock_io_nested+0xf30/0xf30 [ 1367.617164] ? get_info+0x5a0/0x5a0 [ 1367.618023] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1367.619152] ? find_held_lock+0x2c/0x110 [ 1367.620122] ? wait_for_completion_io+0x270/0x270 [ 1367.621246] ? lock_downgrade+0x6d0/0x6d0 [ 1367.622212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1367.623496] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1367.624719] nf_getsockopt+0x78/0xd0 [ 1367.625592] ip_getsockopt+0x168/0x1c0 [ 1367.626495] ? do_ip_getsockopt+0x1900/0x1900 [ 1367.627560] tcp_getsockopt+0x8c/0xd0 [ 1367.628449] ? sock_def_destruct+0x10/0x10 [ 1367.629424] __sys_getsockopt+0x14c/0x250 [ 1367.630391] ? __ia32_sys_setsockopt+0x150/0x150 [ 1367.631506] ? fput_many+0x2f/0x1a0 [ 1367.632354] ? ksys_write+0x1a9/0x260 [ 1367.633251] __x64_sys_getsockopt+0xba/0x160 [ 1367.634272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1367.635479] do_syscall_64+0x33/0x40 [ 1367.636360] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1367.637540] RIP: 0033:0x7f7f47cb0b19 [ 1367.638407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.642638] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1367.644404] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1367.646046] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1367.647710] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1367.649356] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1367.650993] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 04:11:13 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x2000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:13 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x2, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) [ 1367.783050] FAULT_INJECTION: forcing a failure. [ 1367.783050] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.785714] CPU: 0 PID: 9444 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1367.787251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.789121] Call Trace: [ 1367.789733] dump_stack+0x107/0x167 [ 1367.790597] should_fail.cold+0x5/0xa [ 1367.791480] ? create_object.isra.0+0x3a/0xa20 [ 1367.792521] should_failslab+0x5/0x20 [ 1367.793387] kmem_cache_alloc+0x5b/0x360 [ 1367.794321] ? mark_held_locks+0x9e/0xe0 [ 1367.795250] create_object.isra.0+0x3a/0xa20 [ 1367.796254] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1367.797411] kmem_cache_alloc_bulk+0x168/0x320 [ 1367.798459] io_submit_sqes+0x7099/0x86e0 [ 1367.799413] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1367.800561] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1367.801676] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1367.802780] ? lock_downgrade+0x6d0/0x6d0 [ 1367.803717] ? find_held_lock+0x2c/0x110 [ 1367.804648] ? io_submit_sqes+0x86e0/0x86e0 [ 1367.805640] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1367.806730] ? wait_for_completion_io+0x270/0x270 [ 1367.807844] ? rcu_read_lock_any_held+0x75/0xa0 [ 1367.808884] ? vfs_write+0x354/0xa70 [ 1367.809736] ? fput_many+0x2f/0x1a0 [ 1367.810565] ? ksys_write+0x1a9/0x260 [ 1367.811458] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1367.812639] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1367.813819] do_syscall_64+0x33/0x40 [ 1367.814663] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1367.815813] RIP: 0033:0x7f204d574b19 [ 1367.816645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.820673] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1367.822355] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1367.823932] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1367.825500] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1367.827066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1367.828644] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:11:13 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:11:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0xff0f, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 53) 04:11:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) [ 1367.945484] FAULT_INJECTION: forcing a failure. [ 1367.945484] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.948552] CPU: 0 PID: 9476 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1367.949956] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1367.951624] Call Trace: [ 1367.952168] dump_stack+0x107/0x167 [ 1367.952916] should_fail.cold+0x5/0xa [ 1367.953707] ? __request_module+0x2e0/0x9f0 [ 1367.954577] ? do_ipt_get_ctl+0x86c/0x960 [ 1367.955445] should_failslab+0x5/0x20 [ 1367.956360] kmem_cache_alloc_trace+0x55/0x2c0 [ 1367.957465] ? do_ipt_get_ctl+0x86c/0x960 [ 1367.958455] __request_module+0x2e0/0x9f0 [ 1367.959467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1367.960639] ? free_modprobe_argv+0x90/0x90 [ 1367.961678] ? match_revfn+0x1de/0x270 [ 1367.962631] ? match_revfn+0x1de/0x270 [ 1367.963611] ? xt_find_revision+0x11f/0x210 [ 1367.964651] ? match_revfn+0x270/0x270 [ 1367.965608] do_ipt_get_ctl+0x86c/0x960 [ 1367.966566] ? mutex_lock_io_nested+0xf30/0xf30 [ 1367.967695] ? get_info+0x5a0/0x5a0 [ 1367.968567] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1367.969726] ? wait_for_completion_io+0x270/0x270 [ 1367.970884] ? lock_downgrade+0x6d0/0x6d0 [ 1367.971896] ? __fget_files+0x26d/0x4c0 [ 1367.972861] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1367.974109] nf_getsockopt+0x78/0xd0 [ 1367.975000] ip_getsockopt+0x168/0x1c0 [ 1367.975940] ? do_ip_getsockopt+0x1900/0x1900 [ 1367.977025] tcp_getsockopt+0x8c/0xd0 [ 1367.977936] ? sock_def_destruct+0x10/0x10 [ 1367.978934] __sys_getsockopt+0x14c/0x250 [ 1367.979943] ? __ia32_sys_setsockopt+0x150/0x150 [ 1367.981064] ? fput_many+0x2f/0x1a0 [ 1367.981926] ? ksys_write+0x1a9/0x260 [ 1367.982864] __x64_sys_getsockopt+0xba/0x160 [ 1367.983929] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1367.985200] do_syscall_64+0x33/0x40 [ 1367.986096] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1367.987303] RIP: 0033:0x7f7f47cb0b19 [ 1367.988205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1367.992523] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1367.994301] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1367.995969] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1367.997634] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1367.999295] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1368.000984] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 [ 1368.086508] FAULT_INJECTION: forcing a failure. [ 1368.086508] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.089205] CPU: 0 PID: 9480 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1368.090748] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1368.092637] Call Trace: [ 1368.093236] dump_stack+0x107/0x167 [ 1368.094068] should_fail.cold+0x5/0xa [ 1368.094931] ? __alloc_skb+0x6d/0x5b0 [ 1368.095806] should_failslab+0x5/0x20 [ 1368.096665] kmem_cache_alloc_node+0x55/0x380 [ 1368.097683] __alloc_skb+0x6d/0x5b0 [ 1368.098512] alloc_skb_with_frags+0x92/0x570 [ 1368.099512] ? find_held_lock+0x2c/0x110 [ 1368.100446] sock_alloc_send_pskb+0x7af/0x930 [ 1368.101476] ? sk_alloc+0x350/0x350 [ 1368.102306] ? perf_trace_lock+0xac/0x490 [ 1368.103245] ? lock_chain_count+0x20/0x20 [ 1368.104202] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1368.105340] ? ip6_mtu+0x1bb/0x3d0 [ 1368.106136] ? lock_downgrade+0x6d0/0x6d0 [ 1368.107061] ? ip_frag_init+0x350/0x350 [ 1368.107973] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1368.109010] ? ip6_mtu+0x1e9/0x3d0 [ 1368.109806] ? ip6_setup_cork+0xfb7/0x1740 [ 1368.110757] ip6_make_skb+0x2de/0x4e0 [ 1368.111644] ? ip_frag_init+0x350/0x350 [ 1368.112543] ? ip_frag_init+0x350/0x350 [ 1368.113437] ? ip6_push_pending_frames+0xf0/0xf0 [ 1368.114502] ? ip6_dst_hoplimit+0x199/0x440 [ 1368.115472] ? lock_downgrade+0x6d0/0x6d0 [ 1368.116418] udpv6_sendmsg+0x2060/0x2a00 [ 1368.117335] ? ip_frag_init+0x350/0x350 [ 1368.118239] ? udp_v6_push_pending_frames+0x360/0x360 [ 1368.119391] ? lock_chain_count+0x20/0x20 [ 1368.120328] ? __lockdep_reset_lock+0x180/0x180 [ 1368.121355] ? lock_chain_count+0x20/0x20 [ 1368.122279] ? find_held_lock+0x2c/0x110 [ 1368.123199] ? sock_has_perm+0x1ea/0x280 [ 1368.124147] ? __import_iovec+0x458/0x590 [ 1368.125065] ? udp_v6_push_pending_frames+0x360/0x360 [ 1368.126207] inet6_sendmsg+0x105/0x140 [ 1368.127068] ? inet6_compat_ioctl+0x320/0x320 [ 1368.128064] sock_sendmsg+0xf2/0x190 [ 1368.128892] ____sys_sendmsg+0x334/0x870 [ 1368.129812] ? kernel_sendmsg+0x50/0x50 [ 1368.130705] ? do_recvmmsg+0x6d0/0x6d0 [ 1368.131605] ? __lock_acquire+0x1657/0x5b00 [ 1368.132599] ___sys_sendmsg+0xf3/0x170 [ 1368.133478] ? sendmsg_copy_msghdr+0x160/0x160 [ 1368.134511] ? __lockdep_reset_lock+0x180/0x180 [ 1368.135567] ? trace_hardirqs_on+0x5b/0x180 [ 1368.136551] ? find_held_lock+0x2c/0x110 [ 1368.137474] ? __might_fault+0xd3/0x180 [ 1368.138370] ? lock_downgrade+0x6d0/0x6d0 [ 1368.139308] ? io_schedule_timeout+0x140/0x140 [ 1368.140364] __sys_sendmmsg+0x195/0x470 [ 1368.141268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1368.142243] ? lock_downgrade+0x6d0/0x6d0 [ 1368.143199] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1368.144307] ? wait_for_completion_io+0x270/0x270 [ 1368.145403] ? rcu_read_lock_any_held+0x75/0xa0 [ 1368.146458] ? vfs_write+0x354/0xa70 [ 1368.147302] ? fput_many+0x2f/0x1a0 [ 1368.148133] ? ksys_write+0x1a9/0x260 [ 1368.149008] __x64_sys_sendmmsg+0x99/0x100 [ 1368.149960] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1368.151120] do_syscall_64+0x33/0x40 [ 1368.151979] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1368.153132] RIP: 0033:0x7f6639ba0b19 [ 1368.153974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1368.158040] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1368.159711] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1368.161269] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1368.162827] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.164414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1368.165988] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:11:30 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 54) 04:11:30 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:30 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000f24100210e000000040000000000000000abc7e1f5def5cb62e40fff0573993a11e9b68cb842689eb84fa929c0ce7eca11e5e00f0f541a1d52df0be4f4086352d406ce77a903c04bc48c004e6bd24fca2acffec92ab8f1252fa2d80cb9cc13290483c2bd3f6085af8205abd9d10d2bf239365b8f918053"], 0x14}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) [ 1385.024476] FAULT_INJECTION: forcing a failure. [ 1385.024476] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.026875] CPU: 0 PID: 9499 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1385.028246] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.029908] Call Trace: [ 1385.030441] dump_stack+0x107/0x167 [ 1385.031177] should_fail.cold+0x5/0xa [ 1385.031957] ? __alloc_skb+0x6d/0x5b0 [ 1385.032715] should_failslab+0x5/0x20 [ 1385.033469] kmem_cache_alloc_node+0x55/0x380 [ 1385.034364] __alloc_skb+0x6d/0x5b0 [ 1385.035094] alloc_skb_with_frags+0x92/0x570 [ 1385.035972] ? find_held_lock+0x2c/0x110 04:11:30 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x3, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x20000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:30 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 04:11:30 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 3) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1385.036808] sock_alloc_send_pskb+0x7af/0x930 [ 1385.037795] ? sk_alloc+0x350/0x350 [ 1385.038525] ? perf_trace_lock+0xac/0x490 [ 1385.039348] ? lock_chain_count+0x20/0x20 [ 1385.040204] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1385.041208] ? ip6_mtu+0x1bb/0x3d0 [ 1385.041924] ? lock_downgrade+0x6d0/0x6d0 [ 1385.042757] ? ip_frag_init+0x350/0x350 [ 1385.043594] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1385.044530] ? ip6_mtu+0x1e9/0x3d0 [ 1385.045261] ? ip6_setup_cork+0xfb7/0x1740 [ 1385.046116] ip6_make_skb+0x2de/0x4e0 [ 1385.046887] ? ip_frag_init+0x350/0x350 [ 1385.047699] ? ip_frag_init+0x350/0x350 [ 1385.048503] ? ip6_push_pending_frames+0xf0/0xf0 [ 1385.049466] ? ip6_dst_hoplimit+0x199/0x440 [ 1385.050338] ? lock_downgrade+0x6d0/0x6d0 [ 1385.051194] udpv6_sendmsg+0x2060/0x2a00 [ 1385.052033] ? ip_frag_init+0x350/0x350 [ 1385.052857] ? udp_v6_push_pending_frames+0x360/0x360 [ 1385.053894] ? __lockdep_reset_lock+0x180/0x180 [ 1385.054847] ? __lockdep_reset_lock+0x180/0x180 [ 1385.055805] ? find_held_lock+0x2c/0x110 [ 1385.056643] ? sock_has_perm+0x1ea/0x280 [ 1385.057491] ? __import_iovec+0x458/0x590 [ 1385.058331] ? udp_v6_push_pending_frames+0x360/0x360 [ 1385.059387] inet6_sendmsg+0x105/0x140 [ 1385.060182] ? inet6_compat_ioctl+0x320/0x320 [ 1385.061087] sock_sendmsg+0xf2/0x190 [ 1385.061841] ____sys_sendmsg+0x334/0x870 [ 1385.062664] ? kernel_sendmsg+0x50/0x50 [ 1385.063466] ? do_recvmmsg+0x6d0/0x6d0 [ 1385.064280] ? __lock_acquire+0x1657/0x5b00 [ 1385.065162] ___sys_sendmsg+0xf3/0x170 [ 1385.065957] ? sendmsg_copy_msghdr+0x160/0x160 [ 1385.066877] ? vmacache_find+0x55/0x2a0 [ 1385.067688] ? __lockdep_reset_lock+0x180/0x180 [ 1385.068632] ? find_held_lock+0x2c/0x110 [ 1385.069455] ? __might_fault+0xd3/0x180 [ 1385.070254] ? lock_downgrade+0x6d0/0x6d0 [ 1385.071085] ? asm_exc_page_fault+0x1e/0x30 [ 1385.071981] __sys_sendmmsg+0x195/0x470 [ 1385.072787] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1385.073650] ? lock_downgrade+0x6d0/0x6d0 [ 1385.074504] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1385.075477] ? wait_for_completion_io+0x270/0x270 [ 1385.076465] ? rcu_read_lock_any_held+0x75/0xa0 [ 1385.077398] ? vfs_write+0x354/0xa70 [ 1385.078154] ? fput_many+0x2f/0x1a0 [ 1385.078892] ? ksys_write+0x1a9/0x260 [ 1385.079675] __x64_sys_sendmmsg+0x99/0x100 [ 1385.080524] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.081563] do_syscall_64+0x33/0x40 [ 1385.082314] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1385.083342] RIP: 0033:0x7f6639ba0b19 [ 1385.084099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.087791] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1385.089325] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1385.090755] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1385.092188] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.093615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1385.095044] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:11:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x4, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) [ 1385.143565] FAULT_INJECTION: forcing a failure. [ 1385.143565] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.145955] CPU: 0 PID: 9506 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1385.147337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.149021] Call Trace: [ 1385.149563] dump_stack+0x107/0x167 [ 1385.150315] should_fail.cold+0x5/0xa [ 1385.151089] ? create_object.isra.0+0x3a/0xa20 [ 1385.152019] should_failslab+0x5/0x20 [ 1385.152788] kmem_cache_alloc+0x5b/0x360 [ 1385.153607] ? mark_held_locks+0x9e/0xe0 [ 1385.154436] create_object.isra.0+0x3a/0xa20 [ 1385.155324] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1385.156378] kmem_cache_alloc_bulk+0x168/0x320 [ 1385.157311] io_submit_sqes+0x7099/0x86e0 [ 1385.158158] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1385.159161] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1385.160171] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1385.161150] ? lock_downgrade+0x6d0/0x6d0 [ 1385.161984] ? find_held_lock+0x2c/0x110 [ 1385.162812] ? io_submit_sqes+0x86e0/0x86e0 [ 1385.163711] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1385.164687] ? wait_for_completion_io+0x270/0x270 [ 1385.165663] ? rcu_read_lock_any_held+0x75/0xa0 [ 1385.166601] ? vfs_write+0x354/0xa70 [ 1385.167357] ? fput_many+0x2f/0x1a0 [ 1385.168101] ? ksys_write+0x1a9/0x260 [ 1385.168879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1385.169940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.170992] do_syscall_64+0x33/0x40 [ 1385.171763] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1385.172795] RIP: 0033:0x7f204d574b19 [ 1385.173549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.177255] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1385.178784] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1385.180228] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000004 [ 1385.181657] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.183093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1385.184545] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:11:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x5, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x1000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) [ 1385.215519] FAULT_INJECTION: forcing a failure. [ 1385.215519] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.218134] CPU: 0 PID: 9520 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1385.219519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.221197] Call Trace: [ 1385.221731] dump_stack+0x107/0x167 [ 1385.222483] should_fail.cold+0x5/0xa [ 1385.223260] ? create_object.isra.0+0x3a/0xa20 [ 1385.224204] should_failslab+0x5/0x20 [ 1385.224970] kmem_cache_alloc+0x5b/0x360 [ 1385.225805] create_object.isra.0+0x3a/0xa20 [ 1385.226699] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1385.227737] kmem_cache_alloc_trace+0x151/0x2c0 [ 1385.228685] ? do_ipt_get_ctl+0x86c/0x960 [ 1385.229542] __request_module+0x2e0/0x9f0 [ 1385.230380] ? free_modprobe_argv+0x90/0x90 [ 1385.231262] ? match_revfn+0x1de/0x270 [ 1385.232080] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1385.233133] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1385.234221] ? trace_hardirqs_on+0x5b/0x180 [ 1385.235107] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1385.236240] do_ipt_get_ctl+0x86c/0x960 [ 1385.237045] ? mutex_lock_io_nested+0xf30/0xf30 [ 1385.237986] ? get_info+0x5a0/0x5a0 [ 1385.238717] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1385.239711] ? wait_for_completion_io+0x270/0x270 [ 1385.240681] ? lock_downgrade+0x6d0/0x6d0 [ 1385.241511] ? __fget_files+0x26d/0x4c0 [ 1385.242322] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1385.243387] nf_getsockopt+0x78/0xd0 [ 1385.244163] ip_getsockopt+0x168/0x1c0 [ 1385.244944] ? do_ip_getsockopt+0x1900/0x1900 [ 1385.245870] tcp_getsockopt+0x8c/0xd0 [ 1385.246649] ? sock_def_destruct+0x10/0x10 [ 1385.247498] __sys_getsockopt+0x14c/0x250 [ 1385.248344] ? __ia32_sys_setsockopt+0x150/0x150 [ 1385.249299] ? fput_many+0x2f/0x1a0 [ 1385.250037] ? ksys_write+0x1a9/0x260 [ 1385.250818] __x64_sys_getsockopt+0xba/0x160 [ 1385.251719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.252763] do_syscall_64+0x33/0x40 [ 1385.253517] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1385.254549] RIP: 0033:0x7f7f47cb0b19 [ 1385.255302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.258993] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1385.260529] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1385.261966] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1385.263398] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1385.264852] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1385.266281] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 04:11:31 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:31 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x6, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:31 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 55) 04:11:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x2000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1385.469418] FAULT_INJECTION: forcing a failure. [ 1385.469418] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.472346] CPU: 0 PID: 9546 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1385.473967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1385.475952] Call Trace: [ 1385.476579] dump_stack+0x107/0x167 [ 1385.477455] should_fail.cold+0x5/0xa [ 1385.478390] should_failslab+0x5/0x20 [ 1385.479310] __kmalloc_node_track_caller+0x74/0x310 [ 1385.480495] ? alloc_skb_with_frags+0x92/0x570 [ 1385.481586] __alloc_skb+0xb1/0x5b0 [ 1385.482453] alloc_skb_with_frags+0x92/0x570 [ 1385.483495] ? find_held_lock+0x2c/0x110 [ 1385.484473] sock_alloc_send_pskb+0x7af/0x930 [ 1385.485555] ? sk_alloc+0x350/0x350 [ 1385.486417] ? perf_trace_lock+0xac/0x490 [ 1385.487398] ? lock_chain_count+0x20/0x20 [ 1385.488412] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1385.489607] ? ip6_mtu+0x1bb/0x3d0 [ 1385.490447] ? lock_downgrade+0x6d0/0x6d0 [ 1385.491421] ? ip_frag_init+0x350/0x350 [ 1385.492378] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1385.493461] ? ip6_mtu+0x1e9/0x3d0 [ 1385.494295] ? ip6_setup_cork+0xfb7/0x1740 [ 1385.495286] ip6_make_skb+0x2de/0x4e0 [ 1385.496200] ? ip_frag_init+0x350/0x350 [ 1385.497137] ? ip_frag_init+0x350/0x350 [ 1385.498076] ? ip6_push_pending_frames+0xf0/0xf0 [ 1385.499198] ? ip6_dst_hoplimit+0x199/0x440 [ 1385.500218] ? lock_downgrade+0x6d0/0x6d0 [ 1385.501210] udpv6_sendmsg+0x2060/0x2a00 [ 1385.502168] ? ip_frag_init+0x350/0x350 [ 1385.503112] ? udp_v6_push_pending_frames+0x360/0x360 [ 1385.504330] ? lock_chain_count+0x20/0x20 [ 1385.505319] ? __lockdep_reset_lock+0x180/0x180 [ 1385.506405] ? lock_chain_count+0x20/0x20 [ 1385.507381] ? find_held_lock+0x2c/0x110 [ 1385.508371] ? sock_has_perm+0x1ea/0x280 [ 1385.509369] ? __import_iovec+0x458/0x590 [ 1385.510347] ? udp_v6_push_pending_frames+0x360/0x360 [ 1385.511568] inet6_sendmsg+0x105/0x140 [ 1385.512494] ? inet6_compat_ioctl+0x320/0x320 [ 1385.513544] sock_sendmsg+0xf2/0x190 [ 1385.514424] ____sys_sendmsg+0x334/0x870 [ 1385.515290] ? kernel_sendmsg+0x50/0x50 [ 1385.516097] ? do_recvmmsg+0x6d0/0x6d0 [ 1385.516888] ? __lock_acquire+0x1657/0x5b00 [ 1385.517775] ___sys_sendmsg+0xf3/0x170 [ 1385.518577] ? sendmsg_copy_msghdr+0x160/0x160 [ 1385.519492] ? __lockdep_reset_lock+0x180/0x180 [ 1385.520442] ? trace_hardirqs_on+0x5b/0x180 [ 1385.521309] ? find_held_lock+0x2c/0x110 [ 1385.522139] ? __might_fault+0xd3/0x180 [ 1385.522933] ? lock_downgrade+0x6d0/0x6d0 [ 1385.523805] ? io_schedule_timeout+0x140/0x140 [ 1385.524738] __sys_sendmmsg+0x195/0x470 [ 1385.525554] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1385.526414] ? lock_downgrade+0x6d0/0x6d0 [ 1385.527275] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1385.528256] ? wait_for_completion_io+0x270/0x270 [ 1385.529230] ? rcu_read_lock_any_held+0x75/0xa0 [ 1385.530161] ? vfs_write+0x354/0xa70 [ 1385.530924] ? fput_many+0x2f/0x1a0 [ 1385.531660] ? ksys_write+0x1a9/0x260 [ 1385.532434] __x64_sys_sendmmsg+0x99/0x100 [ 1385.533286] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1385.534318] do_syscall_64+0x33/0x40 [ 1385.535079] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1385.536119] RIP: 0033:0x7f6639ba0b19 [ 1385.536879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1385.540555] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1385.542096] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1385.543513] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1385.544969] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.546393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1385.547857] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1385.562566] perf: interrupt took too long (5082 > 5050), lowering kernel.perf_event_max_sample_rate to 39000 04:11:44 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:11:44 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x3000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 56) 04:11:44 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x7, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:44 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:44 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:44 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 1399.114604] FAULT_INJECTION: forcing a failure. [ 1399.114604] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.117096] CPU: 0 PID: 9562 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1399.118486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.120211] Call Trace: [ 1399.120751] dump_stack+0x107/0x167 [ 1399.121505] should_fail.cold+0x5/0xa [ 1399.122294] should_failslab+0x5/0x20 [ 1399.123063] __kmalloc_node_track_caller+0x74/0x310 [ 1399.123603] FAULT_INJECTION: forcing a failure. [ 1399.123603] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.124099] ? alloc_skb_with_frags+0x92/0x570 [ 1399.124126] __alloc_skb+0xb1/0x5b0 [ 1399.124153] alloc_skb_with_frags+0x92/0x570 [ 1399.128882] ? find_held_lock+0x2c/0x110 [ 1399.129722] sock_alloc_send_pskb+0x7af/0x930 [ 1399.130650] ? sk_alloc+0x350/0x350 [ 1399.131409] ? perf_trace_lock+0xac/0x490 [ 1399.132277] ? SOFTIRQ_verbose+0x10/0x10 [ 1399.133099] ? lock_chain_count+0x20/0x20 [ 1399.133959] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1399.134985] ? ip6_mtu+0x1bb/0x3d0 [ 1399.135713] ? lock_downgrade+0x6d0/0x6d0 [ 1399.136573] ? ip_frag_init+0x350/0x350 [ 1399.137398] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1399.138344] ? ip6_mtu+0x1e9/0x3d0 [ 1399.139070] ? ip6_setup_cork+0xfb7/0x1740 [ 1399.139956] ip6_make_skb+0x2de/0x4e0 [ 1399.140723] ? ip_frag_init+0x350/0x350 [ 1399.141536] ? ip_frag_init+0x350/0x350 [ 1399.142347] ? ip6_push_pending_frames+0xf0/0xf0 [ 1399.143318] ? ip6_dst_hoplimit+0x199/0x440 [ 1399.144231] ? lock_downgrade+0x6d0/0x6d0 [ 1399.145092] udpv6_sendmsg+0x2060/0x2a00 [ 1399.145920] ? ip_frag_init+0x350/0x350 [ 1399.146742] ? udp_v6_push_pending_frames+0x360/0x360 [ 1399.147843] ? __lockdep_reset_lock+0x180/0x180 [ 1399.148788] ? lock_chain_count+0x20/0x20 [ 1399.149635] ? find_held_lock+0x2c/0x110 [ 1399.150486] ? sock_has_perm+0x1ea/0x280 [ 1399.151344] ? __import_iovec+0x458/0x590 [ 1399.152216] ? udp_v6_push_pending_frames+0x360/0x360 [ 1399.153264] inet6_sendmsg+0x105/0x140 [ 1399.154051] ? inet6_compat_ioctl+0x320/0x320 [ 1399.154958] sock_sendmsg+0xf2/0x190 [ 1399.155713] ____sys_sendmsg+0x334/0x870 [ 1399.156565] ? kernel_sendmsg+0x50/0x50 [ 1399.157376] ? do_recvmmsg+0x6d0/0x6d0 [ 1399.158169] ? __lock_acquire+0x1657/0x5b00 [ 1399.159061] ___sys_sendmsg+0xf3/0x170 [ 1399.159877] ? sendmsg_copy_msghdr+0x160/0x160 [ 1399.160806] ? __lockdep_reset_lock+0x180/0x180 [ 1399.161746] ? trace_hardirqs_on+0x5b/0x180 [ 1399.162630] ? find_held_lock+0x2c/0x110 [ 1399.163460] ? __might_fault+0xd3/0x180 [ 1399.164300] ? lock_downgrade+0x6d0/0x6d0 [ 1399.165162] ? io_schedule_timeout+0x140/0x140 [ 1399.166114] __sys_sendmmsg+0x195/0x470 [ 1399.166929] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1399.167818] ? lock_downgrade+0x6d0/0x6d0 [ 1399.168687] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.169666] ? wait_for_completion_io+0x270/0x270 [ 1399.170643] ? rcu_read_lock_any_held+0x75/0xa0 [ 1399.171579] ? vfs_write+0x354/0xa70 [ 1399.172360] ? fput_many+0x2f/0x1a0 [ 1399.173102] ? ksys_write+0x1a9/0x260 [ 1399.173886] __x64_sys_sendmmsg+0x99/0x100 [ 1399.174744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.175812] do_syscall_64+0x33/0x40 [ 1399.176587] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1399.177627] RIP: 0033:0x7f6639ba0b19 [ 1399.178386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.182123] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1399.183688] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1399.185165] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1399.186598] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.188038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.189454] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1399.190908] CPU: 1 PID: 9572 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1399.192319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.193986] Call Trace: [ 1399.194520] dump_stack+0x107/0x167 [ 1399.195259] should_fail.cold+0x5/0xa [ 1399.196039] ? do_ipt_get_ctl+0x86c/0x960 [ 1399.196873] should_failslab+0x5/0x20 [ 1399.197636] __kmalloc_track_caller+0x79/0x310 [ 1399.198554] ? __request_module+0x2fe/0x9f0 [ 1399.199424] ? do_ipt_get_ctl+0x86c/0x960 [ 1399.200261] kstrdup+0x36/0x70 [ 1399.200921] __request_module+0x2fe/0x9f0 [ 1399.201756] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.202725] ? free_modprobe_argv+0x90/0x90 [ 1399.203592] ? match_revfn+0x1de/0x270 [ 1399.204396] ? match_revfn+0x1de/0x270 [ 1399.205199] ? xt_find_revision+0x11f/0x210 [ 1399.206058] ? match_revfn+0x270/0x270 [ 1399.206856] do_ipt_get_ctl+0x86c/0x960 [ 1399.206880] FAULT_INJECTION: forcing a failure. [ 1399.206880] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.207685] ? mutex_lock_io_nested+0xf30/0xf30 [ 1399.210806] ? get_info+0x5a0/0x5a0 [ 1399.211544] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.212542] ? wait_for_completion_io+0x270/0x270 [ 1399.213522] ? lock_downgrade+0x6d0/0x6d0 [ 1399.214361] ? __fget_files+0x26d/0x4c0 [ 1399.215162] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1399.216239] nf_getsockopt+0x78/0xd0 [ 1399.216992] ip_getsockopt+0x168/0x1c0 [ 1399.217782] ? do_ip_getsockopt+0x1900/0x1900 [ 1399.218694] tcp_getsockopt+0x8c/0xd0 [ 1399.219474] ? sock_def_destruct+0x10/0x10 [ 1399.220326] __sys_getsockopt+0x14c/0x250 [ 1399.221167] ? __ia32_sys_setsockopt+0x150/0x150 [ 1399.222124] ? fput_many+0x2f/0x1a0 [ 1399.222866] ? ksys_write+0x1a9/0x260 [ 1399.223640] __x64_sys_getsockopt+0xba/0x160 [ 1399.224538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.225571] do_syscall_64+0x33/0x40 [ 1399.226319] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1399.227354] RIP: 0033:0x7f7f47cb0b19 [ 1399.228138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.231873] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1399.233410] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1399.234833] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1399.236305] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1399.237738] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1399.239170] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 [ 1399.240645] CPU: 0 PID: 9566 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1399.242031] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.243682] Call Trace: [ 1399.244251] dump_stack+0x107/0x167 [ 1399.245008] should_fail.cold+0x5/0xa [ 1399.245779] ? create_object.isra.0+0x3a/0xa20 [ 1399.246700] should_failslab+0x5/0x20 [ 1399.247461] kmem_cache_alloc+0x5b/0x360 [ 1399.248311] ? mark_held_locks+0x9e/0xe0 [ 1399.249145] create_object.isra.0+0x3a/0xa20 [ 1399.250045] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1399.251093] kmem_cache_alloc_bulk+0x168/0x320 [ 1399.252064] io_submit_sqes+0x7099/0x86e0 [ 1399.252928] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1399.253957] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1399.254957] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1399.255972] ? lock_downgrade+0x6d0/0x6d0 [ 1399.256817] ? find_held_lock+0x2c/0x110 [ 1399.257645] ? io_submit_sqes+0x86e0/0x86e0 [ 1399.258545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.259526] ? wait_for_completion_io+0x270/0x270 [ 1399.260542] ? rcu_read_lock_any_held+0x75/0xa0 [ 1399.261469] ? vfs_write+0x354/0xa70 [ 1399.262246] ? fput_many+0x2f/0x1a0 [ 1399.262980] ? ksys_write+0x1a9/0x260 [ 1399.263814] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1399.264882] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.265954] do_syscall_64+0x33/0x40 [ 1399.266701] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1399.267740] RIP: 0033:0x7f204d574b19 [ 1399.268514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.272247] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1399.273769] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1399.275198] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1399.276648] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.278095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1399.279513] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:11:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x4000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:45 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x300, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:45 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 57) [ 1399.456820] FAULT_INJECTION: forcing a failure. [ 1399.456820] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.459330] CPU: 1 PID: 9587 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1399.460693] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1399.462384] Call Trace: [ 1399.462914] dump_stack+0x107/0x167 [ 1399.463673] should_fail.cold+0x5/0xa [ 1399.464481] should_failslab+0x5/0x20 [ 1399.465253] __kmalloc_node_track_caller+0x74/0x310 [ 1399.466251] ? alloc_skb_with_frags+0x92/0x570 [ 1399.467179] __alloc_skb+0xb1/0x5b0 [ 1399.467936] alloc_skb_with_frags+0x92/0x570 [ 1399.468832] ? find_held_lock+0x2c/0x110 [ 1399.469669] sock_alloc_send_pskb+0x7af/0x930 [ 1399.470598] ? sk_alloc+0x350/0x350 [ 1399.471342] ? perf_trace_lock+0xac/0x490 [ 1399.472193] ? SOFTIRQ_verbose+0x10/0x10 [ 1399.473009] ? lock_chain_count+0x20/0x20 [ 1399.473864] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1399.474896] ? ip6_mtu+0x1bb/0x3d0 [ 1399.475625] ? lock_downgrade+0x6d0/0x6d0 [ 1399.476472] ? ip_frag_init+0x350/0x350 [ 1399.477288] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1399.478219] ? ip6_mtu+0x1e9/0x3d0 [ 1399.478940] ? ip6_setup_cork+0xfb7/0x1740 [ 1399.479800] ip6_make_skb+0x2de/0x4e0 [ 1399.480565] ? ip_frag_init+0x350/0x350 [ 1399.481370] ? ip_frag_init+0x350/0x350 [ 1399.482173] ? ip6_push_pending_frames+0xf0/0xf0 [ 1399.483129] ? ip6_dst_hoplimit+0x199/0x440 [ 1399.484017] ? lock_downgrade+0x6d0/0x6d0 [ 1399.484868] udpv6_sendmsg+0x2060/0x2a00 [ 1399.485693] ? ip_frag_init+0x350/0x350 [ 1399.486499] ? udp_v6_push_pending_frames+0x360/0x360 [ 1399.487567] ? __lockdep_reset_lock+0x180/0x180 [ 1399.488528] ? find_held_lock+0x2c/0x110 [ 1399.489356] ? sock_has_perm+0x1ea/0x280 [ 1399.490215] ? __import_iovec+0x458/0x590 [ 1399.491032] ? udp_v6_push_pending_frames+0x360/0x360 [ 1399.492089] inet6_sendmsg+0x105/0x140 [ 1399.492861] ? inet6_compat_ioctl+0x320/0x320 [ 1399.493770] sock_sendmsg+0xf2/0x190 [ 1399.494508] ____sys_sendmsg+0x334/0x870 [ 1399.495334] ? kernel_sendmsg+0x50/0x50 [ 1399.496133] ? do_recvmmsg+0x6d0/0x6d0 [ 1399.496913] ? __lock_acquire+0x1657/0x5b00 [ 1399.497773] ___sys_sendmsg+0xf3/0x170 [ 1399.498552] ? sendmsg_copy_msghdr+0x160/0x160 [ 1399.499454] ? __lockdep_reset_lock+0x180/0x180 [ 1399.500375] ? trace_hardirqs_on+0x5b/0x180 [ 1399.501235] ? find_held_lock+0x2c/0x110 [ 1399.502069] ? __might_fault+0xd3/0x180 [ 1399.502853] ? lock_downgrade+0x6d0/0x6d0 [ 1399.503695] ? io_schedule_timeout+0x140/0x140 [ 1399.504633] __sys_sendmmsg+0x195/0x470 [ 1399.505451] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1399.506313] ? lock_downgrade+0x6d0/0x6d0 [ 1399.507174] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1399.508138] ? wait_for_completion_io+0x270/0x270 [ 1399.509111] ? rcu_read_lock_any_held+0x75/0xa0 [ 1399.510026] ? vfs_write+0x354/0xa70 [ 1399.510785] ? fput_many+0x2f/0x1a0 [ 1399.511504] ? ksys_write+0x1a9/0x260 [ 1399.512289] __x64_sys_sendmmsg+0x99/0x100 [ 1399.513123] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1399.514150] do_syscall_64+0x33/0x40 [ 1399.514888] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1399.515942] RIP: 0033:0x7f6639ba0b19 [ 1399.516678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1399.520322] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1399.521863] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1399.523266] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1399.524719] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.526130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.527562] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 04:11:58 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 04:11:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 58) 04:11:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x5000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:11:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x500, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:11:58 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 5) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1412.688965] FAULT_INJECTION: forcing a failure. [ 1412.688965] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.691538] CPU: 1 PID: 9608 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1412.693053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.694821] Call Trace: [ 1412.695404] dump_stack+0x107/0x167 [ 1412.696208] should_fail.cold+0x5/0xa [ 1412.697047] ? create_object.isra.0+0x3a/0xa20 [ 1412.698027] should_failslab+0x5/0x20 [ 1412.698839] kmem_cache_alloc+0x5b/0x360 [ 1412.699734] ? lock_downgrade+0x6d0/0x6d0 [ 1412.700674] create_object.isra.0+0x3a/0xa20 [ 1412.701635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.702754] __kmalloc_track_caller+0x177/0x310 [ 1412.703769] ? __request_module+0x2fe/0x9f0 [ 1412.704730] ? do_ipt_get_ctl+0x86c/0x960 [ 1412.705631] kstrdup+0x36/0x70 [ 1412.706336] __request_module+0x2fe/0x9f0 [ 1412.707241] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.708303] ? free_modprobe_argv+0x90/0x90 [ 1412.709248] ? match_revfn+0x1de/0x270 [ 1412.710113] ? match_revfn+0x1de/0x270 [ 1412.710976] ? xt_find_revision+0x11f/0x210 [ 1412.711918] ? match_revfn+0x270/0x270 [ 1412.712807] do_ipt_get_ctl+0x86c/0x960 [ 1412.713677] ? mutex_lock_io_nested+0xf30/0xf30 [ 1412.714699] ? get_info+0x5a0/0x5a0 [ 1412.715494] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.716559] ? wait_for_completion_io+0x270/0x270 [ 1412.717615] ? lock_downgrade+0x6d0/0x6d0 [ 1412.718515] ? __fget_files+0x26d/0x4c0 [ 1412.719395] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1412.720552] nf_getsockopt+0x78/0xd0 [ 1412.721369] ip_getsockopt+0x168/0x1c0 [ 1412.722227] ? do_ip_getsockopt+0x1900/0x1900 [ 1412.723254] tcp_getsockopt+0x8c/0xd0 [ 1412.724110] ? sock_def_destruct+0x10/0x10 [ 1412.725049] __sys_getsockopt+0x14c/0x250 [ 1412.725978] ? __ia32_sys_setsockopt+0x150/0x150 [ 1412.727023] ? fput_many+0x2f/0x1a0 [ 1412.727827] ? ksys_write+0x1a9/0x260 [ 1412.728695] __x64_sys_getsockopt+0xba/0x160 [ 1412.729668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.730799] do_syscall_64+0x33/0x40 [ 1412.731625] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1412.732761] RIP: 0033:0x7f7f47cb0b19 [ 1412.733570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.737569] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1412.739215] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1412.740798] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1412.742343] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1412.743888] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1412.745440] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 [ 1412.757336] FAULT_INJECTION: forcing a failure. [ 1412.757336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.759905] CPU: 1 PID: 9598 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1412.761416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.763181] Call Trace: [ 1412.763760] dump_stack+0x107/0x167 [ 1412.764564] should_fail.cold+0x5/0xa [ 1412.765407] _copy_from_user+0x2e/0x1b0 [ 1412.766271] __copy_msghdr_from_user+0x91/0x4b0 [ 1412.767293] ? __ia32_sys_shutdown+0x80/0x80 [ 1412.768274] ? udp_v6_push_pending_frames+0x360/0x360 04:11:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x600, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x6000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1412.769404] ? inet6_sendmsg+0xbd/0x140 [ 1412.770415] ? inet6_compat_ioctl+0x320/0x320 [ 1412.771390] ? sock_sendmsg+0x55/0x190 [ 1412.772261] sendmsg_copy_msghdr+0xa1/0x160 [ 1412.773201] ? do_recvmmsg+0x6d0/0x6d0 [ 1412.774055] ? __lock_acquire+0x1657/0x5b00 [ 1412.775011] ___sys_sendmsg+0xc6/0x170 [ 1412.775864] ? sendmsg_copy_msghdr+0x160/0x160 [ 1412.776883] ? __lockdep_reset_lock+0x180/0x180 [ 1412.777916] ? trace_hardirqs_on+0x5b/0x180 [ 1412.778846] ? find_held_lock+0x2c/0x110 [ 1412.779747] ? __might_fault+0xd3/0x180 [ 1412.780626] ? lock_downgrade+0x6d0/0x6d0 [ 1412.781535] ? io_schedule_timeout+0x140/0x140 04:11:58 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1412.782605] __sys_sendmmsg+0x195/0x470 [ 1412.783544] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1412.784510] ? lock_downgrade+0x6d0/0x6d0 [ 1412.785435] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.786506] ? wait_for_completion_io+0x270/0x270 [ 1412.787556] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.788575] ? vfs_write+0x354/0xa70 [ 1412.789390] ? fput_many+0x2f/0x1a0 [ 1412.790184] ? ksys_write+0x1a9/0x260 [ 1412.791029] __x64_sys_sendmmsg+0x99/0x100 [ 1412.791926] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.793066] do_syscall_64+0x33/0x40 [ 1412.793864] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1412.794972] RIP: 0033:0x7f6639ba0b19 [ 1412.795771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.799747] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1412.801417] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1412.802961] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1412.804511] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.806054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.807595] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1412.822635] FAULT_INJECTION: forcing a failure. [ 1412.822635] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.823928] CPU: 0 PID: 9607 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1412.824707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1412.825598] Call Trace: [ 1412.825895] dump_stack+0x107/0x167 [ 1412.826310] should_fail.cold+0x5/0xa [ 1412.826730] ? create_object.isra.0+0x3a/0xa20 [ 1412.827237] should_failslab+0x5/0x20 [ 1412.827659] kmem_cache_alloc+0x5b/0x360 [ 1412.828128] ? mark_held_locks+0x9e/0xe0 [ 1412.828581] create_object.isra.0+0x3a/0xa20 [ 1412.829059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1412.829633] kmem_cache_alloc_bulk+0x168/0x320 [ 1412.830124] io_submit_sqes+0x7099/0x86e0 [ 1412.830589] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1412.831151] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1412.831702] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1412.832237] ? lock_downgrade+0x6d0/0x6d0 [ 1412.832706] ? find_held_lock+0x2c/0x110 [ 1412.833172] ? io_submit_sqes+0x86e0/0x86e0 [ 1412.833669] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1412.834222] ? wait_for_completion_io+0x270/0x270 [ 1412.834768] ? rcu_read_lock_any_held+0x75/0xa0 [ 1412.835298] ? vfs_write+0x354/0xa70 [ 1412.835723] ? fput_many+0x2f/0x1a0 [ 1412.836161] ? ksys_write+0x1a9/0x260 [ 1412.836605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1412.837196] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1412.837781] do_syscall_64+0x33/0x40 [ 1412.838208] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1412.838790] RIP: 0033:0x7f204d574b19 [ 1412.839210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1412.841288] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1412.842142] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1412.842947] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1412.843744] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.844554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.845354] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 04:11:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x7000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x700, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:11:58 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:12:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:12:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x1000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 6) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:12:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 59) 04:12:14 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 04:12:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x20000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1428.629951] FAULT_INJECTION: forcing a failure. [ 1428.629951] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.631445] CPU: 1 PID: 9640 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1428.632334] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.633406] Call Trace: [ 1428.633756] dump_stack+0x107/0x167 [ 1428.634251] should_fail.cold+0x5/0xa [ 1428.634762] ? call_usermodehelper_setup+0xa2/0x2f0 [ 1428.635416] should_failslab+0x5/0x20 [ 1428.635913] kmem_cache_alloc_trace+0x55/0x2c0 [ 1428.636521] ? rcu_read_lock_sched_held+0x3e/0x80 [ 1428.637147] call_usermodehelper_setup+0xa2/0x2f0 [ 1428.637779] ? copy_regset_to_user+0x170/0x170 [ 1428.638379] ? do_ipt_get_ctl+0x86c/0x960 [ 1428.638923] __request_module+0x3f9/0x9f0 [ 1428.639446] FAULT_INJECTION: forcing a failure. [ 1428.639446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.639497] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.639516] ? free_modprobe_argv+0x90/0x90 [ 1428.643357] ? match_revfn+0x1de/0x270 [ 1428.643962] ? match_revfn+0x1de/0x270 [ 1428.644526] ? xt_find_revision+0x11f/0x210 [ 1428.645110] ? match_revfn+0x270/0x270 [ 1428.645637] do_ipt_get_ctl+0x86c/0x960 [ 1428.646189] ? mutex_lock_io_nested+0xf30/0xf30 [ 1428.646813] ? get_info+0x5a0/0x5a0 [ 1428.647301] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.647945] ? wait_for_completion_io+0x270/0x270 [ 1428.648613] ? lock_downgrade+0x6d0/0x6d0 [ 1428.649163] ? __fget_files+0x26d/0x4c0 [ 1428.649700] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1428.650397] nf_getsockopt+0x78/0xd0 [ 1428.650896] ip_getsockopt+0x168/0x1c0 [ 1428.651412] ? do_ip_getsockopt+0x1900/0x1900 [ 1428.652013] tcp_getsockopt+0x8c/0xd0 [ 1428.652549] ? sock_def_destruct+0x10/0x10 [ 1428.653106] __sys_getsockopt+0x14c/0x250 [ 1428.653661] ? __ia32_sys_setsockopt+0x150/0x150 [ 1428.654287] ? fput_many+0x2f/0x1a0 [ 1428.654770] ? ksys_write+0x1a9/0x260 [ 1428.655280] __x64_sys_getsockopt+0xba/0x160 [ 1428.655864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.656564] do_syscall_64+0x33/0x40 [ 1428.657058] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1428.657739] RIP: 0033:0x7f7f47cb0b19 [ 1428.658234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.660676] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1428.661683] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1428.662627] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1428.663573] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1428.664532] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1428.665477] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 [ 1428.666471] CPU: 0 PID: 9646 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1428.668193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.670226] Call Trace: [ 1428.670869] dump_stack+0x107/0x167 [ 1428.671762] should_fail.cold+0x5/0xa [ 1428.672708] _copy_from_user+0x2e/0x1b0 [ 1428.673675] __copy_msghdr_from_user+0x91/0x4b0 [ 1428.674795] ? __ia32_sys_shutdown+0x80/0x80 [ 1428.675857] ? udp_v6_push_pending_frames+0x360/0x360 [ 1428.677129] ? inet6_sendmsg+0xbd/0x140 [ 1428.678084] ? inet6_compat_ioctl+0x320/0x320 [ 1428.679165] ? sock_sendmsg+0x55/0x190 [ 1428.680107] sendmsg_copy_msghdr+0xa1/0x160 [ 1428.681155] ? do_recvmmsg+0x6d0/0x6d0 [ 1428.682095] ? __lock_acquire+0x1657/0x5b00 [ 1428.683154] ___sys_sendmsg+0xc6/0x170 [ 1428.684088] ? sendmsg_copy_msghdr+0x160/0x160 [ 1428.685203] ? vmacache_find+0x55/0x2a0 [ 1428.686161] ? __lockdep_reset_lock+0x180/0x180 [ 1428.687290] ? find_held_lock+0x2c/0x110 [ 1428.688275] ? __might_fault+0xd3/0x180 [ 1428.689224] ? lock_downgrade+0x6d0/0x6d0 [ 1428.690201] ? asm_exc_page_fault+0x1e/0x30 [ 1428.691263] __sys_sendmmsg+0x195/0x470 [ 1428.692262] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1428.693290] ? lock_downgrade+0x6d0/0x6d0 [ 1428.694317] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.695467] ? wait_for_completion_io+0x270/0x270 [ 1428.696627] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.697749] ? vfs_write+0x354/0xa70 [ 1428.698642] ? fput_many+0x2f/0x1a0 [ 1428.699538] ? ksys_write+0x1a9/0x260 [ 1428.700479] __x64_sys_sendmmsg+0x99/0x100 [ 1428.701494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.702724] do_syscall_64+0x33/0x40 [ 1428.703629] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1428.704869] RIP: 0033:0x7f6639ba0b19 [ 1428.705766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.710059] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1428.711864] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1428.713552] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1428.715219] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.716892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.718550] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1428.721663] FAULT_INJECTION: forcing a failure. [ 1428.721663] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.723308] CPU: 1 PID: 9651 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1428.724261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1428.725397] Call Trace: [ 1428.725748] dump_stack+0x107/0x167 [ 1428.726213] should_fail.cold+0x5/0xa [ 1428.726699] ? create_object.isra.0+0x3a/0xa20 [ 1428.727273] should_failslab+0x5/0x20 [ 1428.727755] kmem_cache_alloc+0x5b/0x360 [ 1428.728292] create_object.isra.0+0x3a/0xa20 [ 1428.728895] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1428.729599] kmem_cache_alloc_trace+0x151/0x2c0 [ 1428.730204] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1428.730879] __io_uring_add_tctx_node+0x15c/0x520 [ 1428.731545] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1428.732301] __do_sys_io_uring_enter+0x136d/0x17b0 [ 1428.732975] ? lock_downgrade+0x6d0/0x6d0 [ 1428.733543] ? find_held_lock+0x2c/0x110 [ 1428.734110] ? io_submit_sqes+0x86e0/0x86e0 [ 1428.734708] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1428.735377] ? wait_for_completion_io+0x270/0x270 [ 1428.736039] ? rcu_read_lock_any_held+0x75/0xa0 [ 1428.736659] ? vfs_write+0x354/0xa70 [ 1428.737175] ? fput_many+0x2f/0x1a0 [ 1428.737680] ? ksys_write+0x1a9/0x260 [ 1428.738213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1428.738937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1428.739644] do_syscall_64+0x33/0x40 [ 1428.740154] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1428.740819] RIP: 0033:0x7f204d574b19 [ 1428.741337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1428.743844] RSP: 002b:00007f204aac9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1428.744892] RAX: ffffffffffffffda RBX: 00007f204d688020 RCX: 00007f204d574b19 [ 1428.745851] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1428.746819] RBP: 00007f204aac91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1428.747797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1428.748754] R13: 00007ffea5cdb19f R14: 00007f204aac9300 R15: 0000000000022000 04:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:12:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x2000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0xff0f0000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f0000000140)) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:12:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x3000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 60) 04:12:14 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:12:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:12:14 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x4000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:14 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 04:12:14 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 7) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 1429.008397] FAULT_INJECTION: forcing a failure. [ 1429.008397] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.010951] CPU: 0 PID: 9685 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1429.012455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.014260] Call Trace: [ 1429.014851] dump_stack+0x107/0x167 [ 1429.015042] FAULT_INJECTION: forcing a failure. [ 1429.015042] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.015662] should_fail.cold+0x5/0xa [ 1429.018091] ? create_object.isra.0+0x3a/0xa20 [ 1429.019310] should_failslab+0x5/0x20 [ 1429.020326] kmem_cache_alloc+0x5b/0x360 [ 1429.021420] create_object.isra.0+0x3a/0xa20 [ 1429.022575] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.023924] __kmalloc+0x16e/0x330 [ 1429.024896] io_setup_async_rw+0x180/0x580 [ 1429.026031] io_read+0xe98/0x11e0 [ 1429.026972] ? perf_event_switch_output+0x7d0/0x7d0 [ 1429.028318] ? kiocb_done+0xc90/0xc90 [ 1429.029373] ? __lockdep_reset_lock+0x180/0x180 [ 1429.030635] ? __lock_acquire+0xbb1/0x5b00 [ 1429.031759] io_issue_sqe+0x2e12/0x7660 [ 1429.032831] ? perf_trace_lock+0xac/0x490 [ 1429.033913] ? SOFTIRQ_verbose+0x10/0x10 [ 1429.034988] ? __lockdep_reset_lock+0x180/0x180 [ 1429.036229] ? io_connect+0x610/0x610 [ 1429.037247] ? find_held_lock+0x2c/0x110 [ 1429.038326] ? __fget_files+0x26d/0x4c0 [ 1429.039223] ? lock_downgrade+0x6d0/0x6d0 [ 1429.040354] __io_queue_sqe+0x90/0xa60 [ 1429.041242] ? io_timeout_prep+0x8b0/0x8b0 [ 1429.042391] io_submit_sqes+0x4484/0x86e0 [ 1429.043391] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1429.044693] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1429.045766] ? lock_downgrade+0x6d0/0x6d0 [ 1429.046672] ? find_held_lock+0x2c/0x110 [ 1429.047579] ? io_submit_sqes+0x86e0/0x86e0 [ 1429.048571] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.049636] ? wait_for_completion_io+0x270/0x270 [ 1429.050701] ? rcu_read_lock_any_held+0x75/0xa0 [ 1429.051720] ? vfs_write+0x354/0xa70 [ 1429.052574] ? fput_many+0x2f/0x1a0 [ 1429.053400] ? ksys_write+0x1a9/0x260 [ 1429.054276] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1429.055440] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.056619] do_syscall_64+0x33/0x40 [ 1429.057454] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1429.058595] RIP: 0033:0x7f204d574b19 [ 1429.059430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.063475] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1429.065177] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1429.066757] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1429.068348] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.069926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.071508] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 [ 1429.073153] CPU: 1 PID: 9688 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1429.073894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.074765] Call Trace: [ 1429.075045] dump_stack+0x107/0x167 [ 1429.075437] should_fail.cold+0x5/0xa [ 1429.075849] should_failslab+0x5/0x20 [ 1429.076262] __kmalloc_node_track_caller+0x74/0x310 [ 1429.076798] ? alloc_skb_with_frags+0x92/0x570 [ 1429.077287] __alloc_skb+0xb1/0x5b0 [ 1429.077678] alloc_skb_with_frags+0x92/0x570 [ 1429.078145] ? find_held_lock+0x2c/0x110 [ 1429.078588] sock_alloc_send_pskb+0x7af/0x930 [ 1429.079085] ? sk_alloc+0x350/0x350 [ 1429.079478] ? perf_trace_lock+0xac/0x490 [ 1429.079931] ? SOFTIRQ_verbose+0x10/0x10 [ 1429.080376] ? lock_chain_count+0x20/0x20 [ 1429.080829] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1429.081370] ? ip6_mtu+0x1bb/0x3d0 [ 1429.081752] ? lock_downgrade+0x6d0/0x6d0 [ 1429.082190] ? ip_frag_init+0x350/0x350 [ 1429.082623] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1429.083119] ? ip6_mtu+0x1e9/0x3d0 [ 1429.083499] ? ip6_setup_cork+0xfb7/0x1740 [ 1429.083954] ip6_make_skb+0x2de/0x4e0 [ 1429.084375] ? ip_frag_init+0x350/0x350 [ 1429.084807] ? ip_frag_init+0x350/0x350 [ 1429.085240] ? ip6_push_pending_frames+0xf0/0xf0 [ 1429.085758] ? ip6_dst_hoplimit+0x199/0x440 [ 1429.086217] ? lock_downgrade+0x6d0/0x6d0 [ 1429.086320] FAULT_INJECTION: forcing a failure. [ 1429.086320] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.086666] udpv6_sendmsg+0x2060/0x2a00 [ 1429.089510] ? ip_frag_init+0x350/0x350 [ 1429.089943] ? udp_v6_push_pending_frames+0x360/0x360 [ 1429.090497] ? __lockdep_reset_lock+0x180/0x180 [ 1429.090992] ? __lockdep_reset_lock+0x180/0x180 [ 1429.091497] ? find_held_lock+0x2c/0x110 [ 1429.091938] ? lock_chain_count+0x20/0x20 [ 1429.092391] ? sock_has_perm+0x1ea/0x280 [ 1429.092839] ? __import_iovec+0x458/0x590 [ 1429.093290] ? udp_v6_push_pending_frames+0x360/0x360 [ 1429.093850] inet6_sendmsg+0x105/0x140 [ 1429.094265] ? inet6_compat_ioctl+0x320/0x320 [ 1429.094742] sock_sendmsg+0xf2/0x190 [ 1429.095147] ____sys_sendmsg+0x334/0x870 [ 1429.095580] ? kernel_sendmsg+0x50/0x50 [ 1429.096009] ? do_recvmmsg+0x6d0/0x6d0 [ 1429.096440] ? __lock_acquire+0x1657/0x5b00 [ 1429.096907] ___sys_sendmsg+0xf3/0x170 [ 1429.097331] ? sendmsg_copy_msghdr+0x160/0x160 [ 1429.097820] ? __lockdep_reset_lock+0x180/0x180 [ 1429.098315] ? trace_hardirqs_on+0x5b/0x180 [ 1429.098784] ? find_held_lock+0x2c/0x110 [ 1429.099229] ? __might_fault+0xd3/0x180 [ 1429.099656] ? lock_downgrade+0x6d0/0x6d0 [ 1429.100096] ? io_schedule_timeout+0x140/0x140 [ 1429.100597] __sys_sendmmsg+0x195/0x470 [ 1429.101031] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1429.101488] ? lock_downgrade+0x6d0/0x6d0 [ 1429.101960] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.102473] ? wait_for_completion_io+0x270/0x270 [ 1429.102991] ? rcu_read_lock_any_held+0x75/0xa0 [ 1429.103486] ? vfs_write+0x354/0xa70 [ 1429.103882] ? fput_many+0x2f/0x1a0 [ 1429.104285] ? ksys_write+0x1a9/0x260 [ 1429.104701] __x64_sys_sendmmsg+0x99/0x100 [ 1429.105157] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.105700] do_syscall_64+0x33/0x40 [ 1429.106094] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1429.106642] RIP: 0033:0x7f6639ba0b19 [ 1429.107041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.108982] RSP: 002b:00007f66370f5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1429.109783] RAX: ffffffffffffffda RBX: 00007f6639cb4020 RCX: 00007f6639ba0b19 [ 1429.110532] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000003 [ 1429.111288] RBP: 00007f66370f51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.112039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.112796] R13: 00007ffdf756f66f R14: 00007f66370f5300 R15: 0000000000022000 [ 1429.113578] CPU: 0 PID: 9687 Comm: syz-executor.3 Not tainted 5.10.173 #1 [ 1429.115081] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1429.116947] Call Trace: [ 1429.117529] dump_stack+0x107/0x167 [ 1429.118336] should_fail.cold+0x5/0xa [ 1429.119191] ? create_object.isra.0+0x3a/0xa20 [ 1429.120389] should_failslab+0x5/0x20 [ 1429.121213] kmem_cache_alloc+0x5b/0x360 [ 1429.122183] ? lock_downgrade+0x6d0/0x6d0 [ 1429.123082] create_object.isra.0+0x3a/0xa20 [ 1429.124031] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1429.125142] kmem_cache_alloc_trace+0x151/0x2c0 [ 1429.126152] call_usermodehelper_setup+0xa2/0x2f0 [ 1429.127184] ? copy_regset_to_user+0x170/0x170 [ 1429.128188] ? do_ipt_get_ctl+0x86c/0x960 [ 1429.129088] __request_module+0x3f9/0x9f0 [ 1429.129977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.131036] ? free_modprobe_argv+0x90/0x90 [ 1429.131958] ? match_revfn+0x1de/0x270 [ 1429.132826] ? match_revfn+0x1de/0x270 [ 1429.133694] ? xt_find_revision+0x11f/0x210 [ 1429.134607] ? match_revfn+0x270/0x270 [ 1429.135473] do_ipt_get_ctl+0x86c/0x960 [ 1429.136332] ? mutex_lock_io_nested+0xf30/0xf30 [ 1429.137351] ? get_info+0x5a0/0x5a0 [ 1429.138122] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1429.139179] ? wait_for_completion_io+0x270/0x270 [ 1429.140222] ? lock_downgrade+0x6d0/0x6d0 [ 1429.141125] ? __fget_files+0x26d/0x4c0 [ 1429.141984] ? nf_sockopt_find.constprop.0+0x22d/0x2a0 [ 1429.143136] nf_getsockopt+0x78/0xd0 [ 1429.143937] ip_getsockopt+0x168/0x1c0 [ 1429.144800] ? do_ip_getsockopt+0x1900/0x1900 [ 1429.145776] tcp_getsockopt+0x8c/0xd0 [ 1429.146613] ? sock_def_destruct+0x10/0x10 [ 1429.147513] __sys_getsockopt+0x14c/0x250 [ 1429.148433] ? __ia32_sys_setsockopt+0x150/0x150 [ 1429.149441] ? fput_many+0x2f/0x1a0 [ 1429.150238] ? ksys_write+0x1a9/0x260 [ 1429.151088] __x64_sys_getsockopt+0xba/0x160 [ 1429.152018] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1429.153131] do_syscall_64+0x33/0x40 [ 1429.153946] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1429.155031] RIP: 0033:0x7f7f47cb0b19 [ 1429.155847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1429.159860] RSP: 002b:00007f7f45226188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1429.161487] RAX: ffffffffffffffda RBX: 00007f7f47dc3f60 RCX: 00007f7f47cb0b19 [ 1429.162994] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000004 [ 1429.164509] RBP: 00007f7f452261d0 R08: 0000000020000140 R09: 0000000000000000 [ 1429.166015] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1429.167516] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 04:12:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) (fail_nth: 61) 04:12:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x2, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:28 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) (fail_nth: 8) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 04:12:28 executing program 7: r0 = syz_io_uring_setup(0x24, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 04:12:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x5000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) 04:12:29 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) [ 1443.145995] FAULT_INJECTION: forcing a failure. [ 1443.145995] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.146721] FAULT_INJECTION: forcing a failure. [ 1443.146721] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.148311] CPU: 0 PID: 9708 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1443.152137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.153847] Call Trace: [ 1443.154399] dump_stack+0x107/0x167 [ 1443.155172] should_fail.cold+0x5/0xa [ 1443.155935] ? __io_queue_sqe+0x691/0xa60 [ 1443.156761] should_failslab+0x5/0x20 [ 1443.157505] kmem_cache_alloc_trace+0x55/0x2c0 [ 1443.158400] __io_queue_sqe+0x691/0xa60 [ 1443.159190] ? io_timeout_prep+0x8b0/0x8b0 [ 1443.160050] io_submit_sqes+0x4484/0x86e0 [ 1443.160954] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1443.161919] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1443.162857] ? lock_downgrade+0x6d0/0x6d0 [ 1443.163650] ? find_held_lock+0x2c/0x110 [ 1443.164462] ? io_submit_sqes+0x86e0/0x86e0 [ 1443.165316] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1443.166253] ? wait_for_completion_io+0x270/0x270 [ 1443.167185] ? rcu_read_lock_any_held+0x75/0xa0 [ 1443.168077] ? vfs_write+0x354/0xa70 [ 1443.168813] ? fput_many+0x2f/0x1a0 [ 1443.169518] ? ksys_write+0x1a9/0x260 [ 1443.170271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.171276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.172284] do_syscall_64+0x33/0x40 [ 1443.173023] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1443.174006] RIP: 0033:0x7f204d574b19 [ 1443.174725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.178243] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1443.179692] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1443.181052] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1443.182406] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.183757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.185122] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 [ 1443.186542] CPU: 1 PID: 9714 Comm: syz-executor.0 Not tainted 5.10.173 #1 [ 1443.186649] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 1443.188090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.188100] Call Trace: [ 1443.190110] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 1443.191946] dump_stack+0x107/0x167 [ 1443.192441] CPU: 0 PID: 9708 Comm: syz-executor.7 Not tainted 5.10.173 #1 [ 1443.194099] should_fail.cold+0x5/0xa [ 1443.194759] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.196254] should_failslab+0x5/0x20 [ 1443.196959] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 1443.199124] __kmalloc_node_track_caller+0x74/0x310 [ 1443.200543] Code: 0f 85 24 03 00 00 48 8b 3d d6 8a da 02 ba 48 00 00 00 be 20 0a 00 00 e8 cf ce 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1443.202377] ? alloc_skb_with_frags+0x92/0x570 [ 1443.202399] __alloc_skb+0xb1/0x5b0 [ 1443.203766] RSP: 0018:ffff888048aa7b28 EFLAGS: 00010213 [ 1443.208603] alloc_skb_with_frags+0x92/0x570 [ 1443.209500] [ 1443.210439] ? find_held_lock+0x2c/0x110 [ 1443.210468] sock_alloc_send_pskb+0x7af/0x930 [ 1443.211525] RAX: 0000000000000002 RBX: 1ffff11009154f6b RCX: 0000000000000000 [ 1443.212671] ? sk_alloc+0x350/0x350 [ 1443.212987] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 1443.214031] ? perf_trace_lock+0xac/0x490 [ 1443.214915] RBP: ffff88801d10a640 R08: 0000000000000000 R09: ffffffff8509e133 [ 1443.216782] ? SOFTIRQ_verbose+0x10/0x10 [ 1443.217503] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 1443.219349] ? lock_chain_count+0x20/0x20 [ 1443.220166] R13: 0000000000000000 R14: ffff88801d10a698 R15: ffff88801d10a688 [ 1443.222024] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1443.222812] FS: 00007f204aaea700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1443.224593] ? ip6_mtu+0x1bb/0x3d0 [ 1443.225404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1443.226932] ? lock_downgrade+0x6d0/0x6d0 [ 1443.227917] CR2: 00007f204aae9f78 CR3: 00000000489b8000 CR4: 0000000000350ef0 [ 1443.229389] ? ip_frag_init+0x350/0x350 [ 1443.230079] Call Trace: [ 1443.230961] ? ip6_finish_output2+0x1fe0/0x1fe0 [ 1443.231797] ? io_timeout_prep+0x8b0/0x8b0 [ 1443.232893] ? ip6_mtu+0x1e9/0x3d0 [ 1443.233708] io_submit_sqes+0x4484/0x86e0 [ 1443.234063] ? ip6_setup_cork+0xfb7/0x1740 [ 1443.235038] ? __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1443.235614] ip6_make_skb+0x2de/0x4e0 [ 1443.236328] __do_sys_io_uring_enter+0x6b5/0x17b0 [ 1443.236941] ? ip_frag_init+0x350/0x350 [ 1443.237801] ? lock_downgrade+0x6d0/0x6d0 [ 1443.239295] ? ip_frag_init+0x350/0x350 [ 1443.240023] ? find_held_lock+0x2c/0x110 [ 1443.240050] ? io_submit_sqes+0x86e0/0x86e0 [ 1443.241366] ? ip6_push_pending_frames+0xf0/0xf0 [ 1443.242157] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1443.242605] ? ip6_dst_hoplimit+0x199/0x440 [ 1443.243401] ? wait_for_completion_io+0x270/0x270 [ 1443.243847] ? lock_downgrade+0x6d0/0x6d0 [ 1443.243865] udpv6_sendmsg+0x2060/0x2a00 [ 1443.244744] ? rcu_read_lock_any_held+0x75/0xa0 [ 1443.245317] ? ip_frag_init+0x350/0x350 [ 1443.246277] ? vfs_write+0x354/0xa70 [ 1443.246767] ? udp_v6_push_pending_frames+0x360/0x360 [ 1443.247730] ? fput_many+0x2f/0x1a0 [ 1443.248194] ? __lockdep_reset_lock+0x180/0x180 [ 1443.249017] ? ksys_write+0x1a9/0x260 [ 1443.249568] ? find_held_lock+0x2c/0x110 [ 1443.250367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1443.250771] ? sock_has_perm+0x1ea/0x280 [ 1443.251795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.252207] ? __import_iovec+0x458/0x590 [ 1443.253154] do_syscall_64+0x33/0x40 [ 1443.253566] ? udp_v6_push_pending_frames+0x360/0x360 [ 1443.253581] inet6_sendmsg+0x105/0x140 [ 1443.254392] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1443.254970] ? inet6_compat_ioctl+0x320/0x320 [ 1443.254987] sock_sendmsg+0xf2/0x190 [ 1443.255785] RIP: 0033:0x7f204d574b19 [ 1443.256363] ____sys_sendmsg+0x334/0x870 [ 1443.256378] ? kernel_sendmsg+0x50/0x50 [ 1443.257210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.257615] ? do_recvmmsg+0x6d0/0x6d0 [ 1443.257632] ? __lock_acquire+0x1657/0x5b00 [ 1443.258652] RSP: 002b:00007f204aaea188 EFLAGS: 00000246 [ 1443.259091] ___sys_sendmsg+0xf3/0x170 [ 1443.260112] ORIG_RAX: 00000000000001aa [ 1443.260623] ? sendmsg_copy_msghdr+0x160/0x160 [ 1443.261362] RAX: ffffffffffffffda RBX: 00007f204d687f60 RCX: 00007f204d574b19 [ 1443.261776] ? __lockdep_reset_lock+0x180/0x180 [ 1443.262572] RDX: 0000000000000000 RSI: 00000000000076d3 RDI: 0000000000000003 [ 1443.263019] ? trace_hardirqs_on+0x5b/0x180 [ 1443.263036] ? find_held_lock+0x2c/0x110 [ 1443.266692] RBP: 00007f204aaea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.267143] ? __might_fault+0xd3/0x180 [ 1443.267984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.268593] ? lock_downgrade+0x6d0/0x6d0 [ 1443.268611] ? io_schedule_timeout+0x140/0x140 [ 1443.269367] R13: 00007ffea5cdb19f R14: 00007f204aaea300 R15: 0000000000022000 [ 1443.269815] __sys_sendmmsg+0x195/0x470 [ 1443.270724] Modules linked in: [ 1443.271506] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1443.272434] [ 1443.273231] ? lock_downgrade+0x6d0/0x6d0 [ 1443.273248] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1443.274920] ---[ end trace 094c3833c26ec773 ]--- [ 1443.275330] ? wait_for_completion_io+0x270/0x270 [ 1443.276258] RIP: 0010:__io_queue_sqe+0x69f/0xa60 [ 1443.276928] ? rcu_read_lock_any_held+0x75/0xa0 [ 1443.276939] ? vfs_write+0x354/0xa70 [ 1443.276951] ? fput_many+0x2f/0x1a0 [ 1443.276967] ? ksys_write+0x1a9/0x260 [ 1443.277833] Code: 0f 85 24 03 00 00 48 8b 3d d6 8a da 02 ba 48 00 00 00 be 20 0a 00 00 e8 cf ce 7d ff 48 8d 78 14 49 89 c5 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 1443.278306] __x64_sys_sendmmsg+0x99/0x100 [ 1443.279757] RSP: 0018:ffff888048aa7b28 EFLAGS: 00010213 [ 1443.280166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.280185] do_syscall_64+0x33/0x40 [ 1443.280855] [ 1443.281321] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1443.281648] RAX: 0000000000000002 RBX: 1ffff11009154f6b RCX: 0000000000000000 [ 1443.282099] RIP: 0033:0x7f6639ba0b19 [ 1443.282115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1443.282121] RSP: 002b:00007f6637116188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1443.282139] RAX: ffffffffffffffda RBX: 00007f6639cb3f60 RCX: 00007f6639ba0b19 [ 1443.283120] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000014 [ 1443.283609] RDX: 000000000000002f RSI: 0000000020004d00 RDI: 0000000000000004 [ 1443.283621] RBP: 00007f66371161d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.284602] RBP: ffff88801d10a640 R08: 0000000000000000 R09: ffffffff8509e133 [ 1443.285096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.285102] R13: 00007ffdf756f66f R14: 00007f6637116300 R15: 0000000000022000 [ 1443.314450] R10: fffffbfff0a13c26 R11: 0000000000000001 R12: dffffc0000000000 [ 1443.315929] R13: 0000000000000000 R14: ffff88801d10a698 R15: ffff88801d10a688 [ 1443.317425] FS: 00007f204aaea700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1443.319098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1443.320286] CR2: 00007f204aae9f78 CR3: 00000000489b8000 CR4: 0000000000350ef0 04:12:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x3, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 1443.324811] FAULT_INJECTION: forcing a failure. [ 1443.324811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1443.326140] CPU: 1 PID: 9712 Comm: syz-executor.3 Tainted: G D 5.10.173 #1 [ 1443.327057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1443.327994] Call Trace: [ 1443.328281] dump_stack+0x107/0x167 [ 1443.328700] should_fail.cold+0x5/0xa [ 1443.329124] _copy_to_user+0x2e/0x180 [ 1443.329548] simple_read_from_buffer+0xcc/0x160 [ 1443.330063] proc_fail_nth_read+0x198/0x230 [ 1443.330539] ? proc_sessionid_read+0x230/0x230 [ 1443.331041] ? security_file_permission+0x24e/0x570 [ 1443.331589] ? perf_trace_initcall_start+0x101/0x380 [ 1443.332149] ? proc_sessionid_read+0x230/0x230 [ 1443.332662] vfs_read+0x228/0x580 [ 1443.333047] ksys_read+0x12d/0x260 [ 1443.333434] ? vfs_write+0xa70/0xa70 [ 1443.333843] ? switch_fpu_return+0x131/0x310 [ 1443.334332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1443.334906] do_syscall_64+0x33/0x40 [ 1443.335318] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1443.335880] RIP: 0033:0x7f7f47c6369c [ 1443.336292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1443.338307] RSP: 002b:00007f7f45226170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1443.339134] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f7f47c6369c [ 1443.340056] RDX: 000000000000000f RSI: 00007f7f452261e0 RDI: 0000000000000005 [ 1443.341091] RBP: 00007f7f452261d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.342108] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 1443.342924] R13: 00007ffc2c2afd0f R14: 00007f7f45226300 R15: 0000000000022000 04:12:29 executing program 4: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:12:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x6000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:29 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x6985) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'HL\x00'}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 04:12:29 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x7000000, 0x42, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) close_range(r0, 0xffffffffffffffff, 0x0) VM DIAGNOSIS: 04:12:29 Registers: info registers vcpu 0 RAX=000000000003cfa0 RBX=0000000000000001 RCX=ffffc90007218000 RDX=0000000000040000 RSI=ffffffff81298f91 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888048aa7770 R8 =0000000000000000 R9 =ffffffff856728cf R10=0000000000000000 R11=0000000000000001 R12=00000000000000c7 R13=0000000000000016 R14=ffff8880463e19c0 R15=0000000000000000 RIP=ffffffff81298f93 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f204aaea700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f204aae9f78 CR3=00000000489b8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ffffffffffffffffffffffffffff0000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000040000 RBX=0000000000000001 RCX=ffffc900007e3000 RDX=0000000000040000 RSI=ffffffff81298f91 RDI=0000000000000001 RBP=0000000000000000 RSP=ffff888048bcee68 R8 =0000000000000000 R9 =ffffffff856728cf R10=0000000000000000 R11=0000000000000001 R12=0000000000000017 R13=0000000000000046 R14=ffff88804a264d40 R15=0000000000000000 RIP=ffffffff81298f93 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6637116700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6bd7a98090 CR3=00000000412fa000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000