972.143751] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.145226] CPU: 1 PID: 26148 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1972.146057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.147068] Call Trace: [ 1972.147409] dump_stack+0x107/0x167 [ 1972.147943] should_fail.cold+0x5/0xa [ 1972.148481] ? create_object.isra.0+0x3a/0xa20 [ 1972.149055] should_failslab+0x5/0x20 [ 1972.149509] kmem_cache_alloc+0x5b/0x310 [ 1972.150001] create_object.isra.0+0x3a/0xa20 [ 1972.150526] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1972.151145] kmem_cache_alloc_node+0x169/0x330 [ 1972.151716] __alloc_skb+0x6d/0x5b0 [ 1972.152161] __ip_append_data+0x2930/0x3310 [ 1972.152694] ? check_irq_usage+0xcd0/0xcd0 [ 1972.153200] ? ip_frag_init+0x350/0x350 [ 1972.153675] ? ip_finish_output+0x330/0x330 [ 1972.154182] ? lock_downgrade+0x6d0/0x6d0 [ 1972.154669] ? do_raw_spin_lock+0x121/0x260 [ 1972.155170] ? ip_frag_init+0x350/0x350 [ 1972.155697] ip_append_data+0x114/0x1a0 [ 1972.156176] udp_sendmsg+0x8a7/0x2170 [ 1972.156694] ? mark_lock+0xf5/0x2df0 [ 1972.157167] ? ip_frag_init+0x350/0x350 [ 1972.157678] ? mark_lock+0xf5/0x2df0 [ 1972.158144] ? perf_trace_lock+0xac/0x490 [ 1972.158659] ? udp_setsockopt+0xc0/0xc0 [ 1972.159142] ? mark_lock+0xf5/0x2df0 [ 1972.159642] ? __lockdep_reset_lock+0x180/0x180 [ 1972.160246] ? mark_lock+0xf5/0x2df0 [ 1972.160759] ? mark_lock+0xf5/0x2df0 [ 1972.161213] ? lock_chain_count+0x20/0x20 [ 1972.161726] ? __lock_acquire+0xbb1/0x5b00 [ 1972.162265] ? lock_chain_count+0x20/0x20 [ 1972.162772] ? perf_trace_lock+0xac/0x490 [ 1972.163286] ? __lockdep_reset_lock+0x180/0x180 [ 1972.163884] udpv6_sendmsg+0x1bed/0x2af0 [ 1972.164464] ? udp_v6_push_pending_frames+0x360/0x360 [ 1972.165237] ? mark_lock+0xf5/0x2df0 [ 1972.165783] ? lock_acquire+0x197/0x470 [ 1972.166374] ? find_held_lock+0x2c/0x110 [ 1972.166981] ? __might_fault+0xd3/0x180 [ 1972.167563] ? lock_downgrade+0x6d0/0x6d0 [ 1972.168173] ? lock_downgrade+0x6d0/0x6d0 [ 1972.168821] ? sock_has_perm+0x1ea/0x280 [ 1972.169423] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1972.170187] ? _copy_from_user+0xfb/0x1b0 [ 1972.170811] ? __import_iovec+0x458/0x590 [ 1972.171421] ? udp_v6_push_pending_frames+0x360/0x360 [ 1972.172171] inet6_sendmsg+0x105/0x140 [ 1972.172740] ? inet6_compat_ioctl+0x320/0x320 [ 1972.173290] __sock_sendmsg+0xf2/0x190 [ 1972.173834] ____sys_sendmsg+0x70d/0x870 [ 1972.174389] ? sock_write_iter+0x3d0/0x3d0 [ 1972.175021] ? do_recvmmsg+0x6d0/0x6d0 [ 1972.175549] ? perf_trace_lock+0xac/0x490 [ 1972.176076] ? __lockdep_reset_lock+0x180/0x180 [ 1972.176686] ? perf_trace_lock+0xac/0x490 [ 1972.177199] ___sys_sendmsg+0xf3/0x170 [ 1972.177687] ? sendmsg_copy_msghdr+0x160/0x160 [ 1972.178254] ? lock_downgrade+0x6d0/0x6d0 [ 1972.178787] ? find_held_lock+0x2c/0x110 [ 1972.179294] ? __fget_files+0x296/0x4c0 [ 1972.179815] ? __fget_light+0xea/0x290 [ 1972.180294] __sys_sendmsg+0xe5/0x1b0 [ 1972.180799] ? __sys_sendmsg_sock+0x40/0x40 [ 1972.181327] ? rcu_read_lock_any_held+0x75/0xa0 [ 1972.181917] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.182580] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1972.183231] ? trace_hardirqs_on+0x5b/0x180 [ 1972.183794] do_syscall_64+0x33/0x40 [ 1972.183806] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1972.183814] RIP: 0033:0x7f9f7e251b19 [ 1972.183827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:15:32 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 14) [ 1972.183833] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.183846] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 1972.183853] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1972.183860] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1972.183866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1972.183874] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 1972.269394] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue 11:15:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1972.357029] FAULT_INJECTION: forcing a failure. [ 1972.357029] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.358378] CPU: 1 PID: 26250 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1972.359142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.360048] Call Trace: [ 1972.360345] dump_stack+0x107/0x167 [ 1972.360769] should_fail.cold+0x5/0xa [ 1972.361187] ? create_object.isra.0+0x3a/0xa20 [ 1972.361699] should_failslab+0x5/0x20 [ 1972.362118] kmem_cache_alloc+0x5b/0x310 [ 1972.362555] create_object.isra.0+0x3a/0xa20 [ 1972.363049] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1972.363608] kmem_cache_alloc_node+0x169/0x330 [ 1972.364115] __alloc_skb+0x6d/0x5b0 [ 1972.364517] __ip_append_data+0x2930/0x3310 [ 1972.365027] ? check_irq_usage+0xcd0/0xcd0 [ 1972.365486] ? ip_frag_init+0x350/0x350 [ 1972.365923] ? ip_finish_output+0x330/0x330 [ 1972.366392] ? lock_downgrade+0x6d0/0x6d0 [ 1972.366842] ? do_raw_spin_lock+0x121/0x260 [ 1972.367321] ? ip_frag_init+0x350/0x350 [ 1972.367770] ip_append_data+0x114/0x1a0 [ 1972.368235] udp_sendmsg+0x8a7/0x2170 [ 1972.368665] ? mark_lock+0xf5/0x2df0 [ 1972.369089] ? ip_frag_init+0x350/0x350 [ 1972.369543] ? mark_lock+0xf5/0x2df0 [ 1972.369963] ? perf_trace_lock+0xac/0x490 [ 1972.370432] ? udp_setsockopt+0xc0/0xc0 [ 1972.370873] ? mark_lock+0xf5/0x2df0 [ 1972.371287] ? __lockdep_reset_lock+0x180/0x180 [ 1972.371797] ? mark_lock+0xf5/0x2df0 [ 1972.372226] ? mark_lock+0xf5/0x2df0 [ 1972.372631] ? lock_chain_count+0x20/0x20 [ 1972.373104] ? __lock_acquire+0xbb1/0x5b00 [ 1972.373562] ? lock_chain_count+0x20/0x20 [ 1972.374038] ? perf_trace_lock+0xac/0x490 [ 1972.374488] ? __lockdep_reset_lock+0x180/0x180 [ 1972.375016] udpv6_sendmsg+0x1bed/0x2af0 [ 1972.375486] ? udp_v6_push_pending_frames+0x360/0x360 [ 1972.376076] ? mark_lock+0xf5/0x2df0 [ 1972.376491] ? lock_acquire+0x197/0x470 [ 1972.376942] ? find_held_lock+0x2c/0x110 [ 1972.377391] ? __might_fault+0xd3/0x180 [ 1972.377842] ? lock_downgrade+0x6d0/0x6d0 [ 1972.378303] ? lock_downgrade+0x6d0/0x6d0 [ 1972.378771] ? sock_has_perm+0x1ea/0x280 [ 1972.379231] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1972.379804] ? _copy_from_user+0xfb/0x1b0 [ 1972.380272] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1972.380895] ? trace_hardirqs_on+0x5b/0x180 [ 1972.381379] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1972.381980] ? udp_v6_push_pending_frames+0x360/0x360 [ 1972.382563] inet6_sendmsg+0x105/0x140 [ 1972.383005] ? inet6_compat_ioctl+0x320/0x320 [ 1972.383505] __sock_sendmsg+0xf2/0x190 [ 1972.383955] ____sys_sendmsg+0x70d/0x870 [ 1972.384402] ? sock_write_iter+0x3d0/0x3d0 [ 1972.384901] ? do_recvmmsg+0x6d0/0x6d0 [ 1972.385323] ? perf_trace_lock+0xac/0x490 [ 1972.385799] ? __lockdep_reset_lock+0x180/0x180 [ 1972.386298] ? perf_trace_lock+0xac/0x490 [ 1972.386765] ___sys_sendmsg+0xf3/0x170 [ 1972.387200] ? sendmsg_copy_msghdr+0x160/0x160 [ 1972.387715] ? lock_downgrade+0x6d0/0x6d0 [ 1972.388175] ? find_held_lock+0x2c/0x110 [ 1972.388637] ? __fget_files+0x296/0x4c0 [ 1972.389089] ? __fget_light+0xea/0x290 [ 1972.389521] __sys_sendmsg+0xe5/0x1b0 [ 1972.389952] ? __sys_sendmsg_sock+0x40/0x40 [ 1972.390445] ? rcu_read_lock_any_held+0x75/0xa0 [ 1972.390972] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.391558] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1972.392121] ? trace_hardirqs_on+0x5b/0x180 [ 1972.392621] do_syscall_64+0x33/0x40 [ 1972.393039] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1972.393608] RIP: 0033:0x7f9f7e251b19 [ 1972.394031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.396074] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1972.396942] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 1972.397747] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1972.398548] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1972.399338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1972.400138] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:15:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfe, r0, 0x0}]) 11:15:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:49 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x82801) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000000)=0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="001dabe0d4dc03000000000000008b2428de4d72b89aeddb2a530000000000000000000c3f089694ed90fa7c43", 0x2d}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000140)={0x0, r4, 0x1f, 0x1ff, 0xff, 0xfff}) 11:15:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 15) 11:15:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:15:49 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:15:49 executing program 0: r0 = perf_event_open(&(0x7f0000001100)={0x0, 0x80, 0xff, 0x0, 0x9, 0x0, 0x0, 0x4307, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20200, 0x9, 0x1a90000, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x676}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') pidfd_open(0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@posixacl}, {@loose}, {@version_u}, {@dfltgid}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001980), 0x60080, 0x0) r6 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r6, 0x4eae, 0x0, 0x0, 0x0, 0x0) r7 = syz_mount_image$tmpfs(&(0x7f00000019c0), &(0x7f0000001a00)='./file0\x00', 0x6, 0x5, &(0x7f0000001d00)=[{&(0x7f0000001a40)="2166b7c4e3b315c5a04726d3d4195a1f5c50b877587e15719128cc112b04a81850883149f3db913973530b12ed087bc6e722bb1f8b59d52eb897b0f812777cdbcbb03504eedfa8a8c793c295c785a1228ab21cf286e2990b17a5a92f97489d668183b8c716a787d3c0197409c1e6b6d35373be3a9b9ce836d1ec24bfa8f6a617bcf0bbe140186370d1ebb6ebf89dd0544a9ae58b88a188e91ac55c82251b497a202a861c5f52f8dbc4199f3aa5c737067069a3e4d4d3f79922", 0xb9, 0x20}, {&(0x7f0000001b00)="ea95516f0c2680b8898838d80a93b7271bde759f17551045ada18bcf25afd18302bcb3fcafcbf08a688c096e38c1f4f27f31de328b0774463e24ae7c774a91431c6835360f1c454195286515aa18f28b109ad2311b148a57c4c64eb5d5ab8dcd3131c2", 0x63, 0xffffffffffffffff}, {&(0x7f0000001b80)="4c6bf1ef0f7066a11000c1c61eed316305f76746f8f702e85fd6608867c33fb9fcb8e9c7d4d511c19c7a39e9ba0bc5f5f5d80693f1eb0615580cbf35658ecb24d5dcf26f0b2d0707d175b4174f0369d095092c967ca75b26d872cf8752719e8ab5b1e6c3e5f1187ac9653bd85098fa2cd7e85d660c03fd09e42bf651e36af15fb2fd3c5a47ccb212371c87232eec4e47ba924ebf1dd7711f327857f20251fa", 0x9f, 0xfff}, {&(0x7f0000001c40)="559211ebbf5c4152f5a21b3aa3f6335c9a8051418fb157c75d5062185cf13b9e60fe2ae61cb5a1892867d3fd4eff92cc00cb4d39dae29ca0f1c244ae4edacb3d9781e4fec6395ee34944b3d92adf21801107b408", 0x54, 0x3}, {&(0x7f0000001cc0)="b46fef91ff5877917bae9b3f38cb1e63b9b64aa2d4ed364975e7f907dafe0c14fefc1430", 0x24, 0xa00000000}], 0x42006, &(0x7f0000001d80)={[{@huge_advise}, {@huge_advise}, {@huge_never}, {@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x36, 0x32, 0x39]}}}}, {@nr_inodes={'nr_inodes', 0x3d, [0x31, 0x35, 0x25, 0x68, 0x2d, 0x70, 0x2d, 0x6b, 0x2d, 0x6d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x38, 0x34, 0x33, 0x67, 0x37, 0x34]}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'net/fib_trie\x00'}}]}) r8 = syz_io_uring_setup(0x5, &(0x7f00000015c0)={0x0, 0x36ca, 0x0, 0x0, 0x115}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r8, 0x4eae, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001f40)=[{{&(0x7f0000001080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000001180)="521f2ef7922e5f174b302c32babda117b1d91ac500a8322e78e355a713175510b157e41134e20ebb06b3f0f1103366f6f370274d0c9bda1209d421b220461583977dda2a2b7d004c3cee215091399d2b44d0b1c5178478a1af58f4be4d5b59961f6cde41e330215ef52da105c7266d3606c77062e229c2b1c2688131d4ef6d85a963ff32dbdd83febc6bbdb6a13e22d3b69197a04037de6cd26b30bea8ffe18bd40ca3c16f0b667a3fb477b4fd009ef0230f55dceefd3562afae8467fcbb6687d5c47d22d89621a66269b74558875b645cac9284c1821ccd1c2da57ac2832576bcd11feb53a4d0b5ae4f2f065127347673c2f42e7886a4", 0xf7}, {&(0x7f0000001280)="6e61889ee8654f578f7cb11cddb5f6cc04362abf40d21950cc1043eb680f489b570c617f45353668663b7089ab51a5b8610553384e7f3c74ef513b00d4fbf69330b94454b5fe2775a26f39c74c7a3972765d3a8f969a7d8d313305c6b40bc728475c7eca7f5c6e9d", 0x68}, {&(0x7f0000001300)="cf060f303b3384a6e2c4cfe720660caeb73d29c3bbf2f8a593584c4d5b7cecd49ef2bf4bb62d58f65a9a9eb8f563b89b03278c79fa29ab792a8e2e1fa980b1f934775fee9ae4192fca494e65de1f274ebcc99280860b21adb65901e9930668eca4221a6d2efaeb8ce87fe8c09bed59a141aafcc861e91383850038775290310b453b24eb6971487aabfe66119cd9ae42", 0x90}, {&(0x7f00000013c0)="352fad0c6b36b899fc727e301d68b37257481794601a5da51a666e8a3096a0eb2b1ebd706f777253350215e86eb9857da788b42b23d057d53c7bfa7618aa6d670372621ec45b3be2119d0226567d3c3d4707eb6ee229e736de8379bf11d35446f3264147c96586e8baab84c46164dd003cf35a02191fe231358862d0a9c2fe7ef385e3469cfcf27527cc329beebd7243dcb3ac032b0b8a4cbd74a88887afb0fb936c684d9e0cde311b93208f369c50637a9a4bbbe51656d2fed16f973672d526b7e2593274886069bb441f0257701bbec0218cd3481aec5fc959f5e891ae56e482ee5fcedaf96e294cbfcec837", 0xed}, {&(0x7f00000014c0)="6886188b52a659b7c90ff3d169e9b10e901c2719485b36d273b45e48baa90594a2ace3aa0d0926dba8524e6c2d52cb6221dcaf1350c6a2326a98894721513c0254e26416f7cbdccf00c787d76a8a86a1aa4d0276af494613a75c664d1ae95f1cb73379b345f9d2", 0x67}], 0x5, &(0x7f0000001e00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x20, 0x1, 0x1, [r2, r0, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x34, 0x1, 0x1, [r5, r6, r7, r0, r1, r0, r8, r1, r1]}}], 0x120}}], 0x1, 0x1) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) pread64(r2, &(0x7f0000000080)=""/4095, 0xfff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) pread64(r1, 0x0, 0x0, 0x9) 11:15:49 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x7fff}, {&(0x7f0000010100)="000000000000001000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00002100000001002000000010000800003600000af302000400007c", 0x30, 0x1c00}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB]) [ 1989.194835] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 11:15:49 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0xffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x88) lseek(r1, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x400, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(r2, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r1, &(0x7f0000000000)=""/46) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000000000000", @ANYRES32=r3, @ANYBLOB="04000000000000002e2f66696c653100"]) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000080)) open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x9101) sendfile(r1, r3, 0x0, 0x100000001) [ 1989.208123] FAULT_INJECTION: forcing a failure. [ 1989.208123] name failslab, interval 1, probability 0, space 0, times 0 [ 1989.210633] CPU: 1 PID: 26298 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1989.212056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1989.212329] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 1989.213790] Call Trace: [ 1989.213814] dump_stack+0x107/0x167 [ 1989.213841] should_fail.cold+0x5/0xa [ 1989.216515] ? create_object.isra.0+0x3a/0xa20 [ 1989.217468] should_failslab+0x5/0x20 [ 1989.218243] kmem_cache_alloc+0x5b/0x310 [ 1989.219085] create_object.isra.0+0x3a/0xa20 [ 1989.219978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1989.221040] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1989.222061] ? __ip_append_data+0x2930/0x3310 [ 1989.222983] __alloc_skb+0xb1/0x5b0 [ 1989.223733] __ip_append_data+0x2930/0x3310 [ 1989.224619] ? check_irq_usage+0xcd0/0xcd0 [ 1989.225499] ? ip_frag_init+0x350/0x350 [ 1989.226342] ? ip_finish_output+0x330/0x330 [ 1989.227219] ? lock_downgrade+0x6d0/0x6d0 [ 1989.228058] ? do_raw_spin_lock+0x121/0x260 [ 1989.228942] ? ip_frag_init+0x350/0x350 [ 1989.229742] ip_append_data+0x114/0x1a0 [ 1989.230553] udp_sendmsg+0x8a7/0x2170 [ 1989.231339] ? mark_lock+0xf5/0x2df0 [ 1989.232103] ? ip_frag_init+0x350/0x350 [ 1989.232924] ? mark_lock+0xf5/0x2df0 [ 1989.233687] ? perf_trace_lock+0xac/0x490 [ 1989.234540] ? udp_setsockopt+0xc0/0xc0 [ 1989.235367] ? mark_lock+0xf5/0x2df0 [ 1989.236121] ? __lockdep_reset_lock+0x180/0x180 [ 1989.237094] ? mark_lock+0xf5/0x2df0 [ 1989.237855] ? mark_lock+0xf5/0x2df0 [ 1989.238618] ? lock_chain_count+0x20/0x20 [ 1989.239451] ? __lock_acquire+0xbb1/0x5b00 [ 1989.240307] ? lock_chain_count+0x20/0x20 [ 1989.241170] ? perf_trace_lock+0xac/0x490 [ 1989.242024] ? __lockdep_reset_lock+0x180/0x180 [ 1989.242991] udpv6_sendmsg+0x1bed/0x2af0 [ 1989.243829] ? udp_v6_push_pending_frames+0x360/0x360 [ 1989.244895] ? mark_lock+0xf5/0x2df0 [ 1989.245653] ? lock_acquire+0x197/0x470 [ 1989.246452] ? find_held_lock+0x2c/0x110 [ 1989.247275] ? __might_fault+0xd3/0x180 [ 1989.248084] ? lock_downgrade+0x6d0/0x6d0 [ 1989.248946] ? lock_downgrade+0x6d0/0x6d0 [ 1989.249792] ? sock_has_perm+0x1ea/0x280 [ 1989.250616] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1989.251660] ? _copy_from_user+0xfb/0x1b0 [ 1989.252509] ? __import_iovec+0x458/0x590 [ 1989.253375] ? udp_v6_push_pending_frames+0x360/0x360 [ 1989.254425] inet6_sendmsg+0x105/0x140 [ 1989.255214] ? inet6_compat_ioctl+0x320/0x320 [ 1989.256115] __sock_sendmsg+0xf2/0x190 [ 1989.256919] ____sys_sendmsg+0x70d/0x870 [ 1989.257741] ? sock_write_iter+0x3d0/0x3d0 [ 1989.258589] ? do_recvmmsg+0x6d0/0x6d0 [ 1989.259373] ? perf_trace_lock+0xac/0x490 [ 1989.260221] ? __lockdep_reset_lock+0x180/0x180 [ 1989.261161] ? perf_trace_lock+0xac/0x490 [ 1989.262008] ___sys_sendmsg+0xf3/0x170 [ 1989.262800] ? sendmsg_copy_msghdr+0x160/0x160 [ 1989.263730] ? lock_downgrade+0x6d0/0x6d0 [ 1989.264569] ? find_held_lock+0x2c/0x110 [ 1989.265418] ? __fget_files+0x296/0x4c0 [ 1989.266232] ? __fget_light+0xea/0x290 [ 1989.267030] __sys_sendmsg+0xe5/0x1b0 [ 1989.267799] ? __sys_sendmsg_sock+0x40/0x40 [ 1989.268667] ? rcu_read_lock_any_held+0x75/0xa0 [ 1989.269636] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1989.270690] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1989.271726] ? trace_hardirqs_on+0x5b/0x180 [ 1989.272614] do_syscall_64+0x33/0x40 [ 1989.273370] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1989.274403] RIP: 0033:0x7f9f7e251b19 [ 1989.275156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1989.278915] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1989.280477] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 1989.281939] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1989.283381] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1989.284843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1989.286301] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:15:49 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000000c0)=0x7, 0x1) setgroups(0x4000000000000356, &(0x7f0000000380)) ftruncate(r0, 0x426) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000005380)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00./file\x00']) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x400000, 0x111) r3 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000066c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x20021102}, 0xc, &(0x7f0000006680)={&(0x7f0000005400)={0x124c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x10a0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1d050c18540c10e2f8ee825b0a01b62078ea943ad1ace13e65cb5a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x106}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "9dcc5e3ab1073f39ec21804e7e08891bf5643fa4a1c7750a"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'bond_slave_0\x00'}}]}]}, 0x124c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x1, 0x82, 0x3, 0x81, 0x0, 0x9, 0x81280, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10002, 0x3ff, 0x1, 0x7, 0x3, 0x10000, 0x5, 0x0, 0x3f00000, 0x0, 0xdbf0}, r4, 0x3, r0, 0x3) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x3f, 0x40, 0x27, 0x0, 0x3ff, 0x1100, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x4, 0x6}, 0x15201, 0x7, 0x5, 0x7, 0x81, 0x115, 0x8, 0x0, 0x2, 0x0, 0xffff}, r4, 0x7, r0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x13c, 0x1e, 0x8, 0x70bd2a, 0x25dfdbff, {0x18}, [@nested={0x127, 0x4b, 0x0, 0x1, [@typed={0xc, 0x1e, 0x0, 0x0, @u64=0x3f}, @generic="8c84483ebd76979e4bf8706313b2b6c971ca715956c3fa9cf138b05362c62234432e4139403c27113353b7286c6fe84e6f20f37b32970605a8615fe0a57e37b0d4496334015683f12ce4b8735a488f2fba589cc04450e69b6ce6a5d3606d951804214ab34c4fa5203e196ee82a71386a73854f3575f0789ee4fdad8b010e88efbe4e76c25801799b76215090395a8a598d0557ea3dd245669e9e25bc4ccc57ecdbb9b7544aa23687353e7e8c91cde4ff10a3bd250176260143835e3a5b1f4a803656357283", @generic="be6a6709f3c6fb11956f2e1dbc3141bc66753efe29f22b0c3d3e778f565fa112eb0227fab6b7198f933d26c049344823c4467356dd6c86363cf33c4f2c6d14eb5f718ff6493409ed57b722deb074b4a81d98"]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4040) [ 1989.341416] sg_write: data in/out 253104/8 bytes for SCSI command 0x3f-- guessing data in; [ 1989.341416] program syz-executor.2 not setting count and/or reply_len properly 11:15:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1989.489520] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated 11:15:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1989.501486] EXT4-fs (loop4): get root inode failed [ 1989.502349] EXT4-fs (loop4): mount failed 11:15:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x300, r0, 0x0}]) 11:15:49 executing program 7: r0 = syz_io_uring_complete(0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) r2 = syz_io_uring_setup(0x18da, &(0x7f0000000440), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000004c0), 0x0) syz_io_uring_setup(0x7adf, &(0x7f0000000000)={0x0, 0x4bfa, 0x0, 0x0, 0x179, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x5378, &(0x7f0000000640)={0x0, 0xde88, 0x2, 0x0, 0x2, 0x0, r0}) 11:15:49 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 16) 11:15:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r1 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r1, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1) getdents(r0, &(0x7f0000000340)=""/4096, 0x1000) getdents(r0, 0x0, 0x0) 11:15:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x500, r0, 0x0}]) 11:15:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1989.627906] FAULT_INJECTION: forcing a failure. [ 1989.627906] name failslab, interval 1, probability 0, space 0, times 0 [ 1989.629176] CPU: 0 PID: 26429 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 1989.629932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1989.630837] Call Trace: [ 1989.631132] dump_stack+0x107/0x167 [ 1989.631538] should_fail.cold+0x5/0xa [ 1989.631957] ? __alloc_skb+0x6d/0x5b0 [ 1989.632385] should_failslab+0x5/0x20 [ 1989.632801] kmem_cache_alloc_node+0x55/0x330 [ 1989.633299] __alloc_skb+0x6d/0x5b0 [ 1989.633707] __ip_append_data+0x2930/0x3310 [ 1989.634185] ? check_irq_usage+0xcd0/0xcd0 [ 1989.634648] ? ip_frag_init+0x350/0x350 [ 1989.635094] ? ip_finish_output+0x330/0x330 [ 1989.635567] ? lock_downgrade+0x6d0/0x6d0 [ 1989.636022] ? do_raw_spin_lock+0x121/0x260 [ 1989.636506] ? ip_frag_init+0x350/0x350 [ 1989.636945] ip_append_data+0x114/0x1a0 [ 1989.637386] udp_sendmsg+0x8a7/0x2170 [ 1989.637804] ? mark_lock+0xf5/0x2df0 [ 1989.638215] ? ip_frag_init+0x350/0x350 [ 1989.638664] ? mark_lock+0xf5/0x2df0 [ 1989.639073] ? perf_trace_lock+0xac/0x490 [ 1989.639521] ? udp_setsockopt+0xc0/0xc0 [ 1989.639951] ? mark_lock+0xf5/0x2df0 [ 1989.640357] ? __lockdep_reset_lock+0x180/0x180 [ 1989.640878] ? mark_lock+0xf5/0x2df0 [ 1989.641284] ? mark_lock+0xf5/0x2df0 [ 1989.641694] ? lock_chain_count+0x20/0x20 [ 1989.642145] ? __lock_acquire+0xbb1/0x5b00 [ 1989.642610] ? lock_chain_count+0x20/0x20 [ 1989.643064] ? perf_trace_lock+0xac/0x490 [ 1989.643522] ? __lockdep_reset_lock+0x180/0x180 [ 1989.644030] udpv6_sendmsg+0x1bed/0x2af0 [ 1989.644495] ? udp_v6_push_pending_frames+0x360/0x360 [ 1989.645066] ? mark_lock+0xf5/0x2df0 [ 1989.645477] ? lock_acquire+0x197/0x470 [ 1989.645913] ? find_held_lock+0x2c/0x110 [ 1989.646354] ? __might_fault+0xd3/0x180 [ 1989.646786] ? lock_downgrade+0x6d0/0x6d0 [ 1989.647247] ? lock_downgrade+0x6d0/0x6d0 [ 1989.647704] ? sock_has_perm+0x1ea/0x280 [ 1989.648146] ? selinux_socket_post_create+0x7f0/0x7f0 [ 1989.648709] ? _copy_from_user+0xfb/0x1b0 [ 1989.649183] ? __import_iovec+0x458/0x590 [ 1989.649658] ? udp_v6_push_pending_frames+0x360/0x360 [ 1989.650246] inet6_sendmsg+0x105/0x140 [ 1989.650697] ? inet6_compat_ioctl+0x320/0x320 [ 1989.651208] __sock_sendmsg+0xf2/0x190 [ 1989.651653] ____sys_sendmsg+0x70d/0x870 [ 1989.652095] ? sock_write_iter+0x3d0/0x3d0 [ 1989.652570] ? do_recvmmsg+0x6d0/0x6d0 [ 1989.652997] ? perf_trace_lock+0xac/0x490 [ 1989.653475] ? __lockdep_reset_lock+0x180/0x180 [ 1989.654002] ? perf_trace_lock+0xac/0x490 [ 1989.654479] ___sys_sendmsg+0xf3/0x170 [ 1989.654929] ? sendmsg_copy_msghdr+0x160/0x160 [ 1989.655449] ? lock_downgrade+0x6d0/0x6d0 [ 1989.655923] ? find_held_lock+0x2c/0x110 [ 1989.656368] ? __fget_files+0x296/0x4c0 [ 1989.656839] ? __fget_light+0xea/0x290 [ 1989.657273] __sys_sendmsg+0xe5/0x1b0 [ 1989.657711] ? __sys_sendmsg_sock+0x40/0x40 [ 1989.658199] ? rcu_read_lock_any_held+0x75/0xa0 [ 1989.658733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1989.659329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1989.659920] ? trace_hardirqs_on+0x5b/0x180 [ 1989.660412] do_syscall_64+0x33/0x40 [ 1989.660837] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 1989.661420] RIP: 0033:0x7f9f7e251b19 [ 1989.661845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1989.663837] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1989.664697] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 1989.665516] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 1989.666325] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 1989.667143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1989.667954] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:15:49 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:15:49 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, &(0x7f0000000180)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:15:49 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:15:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x700, r0, 0x0}]) [ 1989.792122] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 1989.796654] EXT4-fs (loop4): get root inode failed [ 1989.797201] EXT4-fs (loop4): mount failed 11:16:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xf00, r0, 0x0}]) 11:16:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x6c, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x18, 0x7, 0x1, 0x0, "e50afbcbb19e196ac15be644c01f55911c9a7888"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r1 = getpid() pidfd_open(r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x4}, 0x80000001) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:16:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 17) 11:16:06 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:16:06 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f00000000c0)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x28) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d779fc936e53af5fa9f35019444ee03314416d177447d193e71d85327079e53fdbf8edca6c90ea5a8b8f7cf4867f5eab2a979eff142c1bc852c9f3d002c9f11a6687e78b00ba2b236151c37167ee9be75acbb2d341"], 0x14}}, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000380), 0x8, 0x800) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="64666c616c6c6f63b41b"]) fcntl$setstatus(r0, 0x4, 0x400) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r1, 0x10000000) dup(r2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt(r3, 0x8, 0x4, &(0x7f0000000180)="b9cf1edb1766d2510c827d534693edf8a9e44788810215b7c3047383e3e618fedab9ebefc6a4b738e7ed974d510e93", 0x2f) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200), 0x3) 11:16:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2006.631973] FAULT_INJECTION: forcing a failure. [ 2006.631973] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.634415] CPU: 1 PID: 26462 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2006.635865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.635872] Call Trace: [ 2006.635896] dump_stack+0x107/0x167 [ 2006.635921] should_fail.cold+0x5/0xa [ 2006.635942] ? create_object.isra.0+0x3a/0xa20 [ 2006.635964] should_failslab+0x5/0x20 [ 2006.635983] kmem_cache_alloc+0x5b/0x310 [ 2006.636007] create_object.isra.0+0x3a/0xa20 [ 2006.636027] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.636052] kmem_cache_alloc_node+0x169/0x330 [ 2006.636078] __alloc_skb+0x6d/0x5b0 [ 2006.636104] __ip_append_data+0x2930/0x3310 [ 2006.636136] ? check_irq_usage+0xcd0/0xcd0 [ 2006.636156] ? ip_frag_init+0x350/0x350 [ 2006.636187] ? ip_finish_output+0x330/0x330 [ 2006.636208] ? lock_downgrade+0x6d0/0x6d0 [ 2006.636229] ? do_raw_spin_lock+0x121/0x260 [ 2006.636249] ? ip_frag_init+0x350/0x350 [ 2006.636266] ip_append_data+0x114/0x1a0 [ 2006.636298] udp_sendmsg+0x8a7/0x2170 [ 2006.636319] ? mark_lock+0xf5/0x2df0 [ 2006.636339] ? ip_frag_init+0x350/0x350 [ 2006.636360] ? mark_lock+0xf5/0x2df0 [ 2006.636379] ? perf_trace_lock+0xac/0x490 [ 2006.636397] ? udp_setsockopt+0xc0/0xc0 [ 2006.636415] ? mark_lock+0xf5/0x2df0 [ 2006.636434] ? __lockdep_reset_lock+0x180/0x180 [ 2006.636460] ? mark_lock+0xf5/0x2df0 [ 2006.636482] ? mark_lock+0xf5/0x2df0 [ 2006.636501] ? lock_chain_count+0x20/0x20 [ 2006.636520] ? __lock_acquire+0xbb1/0x5b00 [ 2006.636540] ? lock_chain_count+0x20/0x20 [ 2006.636572] ? perf_trace_lock+0xac/0x490 11:16:06 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2006.636591] ? __lockdep_reset_lock+0x180/0x180 11:16:06 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x18, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x2}]}, 0x20}}, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) r3 = getuid() r4 = getpid() pidfd_open(r4, 0x0) r5 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) pidfd_send_signal(r1, 0x8, &(0x7f0000000140)={0x2, 0x10001, 0x9}, 0x0) io_uring_enter(r5, 0x4eae, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1378, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {0x19}, [@nested={0x9f, 0x45, 0x0, 0x1, [@generic="b5490ba20d47c354470c2043c735d450d1b824aa06efc2f5efe79a0d365f5f4f78b1a5f1c2ad0ed80c02efad935bda902701336c419355d28f760073eb4a0471df33e5dab89fa354a61a5d34970635d909bb7b9153f7f4e6f972eaf88eeee329e5fbbeb97285c78d0b64316f0527ff0e900d1779868b4f0b6f8d64f580793b137604df77721e4d8b9e42712a1f5669962ff7c8", @typed={0x8, 0x2d, 0x0, 0x0, @fd=r2}]}, @nested={0x12c, 0x69, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @uid=r3}, @generic="451585d5aae468534e3ba8455d1629ec546fed62616b336d3fe2ee2b0411307a74fd1636ced083d36a2099bbbb89413aa5107f415b32b24dd0cc73d45ac4452083ed764bbdbb6a74fb3092faf17a58426bb71248cb142b2f", @generic="1ca9dd7b4fd3a9edefdd3498d8145effcdc196ef269975e192c8e7ed656f31b420652f505867672e3bb9f9107be6648f7b5062ccf1dcc9dda970166c39eb0f7c82b9f7178fc9fb3c5fa9cf4cc274c206ac535ceef58f68e9f3d6fe8c12ec5f7e30a7796e9fcca32f1e10faa414eaec27518957b09bfa19b4dbe34cee3f", @typed={0x8, 0x7a, 0x0, 0x0, @uid=0xee00}, @generic="3a54a544bb9cfa7812abf9", @typed={0x14, 0x1f, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x63, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x62, 0x0, 0x0, @uid}, @typed={0xc, 0x94, 0x0, 0x0, @u64=0x53}]}, @nested={0x196, 0x28, 0x0, 0x1, [@generic="134792e118b7fa450948af46c25951d1465d0635eff1c921ea94b181189c6c17d82cc0b21cb786cbb9622e21f8", @generic="ec2d9f49436f49444d14e716c57d7fe156b1a4a7506f8aebcf6178731befce773fa6957f6976b79f964884ca9ee7b628175a214ea64d54e13de2cb1cbf0df88011ef6df497c1396caf90a72440520665c1bd541648c39c85f7d570bf74da1cfef33ae179a497867c49ffd5a04ba4eafa312608ab21e44c79f6ee9166248854be09e323a323df5503bd9b71d61f912dc2fff1", @generic="d316e77f63e2ba4f08db6a49f60db8e03f35da4b431b595707587fdd92ad67ed79d9e2d7c58c9d6961e0a52d85381d7421b23dcedbea5ac7950b6bf724355cb3f7db624ee8e297bbccf10544c83812504086d09d8ca4a82da75ba395db3be42bbbf6be4cd42240b7a52d7239940cbd42890641c2d44d15042365264b94bd56da2797f0bf05d5", @typed={0x8, 0x1b, 0x0, 0x0, @u32=0xffffff81}, @generic="7af7e6817cacbaa1aca90dbc2282fcb993c5fc9865982cd37a37b8577d6b4414acfd2cf777d9d658dbb4511f306a2e77a912b72e6b80bd108f16ad4d16f474876b6451f639"]}, @generic="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"]}, 0x1378}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014) [ 2006.636620] udpv6_sendmsg+0x1bed/0x2af0 [ 2006.636655] ? udp_v6_push_pending_frames+0x360/0x360 11:16:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 18) [ 2006.636682] ? mark_lock+0xf5/0x2df0 [ 2006.636707] ? lock_acquire+0x197/0x470 [ 2006.636724] ? find_held_lock+0x2c/0x110 [ 2006.636749] ? __might_fault+0xd3/0x180 [ 2006.636768] ? lock_downgrade+0x6d0/0x6d0 [ 2006.636791] ? lock_downgrade+0x6d0/0x6d0 [ 2006.636816] ? sock_has_perm+0x1ea/0x280 [ 2006.636838] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2006.636863] ? _copy_from_user+0xfb/0x1b0 [ 2006.636895] ? __import_iovec+0x458/0x590 [ 2006.636914] ? udp_v6_push_pending_frames+0x360/0x360 11:16:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2006.636938] inet6_sendmsg+0x105/0x140 [ 2006.636957] ? inet6_compat_ioctl+0x320/0x320 [ 2006.636974] __sock_sendmsg+0xf2/0x190 [ 2006.636994] ____sys_sendmsg+0x70d/0x870 11:16:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2006.637015] ? sock_write_iter+0x3d0/0x3d0 [ 2006.637055] ? do_recvmmsg+0x6d0/0x6d0 11:16:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 19) [ 2006.637074] ? perf_trace_lock+0xac/0x490 [ 2006.637100] ? __lockdep_reset_lock+0x180/0x180 [ 2006.637115] ? perf_trace_lock+0xac/0x490 11:16:06 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) [ 2006.637141] ___sys_sendmsg+0xf3/0x170 [ 2006.637163] ? sendmsg_copy_msghdr+0x160/0x160 [ 2006.637188] ? lock_downgrade+0x6d0/0x6d0 [ 2006.637210] ? find_held_lock+0x2c/0x110 [ 2006.637240] ? __fget_files+0x296/0x4c0 [ 2006.637270] ? __fget_light+0xea/0x290 [ 2006.637297] __sys_sendmsg+0xe5/0x1b0 [ 2006.637316] ? __sys_sendmsg_sock+0x40/0x40 [ 2006.637335] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.637374] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.637392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.637408] ? trace_hardirqs_on+0x5b/0x180 [ 2006.637432] do_syscall_64+0x33/0x40 [ 2006.637450] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2006.637462] RIP: 0033:0x7f9f7e251b19 [ 2006.637483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.637493] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2006.637514] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2006.637526] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2006.637537] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.637548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2006.637560] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2006.645813] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=26470 comm=syz-executor.2 [ 2006.682071] EXT4-fs (loop0): Unrecognized mount option "dflalloc´" or missing value [ 2006.696327] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2006.696652] EXT4-fs (loop4): get root inode failed [ 2006.696662] EXT4-fs (loop4): mount failed [ 2006.801896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26482 comm=syz-executor.7 [ 2006.834418] FAULT_INJECTION: forcing a failure. [ 2006.834418] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.834439] CPU: 1 PID: 26486 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2006.834450] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.834457] Call Trace: [ 2006.834481] dump_stack+0x107/0x167 [ 2006.834506] should_fail.cold+0x5/0xa [ 2006.834528] ? create_object.isra.0+0x3a/0xa20 [ 2006.834556] should_failslab+0x5/0x20 [ 2006.834575] kmem_cache_alloc+0x5b/0x310 [ 2006.834600] create_object.isra.0+0x3a/0xa20 [ 2006.834619] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.834645] kmem_cache_alloc_node+0x169/0x330 [ 2006.834671] __alloc_skb+0x6d/0x5b0 [ 2006.834698] __ip_append_data+0x2930/0x3310 [ 2006.834729] ? check_irq_usage+0xcd0/0xcd0 [ 2006.834749] ? ip_frag_init+0x350/0x350 [ 2006.834779] ? ip_finish_output+0x330/0x330 [ 2006.834801] ? lock_downgrade+0x6d0/0x6d0 [ 2006.834822] ? do_raw_spin_lock+0x121/0x260 [ 2006.834841] ? ip_frag_init+0x350/0x350 [ 2006.834860] ip_append_data+0x114/0x1a0 [ 2006.834891] udp_sendmsg+0x8a7/0x2170 [ 2006.834913] ? mark_lock+0xf5/0x2df0 [ 2006.834932] ? ip_frag_init+0x350/0x350 [ 2006.834954] ? mark_lock+0xf5/0x2df0 [ 2006.834972] ? perf_trace_lock+0xac/0x490 [ 2006.834991] ? udp_setsockopt+0xc0/0xc0 [ 2006.835009] ? mark_lock+0xf5/0x2df0 [ 2006.835028] ? __lockdep_reset_lock+0x180/0x180 [ 2006.835054] ? mark_lock+0xf5/0x2df0 [ 2006.835076] ? mark_lock+0xf5/0x2df0 [ 2006.835095] ? lock_chain_count+0x20/0x20 [ 2006.835114] ? __lock_acquire+0xbb1/0x5b00 [ 2006.835134] ? lock_chain_count+0x20/0x20 [ 2006.835167] ? perf_trace_lock+0xac/0x490 [ 2006.835185] ? __lockdep_reset_lock+0x180/0x180 [ 2006.835214] udpv6_sendmsg+0x1bed/0x2af0 [ 2006.835250] ? udp_v6_push_pending_frames+0x360/0x360 [ 2006.835276] ? mark_lock+0xf5/0x2df0 [ 2006.835301] ? lock_acquire+0x197/0x470 [ 2006.835318] ? find_held_lock+0x2c/0x110 [ 2006.835343] ? __might_fault+0xd3/0x180 [ 2006.835362] ? lock_downgrade+0x6d0/0x6d0 [ 2006.835385] ? lock_downgrade+0x6d0/0x6d0 [ 2006.835410] ? sock_has_perm+0x1ea/0x280 [ 2006.835433] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2006.835456] ? _copy_from_user+0xfb/0x1b0 [ 2006.835488] ? __import_iovec+0x458/0x590 [ 2006.835508] ? udp_v6_push_pending_frames+0x360/0x360 [ 2006.835532] inet6_sendmsg+0x105/0x140 [ 2006.835551] ? inet6_compat_ioctl+0x320/0x320 [ 2006.835568] __sock_sendmsg+0xf2/0x190 [ 2006.835587] ____sys_sendmsg+0x70d/0x870 [ 2006.835609] ? sock_write_iter+0x3d0/0x3d0 [ 2006.835625] ? do_recvmmsg+0x6d0/0x6d0 [ 2006.835644] ? perf_trace_lock+0xac/0x490 [ 2006.835669] ? __lockdep_reset_lock+0x180/0x180 [ 2006.835685] ? perf_trace_lock+0xac/0x490 [ 2006.835710] ___sys_sendmsg+0xf3/0x170 [ 2006.835732] ? sendmsg_copy_msghdr+0x160/0x160 [ 2006.835757] ? lock_downgrade+0x6d0/0x6d0 [ 2006.835779] ? find_held_lock+0x2c/0x110 [ 2006.835809] ? __fget_files+0x296/0x4c0 [ 2006.835839] ? __fget_light+0xea/0x290 [ 2006.835867] __sys_sendmsg+0xe5/0x1b0 [ 2006.835885] ? __sys_sendmsg_sock+0x40/0x40 [ 2006.835903] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.835942] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.835962] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.835977] ? trace_hardirqs_on+0x5b/0x180 [ 2006.836002] do_syscall_64+0x33/0x40 [ 2006.836020] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2006.836034] RIP: 0033:0x7f9f7e251b19 [ 2006.836053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.836064] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2006.836086] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2006.836098] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2006.836109] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.836120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2006.836132] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2006.889225] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2006.889237] EXT4-fs (loop4): group descriptors corrupted! [ 2006.996920] FAULT_INJECTION: forcing a failure. [ 2006.996920] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.996938] CPU: 0 PID: 26496 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2006.996947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2006.996952] Call Trace: [ 2006.996971] dump_stack+0x107/0x167 [ 2006.996991] should_fail.cold+0x5/0xa [ 2006.997010] ? create_object.isra.0+0x3a/0xa20 [ 2006.997027] should_failslab+0x5/0x20 [ 2006.997063] kmem_cache_alloc+0x5b/0x310 [ 2006.997082] create_object.isra.0+0x3a/0xa20 [ 2006.997097] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2006.997116] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2006.997132] ? __ip_append_data+0x2930/0x3310 [ 2006.997152] __alloc_skb+0xb1/0x5b0 [ 2006.997171] __ip_append_data+0x2930/0x3310 [ 2006.997196] ? check_irq_usage+0xcd0/0xcd0 [ 2006.997210] ? ip_frag_init+0x350/0x350 [ 2006.997234] ? ip_finish_output+0x330/0x330 [ 2006.997250] ? lock_downgrade+0x6d0/0x6d0 [ 2006.997266] ? do_raw_spin_lock+0x121/0x260 [ 2006.997281] ? ip_frag_init+0x350/0x350 [ 2006.997294] ip_append_data+0x114/0x1a0 [ 2006.997318] udp_sendmsg+0x8a7/0x2170 [ 2006.997334] ? mark_lock+0xf5/0x2df0 [ 2006.997349] ? ip_frag_init+0x350/0x350 [ 2006.997365] ? mark_lock+0xf5/0x2df0 [ 2006.997379] ? perf_trace_lock+0xac/0x490 [ 2006.997393] ? udp_setsockopt+0xc0/0xc0 [ 2006.997407] ? mark_lock+0xf5/0x2df0 [ 2006.997421] ? __lockdep_reset_lock+0x180/0x180 [ 2006.997440] ? mark_lock+0xf5/0x2df0 [ 2006.997457] ? mark_lock+0xf5/0x2df0 [ 2006.997471] ? lock_chain_count+0x20/0x20 [ 2006.997486] ? __lock_acquire+0xbb1/0x5b00 [ 2006.997501] ? lock_chain_count+0x20/0x20 [ 2006.997525] ? perf_trace_lock+0xac/0x490 [ 2006.997539] ? __lockdep_reset_lock+0x180/0x180 [ 2006.997566] udpv6_sendmsg+0x1bed/0x2af0 [ 2006.997593] ? udp_v6_push_pending_frames+0x360/0x360 [ 2006.997616] ? mark_lock+0xf5/0x2df0 [ 2006.997635] ? lock_acquire+0x197/0x470 [ 2006.997648] ? find_held_lock+0x2c/0x110 [ 2006.997667] ? __might_fault+0xd3/0x180 [ 2006.997681] ? lock_downgrade+0x6d0/0x6d0 [ 2006.997698] ? lock_downgrade+0x6d0/0x6d0 [ 2006.997718] ? sock_has_perm+0x1ea/0x280 [ 2006.997735] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2006.997753] ? _copy_from_user+0xfb/0x1b0 [ 2006.997777] ? __import_iovec+0x458/0x590 [ 2006.997792] ? udp_v6_push_pending_frames+0x360/0x360 [ 2006.997810] inet6_sendmsg+0x105/0x140 [ 2006.997825] ? inet6_compat_ioctl+0x320/0x320 [ 2006.997837] __sock_sendmsg+0xf2/0x190 [ 2006.997853] ____sys_sendmsg+0x70d/0x870 [ 2006.997869] ? sock_write_iter+0x3d0/0x3d0 [ 2006.997881] ? do_recvmmsg+0x6d0/0x6d0 [ 2006.997897] ? perf_trace_lock+0xac/0x490 [ 2006.997916] ? __lockdep_reset_lock+0x180/0x180 [ 2006.997928] ? perf_trace_lock+0xac/0x490 [ 2006.997947] ___sys_sendmsg+0xf3/0x170 [ 2006.997962] ? sendmsg_copy_msghdr+0x160/0x160 [ 2006.997981] ? lock_downgrade+0x6d0/0x6d0 [ 2006.997997] ? find_held_lock+0x2c/0x110 [ 2006.998019] ? __fget_files+0x296/0x4c0 [ 2006.998042] ? __fget_light+0xea/0x290 [ 2006.998062] __sys_sendmsg+0xe5/0x1b0 [ 2006.998076] ? __sys_sendmsg_sock+0x40/0x40 [ 2006.998090] ? rcu_read_lock_any_held+0x75/0xa0 [ 2006.998119] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2006.998134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2006.998146] ? trace_hardirqs_on+0x5b/0x180 [ 2006.998164] do_syscall_64+0x33/0x40 [ 2006.998178] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2006.998187] RIP: 0033:0x7f9f7e251b19 [ 2006.998203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2006.998211] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2006.998227] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2006.998236] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2006.998244] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2006.998252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2006.998261] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2007.118622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=26504 comm=syz-executor.2 11:16:24 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r0, 0x1000003) dup2(r0, r1) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x20000000, 0x200000, 0xfff}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x148, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbf}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x148}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/74, 0x4a}, {&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000400)=""/124, 0x7c}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000540)=""/161, 0xa1}], 0x6, 0xee, 0x1000) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) fcntl$addseals(r3, 0x409, 0x8) fcntl$addseals(r3, 0x409, 0xc) sendfile(r3, r1, &(0x7f0000000100)=0x9, 0x7) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180), 0x10) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000001740)={{0x2, 0x0, @loopback}, {0x0, @link_local}, 0x0, {0x2, 0x0, @multicast2}}) fadvise64(0xffffffffffffffff, 0xfffffffffffffffa, 0x5, 0x4) open(&(0x7f00000000c0)='./file0\x00', 0x2e142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc024, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="2321200000000000000bfd"], 0xb) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000880)={&(0x7f0000000840)=""/17, 0x11, 0x0, 0x101}) 11:16:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2024.006861] FAULT_INJECTION: forcing a failure. 11:16:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x3f00, r0, 0x0}]) 11:16:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 20) [ 2024.006861] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.008540] CPU: 0 PID: 26519 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2024.009327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2024.010262] Call Trace: [ 2024.010570] dump_stack+0x107/0x167 [ 2024.010993] should_fail.cold+0x5/0xa [ 2024.011438] ? __alloc_skb+0x6d/0x5b0 [ 2024.011879] should_failslab+0x5/0x20 [ 2024.012321] kmem_cache_alloc_node+0x55/0x330 [ 2024.012809] __alloc_skb+0x6d/0x5b0 [ 2024.013210] __ip_append_data+0x2930/0x3310 [ 2024.013698] ? check_irq_usage+0xcd0/0xcd0 [ 2024.014158] ? ip_frag_init+0x350/0x350 [ 2024.014594] ? ip_finish_output+0x330/0x330 [ 2024.015061] ? lock_downgrade+0x6d0/0x6d0 [ 2024.015512] ? do_raw_spin_lock+0x121/0x260 [ 2024.015992] ? ip_frag_init+0x350/0x350 [ 2024.016429] ip_append_data+0x114/0x1a0 [ 2024.016890] udp_sendmsg+0x8a7/0x2170 [ 2024.017332] ? mark_lock+0xf5/0x2df0 [ 2024.017763] ? ip_frag_init+0x350/0x350 [ 2024.018215] ? mark_lock+0xf5/0x2df0 [ 2024.018636] ? perf_trace_lock+0xac/0x490 [ 2024.019115] ? udp_setsockopt+0xc0/0xc0 [ 2024.019564] ? mark_lock+0xf5/0x2df0 [ 2024.019989] ? __lockdep_reset_lock+0x180/0x180 [ 2024.020517] ? mark_lock+0xf5/0x2df0 [ 2024.020929] ? mark_lock+0xf5/0x2df0 [ 2024.021368] ? lock_chain_count+0x20/0x20 [ 2024.021837] ? __lock_acquire+0xbb1/0x5b00 [ 2024.022328] ? lock_chain_count+0x20/0x20 [ 2024.022804] ? perf_trace_lock+0xac/0x490 [ 2024.023277] ? __lockdep_reset_lock+0x180/0x180 [ 2024.023809] udpv6_sendmsg+0x1bed/0x2af0 [ 2024.024276] ? udp_v6_push_pending_frames+0x360/0x360 [ 2024.024869] ? mark_lock+0xf5/0x2df0 [ 2024.025306] ? lock_acquire+0x197/0x470 [ 2024.025762] ? find_held_lock+0x2c/0x110 [ 2024.026222] ? __might_fault+0xd3/0x180 [ 2024.026669] ? lock_downgrade+0x6d0/0x6d0 [ 2024.027139] ? lock_downgrade+0x6d0/0x6d0 [ 2024.027616] ? sock_has_perm+0x1ea/0x280 [ 2024.028076] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2024.028658] ? _copy_from_user+0xfb/0x1b0 [ 2024.029130] ? __import_iovec+0x458/0x590 [ 2024.029609] ? udp_v6_push_pending_frames+0x360/0x360 [ 2024.030228] inet6_sendmsg+0x105/0x140 [ 2024.030695] ? inet6_compat_ioctl+0x320/0x320 [ 2024.031218] __sock_sendmsg+0xf2/0x190 [ 2024.031672] ____sys_sendmsg+0x70d/0x870 [ 2024.032151] ? sock_write_iter+0x3d0/0x3d0 [ 2024.032651] ? do_recvmmsg+0x6d0/0x6d0 [ 2024.033116] ? perf_trace_lock+0xac/0x490 [ 2024.033623] ? __lockdep_reset_lock+0x180/0x180 [ 2024.034196] ? perf_trace_lock+0xac/0x490 [ 2024.034709] ___sys_sendmsg+0xf3/0x170 [ 2024.035191] ? sendmsg_copy_msghdr+0x160/0x160 [ 2024.035730] ? lock_downgrade+0x6d0/0x6d0 [ 2024.036220] ? find_held_lock+0x2c/0x110 [ 2024.036709] ? __fget_files+0x296/0x4c0 [ 2024.037184] ? __fget_light+0xea/0x290 [ 2024.037660] __sys_sendmsg+0xe5/0x1b0 [ 2024.038110] ? __sys_sendmsg_sock+0x40/0x40 [ 2024.038620] ? rcu_read_lock_any_held+0x75/0xa0 [ 2024.039179] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2024.039801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2024.040410] ? trace_hardirqs_on+0x5b/0x180 [ 2024.040923] do_syscall_64+0x33/0x40 [ 2024.041370] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2024.041974] RIP: 0033:0x7f9f7e251b19 [ 2024.042388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2024.044568] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.045474] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2024.046274] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2024.047115] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.047916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2024.048756] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:16:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:16:24 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) chroot(&(0x7f0000002800)='./file1\x00') sendfile(r0, r1, 0x0, 0x100000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000000140)=""/42, 0x2a}, {&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000240)=""/127, 0x7f}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/255, 0xff}, {&(0x7f0000002400)=""/17, 0x11}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/178, 0xb2}], 0x9, &(0x7f00000026c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000002780), 0x6e, &(0x7f0000002800), 0x0, &(0x7f0000002840)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}], 0x2, 0x1, 0x0) 11:16:24 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000200)="e300600078af5f6132d8f13ea0aa1f94d2795bf7c94c7aca20adec6a1192fd0f45c6eb5aa724bf3de579214173a6b69c7322229691976530d25f45e0828e8d89ff1af6ad1dc2953d150cec22049709b41f20b0acd5fe6eefd69ca7ae9dad151c01359a831577a163cedf40211e79c5829965fd2ef83c45f16010a9cba86f476697a478723903a3913ebec11131536bbcccb8bc31c51207e80411bed8a083761cb2cd8fb0b9193b17913a3600581ca11a057f2207a5d1dda02f6c4e44bb2b4c2719364097", 0xc4}, {&(0x7f0000000300)="6d8b06012edd4868b23423b98ec65b6f206f4998b000c7348cbae520f2011ce5ba0bbd23d4f537ecd17be1330f3ed18b4b8f55c5620c07e6a0ed653599c8f7035ffa50f4a8462d1d831fc4070b0083f5767247860806133eafe2889e26d68f17f50393d9cb363743cab1d76798d8b2de577ae21aa08782ce7c698f1e9c9dd3ac837afd778fe9d8aefb50fe9a14657b7914e9b14420afffb578924b6c2789a06cb17cf920ba05fe625f3c0499b8dc76e71483e9e1e26ceb515e79a7f73a8dd7ce20afe3f777b50403029fdfabe39acd99c92251", 0xd3}, {0x0}, {&(0x7f0000000400)="aca87a59e17a5a79b19d6983545cb5d096389702b64a2c089d91fbb0fe12c3c4ddaceddbefe5cacf9487f1ed423574046b8c5e6863314d030da725275e40dc9cb4cd8da42b54882287c4809c3d88d2f207a17ff4c37a05438e021d958dc8a6300bafd50f74fa3ab03e622b2fb49227ebf1e45d15388fe4df3b9ec943ced121cd963a658e236082fba92ad1731671c4b0fd0326a3b7f2b3f0f2acba635d4818256f196f448db8ab5c9b8d905c5a5846364eb6be7c298e67ba026ede6ebd46301b7f42", 0xc2}, {&(0x7f0000000500)="094df8588ffad47829dc07b3265ebbb755c5746212926ae7b52fcf558507c466e634f7011cdd7c6c5f5fafc90f1a3cb4278d", 0x32}, {&(0x7f0000000540)="c282a798eb1ec3334991ede55b3782a2143cfd40bcee81401a9e029f1c1c53b93091888babfc784a8cbc5602bcff96b83a4ff374e3f6f9097e760f901319c58bfa6e1f38", 0x44}], 0x6, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = creat(0x0, 0x101) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)={0x0}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008be3a0642cf5dc46855e3ace55d874c740080d8836cc2100ada6b9397961091969756aef14d6673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESDEC=r4, @ANYRESHEX=r5]) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r4, 0x0, r1, 0x44}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) [ 2024.081525] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2024.082544] EXT4-fs (loop4): group descriptors corrupted! 11:16:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 21) 11:16:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xeffd, r0, 0x0}]) 11:16:24 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @val={0x3a, [0x30, 0x2f, 0x30, 0xa]}}}}]}) 11:16:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2024.200404] tmpfs: Bad value for 'mpol' [ 2024.201442] tmpfs: Bad value for 'mpol' [ 2024.226539] FAULT_INJECTION: forcing a failure. [ 2024.226539] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.229039] CPU: 1 PID: 26613 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2024.230480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2024.232215] Call Trace: [ 2024.232758] dump_stack+0x107/0x167 [ 2024.233527] should_fail.cold+0x5/0xa [ 2024.234353] ? create_object.isra.0+0x3a/0xa20 [ 2024.235331] should_failslab+0x5/0x20 [ 2024.236112] kmem_cache_alloc+0x5b/0x310 [ 2024.236969] create_object.isra.0+0x3a/0xa20 [ 2024.237885] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2024.238921] kmem_cache_alloc_node+0x169/0x330 [ 2024.239863] __alloc_skb+0x6d/0x5b0 [ 2024.240618] __ip_append_data+0x2930/0x3310 [ 2024.241507] ? check_irq_usage+0xcd0/0xcd0 [ 2024.242394] ? ip_frag_init+0x350/0x350 [ 2024.243220] ? ip_finish_output+0x330/0x330 [ 2024.244086] ? lock_downgrade+0x6d0/0x6d0 [ 2024.244937] ? do_raw_spin_lock+0x121/0x260 [ 2024.245815] ? ip_frag_init+0x350/0x350 [ 2024.246626] ip_append_data+0x114/0x1a0 [ 2024.247438] udp_sendmsg+0x8a7/0x2170 [ 2024.248206] ? mark_lock+0xf5/0x2df0 [ 2024.248961] ? ip_frag_init+0x350/0x350 [ 2024.249783] ? mark_lock+0xf5/0x2df0 [ 2024.250557] ? perf_trace_lock+0xac/0x490 [ 2024.251392] ? udp_setsockopt+0xc0/0xc0 [ 2024.252192] ? mark_lock+0xf5/0x2df0 [ 2024.252954] ? __lockdep_reset_lock+0x180/0x180 [ 2024.253919] ? mark_lock+0xf5/0x2df0 [ 2024.254678] ? mark_lock+0xf5/0x2df0 [ 2024.255430] ? lock_chain_count+0x20/0x20 [ 2024.256269] ? __lock_acquire+0xbb1/0x5b00 [ 2024.257120] ? lock_chain_count+0x20/0x20 [ 2024.257988] ? perf_trace_lock+0xac/0x490 [ 2024.258826] ? __lockdep_reset_lock+0x180/0x180 [ 2024.259766] udpv6_sendmsg+0x1bed/0x2af0 [ 2024.260604] ? udp_v6_push_pending_frames+0x360/0x360 [ 2024.261653] ? mark_lock+0xf5/0x2df0 [ 2024.262422] ? lock_acquire+0x197/0x470 [ 2024.263226] ? find_held_lock+0x2c/0x110 [ 2024.264061] ? __might_fault+0xd3/0x180 [ 2024.264886] ? lock_downgrade+0x6d0/0x6d0 [ 2024.265740] ? lock_downgrade+0x6d0/0x6d0 [ 2024.266582] ? sock_has_perm+0x1ea/0x280 [ 2024.267420] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2024.268471] ? _copy_from_user+0xfb/0x1b0 [ 2024.269324] ? __import_iovec+0x458/0x590 [ 2024.270161] ? udp_v6_push_pending_frames+0x360/0x360 [ 2024.271208] inet6_sendmsg+0x105/0x140 [ 2024.271992] ? inet6_compat_ioctl+0x320/0x320 [ 2024.272900] __sock_sendmsg+0xf2/0x190 [ 2024.273717] ____sys_sendmsg+0x70d/0x870 [ 2024.274540] ? sock_write_iter+0x3d0/0x3d0 [ 2024.275391] ? do_recvmmsg+0x6d0/0x6d0 [ 2024.276180] ? perf_trace_lock+0xac/0x490 [ 2024.277025] ? __lockdep_reset_lock+0x180/0x180 [ 2024.277969] ? perf_trace_lock+0xac/0x490 [ 2024.278816] ___sys_sendmsg+0xf3/0x170 [ 2024.279604] ? sendmsg_copy_msghdr+0x160/0x160 [ 2024.280535] ? lock_downgrade+0x6d0/0x6d0 [ 2024.281399] ? find_held_lock+0x2c/0x110 [ 2024.282229] ? __fget_files+0x296/0x4c0 [ 2024.283048] ? __fget_light+0xea/0x290 [ 2024.283847] __sys_sendmsg+0xe5/0x1b0 [ 2024.284623] ? __sys_sendmsg_sock+0x40/0x40 [ 2024.285511] ? rcu_read_lock_any_held+0x75/0xa0 [ 2024.286467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2024.287526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2024.288587] ? trace_hardirqs_on+0x5b/0x180 [ 2024.289487] do_syscall_64+0x33/0x40 [ 2024.290240] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2024.291291] RIP: 0033:0x7f9f7e251b19 [ 2024.292037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2024.295780] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.297316] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2024.298749] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2024.300181] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2024.301625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2024.303060] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:16:37 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:16:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 22) 11:16:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:16:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x7, 0x6, &(0x7f0000000600)=[{&(0x7f0000000140)="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", 0xff, 0x68ab}, {&(0x7f0000000240)="21371cc1793478723a3515eae186f39afddee38564d03cb0d29ef24526153e", 0x1f}, {&(0x7f0000000280)="8a95fe440d3a425761dbc191f21ee0347a9c576961f917f4f9b5283dfb02c2c61deda02c3952c11ba8f8ddb6d97330a3fe0b94813506329a0fb67b2c79aeed794f7dff002759be8ab2089cbd0abeead7", 0x50, 0x603}, {&(0x7f0000000300)="2f4a8ff594670d6ee0255f609f68d9f5a8a9e0620ac58cc5742c4abaa724a46766f0a09d6a73efd14b32c58442ca7d2e9f7facede070c9047880f2f7db574a9359b940513a991e3f5c9129287b0257a916332b5da0bc78b26d3f4c3c663da993c1649cfe3fee1b216b8689535bfd4a1a7113f987e050f1f0c956af1b150acab316e753d1cd28e50949284f20bf11842992cf7aef619249b60aa9a6656fb2793528735ed544f66a194ab2c9f71705ce0a82fb32faad4b7f0da28a6ed5733fb981c75874219126150a90cd2288694370494a9d1d5c0264", 0xd6, 0x9}, {&(0x7f0000000400)="152b470fc1825c7020de95bbe90fdd02482075b45d8f1d22fd1fdcff3bec4c8e30cea014585e19d2239df8492b1fbcdebae16fd6665cb8f81746dfc0ee265ab30629f65592b50bafe13c394809e2f53653a7da8ead2b6a793cae163ece0b598e09814296cd7cbf38221d2d4407a713cecaeb0a0624bd4a11b7b4513afd7227506069edbe55499c994d1516bbc719c259547008a758929679c04c1902e0a5f2eb5ece703693f6b3354f49c97f94c60666e9e5726f414248785913d9d919f932c3a648889a433147477e94e9933d41db", 0xcf, 0xee}, {&(0x7f0000000500)="8e6d01925f83d2095e8a489bf8a416f5e45389b7d2d9fdedaf67ff8052e83b3789ffeb81af70dd79c8629180675f96917ad7cfbbe1f0f5ddc2af2926f246e72dadd1b133ad2e35f34079a51ade92c46dac931d210d752ea3ef0b903106773e4d4dc0f562aa2436b0d7700aadd2691e7e1605e60bf941e8765cff06ac2e05e6aeadecd0bb7d10158f450a2307075c19e3c9b9ae166528c9e441121dffa18c66974e3a7baeb9b7c0b20aa01b55961952b21e2595769a5e1190295611979eb75462261389430582c1e6fdbbd7f848f5fc096892984cc865e7bc688c6eefe281d624ff54c149728ca25eb07d3e2cb0937ce1979870", 0xf3, 0x2}], 0x78080, &(0x7f00000006c0)={[{@fat=@errors_remount}, {@nodots}, {@nodots}, {@dots}], [{@appraise_type}, {@dont_measure}, {@dont_measure}, {@euid_lt}, {@euid_lt={'euid<', 0xee01}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfshat}, {@seclabel}, {@fsmagic={'fsmagic', 0x3d, 0x9}}, {@pcr={'pcr', 0x3d, 0x5}}]}) openat(r1, &(0x7f00000007c0)='./file0\x00', 0x1, 0x6) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1}) 11:16:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfcfd, r0, 0x0}]) 11:16:37 executing program 7: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x81]}, 0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b000000000200002802000002", 0x61, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000002c0)=ANY=[@ANYBLOB="004eacec960ffb88f61a07b84cbba18eda5f273ba4a11cd4e3acffc3f3c128233a64b89877d110889683a9"]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xa563, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x80) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x3}}, './file2\x00'}) ioctl$TIOCCBRK(r3, 0x5428) r4 = creat(&(0x7f0000000540)='./file0\x00', 0x0) pwrite64(r4, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3) write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1020) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000180)={0x1, 0x8000, 0x9, 0x0, 0x11}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) [ 2037.897268] FAULT_INJECTION: forcing a failure. [ 2037.897268] name failslab, interval 1, probability 0, space 0, times 0 [ 2037.898619] CPU: 0 PID: 26661 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2037.899372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2037.900277] Call Trace: [ 2037.900572] dump_stack+0x107/0x167 [ 2037.900975] should_fail.cold+0x5/0xa [ 2037.901400] should_failslab+0x5/0x20 [ 2037.901832] __kmalloc_node_track_caller+0x74/0x3b0 [ 2037.902375] ? __ip_append_data+0x2930/0x3310 [ 2037.902871] __alloc_skb+0xb1/0x5b0 [ 2037.903269] __ip_append_data+0x2930/0x3310 [ 2037.903749] ? check_irq_usage+0xcd0/0xcd0 [ 2037.904213] ? ip_frag_init+0x350/0x350 [ 2037.904656] ? ip_finish_output+0x330/0x330 [ 2037.905129] ? lock_downgrade+0x6d0/0x6d0 [ 2037.905603] ? do_raw_spin_lock+0x121/0x260 [ 2037.906070] ? ip_frag_init+0x350/0x350 [ 2037.906505] ip_append_data+0x114/0x1a0 [ 2037.906947] udp_sendmsg+0x8a7/0x2170 [ 2037.907368] ? mark_lock+0xf5/0x2df0 [ 2037.907792] ? ip_frag_init+0x350/0x350 [ 2037.908242] ? mark_lock+0xf5/0x2df0 [ 2037.908650] ? perf_trace_lock+0xac/0x490 [ 2037.909117] ? udp_setsockopt+0xc0/0xc0 [ 2037.909558] ? mark_lock+0xf5/0x2df0 [ 2037.909982] ? __lockdep_reset_lock+0x180/0x180 [ 2037.910492] ? mark_lock+0xf5/0x2df0 [ 2037.910925] ? mark_lock+0xf5/0x2df0 [ 2037.911332] ? lock_chain_count+0x20/0x20 [ 2037.911805] ? __lock_acquire+0xbb1/0x5b00 [ 2037.912270] ? lock_chain_count+0x20/0x20 [ 2037.912750] ? perf_trace_lock+0xac/0x490 [ 2037.913205] ? __lockdep_reset_lock+0x180/0x180 [ 2037.913768] udpv6_sendmsg+0x1bed/0x2af0 [ 2037.914233] ? udp_v6_push_pending_frames+0x360/0x360 [ 2037.914805] ? mark_lock+0xf5/0x2df0 [ 2037.915226] ? lock_acquire+0x197/0x470 [ 2037.915662] ? find_held_lock+0x2c/0x110 [ 2037.916118] ? __might_fault+0xd3/0x180 [ 2037.916556] ? lock_downgrade+0x6d0/0x6d0 [ 2037.917024] ? lock_downgrade+0x6d0/0x6d0 [ 2037.917505] ? sock_has_perm+0x1ea/0x280 [ 2037.917965] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2037.918556] ? _copy_from_user+0xfb/0x1b0 [ 2037.919031] ? __import_iovec+0x458/0x590 [ 2037.919505] ? udp_v6_push_pending_frames+0x360/0x360 [ 2037.920097] inet6_sendmsg+0x105/0x140 [ 2037.920548] ? inet6_compat_ioctl+0x320/0x320 [ 2037.921055] __sock_sendmsg+0xf2/0x190 [ 2037.921505] ____sys_sendmsg+0x70d/0x870 [ 2037.921952] ? sock_write_iter+0x3d0/0x3d0 [ 2037.922430] ? do_recvmmsg+0x6d0/0x6d0 [ 2037.922873] ? perf_trace_lock+0xac/0x490 [ 2037.923348] ? __lockdep_reset_lock+0x180/0x180 [ 2037.923880] ? perf_trace_lock+0xac/0x490 [ 2037.924358] ___sys_sendmsg+0xf3/0x170 [ 2037.924803] ? sendmsg_copy_msghdr+0x160/0x160 [ 2037.925319] ? lock_downgrade+0x6d0/0x6d0 [ 2037.925791] ? find_held_lock+0x2c/0x110 [ 2037.926252] ? __fget_files+0x296/0x4c0 [ 2037.926710] ? __fget_light+0xea/0x290 [ 2037.927156] __sys_sendmsg+0xe5/0x1b0 [ 2037.927573] ? __sys_sendmsg_sock+0x40/0x40 [ 2037.928055] ? rcu_read_lock_any_held+0x75/0xa0 [ 2037.928597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2037.929191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2037.929768] ? trace_hardirqs_on+0x5b/0x180 [ 2037.930255] do_syscall_64+0x33/0x40 [ 2037.930662] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2037.931235] RIP: 0033:0x7f9f7e251b19 [ 2037.931644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2037.933733] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2037.934597] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2037.935404] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2037.936202] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2037.937011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2037.937831] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:16:38 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb51d, 0xed5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r6}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0515aa00", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa689f9108b9e5a3e210d9015b24011d6cc3f97cd895030adcb9295ad"], 0x1c}}, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000000)={'veth1_to_batadv\x00'}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) sendmsg$AUDIT_USER(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000ed03000000000000000020003b4eb3103cc497cd42a49dfadcc6b00e6f1c9af0de3889ca88ec08a60acfccae71561f66b1636cca32831818812932e0037d7e2e3e7c5e33c8f91275a8c35cf7db6af98be768b487c0ac8d8b5ef3b6433b644abe66c4cdb63cac6a60311ebde2d17c8af0cfd78c0c9b48b3ec0631ff84b192c201eff646e9cf58f696623ab6b1c1ec2a4f5abe04e211bb4e2858753fbe081611fd8e4f862376eb7ef7aa0958"], 0x10}}, 0x0) [ 2037.955522] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2037.957522] EXT4-fs (loop4): group descriptors corrupted! 11:16:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfdef, r0, 0x0}]) [ 2038.011222] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue 11:16:38 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:38 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:16:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 23) 11:16:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2038.103369] FAULT_INJECTION: forcing a failure. [ 2038.103369] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.105798] CPU: 1 PID: 26684 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2038.107256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2038.108966] Call Trace: [ 2038.109558] dump_stack+0x107/0x167 [ 2038.110342] should_fail.cold+0x5/0xa [ 2038.111175] should_failslab+0x5/0x20 [ 2038.111984] __kmalloc_node_track_caller+0x74/0x3b0 [ 2038.113049] ? __ip_append_data+0x2930/0x3310 [ 2038.114021] __alloc_skb+0xb1/0x5b0 [ 2038.114809] __ip_append_data+0x2930/0x3310 [ 2038.115741] ? check_irq_usage+0xcd0/0xcd0 [ 2038.116649] ? ip_frag_init+0x350/0x350 [ 2038.117520] ? ip_finish_output+0x330/0x330 [ 2038.118440] ? lock_downgrade+0x6d0/0x6d0 [ 2038.119323] ? do_raw_spin_lock+0x121/0x260 [ 2038.120239] ? ip_frag_init+0x350/0x350 [ 2038.121080] ip_append_data+0x114/0x1a0 [ 2038.121963] udp_sendmsg+0x8a7/0x2170 [ 2038.122777] ? mark_lock+0xf5/0x2df0 [ 2038.123567] ? ip_frag_init+0x350/0x350 [ 2038.124415] ? mark_lock+0xf5/0x2df0 [ 2038.125218] ? perf_trace_lock+0xac/0x490 [ 2038.126089] ? udp_setsockopt+0xc0/0xc0 [ 2038.126887] ? mark_lock+0xf5/0x2df0 [ 2038.127641] ? __lockdep_reset_lock+0x180/0x180 [ 2038.128586] ? mark_lock+0xf5/0x2df0 [ 2038.129344] ? mark_lock+0xf5/0x2df0 [ 2038.130119] ? lock_chain_count+0x20/0x20 [ 2038.131100] ? __lock_acquire+0xbb1/0x5b00 [ 2038.131954] ? lock_chain_count+0x20/0x20 [ 2038.132809] ? perf_trace_lock+0xac/0x490 [ 2038.133829] ? __lockdep_reset_lock+0x180/0x180 [ 2038.134775] udpv6_sendmsg+0x1bed/0x2af0 [ 2038.135779] ? udp_v6_push_pending_frames+0x360/0x360 [ 2038.136825] ? mark_lock+0xf5/0x2df0 [ 2038.137756] ? lock_acquire+0x197/0x470 [ 2038.138549] ? find_held_lock+0x2c/0x110 [ 2038.139540] ? __might_fault+0xd3/0x180 [ 2038.140346] ? lock_downgrade+0x6d0/0x6d0 [ 2038.141351] ? lock_downgrade+0x6d0/0x6d0 [ 2038.142206] ? sock_has_perm+0x1ea/0x280 [ 2038.143193] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2038.144240] ? _copy_from_user+0xfb/0x1b0 [ 2038.145255] ? __import_iovec+0x458/0x590 [ 2038.146120] ? udp_v6_push_pending_frames+0x360/0x360 [ 2038.147366] inet6_sendmsg+0x105/0x140 [ 2038.148164] ? inet6_compat_ioctl+0x320/0x320 [ 2038.149241] __sock_sendmsg+0xf2/0x190 [ 2038.150046] ____sys_sendmsg+0x70d/0x870 [ 2038.151032] ? sock_write_iter+0x3d0/0x3d0 [ 2038.151867] ? do_recvmmsg+0x6d0/0x6d0 [ 2038.152806] ? perf_trace_lock+0xac/0x490 [ 2038.153651] ? __lockdep_reset_lock+0x180/0x180 [ 2038.154770] ? perf_trace_lock+0xac/0x490 [ 2038.155611] ___sys_sendmsg+0xf3/0x170 [ 2038.156555] ? sendmsg_copy_msghdr+0x160/0x160 [ 2038.157505] ? lock_downgrade+0x6d0/0x6d0 [ 2038.158513] ? find_held_lock+0x2c/0x110 [ 2038.159343] ? __fget_files+0x296/0x4c0 [ 2038.160321] ? __fget_light+0xea/0x290 [ 2038.161249] __sys_sendmsg+0xe5/0x1b0 [ 2038.162134] ? __sys_sendmsg_sock+0x40/0x40 [ 2038.163053] ? rcu_read_lock_any_held+0x75/0xa0 [ 2038.164064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2038.165169] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2038.166281] ? trace_hardirqs_on+0x5b/0x180 [ 2038.167203] do_syscall_64+0x33/0x40 [ 2038.167991] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2038.169070] RIP: 0033:0x7f9f7e251b19 [ 2038.169877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2038.173736] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2038.175341] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2038.176844] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2038.178352] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2038.179855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2038.181351] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:16:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfdfc, r0, 0x0}]) [ 2038.207017] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2038.207033] EXT4-fs (loop4): group descriptors corrupted! 11:16:52 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:52 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x639d1876ab868171, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x9, 0x0, 0x0}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x0, 0x4f12, 0x3, &(0x7f0000000040)={[0x80]}, 0x8) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x8, 0x0, 0x8, 0x4, 0x0, {0x0, r3}}, 0xad) r4 = fsopen(&(0x7f0000001300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000001a00)='\x00', &(0x7f0000001a40)='j', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) fallocate(r5, 0x0, 0x0, 0x8800000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0x5c20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x80000, 0x0) sendfile(r1, r6, 0x0, 0x100000001) 11:16:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:16:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfdfe, r0, 0x0}]) 11:16:52 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:16:52 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb51d, 0xed5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x300b4e2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@loopback, 0x0, r6}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0515aa00", @ANYRES32=0x0, @ANYBLOB="6d6e09ca044e459fc78ca27728297fa689f9108b9e5a3e210d9015b24011d6cc3f97cd895030adcb9295ad"], 0x1c}}, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000000)={'veth1_to_batadv\x00'}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000080)) sendmsg$AUDIT_USER(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="01000000ed03000000000000000020003b4eb3103cc497cd42a49dfadcc6b00e6f1c9af0de3889ca88ec08a60acfccae71561f66b1636cca32831818812932e0037d7e2e3e7c5e33c8f91275a8c35cf7db6af98be768b487c0ac8d8b5ef3b6433b644abe66c4cdb63cac6a60311ebde2d17c8af0cfd78c0c9b48b3ec0631ff84b192c201eff646e9cf58f696623ab6b1c1ec2a4f5abe04e211bb4e2858753fbe081611fd8e4f862376eb7ef7aa0958"], 0x10}}, 0x0) 11:16:52 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 24) 11:16:52 executing program 7: sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd/3\x00') r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8927, &(0x7f0000000140)="dafb376c617c7c58f191883a") ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c0000008710e41a2cf74dd8d9ac73f42c43dc7836f9bc1840f837e3c350550d45af29330e0a4e842a0c3f8a3b6592bc24b554fafaad8b930b4df6c81f5ed34ee13392e4bc7cdea581d720f5181f8ba9f0654aedb5df73dc741d9209da3c04043a52284080d25a22748b4de49970a5b4c85adb7a8cbef12f7ec536a8742ba8a818db4573eced49c1174a0ec0058fa676e59d515b30273cbc09e5e910560adbccfab61ded1f7d82ff1b986e64adf73d8e6888df30f32807db1d07e0571711394010d221e3654f4d56ec63ace1a26f610a41158d4f1bd82ebc", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="0cd875038b32d987af4c43383e7611214ba2c564e2b79ccc2ce700d7cbb41f567eb264f9e48f06e1dc240fc0a69bf0b8e1399cf4a0b6b293dc65356b8f5f92e1e180cc7f4884d80ec6c8e2e7f50e9ca9c077080fa8980709a6907710279f78de0dc2312dc8e22927c4943bfea1fc04f1b3c41faf077c5b22fde11468515c3915a25f3c42165bff50b487b9f5ec8b9ba35f6eae7a72f2acdc0f077eaf298dc88902e6f35d9836b7ddcb05b1db7c5e65c57acf"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="0f01", @ANYRES16=r5, @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB="a0002a00dd9a750a1455056ee8b7b8bb484e1c871a998d1e6c5f819adc69d7fec4b2c9ab677aec1a610d0b52304e58bd3fac856b3adbe7b41d5578f3ed4ec3be097db14af014eef0d7c41741b09163b5b8baafd9a2cd2d832e08a3f1fbddd31ef90ff81cb8c7bcb0304a51cdfca1bb46606225751e467e1d0902e494ab183ade"], 0x11c}}, 0x4040) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) rt_sigaction(0x17, &(0x7f000000b180)={&(0x7f000000b0c0)="f365400faf54bb8dc483056990d6ba1a230566660f6d7900c423697e730dfe266665450f9b56008444870ac4e2fd069e09000000c44261f77508660f38f65311f24a0faef7", 0x0, 0x0}, &(0x7f000000b240)={0x0, 0x0, 0x0}, 0x8, &(0x7f000000b280)) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000500)=""/189, 0xbd}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10) fallocate(r6, 0x0, 0x0, 0x1000002) ftruncate(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0) [ 2052.970165] FAULT_INJECTION: forcing a failure. [ 2052.970165] name failslab, interval 1, probability 0, space 0, times 0 [ 2052.973281] CPU: 0 PID: 26722 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2052.975152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2052.977367] Call Trace: [ 2052.978089] dump_stack+0x107/0x167 [ 2052.979077] should_fail.cold+0x5/0xa [ 2052.980112] ? skb_clone+0x14f/0x3d0 [ 2052.981017] should_failslab+0x5/0x20 [ 2052.981930] kmem_cache_alloc+0x5b/0x310 [ 2052.982844] skb_clone+0x14f/0x3d0 [ 2052.983615] ip_mc_output+0x4d9/0xa30 [ 2052.984434] ? 0xffffffffa0000000 [ 2052.985184] ip_send_skb+0xdd/0x260 [ 2052.985968] udp_send_skb+0x6da/0x11d0 [ 2052.986779] udp_sendmsg+0x139a/0x2170 [ 2052.987599] ? mark_lock+0xf5/0x2df0 [ 2052.988358] ? ip_frag_init+0x350/0x350 [ 2052.989207] ? mark_lock+0xf5/0x2df0 [ 2052.989991] ? perf_trace_lock+0xac/0x490 [ 2052.990841] ? udp_setsockopt+0xc0/0xc0 [ 2052.991649] ? mark_lock+0xf5/0x2df0 [ 2052.992416] ? __lockdep_reset_lock+0x180/0x180 [ 2052.993377] ? mark_lock+0xf5/0x2df0 [ 2052.994177] ? mark_lock+0xf5/0x2df0 [ 2052.994948] ? lock_chain_count+0x20/0x20 [ 2052.995822] ? __lock_acquire+0xbb1/0x5b00 [ 2052.996697] ? lock_chain_count+0x20/0x20 [ 2052.997573] ? perf_trace_lock+0xac/0x490 [ 2052.998452] ? __lockdep_reset_lock+0x180/0x180 [ 2052.999411] udpv6_sendmsg+0x1bed/0x2af0 [ 2053.000262] ? udp_v6_push_pending_frames+0x360/0x360 [ 2053.001331] ? mark_lock+0xf5/0x2df0 [ 2053.002119] ? lock_acquire+0x197/0x470 [ 2053.002933] ? find_held_lock+0x2c/0x110 [ 2053.003772] ? __might_fault+0xd3/0x180 [ 2053.004596] ? lock_downgrade+0x6d0/0x6d0 [ 2053.005448] ? lock_downgrade+0x6d0/0x6d0 [ 2053.006307] ? sock_has_perm+0x1ea/0x280 [ 2053.007140] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2053.008193] ? _copy_from_user+0xfb/0x1b0 [ 2053.009063] ? __import_iovec+0x458/0x590 [ 2053.009936] ? udp_v6_push_pending_frames+0x360/0x360 [ 2053.011013] inet6_sendmsg+0x105/0x140 [ 2053.011821] ? inet6_compat_ioctl+0x320/0x320 [ 2053.012745] __sock_sendmsg+0xf2/0x190 [ 2053.013540] ____sys_sendmsg+0x70d/0x870 [ 2053.014380] ? sock_write_iter+0x3d0/0x3d0 [ 2053.015244] ? do_recvmmsg+0x6d0/0x6d0 [ 2053.016043] ? perf_trace_lock+0xac/0x490 [ 2053.016900] ? __lockdep_reset_lock+0x180/0x180 [ 2053.017874] ? perf_trace_lock+0xac/0x490 [ 2053.018727] ___sys_sendmsg+0xf3/0x170 [ 2053.019522] ? sendmsg_copy_msghdr+0x160/0x160 [ 2053.020460] ? lock_downgrade+0x6d0/0x6d0 [ 2053.021306] ? find_held_lock+0x2c/0x110 [ 2053.022153] ? __fget_files+0x296/0x4c0 [ 2053.022982] ? __fget_light+0xea/0x290 [ 2053.023785] __sys_sendmsg+0xe5/0x1b0 [ 2053.024560] ? __sys_sendmsg_sock+0x40/0x40 [ 2053.025441] ? rcu_read_lock_any_held+0x75/0xa0 [ 2053.026434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.027503] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.028546] ? trace_hardirqs_on+0x5b/0x180 [ 2053.029434] do_syscall_64+0x33/0x40 [ 2053.030201] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2053.031244] RIP: 0033:0x7f9f7e251b19 [ 2053.032015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.035795] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2053.037341] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2053.038817] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2053.040279] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.041744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.043194] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2053.054204] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2053.056722] EXT4-fs (loop4): group descriptors corrupted! 11:16:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfe00, r0, 0x0}]) 11:16:53 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 25) [ 2053.157889] FAULT_INJECTION: forcing a failure. [ 2053.157889] name failslab, interval 1, probability 0, space 0, times 0 [ 2053.160585] CPU: 0 PID: 26782 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2053.162110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2053.163845] Call Trace: [ 2053.164406] dump_stack+0x107/0x167 [ 2053.165175] should_fail.cold+0x5/0xa [ 2053.165977] ? ___slab_alloc+0x155/0x700 [ 2053.166817] ? create_object.isra.0+0x3a/0xa20 [ 2053.167766] should_failslab+0x5/0x20 [ 2053.168562] kmem_cache_alloc+0x5b/0x310 [ 2053.169426] create_object.isra.0+0x3a/0xa20 [ 2053.170381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2053.171474] kmem_cache_alloc+0x159/0x310 [ 2053.172383] skb_clone+0x14f/0x3d0 [ 2053.173152] ip_mc_output+0x4d9/0xa30 [ 2053.173983] ? 0xffffffffa0000000 [ 2053.174734] ip_send_skb+0xdd/0x260 [ 2053.175528] udp_send_skb+0x6da/0x11d0 [ 2053.176374] udp_sendmsg+0x139a/0x2170 [ 2053.177187] ? mark_lock+0xf5/0x2df0 [ 2053.177963] ? ip_frag_init+0x350/0x350 [ 2053.178791] ? mark_lock+0xf5/0x2df0 [ 2053.179559] ? perf_trace_lock+0xac/0x490 [ 2053.180418] ? udp_setsockopt+0xc0/0xc0 [ 2053.181252] ? mark_lock+0xf5/0x2df0 [ 2053.182051] ? __lockdep_reset_lock+0x180/0x180 [ 2053.183032] ? mark_lock+0xf5/0x2df0 [ 2053.183818] ? mark_lock+0xf5/0x2df0 [ 2053.184598] ? lock_chain_count+0x20/0x20 [ 2053.185492] ? __lock_acquire+0xbb1/0x5b00 [ 2053.186382] ? lock_chain_count+0x20/0x20 [ 2053.187251] ? perf_trace_lock+0xac/0x490 [ 2053.188110] ? __lockdep_reset_lock+0x180/0x180 [ 2053.189090] udpv6_sendmsg+0x1bed/0x2af0 [ 2053.189969] ? udp_v6_push_pending_frames+0x360/0x360 [ 2053.191054] ? mark_lock+0xf5/0x2df0 [ 2053.191833] ? lock_acquire+0x197/0x470 [ 2053.192672] ? find_held_lock+0x2c/0x110 [ 2053.193536] ? __might_fault+0xd3/0x180 [ 2053.194403] ? lock_downgrade+0x6d0/0x6d0 [ 2053.195285] ? lock_downgrade+0x6d0/0x6d0 [ 2053.196189] ? sock_has_perm+0x1ea/0x280 [ 2053.197041] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2053.198131] ? _copy_from_user+0xfb/0x1b0 [ 2053.199029] ? __import_iovec+0x458/0x590 [ 2053.199915] ? udp_v6_push_pending_frames+0x360/0x360 [ 2053.201013] inet6_sendmsg+0x105/0x140 [ 2053.201874] ? inet6_compat_ioctl+0x320/0x320 [ 2053.202821] __sock_sendmsg+0xf2/0x190 [ 2053.203651] ____sys_sendmsg+0x70d/0x870 [ 2053.204519] ? sock_write_iter+0x3d0/0x3d0 [ 2053.205421] ? do_recvmmsg+0x6d0/0x6d0 [ 2053.206262] ? perf_trace_lock+0xac/0x490 [ 2053.207134] ? __lockdep_reset_lock+0x180/0x180 [ 2053.208111] ? perf_trace_lock+0xac/0x490 [ 2053.208999] ___sys_sendmsg+0xf3/0x170 [ 2053.209819] ? sendmsg_copy_msghdr+0x160/0x160 [ 2053.210791] ? lock_downgrade+0x6d0/0x6d0 [ 2053.211651] ? find_held_lock+0x2c/0x110 [ 2053.212512] ? __fget_files+0x296/0x4c0 [ 2053.213360] ? __fget_light+0xea/0x290 [ 2053.214207] __sys_sendmsg+0xe5/0x1b0 [ 2053.215024] ? __sys_sendmsg_sock+0x40/0x40 [ 2053.215939] ? rcu_read_lock_any_held+0x75/0xa0 [ 2053.216941] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2053.218067] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2053.219147] ? trace_hardirqs_on+0x5b/0x180 [ 2053.220070] do_syscall_64+0x33/0x40 [ 2053.220863] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2053.221938] RIP: 0033:0x7f9f7e251b19 [ 2053.222712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2053.226558] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2053.228160] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2053.229669] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2053.231180] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2053.232668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2053.234175] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:16:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:16:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xfefd, r0, 0x0}]) 11:16:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:16:53 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {0x0, 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:16:53 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2053.538227] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2053.540192] EXT4-fs (loop4): group descriptors corrupted! 11:17:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x10}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 11:17:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0xffff, r0, 0x0}]) 11:17:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:17:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:10 executing program 2: r0 = getuid() statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007d40)=[{{&(0x7f0000000480), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000740)=""/177, 0xb1}], 0x4, &(0x7f0000000840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/65, 0x41}, {&(0x7f0000002a80)=""/72, 0x48}], 0x5, &(0x7f0000002b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/81, 0x51}, {&(0x7f0000002d00)=""/218, 0xda}], 0x2, &(0x7f0000002e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x128}}, {{&(0x7f0000002f80), 0x6e, &(0x7f00000051c0)=[{&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/251, 0xfb}, {&(0x7f0000004100)=""/91, 0x5b}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/59, 0x3b}], 0x5, &(0x7f0000005240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000005340), 0x6e, &(0x7f0000005640)=[{&(0x7f00000053c0)=""/77, 0x4d}, {&(0x7f0000005440)=""/201, 0xc9}, {&(0x7f0000005540)=""/221, 0xdd}], 0x3, &(0x7f0000005680)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000005700)=@abs, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005780)=""/29, 0x1d}, {&(0x7f00000057c0)=""/95, 0x5f}], 0x2, &(0x7f0000005880)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000058c0), 0x6e, &(0x7f0000005c80)=[{&(0x7f0000005940)=""/189, 0xbd}, {&(0x7f0000005a00)=""/148, 0x94}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005bc0)=""/44, 0x2c}, {&(0x7f0000005c00)=""/9, 0x9}, {&(0x7f0000005c40)=""/15, 0xf}], 0x6}}, {{&(0x7f0000005d00), 0x6e, &(0x7f0000005e80)=[{&(0x7f0000005d80)}, {&(0x7f0000005dc0)=""/154, 0x9a}], 0x2, &(0x7f0000005ec0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000005f00)=@abs, 0x6e, &(0x7f0000007340)=[{&(0x7f0000005f80)=""/211, 0xd3}, {&(0x7f0000006080)=""/198, 0xc6}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000007180)=""/154, 0x9a}, {&(0x7f0000007240)=""/215, 0xd7}], 0x5, &(0x7f00000073c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f00000074c0)=""/165, 0xa5}, {&(0x7f0000007580)=""/187, 0xbb}, {&(0x7f0000007640)=""/118, 0x76}, {&(0x7f00000076c0)=""/252, 0xfc}, {&(0x7f00000077c0)=""/219, 0xdb}, {&(0x7f00000078c0)=""/46, 0x2e}, {&(0x7f0000007900)=""/166, 0xa6}, {&(0x7f00000079c0)=""/144, 0x90}, {&(0x7f0000007a80)=""/186, 0xba}], 0x9, &(0x7f0000007c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0xa, 0x3, 0x0) r7 = clone3(&(0x7f0000009100)={0x81100180, &(0x7f0000007fc0), &(0x7f0000008000), &(0x7f0000008040), {0x3b}, &(0x7f0000008080)=""/4096, 0x1000, &(0x7f0000009080)=""/52, &(0x7f00000090c0)=[0x0], 0x1}, 0x58) r8 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009940)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000009a80)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000009b80)=0xe8) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000009bc0), 0x0) lstat(&(0x7f0000009c00)='./file0\x00', &(0x7f0000009c40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000009cc0)={0x0, 0x0, 0x0}, &(0x7f0000009d00)=0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000009d40)=0x0) r15 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000009d80)='devices.deny\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000009dc0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) r17 = getpgrp(0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000009f00)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000098c0)=[{&(0x7f0000000040)={0xe8, 0x3b, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@generic="20aca44ca967359e605b9226fbb8148ed84a8424b26e38b87ed1665721f3f13dab233c6ba2b9f9422d98c9f1855b6d4abb8362eafba43496e8d36ddd2a92d59e090db506613a1f19d7ebc942a1d3fd88b31ffb49f830774128b2b92c0e9e3d9ec3af8f5248b6d4b1b054b1a66d53d8ec2bd1bf291c9c1078f66c620d0393d538878c3892429d3fbdc4c41fbb3d474489a9bd90138bbc194a99597ce7cfaea4c40ae6f44563cf2363767108828dd098d55df125d1e16091654f", @typed={0x8, 0x1e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x14, 0x8f, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0xe8}, {&(0x7f0000000280)={0x1b8, 0x41, 0x8, 0x70bd2a, 0x25dfdbff, "", [@nested={0x2d, 0xf, 0x0, 0x1, [@generic="70df09dfc4856b6e17c0cddbaa325814226e1bd9a33b8bfe1eb1df51e03d9638f26694378e21063503"]}, @typed={0xf, 0x7a, 0x0, 0x0, @str='/+{\'($&}%\'\x00'}, @nested={0x14, 0x5, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='+\x00'}, @typed={0x8, 0x1f, 0x0, 0x0, @uid=r0}]}, @nested={0x152, 0x57, 0x0, 0x1, [@typed={0x8, 0x1a, 0x0, 0x0, @pid}, @generic="c92220742fc69f021dc0667a75c9cbb6f88056d8f6719489fa5344c54988467d24ae63a9cf6252ab47d2129c78c88a9c173d5ebafa3dbd86cb84674fc999f350ebf5a274fb2f390f9ed3f82276526a80e6dfc958a9499fb317d92cb955f4026d049bec2e62587e468ea646f2785654e1c542cc2931d5830d132688fc662139e557cb29e534b5993cb9dd3275775f5499deac5097e9451bb91729d00980285c6e4eb763a9c7162dcbe085e7c2678fa7a5bf40affb62de0774dcd855ed55d49062c18e3541ec051717a903e4", @generic="7dba18db41cc9c120608b1ee491f34c922afe2c13deb4c99b516c0d88e427df7db951c7c553e9a3757d7b8324c4ab312835f355b892f456d61dea6dd27aa187942c2f37bdb4d82cd043ec5cc4fb9c32b9e7c664c31fc454a4981b4cc136ee2", @typed={0x9, 0x90, 0x0, 0x0, @str='\'*}#\x00'}, @typed={0x8, 0x1b, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x24, 0x0, 0x0, @uid=0xee00}]}]}, 0x1b8}, {&(0x7f0000000440)={0x30, 0x37, 0x4, 0x70bd26, 0x25dfdbfe, "", [@typed={0x14, 0x12, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0xb, 0x85, 0x0, 0x0, @str='-^}*@\'\x00'}]}, 0x30}, {&(0x7f0000009180)={0x1a0, 0x23, 0x20, 0x70bd29, 0x25dfdbfe, "", [@generic="6cbf14be9d84ffc37cd1f20a7f2ab935c17aea212c54f3838859ddb9a47773b502504cd532ce3f1a3e514517ef1b124c9d68f6fa614dd4ce4b795f60e230e1c7ef60136f44114e9eac0c4e6614e01941a6d400b6f3e5", @nested={0x129, 0x64, 0x0, 0x1, [@generic="4d80f67e4d353f", @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x40, 0x0, 0x0, @str='&){#/)/\x00'}, @typed={0x8, 0x48, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x30, 0x0, 0x0, @pid=r7}, @generic="1e9787474b8e40ced6af60041b8f220d3a012a588a8af20cbe10f57518f5ff17c958e3b9e91736278f533f554195e4f81b4d52fe7910de68e177e8aa11ab100fb1dd80ae7172e82f100eddf7d839ae22355472b9e370a88a02fb5c4b839debeae408bda4e06946cff6172537b0a81e3fefe1ce45246d2964516a4387fa2066af94a3f96a2c61b22bdde9d3bbaced36b98943246deb1d6f1cf24a6cbdc3cfef8e8877a3a9c4f842", @generic="5f467a3cdd831ae1179062f11cbbd2cb972e83b140bb1c67a9b6a9a727fe62c75fa5642f1ba26a7407dc2c2b4bd087337c57cef9a58a5e99b8a458db43ac6295e327d43e48279c"]}, @typed={0xc, 0x16, 0x0, 0x0, @u64=0x8001}]}, 0x1a0}, {&(0x7f0000009340)={0x438, 0x20, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x1d0, 0x14, 0x0, 0x1, [@generic="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", @typed={0x8, 0x42, 0x0, 0x0, @str='/*}\x00'}, @generic="a5816ce8a264982131a8eb0310d86568302bc706b07b6537adade522ea3e15bcf25e9f898a296ec656e93e31e05664f4cd55355f1b03421899edd21d3e9c5333351cd3318c1f106cc6b72c3b00d4812e82d5b032cf9b0b1e7928fe89757ed13776abed334902b6979499ad52aa0eb4947e1e9192d5fa1301455567852ae2bbb7ed3e2dc562ccc6ad9d1cd11429871c7d8cdf6f8b26b00c4894b36f27031047e9593db7441675f4ce1bfad2e35a83e0ffe2125907c7a6f8453403155bc2f31cba2a48b75b2ce8"]}, @typed={0x8, 0x2f, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0xc}, @nested={0x1b7, 0x8c, 0x0, 0x1, [@typed={0x8, 0x61, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="5cc694a8e97f64bdef7e6634832a82df28849232891a9a566095980f01a6a91ac4fe4216767a7fe1a3c14876de32e6b934a69e9bcc7c6bae68850b1adf044f749ea14640823b57b87c9eaaf904cec30618bb1b061a5d734c660098f6e6e87984796fc171b90dd26ec7820f2bbb701409680d2e474b3a87f7f78ee794b0e93a7d0b95af47eb4b5ddb490ad8824889e754ba81407f5fc83f3db4e021471c139efbe567aa87d5ab40bde92ca9fbfe53d798c55997d398fcfd5694f3a5b20ed8fc6936c02ea8cb4fe8281f62bb2437478c4432f7b764a5a09b83b31ceee65d37450f", @typed={0xc, 0x23, 0x0, 0x0, @u64}, @typed={0x8, 0x6e, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="79d720546ce03da45473a89ea7e16c4e7a0db3bdbf71f8c0229ad103e3eece46c733fe9c14119677f549622674e15519145ba75a59c8383db8779eefcbde9d139e0262d2858118ef6d345e126b3064c0ee5b64507b71b6656bb1dc4daf06608324cb69c921aeef29ffdfa66f1f9e30bcacdd3f02895afa9f33d6d48431896b684d5b83b5e9e54955804ead4934bd699b779d3d0e9e1cba7373cbed06368b044012360e", @typed={0x14, 0x69, 0x0, 0x0, @ipv6=@empty}]}, @nested={0x4, 0xe}, @generic="24d0a06bd16449c274fd32d4120bdb1aa963640cee11f9a5558076b4c40ad0997ac6cdc26cc024fd295b8ce47d51bfc38a935d63a09a9e6483ccb215077363dbc322dba009704cbfa6bc426e389696914a9d243b698de16ba23908c975f309f67f43ce1007ba8174c72c3efcaaf19ccdc6457d50a1e83a43cee7fd767c84cf4708c50bade41f1552", @typed={0x8, 0x92, 0x0, 0x0, @pid=r8}]}, 0x438}, {&(0x7f0000009780)={0x134, 0x42, 0x400, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x5d, 0x0, 0x0, @fd}, @typed={0x34, 0x47, 0x0, 0x0, @binary="848c75e639229642dc6222d22f8ed20863a9d76a41aa2cf48c9651bfdd58623f318241fc384be51f91bbf5ef2ec9c33b"}, @nested={0xe7, 0x4a, 0x0, 0x1, [@generic="adc05b0e1e1ce45d63324ab8c66f5179041ec0b469a42b17b68d64c8a7d36aabd3d59c49cdaafabac2dd6af529fa3272fc7fc909aafa1916ea9b1e45d6c99ff58bf5a46b8e9a52bac99129686e6144451043d58b7d91e1f054b789de28bc4f299183a57f738522f173e5cfa2fa37500c240094edfa5865dfc9a207d5025e90cd7f625bf646da89459f02fe68b6e85fa0", @typed={0x8, 0x4d, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xa, 0x0, 0x0, @u32=0x34}, @generic="b89530254fade66eadcda6e4c13d7f9db0d6d64f2cfbe3d228c71b55d9fb60e94d64419e7311b393c78e830bdc810ec42dfc36aa734ea37cc0519f84c781dd", @typed={0x4, 0x9}]}]}, 0x134}], 0x6, &(0x7f0000009e00)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r15, r16, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xee00}}}], 0xe0, 0x80}, 0x10051) r18 = getpgrp(r6) sendmsg$nl_generic(r5, &(0x7f000000b540)={&(0x7f0000009f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f000000b500)={&(0x7f0000009f80)={0x1574, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfc, {0x14}, [@nested={0x2f5, 0xf, 0x0, 0x1, [@generic="2dc67b5d8e795d130091ea5c2b2d71fd009ff1d8f365e332db7bf28d5c6185bc7721ec43d37d9b1013008e28425bad3f50a4cb9f4551cf1c635062263043f896e6737f8764c3ece61b4ad78b2633337f7d76211ed6e00220dca73777cb1bbca95eec98330cb562bc97dca45246446b1b76a4fd4553a42e4dc4971b2611f7e323909bdb870301f0919a65bded49", @typed={0xdf, 0x0, 0x0, 0x0, @binary="e64fb8ef7b581755cfeadb21144fb319b85ca9cb10953967fa3867f7e4a5c7e4dab5620323a615cfd5a4ed3c48adbd314f19cea3d49ce0f142a49e6ef754f7b05137050bde4b5f7b4fde3c6f80b6ce4aca46e7132dd5e4cf943b3b6596146ee676ef6db4531f9585404308b9defb28f7f11f4149dc466cdbf1bb32175ce04f3b3ab26d5e9287246fca4e6815ad1559dd1247940e455a3f5ab863086d8d5c9b870efdd346d6080b534bab1bf3082bfe23550a7255d5d9bcaa6adab2dd05cd1ed401ca35b70773bac9d4309dd557dcb90d97a4bc36f217c6545ef8f0"}, @generic="789656e3aaac9aaffdc8850d75fcf5cb1d233adb13cb5b48dfea0368c975ce98ed653a529c01b5bb57331c5effbf2909926c5b4435b3807c95bf5c35bd0a84d6044e514a6753eba0ce8633e0b8008ffc081e4868aa72f6da8d2b299d866f22123934b8c49da6d97e90c605a4c420e4bbdb26cc7e48bb6a14a3811d2f1731", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@private0}, @generic="85f31f29e4ef8ba31afe3edb130e8a5cf88fb7dbc3850170fd207b25720329d42333be85c3b79d1fe26422a4f7b8f0d34e668fff07ffa73083e9fd43074674cf121505a9a7aac846346c40ccc2474ad83055106c7f2a31d593b491e235e5b7ca742176c9bdbfebe812964a92549c83cb80e534bdbd1a01e17e07bf983f58ecea54c867cb5f4518591c804a6a1f0c6242bb5f71672cb65ceae3c4f16185d08032327951f23e02e006b1cae3275ff15cdf692ef269eb1fc71bb2a9a1978fd26e6145cccb8784e74e539424445a5f8d96867568b32c9f7701bd77f721027ec03f2db2e93bf360a0063374ca", @typed={0x8, 0x8c, 0x0, 0x0, @u32=0x8}]}, @nested={0x1267, 0x54, 0x0, 0x1, [@typed={0xc6, 0x33, 0x0, 0x0, @binary="3bcde6153ea471bdd2dbbb05502efa67860bd273d6387608fec784ee53081193b475530d82e407f591f889c64d2b0fb4fca36eed76979d373c1cd88c87b8d8cbf300d29e9ce8877d4886399e38060b47b2f1bbbb65e342f1461806a4af05328acf8b229ad2337c21dca5d1ae55e7d3ee7290584428ffb5c4ddc7a392a3970647d093c9839a23cc72552327ca773cf499643f8501b7261f9bcc641b4fa5b1cf07d02dab4c9a84c2e7bdfbedb35055d0526e7159b99d3fb2098d4c4429826c2acbd941"}, @typed={0x8, 0xd, 0x0, 0x0, @u32=0xa01}, @generic="7b9761ce483bb28aaa99a0d00fd7d7161b20144cfa54766707eeee64a5dfbc511084e81399060f1ba6d6dac649c8b36cc5bc43", @generic="3d092878d92a826f829584e1f5000b4b2cb72eb15e42864783ef02f68a2ec3cba69676114bda229ab4b23f0f947978c29674095292379958764b770dabf8f4d8f05d42b7e6c6595c94c3fa3196c2237576bc2c6203be16b91c3079d339f10f9243c0bab4979fc6d35ec182a44d63ed7a8f0075abe8b207e50e1862b5ac0bf0783e91c9cf8f0c3f176a72a2a7920506e469b6d64bdab07d0249d3191ad345d08ded9735ad1b0d7a1198717fd03a040f2b8b5b9a1c4671a1cca43014d634919639869c", @typed={0x4, 0x2b}, @typed={0x1004, 0x4d, 0x0, 0x0, @binary="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"}, @generic="9877405ffbe9e821cf088f0aa7e8b19df736ce013037c7a1783f946bae0d6b3d630d8563c83dfe58f8ee7523a47296f01653d051302e4cd7a817cd1ea66006ebf1f9f7ef8d004767c9c2e29bc9826ad15a62948f963d98fefe1915475d8006eefbd566df0a322c7ece0b4792561b26ecc88b8dce8fd9a8d23bab8a0d48b2a60bf7f7", @typed={0xc, 0x3d, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x2b, 0x0, 0x0, @pid=r18}, @generic]}]}, 0x1574}, 0x1, 0x0, 0x0, 0x24000080}, 0x10050) r19 = openat$hpet(0xffffffffffffff9c, &(0x7f000000b580), 0xa0040, 0x0) openat$cgroup_netprio_ifpriomap(r19, &(0x7f000000b5c0), 0x2, 0x0) fchown(r2, r3, 0x0) 11:17:10 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2070.310050] FAULT_INJECTION: forcing a failure. [ 2070.310050] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.312440] CPU: 1 PID: 26871 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2070.312613] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2070.313852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.313867] Call Trace: 11:17:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 26) 11:17:10 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x11) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x8ec8d000) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000001780)={'veth0_vlan\x00'}) r1 = io_uring_setup(0x47502, &(0x7f00000001c0)={0x0, 0x0, 0x20, 0x1, 0x1cf}) r2 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000001900)=[0xffffffffffffffff], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa55", 0x3d, 0xfffe) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes256, 0x3, @desc1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000580)={r5, r4, "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", "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 2070.314881] EXT4-fs (loop4): group descriptors corrupted! ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000002e00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001580)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000063180)={0xffffffffffffffd6, [{0x0, r6}, {0x0, r5}, {}, {0x0, r6}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r7, r6}, {0x0, r6}, {0x0, r6}, {}, {0x0, r6}, {}, {0x0, r6}, {}, {r3, r5}, {r4}, {0x0, r6}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {r7}, {0x0, r5}, {0x0, r5}, {0x0, r6}, {r7}, {}, {r4}, {}, {}, {0x0, r5}, {}, {}, {0x0, r6}, {0x0, r6}, {0x0, r5}, {r4}, {0x0, r6}, {}, {0x0, r6}, {}, {r7}, {r3, r5}, {}, {r7}, {0x0, r5}, {}, {}, {}, {r7}, {r3, r6}, {r4, r6}, {}, {0x0, r5}, {}, {r3, r6}, {0x0, r5}, {r4, r6}, {0x0, r6}, {}, {}, {}, {}, {r4}, {r3, r6}, {0x0, r6}, {0x0, r5}, {0x0, r6}, {r3}, {r3}, {0x0, r5}, {0x0, r5}, {r3}, {}, {}, {}, {0x0, r5}, {r4}, {r4, r5}, {}, {r7}, {r3}, {}, {}, {r4}, {r7, r5}, {r3}, {r3}, {r7}, {}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {}, {r3}, {r3, r6}, {}, {r3, r6}, {r3, r6}, {r7, r6}, {0x0, r6}, {r7, r5}, {r4, r6}, {}, {r4}, {}, {r4, r6}, {r4}, {}, {}, {r4}, {r4, r6}, {}, {}, {r3}, {r7, r5}, {r7, r5}, {}, {}, {r7}, {0x0, r6}, {}, {0x0, r6}, {r3, r5}, {r7}, {r4}, {}, {}, {r3}, {r4}, {r3, r5}, {}, {r7, r6}, {}, {r3, r6}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r3}, {r7, r5}, {r4}, {0x0, r6}, {0x0, r5}, {r4, r6}, {0x0, r6}, {0x0, r6}, {r7, r6}, {r4}, {}, {r7}, {0x0, r5}, {r4, r5}, {}, {r3}, {r7}, {}, {0x0, r5}, {r3}, {r3}, {r4}, {0x0, r6}, {r7}, {0x0, r5}, {r4, r6}, {r4}, {0x0, r6}, {r7, r6}, {r4}, {r4}, {r7}, {r4}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {r3, r6}, {}, {r3}, {}, {r4}, {r4, r5}, {r4}, {r3}, {}, {r7, r5}, {}, {}, {r4}, {}, {}, {0x0, r6}, {r4, r6}, {r3}, {r3}, {}, {0x0, r6}, {0x0, r6}, {0x0, r5}, {}, {}, {0x0, r5}, {r3}, {}, {}, {}, {r4, r6}, {r7, r5}, {r3}, {r7}, {}, {}, {r7, r6}, {}, {r4}, {r4}, {r3, r5}, {0x0, r6}, {r4, r6}, {}, {0x0, r6}, {}, {r3}, {r4}, {0x0, r6}, {r4}, {r3}, {r7, r5}, {r3}, {0x0, r6}, {0x0, r6}, {}, {r7, r6}, {0x0, r6}, {r4}, {r4}, {}, {}, {}, {}, {}, {r3}, {0x0, r5}, {r7, r5}, {r7}], 0x3c, "4d9a67aa95fdef"}) dup3(r2, r0, 0x0) [ 2070.316575] dump_stack+0x107/0x167 [ 2070.316603] should_fail.cold+0x5/0xa [ 2070.319870] ? dst_alloc+0x9e/0x5d0 [ 2070.320637] should_failslab+0x5/0x20 11:17:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2070.321418] kmem_cache_alloc+0x5b/0x310 [ 2070.322353] dst_alloc+0x9e/0x5d0 [ 2070.323087] rt_dst_clone+0x59/0x860 [ 2070.323863] ip_mc_finish_output+0x95/0x280 [ 2070.324761] ip_mc_output+0x853/0xa30 [ 2070.325547] ip_send_skb+0xdd/0x260 [ 2070.326305] udp_send_skb+0x6da/0x11d0 [ 2070.327104] udp_sendmsg+0x139a/0x2170 [ 2070.327886] ? mark_lock+0xf5/0x2df0 [ 2070.328634] ? ip_frag_init+0x350/0x350 [ 2070.329434] ? mark_lock+0xf5/0x2df0 [ 2070.330192] ? perf_trace_lock+0xac/0x490 [ 2070.331021] ? udp_setsockopt+0xc0/0xc0 [ 2070.331817] ? mark_lock+0xf5/0x2df0 [ 2070.332569] ? __lockdep_reset_lock+0x180/0x180 [ 2070.333506] ? mark_lock+0xf5/0x2df0 [ 2070.334280] ? mark_lock+0xf5/0x2df0 [ 2070.335026] ? lock_chain_count+0x20/0x20 [ 2070.335856] ? __lock_acquire+0xbb1/0x5b00 [ 2070.336701] ? lock_chain_count+0x20/0x20 [ 2070.337544] ? perf_trace_lock+0xac/0x490 [ 2070.338394] ? __lockdep_reset_lock+0x180/0x180 [ 2070.339333] udpv6_sendmsg+0x1bed/0x2af0 [ 2070.340162] ? udp_v6_push_pending_frames+0x360/0x360 [ 2070.341210] ? mark_lock+0xf5/0x2df0 [ 2070.341973] ? lock_acquire+0x197/0x470 [ 2070.342765] ? find_held_lock+0x2c/0x110 [ 2070.343583] ? __might_fault+0xd3/0x180 [ 2070.344390] ? lock_downgrade+0x6d0/0x6d0 [ 2070.345222] ? lock_downgrade+0x6d0/0x6d0 [ 2070.346078] ? sock_has_perm+0x1ea/0x280 [ 2070.346893] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2070.347929] ? _copy_from_user+0xfb/0x1b0 [ 2070.348772] ? __import_iovec+0x458/0x590 [ 2070.349604] ? udp_v6_push_pending_frames+0x360/0x360 [ 2070.350650] inet6_sendmsg+0x105/0x140 [ 2070.351430] ? inet6_compat_ioctl+0x320/0x320 [ 2070.352325] __sock_sendmsg+0xf2/0x190 [ 2070.353105] ____sys_sendmsg+0x70d/0x870 [ 2070.353948] ? sock_write_iter+0x3d0/0x3d0 [ 2070.354791] ? do_recvmmsg+0x6d0/0x6d0 [ 2070.355570] ? perf_trace_lock+0xac/0x490 [ 2070.356411] ? __lockdep_reset_lock+0x180/0x180 [ 2070.357340] ? perf_trace_lock+0xac/0x490 [ 2070.358194] ___sys_sendmsg+0xf3/0x170 [ 2070.358976] ? sendmsg_copy_msghdr+0x160/0x160 [ 2070.359895] ? lock_downgrade+0x6d0/0x6d0 [ 2070.360730] ? find_held_lock+0x2c/0x110 [ 2070.361575] ? __fget_files+0x296/0x4c0 [ 2070.362403] ? __fget_light+0xea/0x290 [ 2070.363193] __sys_sendmsg+0xe5/0x1b0 [ 2070.363959] ? __sys_sendmsg_sock+0x40/0x40 [ 2070.364822] ? rcu_read_lock_any_held+0x75/0xa0 [ 2070.365773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.366846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.367888] ? trace_hardirqs_on+0x5b/0x180 [ 2070.368771] do_syscall_64+0x33/0x40 [ 2070.369523] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2070.370589] RIP: 0033:0x7f9f7e251b19 [ 2070.371348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.375090] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2070.376618] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2070.378053] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2070.379489] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.380914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2070.382349] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:10 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:10 executing program 2: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xac, 0x0, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x10, 0x101, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x4022812, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x101) chroot(&(0x7f0000000280)='./file2\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)=ANY=[@ANYBLOB="fcff0000017bc983b748a000", @ANYRES32, @ANYBLOB="01000100000000002e2f66696c65302f66696c653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r1, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x20a700, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002e00)={0x0, "d7885b01064cde863ef84a335a261f1b"}) r3 = socket(0x1d, 0x80003, 0x1) signalfd4(r3, &(0x7f0000000080)={[0x4]}, 0x8, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendfile(r1, r2, 0x0, 0x100000001) [ 2070.458337] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2070.459380] EXT4-fs (loop4): group descriptors corrupted! 11:17:10 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0), 0x0, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2070.500980] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2070.502055] EXT4-fs (loop4): group descriptors corrupted! 11:17:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x2}]) 11:17:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 27) [ 2070.541329] FAULT_INJECTION: forcing a failure. [ 2070.541329] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.542771] CPU: 0 PID: 26905 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2070.543602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2070.544513] Call Trace: [ 2070.544815] dump_stack+0x107/0x167 [ 2070.545215] should_fail.cold+0x5/0xa [ 2070.545638] ? create_object.isra.0+0x3a/0xa20 [ 2070.546162] should_failslab+0x5/0x20 [ 2070.546578] kmem_cache_alloc+0x5b/0x310 [ 2070.547032] create_object.isra.0+0x3a/0xa20 [ 2070.547509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2070.548067] kmem_cache_alloc+0x159/0x310 [ 2070.548528] dst_alloc+0x9e/0x5d0 [ 2070.548914] rt_dst_clone+0x59/0x860 [ 2070.549325] ip_mc_finish_output+0x95/0x280 [ 2070.549828] ip_mc_output+0x853/0xa30 [ 2070.550247] ip_send_skb+0xdd/0x260 [ 2070.550653] udp_send_skb+0x6da/0x11d0 [ 2070.551093] udp_sendmsg+0x139a/0x2170 [ 2070.551541] ? mark_lock+0xf5/0x2df0 [ 2070.551946] ? ip_frag_init+0x350/0x350 [ 2070.552401] ? mark_lock+0xf5/0x2df0 [ 2070.552813] ? perf_trace_lock+0xac/0x490 [ 2070.553289] ? udp_setsockopt+0xc0/0xc0 [ 2070.553722] ? mark_lock+0xf5/0x2df0 [ 2070.554159] ? __lockdep_reset_lock+0x180/0x180 [ 2070.554664] ? mark_lock+0xf5/0x2df0 [ 2070.555093] ? mark_lock+0xf5/0x2df0 [ 2070.555519] ? lock_chain_count+0x20/0x20 [ 2070.555992] ? __lock_acquire+0xbb1/0x5b00 [ 2070.556470] ? lock_chain_count+0x20/0x20 [ 2070.556949] ? perf_trace_lock+0xac/0x490 [ 2070.557438] ? __lockdep_reset_lock+0x180/0x180 [ 2070.557985] udpv6_sendmsg+0x1bed/0x2af0 [ 2070.558462] ? udp_v6_push_pending_frames+0x360/0x360 [ 2070.559053] ? mark_lock+0xf5/0x2df0 [ 2070.559480] ? lock_acquire+0x197/0x470 [ 2070.559937] ? find_held_lock+0x2c/0x110 [ 2070.560403] ? __might_fault+0xd3/0x180 [ 2070.560859] ? lock_downgrade+0x6d0/0x6d0 [ 2070.561351] ? lock_downgrade+0x6d0/0x6d0 [ 2070.561860] ? sock_has_perm+0x1ea/0x280 [ 2070.562326] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2070.562930] ? _copy_from_user+0xfb/0x1b0 [ 2070.563414] ? __import_iovec+0x458/0x590 [ 2070.563901] ? udp_v6_push_pending_frames+0x360/0x360 [ 2070.564491] inet6_sendmsg+0x105/0x140 [ 2070.564938] ? inet6_compat_ioctl+0x320/0x320 [ 2070.565445] __sock_sendmsg+0xf2/0x190 [ 2070.565896] ____sys_sendmsg+0x70d/0x870 [ 2070.566368] ? sock_write_iter+0x3d0/0x3d0 [ 2070.566856] ? do_recvmmsg+0x6d0/0x6d0 [ 2070.567300] ? perf_trace_lock+0xac/0x490 [ 2070.567777] ? __lockdep_reset_lock+0x180/0x180 [ 2070.568306] ? perf_trace_lock+0xac/0x490 [ 2070.568794] ___sys_sendmsg+0xf3/0x170 [ 2070.569244] ? sendmsg_copy_msghdr+0x160/0x160 [ 2070.569777] ? lock_downgrade+0x6d0/0x6d0 [ 2070.570243] ? find_held_lock+0x2c/0x110 [ 2070.570715] ? __fget_files+0x296/0x4c0 [ 2070.571168] ? __fget_light+0xea/0x290 [ 2070.571630] __sys_sendmsg+0xe5/0x1b0 [ 2070.572055] ? __sys_sendmsg_sock+0x40/0x40 [ 2070.572550] ? rcu_read_lock_any_held+0x75/0xa0 [ 2070.573076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2070.573680] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2070.574247] ? trace_hardirqs_on+0x5b/0x180 [ 2070.574747] do_syscall_64+0x33/0x40 [ 2070.575159] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2070.575751] RIP: 0033:0x7f9f7e251b19 [ 2070.576183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2070.578315] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2070.579193] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2070.580018] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2070.580850] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2070.581673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2070.582504] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:24 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/72, 0x48, 0x200001) read(r1, &(0x7f0000000300)=""/102385, 0x18ff1) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12000, 0x169) fsetxattr$security_evm(r0, 0x0, &(0x7f0000019480)=ANY=[@ANYBLOB="ff61d9bcde7a630497810a4d3612c6a8dee6281aff0153d4f1b9007df5e2e8c7eb88627e5c92a16a38"], 0x2, 0x2) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) io_uring_enter(r1, 0x247, 0xf694, 0x2, &(0x7f0000000080), 0x8) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0xe0ffff}) openat(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0xc000, 0x120) lseek(0xffffffffffffffff, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x0, 0x1, &(0x7f00000194c0)=[{&(0x7f0000000180)="0565fc44988bc5af0c80276687bbfdfaba2b22be141ab42714afbef719f36d64c4426d174e944203147b66bc", 0x2c, 0xffffffffffff0001}], 0x200000, &(0x7f0000019500)=ANY=[@ANYBLOB='shortname=winnt,iocharset=iso8859-13rtname=mixed,roDir,\x00']) pwrite64(r2, &(0x7f0000000000)="050efa5ce16a3fc2e7a9fc30c68145813282d1115a849d6e", 0x18, 0x4) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 11:17:24 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:24 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000062900)={0x0, ""/256, 0x0, 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, '\x00', {}, 0x40}) ftruncate(0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x100, 0x2, &(0x7f00000001c0)) fallocate(r4, 0x60, 0x8, 0x6) lstat(&(0x7f00000002c0)='./file1\x00', 0x0) syz_open_dev$vcsn(0x0, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000d40)={r3, 0x0, "3a89e912ab485274d4f6a5a29ec4c0991b950cbca4f5382b533663725c3c2ca66d25e615a489021ab2882ef46a11eba99172c0f2f3d253edb56e1b7bce155b625c686b497b632157e87ed4914edb75a2693860052baf9ecc1f373b0009cc4c0f46c872879bc611b21944e096d9a02e47261dc6040c252c3cf204602adbc1eead435f4b7b0d4e99250ccbbb751387d54e48bd1d5da80e9ac20c79d9d4b568beb1144c7bd307d64682416547931f46cdd4105c790c88b3183229bd618a83e7d7a24af8b4bf09c768a167cc7ec86a3740aebd4939222abc3aab1fbe076837ead7f5cefb2b6e897fbecfda8d909b8eb1d4affc579ec9520a0260a6c61914a10dc39a", "05bd8470b37a620d015e7a34eaf6e815deaec01dfa4960900682336f0fbd3995d6ad209d1eee8b208464354a87e4f4a7cd1191239ad96fdd40abf7c13f4bbbadad37b5cafd01869aec947111551e623a66275890db1e8b94854e51ca2eefff32d5d286b4e6ee0b5ba6fcf11afbbc010a6c0a54f707819cf765f7a68f1a3eeba3c26cc30d8dbdd1ff94b404a6c7c1a00320bda05aaab737d02bd7d25e86db278c0430c677a77c9fb15a672befe910d50b3bdb6ae034a1a775e11d1703c2e242bc03cffa7d7000d16ef3217d0f39a0f1544f984f6e37cb3bae059f36be56682bd07bcaa153d720406298e95c4b0a68e647db55301a4406db75defef73214fca21b9a150acfc29433193adc7ec6c6002968374f9cba8d288f54be6c790c6512491e55b9116c968f1b67838580465cdf6eab76b257a6099c8176ff86d4604a5106095bc68bf70518536e69d5ef2019d228646ca42913d4da5ce28c0512e84cdf0874e5ae7acc65d1c42d32490febe5c4fbbbd6cb0bb2071d517db8e228978721a216aff60c6ea98faf906276e350218cffdd9695c0b0c2fbd94dceaa1067022f2de97e83dff843298cc91f074c75c8bf3c2cb8b4cf9296dfb89fba26b33b35b2835da601ec1cf979813e4e814c5e29e0a846c829fc366f7561fc4ab50f2a5299eb6d629d32757a0387b0c18d758406148588798a64636050f9151801a80e5f57e4ba4eb29cb25ca94e6e9524cbcb437175afa34d2d3df87ff5bd9d21b42011beb5e872ffb83e215aa758bef5ad27c9af4b6b4811f4bc8b5596849e6d5d7614570bdc34f6712780962c1d05b05a835ca1f0d05c66c8eb9ecc3167107698897826e12e21f015dc8e36e85e41073afddf35f4e723a6cc7416c561cbb066b91fa91f59d268f7682aa0933dd6e2ed2cb07b7cc97028401aa648196def3b5a38229bdc3aac154c5fbdb24896c5e140bc658665699311d714ba17cebd121871d17b64c7f111ff3e68b681a23b5e9cac41aff737bdef67fbf8f49d9571e735f411669c14846bb38b368af44175f5b04e5bd6ecf39c0c2b02f8dd2db2d4b38894ecfc602da08ab93f020cdfff02547c44f0911f35621f96b992d053041f2f8cac278ead852d797f9dca9e3ecaede9de1a31edc002130481c26def0a5c08acf8f4b40390f580c736ea65cbdcccb82f6dfbb867defb9ee6316411b52e5c0b0a1cfce36f80ffbd8ae667358a80d1e66c448e3c5f89a18f197dbeaaa2041e8aa7caba139f0f295349a135126204312de55031ac15ff17cad084c09e72c7220a3d5cb74e770282862436b3381fbf9b87d6c52a7a52f4c440a6513e5f33970f2b23cbf42908448eda4f428ca4798cdbfbf05b275cb7406083c8dc0bf070d3d21ff340c544c9d09a4e6ce6746aa2834d26d35d194432f39bf21a01743cf985cd8e449fc0b55e061add1b8f0afb3b06b97bf3bad50ab4bb9c5a593e88d298eb989fbd7b307f2644a292092083d58c4ad5426db1d90a516e56ccf6a37bd43a149fc6379fee458487ac7075a2b337e8f3910dca3a6d79ba17157df9519a4dc51cd6e1d130150a18bfc2b6ed98cd176d5f7ccba02fe7c726e0f5ae60d714a52e09768f838df9ae4d1d3e89021835fdcbfdac76499d78e2dd4f5b949c5b96f19eb89bb6cc52aea7c16d0af3ffc7f5e71f09f3400feeb73aab19f353e28bfe9fd7ebf003974d5eb4f278d6f26296661bee6a806d6c2a05f1083d3976fdf60e01bb3eeea6ab56144705d69933ecc04535910411a902e16c76bf45990a76ad001ab3bbf03c622e963be00e2e4808676031ef421c9370845b263cc370adeff3a4c51209c4cb94658c506e7cadae5997a63e533a26f63c69bcdf765e0292fa0519777322bbbc7862c23fa766f2c28081da05c87b8a947686fbc5327724b99b789a91659bc744955f2669dae8b89f363953a62dc41f2a5d1521a7294d21e14da62a9e6a727eac584d577675ac0e6f2dfda2b2e3f8f7606e9ebee66f5030430ac48625072806596f3d517b72d3cf22ca86c061ce6a70cb23c70b1685bc0bf02563d8ab157c15fe5c0bd126bbaad67e3949c08920a8d15d47268abd3d9407f06f204009200cf52738273ea5013191821833087105ed6cd3f7dc032a461da06ab7ac5eb8fcb40e4f06b92fe37942cbbe412ae620d94e43c7028ca9e830a44fd49946c794c9fe6d3f5f64ad646bca9dbfef7b981d51ee05b427bcc24390cfff768a65871712265a193601ae85af10ac6e786e70bbfbc0488e1a91a7f53343590dc3f4bed38b9609ce34373c5acb4d554049a673d5971e17bbff6b69da25764211ddbf0bec92c564dca58d9448eccce02b02d07cb7e840b5eb5d3157a8e5cc780412a9d2dcc782be2fff5ce4426e1cc1a6e5befc6e189836d093dcb70b938850c97465d3857ea44c41fb38d223d54873f989f27b460a9147b62d44d3f806b15936554deeee93963855ea41d5d8db7c1e0908a51d0c07cc833ec4b0091cf45dc62ddeae24a729a1a33826a684c49750109f31ad937ec1f0f41d3dbdf4dafd6c95ae4940cabd0cca51db1560419c600697b16b0061b5fe4a6cda6a6456b6a2a4419bb6fe7c535c3f95b10a3c03c81a2a02eb36d09a191b23cf5dfba3776dcb491b231c79892376ebfdaabdb0cd8703618b61752426ad15a72a7a53905e781d3cfa4433ed6c86df5beaab208cbbd857d2259ca984fd5f27b9bca046616d0aa7ee5eda311b48efd9a3fc2d4d2071fe0fd88ff986ecaf9b58511735b5fb2217ba93d55d1f804f610ae0ddcc30b94691f44b278702c70c014a9dcfa9571de0fb71f72ac0a0b490e6b8883e9f0385bb48a414208634f800d2e78af6a6f3a92844290cbf29ce8fcb24350d25f27b162c7cefc47f91b39e10f3129a6cc70031bc0980a34135030a58a9fad7ef51280fe3b085d3eacff70ac9ea66dd2899019f1d7e3068f607d1ac0981c1f371a401a90a58e833275acfbf6f8240c8138d8e0e6749e5ba94ba97958897cd2973d5172a87f0b097075c4e02996371b9b3ff376698fd2c523625a73cb8efac83e78adf01f4c943bbfbeac0cc0abd74e50f1267e2cf4ba75649af01319b108582d3f2a2f4e71d1a535cd749a1d643b0223216bff415a44168e553ee44c03b3262204b6df255ee640fd31e039356e780219bdd3799946b08375d05470eb49ec7af7a7437eb66ccc751232d911c6b79266d739bd15b2ea0151c18333006d5c754a6b9f603d8eb9661eab2a5e7cafee3bd6bdeb8ce3322bf04408ef4f687248e985edc68ffd2549152f39cca287e50623b418d1c95fb07e961de09401ce6f95c819e3312dad677f9fb4e72ffacefb9104e443236550bc5ffb5af600508f3669923e401393312d2fe9af559c6672b134988c247b0920c05845d4645519c18c0a52ec394c8607802f803c304a12509f1b739185d51ee35b8966e8557b1e93c1f67fd09961a4e6baae976aa427f7f9c4ab73454e0ce951a62b36636777950d2c44d2fadcdefc68c7c1906cdc95a7714f2d6e35cdc74dccb6a732a5f53070c701935426bccbc69f272eb3e2dd3068a456ddb58834fc0d6a5f50dba262c5448d90c441c239bc1bc42593d78a4169f20e0a22d196bdc6ff225efa6293747d225372c08c49b380e7215c4160b2cc890bb03886e2c67073385e0cec5887db43c7eb96409ea79e190a25044abfe81653e391db8e0e7774527bb021ba105bb77408e7714ee1d7336ae4c8188b5c3354013a418e778348fab016aef1c53a1db2b5dd1c0d50d21771370c076bc8a5748153d5b65022783565d96687ef73261facbd54e2e8bb3ababbd5ffbf98ea0ca96df267159bf602f11962528b5b48fa40b64da14073417e1a72af7f91c0a124a6e92c57bea353607e3ad05555e8aa86c3cf271972f049e59cae6bb75d095ae2f254a13d3162e8d1a527d349e393e1a4187dcd5372655f25d2b75f1b4bdc2106117fd75f51f1dbd664f395bb5d1e69ba65ef804e3e01bd48f3ab74961481353b5fd564b657c1ead295f786fa80681cc4d68320f9e70a2501da6db3f1fecac9616abaa4559ea328b775e15b3ebd0f15ac817b495440ee50d86a16e48ffa7997c8bb8605f0b8d5bd15afc2c05e16f418df65129379ac8a77fd611f8abd4be816e473ea653dc2123114fae94a96cc7601d686089312454c284c5b668386ce077f281d3fa77c5073fd9f7dde2126bc0f8444f2a9ce71ad7f2e245314ac937fbb44f85fed1cc062851bcd92858bd03fea068588fc02edd3c8f63fa9cab0d7d57578e6c70de177a88e73eb6b71cd5f12d67043386d73350f37d2b97b16dcc9f4923b5c484075c7182dd89473ef90b0b17702946d8904e47ba6d4c6a333e00e832ebed696fb96f18d6b6fe316cae9315ccbb3db2090462bb7eb16118f61ce2621af1bffa216fbc540b4bfad36d66b1e514f967bc4200f21f662e4eae1220d1f5450e69ffdeb6d475e73bfe786210616dee4dc3b4d38a869638951f6d920b9f1aa6854cb9bee2e53a2337d4e7de447d8ba28409ecfb7a250c402b0e8a313f36fab1735e9ece9ec24fdc35aafc0ade243b88817cadf81488efd9f65d4d2e8b2f94f476bb79903e4000024f2772f032b5b9534e562bb15ba28ddb367233ed991833c089f8b06ecc1b94e06313ba5732138b758ab88837462c46063b92ea731717ce80ce319a12ad488c0f53ad3d2ed6968254d9c7c0295e1c64a59abf317135f228162abb97d99d0c387df174301838945f72da582a5ce0509f1d7410c917272364ab7aeb63fc1dd779e90cccb3952abb1ba0353347d7f6a7e2aafea925495f1b6fa7255a7fbab8f5123c23959de76ed6a3dce1b4c7f7e39ab591bbcb3930ac72a9804103c00a1eef02b5e5bf7fe602b3a59b72d3b5ecce8155dc74557ac21e636a38399bb59641d40f3fcba26da0e42b07eb0b3c765363e3d034eabb4b6a52ddccd5050c340e581f164bab50597a346d9ed6816c0da3c8d909a88126386a9b07743ac29594d10437c4b0ec8621c79605e094ddf1583aa0f170576429ca23909ff302680b8c82af0c3486e03370cc8683d8c7c41e5c37fac8207ff298de88f80d9136a35fc692f66445b66174e8892f39f1c97f834a57077b48c8e1eb10db25b6ecb70047c908745bd8865b2bc8e6ed1951cbb0ae713b2f6dcaf615a47e2162c9043f55f9b74f336829c03345e71e556b33e0d06b331008ffb07f898ec9dce856088fc94a248067fb706c8fec37e7c3c23f65bef40cc46cda6db416fdb59bc864ce975b6df425a9238ca1d747c2e174037863a0f5ddb689603a3e8d79b58d71da7115540a1a2c28d9ca0c33631e5cccc0cb1a98b9e0bf95ee58ab6b19e364194f1324233b2bf08803fc417c68057de827aaf844af900ff71178"}) 11:17:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x3}]) 11:17:24 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:17:24 executing program 0: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4", 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000040)={0x2, {{0xa, 0x4e22, 0x0, @empty}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000f50000000001000000ed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000006aab9c8482490000004e4ec1c00000"], 0x110) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)={0x2, 0x7e850000, 0x5, 0x0, 0x0, [{{r0}, 0x8e}, {{}, 0x2}, {{r2}, 0x20f}, {{r3}, 0x800}, {{r0}, 0x1ff}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) close_range(r1, r5, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000140)) r6 = syz_open_dev$rtc(&(0x7f0000000080), 0x7, 0x4a481) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) unshare(0x58040280) unshare(0x10040200) 11:17:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 28) [ 2084.944761] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2084.946746] EXT4-fs (loop4): group descriptors corrupted! [ 2084.951015] FAULT_INJECTION: forcing a failure. [ 2084.951015] name failslab, interval 1, probability 0, space 0, times 0 [ 2084.953772] CPU: 1 PID: 26930 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2084.953802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2084.953809] Call Trace: [ 2084.953832] dump_stack+0x107/0x167 [ 2084.953857] should_fail.cold+0x5/0xa [ 2084.953876] ? lock_release+0x680/0x680 [ 2084.953895] ? skb_clone+0x14f/0x3d0 [ 2084.953917] should_failslab+0x5/0x20 [ 2084.953935] kmem_cache_alloc+0x5b/0x310 [ 2084.953952] ? lock_acquire+0x197/0x470 [ 2084.953977] skb_clone+0x14f/0x3d0 [ 2084.954013] dev_queue_xmit_nit+0x3a7/0xb00 [ 2084.954049] dev_hard_start_xmit+0xab/0x6f0 [ 2084.954078] __dev_queue_xmit+0x17ec/0x2710 [ 2084.954105] ? find_held_lock+0x2c/0x110 [ 2084.954129] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2084.954160] ? mark_held_locks+0x9e/0xe0 [ 2084.954186] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2084.954212] neigh_connected_output+0x382/0x4d0 [ 2084.954248] ip_finish_output2+0x6f1/0x21f0 [ 2084.954271] ? ip_copy_metadata+0x5f7/0xa40 [ 2084.954292] ? ip_frag_next+0x9e0/0x9e0 [ 2084.954311] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2084.954341] ip_do_fragment+0x189e/0x1dd0 [ 2084.954360] ? ip_frag_next+0x9e0/0x9e0 [ 2084.954395] ? ip_finish_output2+0x21f0/0x21f0 [ 2084.976984] ? nf_hook+0x137/0x510 [ 2084.977729] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2084.978788] ? nf_hook_slow+0xfc/0x1e0 [ 2084.979600] ip_fragment.constprop.0+0x174/0x240 [ 2084.980570] __ip_finish_output.part.0+0x3db/0xb50 [ 2084.981572] ? ip_fragment.constprop.0+0x240/0x240 [ 2084.982595] ? netif_rx_ni+0xe7/0x300 [ 2084.983390] ip_mc_output+0x401/0xa30 [ 2084.984181] ip_send_skb+0xdd/0x260 [ 2084.984939] udp_send_skb+0x6da/0x11d0 [ 2084.985755] udp_sendmsg+0x139a/0x2170 [ 2084.986560] ? mark_lock+0xf5/0x2df0 [ 2084.987331] ? ip_frag_init+0x350/0x350 [ 2084.988156] ? mark_lock+0xf5/0x2df0 [ 2084.988919] ? perf_trace_lock+0xac/0x490 [ 2084.989779] ? udp_setsockopt+0xc0/0xc0 [ 2084.990591] ? mark_lock+0xf5/0x2df0 [ 2084.991354] ? __lockdep_reset_lock+0x180/0x180 [ 2084.992321] ? mark_lock+0xf5/0x2df0 [ 2084.993100] ? mark_lock+0xf5/0x2df0 [ 2084.993867] ? lock_chain_count+0x20/0x20 [ 2084.994750] ? __lock_acquire+0xbb1/0x5b00 [ 2084.995626] ? lock_chain_count+0x20/0x20 [ 2084.996504] ? perf_trace_lock+0xac/0x490 [ 2084.997358] ? __lockdep_reset_lock+0x180/0x180 [ 2084.998336] udpv6_sendmsg+0x1bed/0x2af0 [ 2084.999218] ? udp_v6_push_pending_frames+0x360/0x360 [ 2085.000284] ? mark_lock+0xf5/0x2df0 [ 2085.001063] ? lock_acquire+0x197/0x470 [ 2085.001866] ? find_held_lock+0x2c/0x110 [ 2085.002728] ? __might_fault+0xd3/0x180 [ 2085.003543] ? lock_downgrade+0x6d0/0x6d0 [ 2085.004397] ? lock_downgrade+0x6d0/0x6d0 [ 2085.005275] ? sock_has_perm+0x1ea/0x280 [ 2085.006129] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2085.007186] ? _copy_from_user+0xfb/0x1b0 [ 2085.008049] ? __import_iovec+0x458/0x590 [ 2085.008896] ? udp_v6_push_pending_frames+0x360/0x360 [ 2085.009961] inet6_sendmsg+0x105/0x140 [ 2085.010770] ? inet6_compat_ioctl+0x320/0x320 [ 2085.011676] __sock_sendmsg+0xf2/0x190 [ 2085.012488] ____sys_sendmsg+0x70d/0x870 [ 2085.013325] ? sock_write_iter+0x3d0/0x3d0 [ 2085.014221] ? do_recvmmsg+0x6d0/0x6d0 [ 2085.015007] ? perf_trace_lock+0xac/0x490 [ 2085.015872] ? __lockdep_reset_lock+0x180/0x180 [ 2085.016830] ? perf_trace_lock+0xac/0x490 [ 2085.017688] ___sys_sendmsg+0xf3/0x170 [ 2085.018496] ? sendmsg_copy_msghdr+0x160/0x160 [ 2085.019438] ? lock_downgrade+0x6d0/0x6d0 [ 2085.020301] ? find_held_lock+0x2c/0x110 [ 2085.021154] ? __fget_files+0x296/0x4c0 [ 2085.021969] ? __fget_light+0xea/0x290 [ 2085.022790] __sys_sendmsg+0xe5/0x1b0 [ 2085.023564] ? __sys_sendmsg_sock+0x40/0x40 [ 2085.024440] ? rcu_read_lock_any_held+0x75/0xa0 [ 2085.025408] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.026494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.027542] ? trace_hardirqs_on+0x5b/0x180 [ 2085.028432] do_syscall_64+0x33/0x40 [ 2085.029187] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2085.030242] RIP: 0033:0x7f9f7e251b19 [ 2085.030264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.030275] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 11:17:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:17:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2085.030296] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2085.030308] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 11:17:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file1\x00', 0x400040, 0x1c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x7f) open(&(0x7f0000000180)='./file1\x00', 0x80000, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r2, 0xffff) sendfile(r0, r1, 0x0, 0x20d315) creat(&(0x7f0000000140)='./file1\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x401}}, './file2\x00'}) [ 2085.030320] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 11:17:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x4}]) [ 2085.030331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2085.030344] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 29) [ 2085.246228] FAULT_INJECTION: forcing a failure. [ 2085.246228] name failslab, interval 1, probability 0, space 0, times 0 [ 2085.247500] CPU: 0 PID: 27067 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2085.248248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2085.249153] Call Trace: [ 2085.249451] dump_stack+0x107/0x167 [ 2085.249871] should_fail.cold+0x5/0xa [ 2085.250303] ? create_object.isra.0+0x3a/0xa20 [ 2085.250812] should_failslab+0x5/0x20 [ 2085.251228] kmem_cache_alloc+0x5b/0x310 [ 2085.251673] ? lock_acquire+0x197/0x470 [ 2085.252107] create_object.isra.0+0x3a/0xa20 [ 2085.252598] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2085.253150] kmem_cache_alloc+0x159/0x310 [ 2085.253601] ? lock_acquire+0x197/0x470 [ 2085.254049] skb_clone+0x14f/0x3d0 [ 2085.254443] dev_queue_xmit_nit+0x3a7/0xb00 [ 2085.254922] dev_hard_start_xmit+0xab/0x6f0 [ 2085.255398] __dev_queue_xmit+0x17ec/0x2710 [ 2085.255879] ? find_held_lock+0x2c/0x110 [ 2085.256335] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2085.256869] ? mark_held_locks+0x9e/0xe0 [ 2085.257339] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2085.257951] neigh_connected_output+0x382/0x4d0 [ 2085.258479] ip_finish_output2+0x6f1/0x21f0 [ 2085.258988] ? ip_copy_metadata+0x5f7/0xa40 [ 2085.259486] ? ip_frag_next+0x9e0/0x9e0 [ 2085.259944] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2085.260477] ip_do_fragment+0x189e/0x1dd0 [ 2085.260953] ? ip_frag_next+0x9e0/0x9e0 [ 2085.261424] ? ip_finish_output2+0x21f0/0x21f0 [ 2085.261953] ? nf_hook+0x137/0x510 [ 2085.262382] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2085.262989] ? nf_hook_slow+0xfc/0x1e0 [ 2085.263449] ip_fragment.constprop.0+0x174/0x240 [ 2085.263994] __ip_finish_output.part.0+0x3db/0xb50 [ 2085.264569] ? ip_fragment.constprop.0+0x240/0x240 [ 2085.265139] ? netif_rx_ni+0xe7/0x300 [ 2085.265589] ip_mc_output+0x401/0xa30 [ 2085.266037] ip_send_skb+0xdd/0x260 [ 2085.266469] udp_send_skb+0x6da/0x11d0 [ 2085.266903] udp_sendmsg+0x139a/0x2170 [ 2085.267352] ? mark_lock+0xf5/0x2df0 [ 2085.267789] ? ip_frag_init+0x350/0x350 [ 2085.268252] ? mark_lock+0xf5/0x2df0 [ 2085.268686] ? perf_trace_lock+0xac/0x490 [ 2085.269167] ? udp_setsockopt+0xc0/0xc0 [ 2085.269632] ? mark_lock+0xf5/0x2df0 [ 2085.270050] ? __lockdep_reset_lock+0x180/0x180 [ 2085.270599] ? mark_lock+0xf5/0x2df0 [ 2085.271033] ? mark_lock+0xf5/0x2df0 [ 2085.271463] ? lock_chain_count+0x20/0x20 [ 2085.271944] ? __lock_acquire+0xbb1/0x5b00 [ 2085.272435] ? lock_chain_count+0x20/0x20 [ 2085.272923] ? perf_trace_lock+0xac/0x490 [ 2085.273398] ? __lockdep_reset_lock+0x180/0x180 [ 2085.273946] udpv6_sendmsg+0x1bed/0x2af0 [ 2085.274436] ? udp_v6_push_pending_frames+0x360/0x360 [ 2085.275040] ? mark_lock+0xf5/0x2df0 [ 2085.275477] ? lock_acquire+0x197/0x470 [ 2085.275938] ? find_held_lock+0x2c/0x110 [ 2085.276402] ? __might_fault+0xd3/0x180 [ 2085.276863] ? lock_downgrade+0x6d0/0x6d0 [ 2085.277348] ? lock_downgrade+0x6d0/0x6d0 [ 2085.277833] ? sock_has_perm+0x1ea/0x280 [ 2085.278318] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2085.278926] ? _copy_from_user+0xfb/0x1b0 [ 2085.279413] ? __import_iovec+0x458/0x590 [ 2085.279905] ? udp_v6_push_pending_frames+0x360/0x360 [ 2085.279919] inet6_sendmsg+0x105/0x140 [ 2085.279940] ? inet6_compat_ioctl+0x320/0x320 [ 2085.281998] __sock_sendmsg+0xf2/0x190 [ 2085.282452] ____sys_sendmsg+0x70d/0x870 [ 2085.282924] ? sock_write_iter+0x3d0/0x3d0 [ 2085.283410] ? do_recvmmsg+0x6d0/0x6d0 [ 2085.283861] ? perf_trace_lock+0xac/0x490 [ 2085.284346] ? __lockdep_reset_lock+0x180/0x180 [ 2085.284889] ? perf_trace_lock+0xac/0x490 [ 2085.285375] ___sys_sendmsg+0xf3/0x170 [ 2085.285387] ? sendmsg_copy_msghdr+0x160/0x160 [ 2085.285402] ? lock_downgrade+0x6d0/0x6d0 [ 2085.285414] ? find_held_lock+0x2c/0x110 11:17:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x5}]) 11:17:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0xb7d7, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x432, 0x4) sendmsg(r0, &(0x7f0000001640)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "475300cc111d845089a8c3068cf4ada46207f33a62ea683f90df000000000000000000000000000000000000000000004000"}, 0x80, &(0x7f0000001780)=[{&(0x7f00000000c0)="d9ce4b46bf0f2c16e534b8", 0xb}, {&(0x7f0000001740)="e6dba0", 0x3}], 0x2}, 0x0) recvmmsg(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x9, &(0x7f0000000780)=[{&(0x7f0000000200)="79395d4f04d5f125827068309d94ca033d16861f6059e98508dafbb65c939da91cc5dfa2684e1544c130b69097a3e61d6f77846f93cb3178a87aaa68c3911ceb875f59acd27e9e6ce590dca74751c290327868b2f4255f71a0df9da2fa1dffea9cc1feeb1a6484ef6b75c778ed231d0c83f49b5da2da7d2c4b1c407b5af338a728dc2a75bd1a90753b862d82d6ce4c41a0de2b9fb85344d065fbce22e580ee2eb1d856cac0a6b606d9d6b38999872f32844880ccfdd7ff38cda004b1fa36d8c75fcbd3d6452a4c8924d7a449c918a64c21efa4080321fc", 0xd7, 0x1}, {&(0x7f0000000300)="6a12b28d731bd4332721077768f2206ad02833b8ad293cdd5d8e307cf4af407ac116349d89c84f36c61aa55d1feb92db054b6f0c6cdd74045a33905b97ad45815283925a86f1d63244b13f8094fc7594fc1c50e301654ba3381eacad857cf6b9abeb750d29d862609eaa380c16f188079fa73b6b27cb90729d459718d47883d56b34a4bbe8ab48a8dd093f0a648828d61b1e68383e5a07673627a5b4a5a19c28f6ca0d89b60c2d87f262991ae1d37e30333b81cdc1ad3ec220161fb64fb13a1f6e6f8d2ce688749c2594955f23af76450e6779f7e7c3573438162708d7abffc857a802349440a127d9aa17f9c1181a08dc02", 0xf2, 0x80000002937}, {&(0x7f0000000400)="29379a17a3e4f4f2fd7233df2ebeb2c79ac7cc082d22527ec867d3295c819b16f33570c1e593f2fbb62097d4a5b244229472e4036ba3966bffa26fde06d7264c4611e83176af3e8cc70f6dcd3c2ed93abe2a16a7e4050c680a1a254e6f604d14731d7f179a47f7ccbf836a1f8222fd82fc12656abd97b65d7a248cfb72542f3954b0e8de19e099ba2ba082981fb50049720c4ed9a94a2adb4804312ee5e43ac1c01cc680", 0xa4, 0xfffffffffffff801}, {&(0x7f00000004c0)="5c443c458346654191f94ad85eff9add4483a5659a1bbb9bdb7a932cdc2e06a6fb5e9703fdafa1e8f5dedaaed30ec57432021ecd762fab2977e20227db23a38cee80c4cf1cd4da9d9e91371a1f5424c757751b0c53b004df", 0x58, 0x8}, {&(0x7f0000000540)="e6f85a7bf784dbb8821094ab50b604442a8cd4ad1bb6fab905791c3f6f1dda03323425b07b65a3462e13bff88e1fd0a245b7f51dcb4aab6337776db02aeff902dd7b70155eb7355265544790e90b00eeaefcfdfdb0", 0x55, 0x7}, {&(0x7f0000000180)="3d414756e6c93f34ddeea74a52f421099de1f94ffe16acc377d47b9e5b217eadb0eaa6a1d0741bcb2fb5334e254d772e2ffab6297a4cad8ef35fd26b04", 0x3d, 0x9}, {&(0x7f00000005c0), 0x0, 0x1}, {&(0x7f0000000600)="d11be5ae264ae23b58a5ded93bf5f06fbb736a6a5bab770938a7f4360cac05425727c2a60a06c922c61e7b74e16d6e31535dd0a026838bdc4dcfd8bb2af5e89498e367d2ea6a5e03c85831901dedc5e7e26354abbfbe0c81ee3fa82bf44b3f8f31d2a0eb7d059f24780c36a9949b66f369e468990847764b99a44e3c4af32a1d73b1ed3c7373a734010b09e02478d20da67ac353602067cae79c06d01026a74dbf2cbcdbea94444fc4da82a4a8af755a1a475851b9c4c93abfa17697c4cab8c24babef418e11679dc8f1fdbc74a59ed43b3d4eab41a17186ac9321ab1fa77b3f1f35", 0xe2, 0x9}, {&(0x7f0000000700)="c81cba2cb4612be38cb214879cfd37e502b50ad7a49a43d7776cda35d8c9b844ba7beb55b66cb32ac9e8a4319069645e5528dbeca05fae0672d1e48ee8a7e95e68e048e6f48b1e22f1e1ee478d9ee8d7c767ed803046187c7e3819a558b171c1889098d8f0752079e1be0e7c0716565c259c6dd5a0332b28735d9e831d", 0x7d, 0xa}], 0x1000, &(0x7f0000001180)=ANY=[@ANYBLOB="757466383d312c756964d83d", @ANYRESDEC=0xee01, @ANYBLOB=',pcr=00000000000000000018,fsname=l\"[,seclabel,\x00']) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r2, &(0x7f0000000140)=""/4096, 0x1000, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000001140)={0x29, 0x1a, 0x0, 0x17, 0x8, 0x9, 0x6, 0x83}) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) [ 2085.285432] ? __fget_files+0x296/0x4c0 [ 2085.285450] ? __fget_light+0xea/0x290 [ 2085.285465] __sys_sendmsg+0xe5/0x1b0 [ 2085.285476] ? __sys_sendmsg_sock+0x40/0x40 [ 2085.285487] ? rcu_read_lock_any_held+0x75/0xa0 [ 2085.285510] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2085.285520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2085.285529] ? trace_hardirqs_on+0x5b/0x180 [ 2085.285543] do_syscall_64+0x33/0x40 [ 2085.285554] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2085.285561] RIP: 0033:0x7f9f7e251b19 [ 2085.285573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2085.285579] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2085.285591] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2085.285598] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2085.285604] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2085.285611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2085.285617] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:17:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x7}]) 11:17:39 executing program 7: ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendfile(r1, r0, 0x0, 0x9bbb) 11:17:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 30) 11:17:39 executing program 2: openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c6530005410b389214a32cda6af51990cb6ab7fcd17c7550f2062"]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000a000000000000000000c8e7cc0f0a792a7e1eed32023dfd8ab2b8d64f0605fb70ae91c8c7c7d7367e056716ed7611d467ff1e7f2d1359a78062239c1780dd44419a2fdea2f4b3b83f1c868135e8ae7d749c1906cfa8ad38613dfbce40f3f1b7c83692ee148b770c81d88f12e00bb4f2d746e9d01c5199400ea002b16e3e343deec4eccb1d667fdff7bc65dc4d7b6147e989c37e4668f867b12412587e85292d3a2cc2dd6251ac8dff2549405ab71f3f8b91c399a0352955f855e740d721892cbdad13110129", @ANYRES32=r1, @ANYBLOB="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"]) syz_io_uring_setup(0x4d4f, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x1, 0x400000, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x7, &(0x7f0000000c00)=[{&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/192, 0xc0}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000b00)=""/244, 0xf4}, {&(0x7f0000000740)=""/42, 0x2a}], 0xa, 0x1f}, 0x0) close(r4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x2}}, './file1/file0\x00'}) r5 = fsmount(0xffffffffffffffff, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x44, 0x0, 0x100, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x101f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000) lseek(r0, 0x800, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat(r5, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000000)=""/46) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000240)={0x12}) sendfile(r0, r6, 0x0, 0x100000001) 11:17:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x28, 0xc21, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x1, 0x0, 0x0, @fd}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7ff}, {0x8}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40000) signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000bc0)={0x9, 0x7, 0x0, 0x1000, 0x200}) r5 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0xffffffffffffffff) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x3}) pidfd_open(r5, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x5a4, 0x34, 0x300, 0x70bd29, 0x25dfdbfb, {0xf}, [@nested={0x3bb, 0x3b, 0x0, 0x1, [@generic="137dd3b5d52bb5b41a85ab259046c8bd7d216077b7b654cd7babe8dcf84490f546b7dff2c28b40e139ca280e916547ee6108f1d2cfa8a417c6bea786f88f8b9fe63b6346e49c19dd8f26803974f9", @generic="2e3259648d544e5c55ca485b9404b386a307fd9412aaa05fdeb283ce1be9509862cac5e8dae8afa8ba788b3b3f2a0a86f30c461ee7219ca0b91c5013920136f94704e0a9cb11c31ac4add5b25430fee00999f1a0225e45d84af33a3e7cd3e5553fe3d2dd77b4e62efb0e54dcee17cc36eee0fedf0bb9780c5a3e8d2b003de8fedb720f378cc61db8567820541a1a64d8fd8147638dc6d980fc9c2facaabcc7ad0468f8609a0be7e48aeeb026ff69bf", @generic="8733104e909e1ec6d6d399c1fff2aeffed2d25dd3346fb80e0e8e3619b1fe964c4378fda28c92fecfad23434fd1b5b19b551d35954f8132c397d1c77d81ead4cf0d7565d9271d49112a6197b02e110d2544a07e4926279cc5df38ef3092669b25d06420489a02f4a082b654ae6b68604085730b7378afdaad0", @generic="b6e158eeb4fb2ddd405a2133a782eaa3486dddb19b08bc4a5be011d38b7832f6a084b0c0286ea9103f135ccb1045a2de9c0c7fb88c", @typed={0x8, 0x54, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="6243decb6dccf92c08177ede68c66a72b86a160e2d427feb2a554cc5c94ab66e38dc7a5d1bf8e3f6d5454307063c5047eba58c8f8b78cfc593100b44800f44ad9a7ae1a9bf5b39add8c9d2b21cd4092f31201e02ec360c6dfc62c720e14284f4c6de62b03f49dc798edb0f2e8893fd39f5a5d76fd7c99671ab1d4a28881179afb61995ed8e45698fcb0f9a63239fadbe", @generic="a8c2678e7fb4c5a77f00bbff180e9e5da3bc4c712a86e16a135b0f7f35890b424cbb5b919e9579c7949712f101b20c3c36422b97bfd32bbd5d9f44a4ff02a72b370d898a83d12396372299d982604b47848d7aa5ceb60a24b5c2f86c95dea527a549556540137d4c9e9ebe2acfeb46b5aecadf08e3477afeba507ba6e609ee7e1ef57753ec394e3565000466248f097da810633bc7f00aff18d68c647b1c0d8ece8e1ad8ed90c6e565664c159a3b26e3096370ce0ea866ed83f8673d3fbcee56cfc18b91288ed7a8de6c94e0636ebe4c1f40d435e7e00b9a53e7fffbdb6ce6337cca", @typed={0x8, 0x3a, 0x0, 0x0, @pid=r5}, @generic="c83a8b9f6dce41a650fa26981fdeaa96c65893a28bb7fd43dfc8469f851355de770e09ae756b2abd8eb2d92f16fb523d0413aaa3ccfecbbf6daeafbb1095f3eb317f45ef85057fe8a5124d890371bcfe49f6323275806955a79faac6f8c39ad84eefeaaa993376f610f73663cea30ee9ab35f06ceba2750b60a604cafd30", @typed={0xc, 0x4c, 0x0, 0x0, @u64=0x752}]}, @generic="35c53216f1761f01d406b37179e12158877935302e535fa8dfc063a8", @nested={0xf7, 0x63, 0x0, 0x1, [@typed={0x5, 0x3c, 0x0, 0x0, @str='\x00'}, @generic="3138d5e205797c7561a18ff0c8f7c866aa940ca596717452607b16afb112e71dd8706a03cece010a31f2f7b75773bf0711b4ee43e6153c7cf69d57ff4812a93b1413e85844d41d53b53ae102ba7972b03d6f7770fb045460dbaf0eb525eca294fa720eeebb908ad565457be564d087a61855b94cbd481d61214a26f601fe00fe616e02e8e27311e031b5f7cd08331d84a6befc10862443a252a4b3e864acb01b48f3767216ded5cfc1f251be3ac0af504ce045bb407b", @typed={0x8, 0x34, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x4, 0x2f}, @generic="63ca31939e64ad1636", @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x6f, 0x0, 0x0, @u64=0x9}]}, @generic="7304993834fae3416208cb5606f57680b9f790635d8b5e05ec06be9ddda73127200f073d37f0988dfea2bd999186653ae7a60d29755b597eef4237d462159336f3548ac575489d425bc58bf8217f5a8d7c19723d814dbb85d0369a7aabafbbabfd9f9f9699d770c4eeef9aa05394de1dc7347fed1abd797ee004235851c2a90fc8ee318d9d6ecda21453e3090b31bedb4bbd269bd5a93ca302dcd8cdc3c9b5a8822af76d5b258672b10525f00eebca142f56d2e5637b4e179fb369f0366417"]}, 0x5a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f00000008c0), 0x3, 0x100) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f0000000b80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1ec, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x11}}}}, [@NL80211_ATTR_IE={0x1c3, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x74, 0x4}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @measure_req={0x26, 0x60, {0x0, 0x0, 0x20, "154cd2e903310a1ac7fc16a948f919f36d60c6e5964967d8bbbac7bdad9814c575f42a68e8ffebafd24c0df057a275676afd2f07dae1a6d9b013aad3dcd4737f5d087241667fa36960f98749599b5d01a4ecde55a2f0cb62551121149f"}}, @gcr_ga={0xbd, 0x6}, @measure_req={0x26, 0xe9, {0x8, 0xb9, 0x8, "a34160e7a4a0eaa187290aab41721a1b4581332de54a9789fc359247f00196d4512fe208c790c75f58a376e18246f71d304b775d7cf9c91ba5d101ecf919ac763ea09aa0f1d07a07e3ec62df66699929ce377ddaf3c492191e01ce392543d2913857315868c9adade71cb24208ae6f80264c76efef38997b1e5aef78b5fcd0f489f4945264c0e0e1e1a6d80a35b5b2f783543a9595d43af7fd0d974b3a89aef077795577d7e4a63a2c840b285006017282ed4b40bc28628579352623e290668dbe81c6e045c7aea2f5ec7ecb45d14b6c8b59a86db5aa1c40bc6a75263ba1645080275071dd6a"}}, @perr={0x84, 0x5b, {0x2, 0x5, [@ext={{}, @broadcast, 0x6, @device_a, 0x2}, @ext={{}, @device_b, 0x2, @device_b, 0x9}, @not_ext={{}, @device_a, 0x5, "", 0x11}, @ext={{}, @device_b, 0x20, @device_a, 0xe}, @ext={{}, @device_a, 0x1, @device_b, 0x1d}]}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xffff}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x51}, 0x10) 11:17:39 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003", 0x5, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2099.208384] FAULT_INJECTION: forcing a failure. [ 2099.208384] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.210743] CPU: 1 PID: 27088 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2099.212141] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.213808] Call Trace: [ 2099.214371] dump_stack+0x107/0x167 [ 2099.215115] should_fail.cold+0x5/0xa [ 2099.215884] ? dst_alloc+0x9e/0x5d0 [ 2099.216622] should_failslab+0x5/0x20 [ 2099.217392] kmem_cache_alloc+0x5b/0x310 [ 2099.218221] ? fnhe_hashfun+0x79/0x130 [ 2099.219019] dst_alloc+0x9e/0x5d0 [ 2099.219722] rt_dst_alloc+0x73/0x440 [ 2099.220497] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2099.221560] ip_route_output_key_hash+0x18d/0x340 [ 2099.222571] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2099.223675] ? ip_mc_output+0x401/0xa30 [ 2099.224487] ? ip_send_skb+0xdd/0x260 [ 2099.225250] ? udp_send_skb+0x6da/0x11d0 [ 2099.226078] ? __sys_sendmsg+0xe5/0x1b0 [ 2099.226898] ? do_syscall_64+0x33/0x40 [ 2099.227675] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2099.228751] ? lock_acquire+0x197/0x470 [ 2099.229555] ip_route_output_flow+0x23/0x150 [ 2099.230452] ip_tunnel_xmit+0x70e/0x2f50 [ 2099.231283] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2099.232324] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2099.233509] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2099.234442] ? kmem_cache_free+0xa7/0x2d0 [ 2099.235290] ? perf_trace_lock+0xac/0x490 [ 2099.236121] ? kfree_skbmem+0xef/0x1b0 [ 2099.236919] ? kmem_cache_free+0x249/0x2d0 [ 2099.237776] sit_tunnel_xmit+0xef0/0x2960 [ 2099.238636] ? find_held_lock+0x2c/0x110 [ 2099.239459] ? ipip_rcv+0x4f0/0x4f0 [ 2099.240220] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2099.241136] ? lock_downgrade+0x6d0/0x6d0 [ 2099.241987] ? run_filter+0x4d0/0x4d0 [ 2099.242769] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2099.243696] dev_hard_start_xmit+0x1cb/0x6f0 [ 2099.244604] __dev_queue_xmit+0x17ec/0x2710 [ 2099.245490] ? find_held_lock+0x2c/0x110 [ 2099.246341] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2099.247279] ? mark_held_locks+0x9e/0xe0 [ 2099.248108] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2099.248291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2099.249180] neigh_connected_output+0x382/0x4d0 [ 2099.249217] ip_finish_output2+0x6f1/0x21f0 [ 2099.251953] ? ip_copy_metadata+0x5f7/0xa40 [ 2099.252828] ? ip_frag_next+0x9e0/0x9e0 [ 2099.253647] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2099.254076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27100 comm=syz-executor.0 [ 2099.254609] ip_do_fragment+0x189e/0x1dd0 [ 2099.256783] ? ip_frag_next+0x9e0/0x9e0 [ 2099.257617] ? ip_finish_output2+0x21f0/0x21f0 [ 2099.258569] ? nf_hook+0x137/0x510 [ 2099.259309] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2099.260370] ? nf_hook_slow+0xfc/0x1e0 [ 2099.261196] ip_fragment.constprop.0+0x174/0x240 [ 2099.262191] __ip_finish_output.part.0+0x3db/0xb50 [ 2099.263204] ? ip_fragment.constprop.0+0x240/0x240 [ 2099.264208] ? netif_rx_ni+0xe7/0x300 [ 2099.265011] ip_mc_output+0x401/0xa30 [ 2099.265790] ip_send_skb+0xdd/0x260 [ 2099.266553] udp_send_skb+0x6da/0x11d0 [ 2099.267374] udp_sendmsg+0x139a/0x2170 [ 2099.268182] ? mark_lock+0xf5/0x2df0 [ 2099.268962] ? ip_frag_init+0x350/0x350 [ 2099.269773] ? mark_lock+0xf5/0x2df0 [ 2099.270556] ? perf_trace_lock+0xac/0x490 [ 2099.271399] ? udp_setsockopt+0xc0/0xc0 [ 2099.272205] ? mark_lock+0xf5/0x2df0 [ 2099.272960] ? __lockdep_reset_lock+0x180/0x180 [ 2099.273906] ? mark_lock+0xf5/0x2df0 [ 2099.274674] ? mark_lock+0xf5/0x2df0 [ 2099.275430] ? lock_chain_count+0x20/0x20 [ 2099.276277] ? __lock_acquire+0xbb1/0x5b00 [ 2099.277135] ? lock_chain_count+0x20/0x20 [ 2099.277987] ? perf_trace_lock+0xac/0x490 [ 2099.278844] ? __lockdep_reset_lock+0x180/0x180 [ 2099.279800] udpv6_sendmsg+0x1bed/0x2af0 [ 2099.280644] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.281700] ? mark_lock+0xf5/0x2df0 [ 2099.282472] ? lock_acquire+0x197/0x470 [ 2099.283284] ? find_held_lock+0x2c/0x110 [ 2099.284127] ? __might_fault+0xd3/0x180 [ 2099.284944] ? lock_downgrade+0x6d0/0x6d0 [ 2099.285808] ? lock_downgrade+0x6d0/0x6d0 [ 2099.286688] ? sock_has_perm+0x1ea/0x280 [ 2099.287526] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2099.288586] ? _copy_from_user+0xfb/0x1b0 [ 2099.289448] ? __import_iovec+0x458/0x590 [ 2099.290310] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.291365] inet6_sendmsg+0x105/0x140 [ 2099.292160] ? inet6_compat_ioctl+0x320/0x320 [ 2099.293071] __sock_sendmsg+0xf2/0x190 [ 2099.293870] ____sys_sendmsg+0x70d/0x870 [ 2099.294703] ? sock_write_iter+0x3d0/0x3d0 [ 2099.295557] ? do_recvmmsg+0x6d0/0x6d0 [ 2099.296346] ? perf_trace_lock+0xac/0x490 [ 2099.297195] ? __lockdep_reset_lock+0x180/0x180 [ 2099.298148] ? perf_trace_lock+0xac/0x490 [ 2099.299036] ___sys_sendmsg+0xf3/0x170 [ 2099.299842] ? sendmsg_copy_msghdr+0x160/0x160 [ 2099.300780] ? lock_downgrade+0x6d0/0x6d0 [ 2099.301642] ? find_held_lock+0x2c/0x110 [ 2099.302509] ? __fget_files+0x296/0x4c0 [ 2099.303346] ? __fget_light+0xea/0x290 [ 2099.304152] __sys_sendmsg+0xe5/0x1b0 [ 2099.304929] ? __sys_sendmsg_sock+0x40/0x40 [ 2099.305805] ? rcu_read_lock_any_held+0x75/0xa0 [ 2099.306798] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.307871] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.308916] ? trace_hardirqs_on+0x5b/0x180 [ 2099.309805] do_syscall_64+0x33/0x40 [ 2099.310584] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2099.311633] RIP: 0033:0x7f9f7e251b19 [ 2099.312394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.316160] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.317709] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2099.319186] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2099.320661] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.322126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.323594] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x19c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x2080, 0x10) dup2(r3, r0) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000001000000180000001c4d07d499de09a31f5c0e92c3426f9d37250a22a919784f9ec2c341ea6496a9f54efa5480662d3c817a8117d1034375e2201d28c1a54700", @ANYRES32=r2, @ANYBLOB="ff0008ef00000000008c876909000000"]) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file2\x00'}, 0x6e) sendfile(r0, r1, 0x0, 0x100000001) 11:17:39 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x8}]) 11:17:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:17:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 31) [ 2099.489605] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2099.490829] EXT4-fs (loop4): group descriptors corrupted! [ 2099.501456] FAULT_INJECTION: forcing a failure. [ 2099.501456] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.502779] CPU: 0 PID: 27219 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2099.503539] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.504472] Call Trace: [ 2099.504766] dump_stack+0x107/0x167 [ 2099.505176] should_fail.cold+0x5/0xa [ 2099.505605] ? create_object.isra.0+0x3a/0xa20 [ 2099.506109] should_failslab+0x5/0x20 [ 2099.506558] kmem_cache_alloc+0x5b/0x310 [ 2099.507002] create_object.isra.0+0x3a/0xa20 [ 2099.507503] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2099.508071] kmem_cache_alloc+0x159/0x310 [ 2099.508529] ? fnhe_hashfun+0x79/0x130 [ 2099.508975] dst_alloc+0x9e/0x5d0 [ 2099.509363] rt_dst_alloc+0x73/0x440 [ 2099.509781] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2099.510392] ip_route_output_key_hash+0x18d/0x340 [ 2099.510931] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2099.511564] ? ip_mc_output+0x401/0xa30 [ 2099.511998] ? ip_send_skb+0xdd/0x260 [ 2099.512430] ? udp_send_skb+0x6da/0x11d0 [ 2099.512884] ? __sys_sendmsg+0xe5/0x1b0 [ 2099.513321] ? do_syscall_64+0x33/0x40 [ 2099.513768] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2099.514379] ? lock_acquire+0x197/0x470 [ 2099.514825] ip_route_output_flow+0x23/0x150 [ 2099.515314] ip_tunnel_xmit+0x70e/0x2f50 [ 2099.515767] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2099.516344] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2099.516988] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2099.517491] ? kmem_cache_free+0xa7/0x2d0 [ 2099.517957] ? perf_trace_lock+0xac/0x490 [ 2099.518444] ? kfree_skbmem+0xef/0x1b0 [ 2099.518872] ? kmem_cache_free+0x249/0x2d0 [ 2099.519341] sit_tunnel_xmit+0xef0/0x2960 [ 2099.519803] ? find_held_lock+0x2c/0x110 [ 2099.520249] ? ipip_rcv+0x4f0/0x4f0 [ 2099.520655] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2099.521164] ? lock_downgrade+0x6d0/0x6d0 [ 2099.521623] ? run_filter+0x4d0/0x4d0 [ 2099.522053] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2099.522604] dev_hard_start_xmit+0x1cb/0x6f0 [ 2099.523177] __dev_queue_xmit+0x17ec/0x2710 [ 2099.523659] ? find_held_lock+0x2c/0x110 [ 2099.524106] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2099.524633] ? mark_held_locks+0x9e/0xe0 [ 2099.525088] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2099.525678] neigh_connected_output+0x382/0x4d0 [ 2099.526209] ip_finish_output2+0x6f1/0x21f0 [ 2099.526689] ? ip_copy_metadata+0x5f7/0xa40 [ 2099.527155] ? ip_frag_next+0x9e0/0x9e0 [ 2099.527597] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2099.528108] ip_do_fragment+0x189e/0x1dd0 [ 2099.528576] ? ip_frag_next+0x9e0/0x9e0 [ 2099.529038] ? ip_finish_output2+0x21f0/0x21f0 [ 2099.529560] ? nf_hook+0x137/0x510 [ 2099.529993] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2099.530600] ? nf_hook_slow+0xfc/0x1e0 [ 2099.531061] ip_fragment.constprop.0+0x174/0x240 [ 2099.531605] __ip_finish_output.part.0+0x3db/0xb50 [ 2099.532168] ? ip_fragment.constprop.0+0x240/0x240 [ 2099.532738] ? netif_rx_ni+0xe7/0x300 [ 2099.533183] ip_mc_output+0x401/0xa30 [ 2099.533624] ip_send_skb+0xdd/0x260 [ 2099.534042] udp_send_skb+0x6da/0x11d0 [ 2099.534517] udp_sendmsg+0x139a/0x2170 [ 2099.534959] ? mark_lock+0xf5/0x2df0 [ 2099.535387] ? ip_frag_init+0x350/0x350 [ 2099.535841] ? mark_lock+0xf5/0x2df0 [ 2099.536273] ? perf_trace_lock+0xac/0x490 [ 2099.536770] ? udp_setsockopt+0xc0/0xc0 [ 2099.537225] ? mark_lock+0xf5/0x2df0 [ 2099.537652] ? __lockdep_reset_lock+0x180/0x180 [ 2099.538200] ? mark_lock+0xf5/0x2df0 [ 2099.538626] ? mark_lock+0xf5/0x2df0 [ 2099.539044] ? lock_chain_count+0x20/0x20 [ 2099.539522] ? __lock_acquire+0xbb1/0x5b00 [ 2099.540005] ? lock_chain_count+0x20/0x20 [ 2099.540489] ? perf_trace_lock+0xac/0x490 [ 2099.540967] ? __lockdep_reset_lock+0x180/0x180 [ 2099.541512] udpv6_sendmsg+0x1bed/0x2af0 [ 2099.541993] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.542602] ? mark_lock+0xf5/0x2df0 [ 2099.543029] ? lock_acquire+0x197/0x470 [ 2099.543481] ? find_held_lock+0x2c/0x110 [ 2099.543948] ? __might_fault+0xd3/0x180 [ 2099.544402] ? lock_downgrade+0x6d0/0x6d0 [ 2099.544880] ? lock_downgrade+0x6d0/0x6d0 [ 2099.545370] ? sock_has_perm+0x1ea/0x280 [ 2099.545854] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2099.546464] ? _copy_from_user+0xfb/0x1b0 [ 2099.546948] ? __import_iovec+0x458/0x590 [ 2099.547427] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.548020] inet6_sendmsg+0x105/0x140 [ 2099.548468] ? inet6_compat_ioctl+0x320/0x320 [ 2099.548979] __sock_sendmsg+0xf2/0x190 [ 2099.549423] ____sys_sendmsg+0x70d/0x870 [ 2099.549905] ? sock_write_iter+0x3d0/0x3d0 [ 2099.550417] ? do_recvmmsg+0x6d0/0x6d0 [ 2099.550871] ? perf_trace_lock+0xac/0x490 [ 2099.551345] ? __lockdep_reset_lock+0x180/0x180 [ 2099.551871] ? perf_trace_lock+0xac/0x490 [ 2099.552348] ___sys_sendmsg+0xf3/0x170 [ 2099.552802] ? sendmsg_copy_msghdr+0x160/0x160 [ 2099.553329] ? lock_downgrade+0x6d0/0x6d0 [ 2099.553807] ? find_held_lock+0x2c/0x110 [ 2099.554289] ? __fget_files+0x296/0x4c0 [ 2099.554765] ? __fget_light+0xea/0x290 [ 2099.555218] __sys_sendmsg+0xe5/0x1b0 [ 2099.555653] ? __sys_sendmsg_sock+0x40/0x40 [ 2099.556143] ? rcu_read_lock_any_held+0x75/0xa0 [ 2099.556680] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.557270] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.557859] ? trace_hardirqs_on+0x5b/0x180 [ 2099.558368] do_syscall_64+0x33/0x40 [ 2099.558794] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2099.559395] RIP: 0033:0x7f9f7e251b19 [ 2099.559824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.561924] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.562815] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2099.563628] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2099.564433] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.565244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.566060] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:17:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xf}]) 11:17:39 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:39 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 32) 11:17:39 executing program 7: writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r0 = socket$inet(0x2, 0x3, 0x80) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0500f97a0000000000002e2f66696c653000"]) openat(r1, &(0x7f0000000040)='./file0\x00', 0x50400, 0xa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000d, 0x0) [ 2099.696977] FAULT_INJECTION: forcing a failure. [ 2099.696977] name failslab, interval 1, probability 0, space 0, times 0 [ 2099.698590] CPU: 0 PID: 27333 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2099.699352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2099.700268] Call Trace: [ 2099.700571] dump_stack+0x107/0x167 [ 2099.700980] should_fail.cold+0x5/0xa [ 2099.701404] ? __alloc_skb+0x6d/0x5b0 [ 2099.701829] should_failslab+0x5/0x20 [ 2099.702252] kmem_cache_alloc_node+0x55/0x330 [ 2099.702749] __alloc_skb+0x6d/0x5b0 [ 2099.703151] ip_frag_next+0x11d/0x9e0 [ 2099.703581] ? perf_trace_lock+0xac/0x490 [ 2099.704048] ? selinux_ip_postroute_compat+0x390/0x390 [ 2099.704629] ip_do_fragment+0x96b/0x1dd0 [ 2099.705078] ? ip_frag_next+0x9e0/0x9e0 [ 2099.705529] ? ip_finish_output2+0x21f0/0x21f0 [ 2099.706022] ? nf_hook+0x137/0x510 [ 2099.706435] ? lock_downgrade+0x6d0/0x6d0 [ 2099.706908] ? lock_downgrade+0x6d0/0x6d0 [ 2099.707382] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2099.707984] ip_fragment.constprop.0+0x174/0x240 [ 2099.708530] __ip_finish_output.part.0+0x3db/0xb50 [ 2099.709091] ? ip_fragment.constprop.0+0x240/0x240 [ 2099.709661] ? nf_hook+0x510/0x510 [ 2099.710051] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2099.710575] ip_output+0x2f7/0x600 [ 2099.710978] ip_local_out+0xb4/0x1a0 [ 2099.711409] iptunnel_xmit+0x591/0x8b0 [ 2099.711864] ip_tunnel_xmit+0x124a/0x2f50 [ 2099.712350] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2099.712935] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2099.713591] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2099.714110] ? kmem_cache_free+0xa7/0x2d0 [ 2099.714587] ? perf_trace_lock+0xac/0x490 [ 2099.715057] ? kfree_skbmem+0xef/0x1b0 [ 2099.715492] ? kmem_cache_free+0x249/0x2d0 [ 2099.715976] sit_tunnel_xmit+0xef0/0x2960 [ 2099.716435] ? find_held_lock+0x2c/0x110 [ 2099.716898] ? ipip_rcv+0x4f0/0x4f0 [ 2099.717306] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2099.717823] ? lock_downgrade+0x6d0/0x6d0 [ 2099.718282] ? run_filter+0x4d0/0x4d0 [ 2099.718727] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2099.719245] dev_hard_start_xmit+0x1cb/0x6f0 [ 2099.719753] __dev_queue_xmit+0x17ec/0x2710 [ 2099.720238] ? find_held_lock+0x2c/0x110 [ 2099.720687] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2099.721213] ? mark_held_locks+0x9e/0xe0 [ 2099.721661] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2099.722276] neigh_connected_output+0x382/0x4d0 [ 2099.722817] ip_finish_output2+0x6f1/0x21f0 [ 2099.723313] ? ip_copy_metadata+0x5f7/0xa40 [ 2099.723807] ? ip_frag_next+0x9e0/0x9e0 [ 2099.724263] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2099.724782] ip_do_fragment+0x189e/0x1dd0 [ 2099.725257] ? ip_frag_next+0x9e0/0x9e0 [ 2099.725716] ? ip_finish_output2+0x21f0/0x21f0 [ 2099.726256] ? nf_hook+0x137/0x510 [ 2099.726659] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2099.727248] ? nf_hook_slow+0xfc/0x1e0 [ 2099.727699] ip_fragment.constprop.0+0x174/0x240 [ 2099.728248] __ip_finish_output.part.0+0x3db/0xb50 [ 2099.728806] ? ip_fragment.constprop.0+0x240/0x240 [ 2099.729376] ? netif_rx_ni+0xe7/0x300 [ 2099.729817] ip_mc_output+0x401/0xa30 [ 2099.730265] ip_send_skb+0xdd/0x260 [ 2099.730683] udp_send_skb+0x6da/0x11d0 [ 2099.731134] udp_sendmsg+0x139a/0x2170 [ 2099.731582] ? mark_lock+0xf5/0x2df0 [ 2099.732003] ? ip_frag_init+0x350/0x350 [ 2099.732457] ? mark_lock+0xf5/0x2df0 [ 2099.732882] ? perf_trace_lock+0xac/0x490 [ 2099.733358] ? udp_setsockopt+0xc0/0xc0 [ 2099.733813] ? mark_lock+0xf5/0x2df0 [ 2099.734253] ? __lockdep_reset_lock+0x180/0x180 [ 2099.734799] ? mark_lock+0xf5/0x2df0 [ 2099.735226] ? mark_lock+0xf5/0x2df0 [ 2099.735650] ? lock_chain_count+0x20/0x20 [ 2099.736130] ? __lock_acquire+0xbb1/0x5b00 [ 2099.736624] ? lock_chain_count+0x20/0x20 [ 2099.737100] ? perf_trace_lock+0xac/0x490 [ 2099.737581] ? __lockdep_reset_lock+0x180/0x180 [ 2099.738120] udpv6_sendmsg+0x1bed/0x2af0 [ 2099.738599] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.739192] ? mark_lock+0xf5/0x2df0 [ 2099.739622] ? lock_acquire+0x197/0x470 [ 2099.740072] ? find_held_lock+0x2c/0x110 [ 2099.740548] ? __might_fault+0xd3/0x180 [ 2099.741000] ? lock_downgrade+0x6d0/0x6d0 [ 2099.741483] ? lock_downgrade+0x6d0/0x6d0 [ 2099.741951] ? sock_has_perm+0x1ea/0x280 [ 2099.742440] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2099.743026] ? _copy_from_user+0xfb/0x1b0 [ 2099.743513] ? __import_iovec+0x458/0x590 [ 2099.743992] ? udp_v6_push_pending_frames+0x360/0x360 [ 2099.744591] inet6_sendmsg+0x105/0x140 [ 2099.745029] ? inet6_compat_ioctl+0x320/0x320 [ 2099.745543] __sock_sendmsg+0xf2/0x190 [ 2099.745988] ____sys_sendmsg+0x70d/0x870 [ 2099.746471] ? sock_write_iter+0x3d0/0x3d0 [ 2099.746947] ? do_recvmmsg+0x6d0/0x6d0 [ 2099.747392] ? perf_trace_lock+0xac/0x490 [ 2099.747873] ? __lockdep_reset_lock+0x180/0x180 [ 2099.748399] ? perf_trace_lock+0xac/0x490 [ 2099.748874] ___sys_sendmsg+0xf3/0x170 [ 2099.749316] ? sendmsg_copy_msghdr+0x160/0x160 [ 2099.749840] ? lock_downgrade+0x6d0/0x6d0 [ 2099.750317] ? find_held_lock+0x2c/0x110 [ 2099.750793] ? __fget_files+0x296/0x4c0 [ 2099.751251] ? __fget_light+0xea/0x290 [ 2099.751701] __sys_sendmsg+0xe5/0x1b0 [ 2099.752137] ? __sys_sendmsg_sock+0x40/0x40 [ 2099.752628] ? rcu_read_lock_any_held+0x75/0xa0 [ 2099.753170] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2099.753764] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2099.754363] ? trace_hardirqs_on+0x5b/0x180 [ 2099.754867] do_syscall_64+0x33/0x40 [ 2099.755287] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2099.755878] RIP: 0033:0x7f9f7e251b19 [ 2099.756307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2099.758408] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2099.759273] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2099.760083] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2099.760887] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2099.761702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2099.762526] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2099.786149] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2099.787214] EXT4-fs (loop4): group descriptors corrupted! 11:17:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x10}]) 11:17:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2116.080985] FAULT_INJECTION: forcing a failure. [ 2116.080985] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.082441] CPU: 0 PID: 27454 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2116.083224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2116.084152] Call Trace: [ 2116.084457] dump_stack+0x107/0x167 [ 2116.084872] should_fail.cold+0x5/0xa [ 2116.085304] ? create_object.isra.0+0x3a/0xa20 [ 2116.085837] should_failslab+0x5/0x20 [ 2116.086270] kmem_cache_alloc+0x5b/0x310 [ 2116.086751] create_object.isra.0+0x3a/0xa20 [ 2116.087262] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2116.087860] kmem_cache_alloc_node+0x169/0x330 [ 2116.088391] __alloc_skb+0x6d/0x5b0 [ 2116.088813] ip_frag_next+0x11d/0x9e0 [ 2116.089282] ? perf_trace_lock+0xac/0x490 [ 2116.089792] ? selinux_ip_postroute_compat+0x390/0x390 [ 2116.090497] ip_do_fragment+0x96b/0x1dd0 [ 2116.091000] ? ip_frag_next+0x9e0/0x9e0 [ 2116.091501] ? ip_finish_output2+0x21f0/0x21f0 [ 2116.092056] ? nf_hook+0x137/0x510 [ 2116.092492] ? lock_downgrade+0x6d0/0x6d0 [ 2116.092998] ? lock_downgrade+0x6d0/0x6d0 [ 2116.093506] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2116.094145] ip_fragment.constprop.0+0x174/0x240 [ 2116.094737] __ip_finish_output.part.0+0x3db/0xb50 [ 2116.095335] ? ip_fragment.constprop.0+0x240/0x240 [ 2116.095933] ? nf_hook+0x510/0x510 [ 2116.096365] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2116.096919] ip_output+0x2f7/0x600 [ 2116.097354] ip_local_out+0xb4/0x1a0 [ 2116.097826] iptunnel_xmit+0x591/0x8b0 [ 2116.098306] ip_tunnel_xmit+0x124a/0x2f50 [ 2116.098847] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2116.099512] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2116.100253] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2116.100823] ? kmem_cache_free+0xa7/0x2d0 [ 2116.101349] ? perf_trace_lock+0xac/0x490 [ 2116.101876] ? kfree_skbmem+0xef/0x1b0 [ 2116.102389] ? kmem_cache_free+0x249/0x2d0 [ 2116.102922] sit_tunnel_xmit+0xef0/0x2960 [ 2116.103448] ? find_held_lock+0x2c/0x110 [ 2116.103936] ? ipip_rcv+0x4f0/0x4f0 [ 2116.104409] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2116.104978] ? lock_downgrade+0x6d0/0x6d0 [ 2116.105508] ? run_filter+0x4d0/0x4d0 [ 2116.105989] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2116.106554] dev_hard_start_xmit+0x1cb/0x6f0 [ 2116.107123] __dev_queue_xmit+0x17ec/0x2710 [ 2116.107656] ? find_held_lock+0x2c/0x110 [ 2116.108173] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2116.108762] ? mark_held_locks+0x9e/0xe0 [ 2116.109249] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2116.110149] neigh_connected_output+0x382/0x4d0 [ 2116.110198] ip_finish_output2+0x6f1/0x21f0 [ 2116.110213] ? ip_copy_metadata+0x5f7/0xa40 [ 2116.110225] ? ip_frag_next+0x9e0/0x9e0 [ 2116.110236] ? ip_fraglist_prepare+0x38d/0x5a0 11:17:56 executing program 0: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r2, &(0x7f0000000300)='./file0\x00', 0x101000, 0x4) accept4$unix(r3, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0x0) fsmount(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x25, 0x400, 0x70bd29, 0x25dfdbfe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) r4 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r4, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) r5 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x3f296695dd2c761) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x1a, 0x800, 0x70bd26, 0x25dfdbfe, {0x17}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0xff}, @typed={0x8, 0x12, 0x0, 0x0, @fd=r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{0x0, 0x0, 0x0, 0x0, 0x3}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) timerfd_create(0x8, 0x0) unshare(0x48020200) 11:17:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 33) 11:17:56 executing program 7: getsockopt$IP_SET_OP_GET_BYNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) write$P9_RLERRORu(r0, &(0x7f00000000c0)={0x12, 0x7, 0x1, {{0x5, 'ext2\x00'}, 0x1}}, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5820c, 0x200000000000000, 0x3, 0x0, 0x1000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) r2 = fork() ptrace$setopts(0x4206, r2, 0x0, 0x1) ptrace(0x8, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace(0x4200, r3) 11:17:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x80000007, 0xffff7ff9}) r1 = getegid() write$P9_RGETATTR(r0, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x2237, {0x4, 0x3, 0x3}, 0xb4, 0xee01, r1, 0xffffffffffff2f57, 0x98, 0x3f, 0x4, 0x1, 0xfffffffffffffffe, 0x7fffffff, 0x6, 0x2, 0x3, 0x5, 0x400, 0x5, 0x7, 0xffffffffffffff7f}}, 0xa0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x5, &(0x7f0000000080)=0x1088, 0x4) sendmmsg$inet6(r3, &(0x7f0000004540)=[{{&(0x7f0000000000)={0x2, 0x4e23, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x2, 0x7, 0x4, 0x52f, 0x8001}) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x3, 0x5}) readv(r2, &(0x7f0000000340)=[{&(0x7f0000002340)=""/4101, 0x1005}, {&(0x7f0000000380)=""/99}], 0x1000000000000009) pwrite64(r2, &(0x7f0000000240)="3e5b16e900afd16fff57ff37b1597593f59e2cec1ddc23874c6abd139a13b96debd198", 0x23, 0x3) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x8008, 0x4, 0x3, 0x1]}, &(0x7f00000000c0)=0x54) unshare(0x48020200) syz_open_dev$sg(&(0x7f0000000080), 0x80000001, 0x39b341) 11:17:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="02000000030000", 0x7, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:17:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2116.110254] ip_do_fragment+0x189e/0x1dd0 [ 2116.110265] ? ip_frag_next+0x9e0/0x9e0 [ 2116.110286] ? ip_finish_output2+0x21f0/0x21f0 [ 2116.110296] ? nf_hook+0x137/0x510 [ 2116.110313] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2116.110326] ? nf_hook_slow+0xfc/0x1e0 [ 2116.110346] ip_fragment.constprop.0+0x174/0x240 [ 2116.110377] __ip_finish_output.part.0+0x3db/0xb50 [ 2116.110391] ? ip_fragment.constprop.0+0x240/0x240 [ 2116.110404] ? netif_rx_ni+0xe7/0x300 [ 2116.110420] ip_mc_output+0x401/0xa30 [ 2116.110435] ip_send_skb+0xdd/0x260 [ 2116.110451] udp_send_skb+0x6da/0x11d0 [ 2116.110470] udp_sendmsg+0x139a/0x2170 11:17:56 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:17:56 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 34) [ 2116.110481] ? mark_lock+0xf5/0x2df0 [ 2116.110493] ? ip_frag_init+0x350/0x350 [ 2116.110506] ? mark_lock+0xf5/0x2df0 [ 2116.110518] ? perf_trace_lock+0xac/0x490 [ 2116.110529] ? udp_setsockopt+0xc0/0xc0 [ 2116.110540] ? mark_lock+0xf5/0x2df0 [ 2116.110552] ? __lockdep_reset_lock+0x180/0x180 [ 2116.110568] ? mark_lock+0xf5/0x2df0 [ 2116.110581] ? mark_lock+0xf5/0x2df0 [ 2116.110593] ? lock_chain_count+0x20/0x20 [ 2116.110604] ? __lock_acquire+0xbb1/0x5b00 [ 2116.110616] ? lock_chain_count+0x20/0x20 [ 2116.110636] ? perf_trace_lock+0xac/0x490 [ 2116.110648] ? __lockdep_reset_lock+0x180/0x180 [ 2116.110666] udpv6_sendmsg+0x1bed/0x2af0 [ 2116.110688] ? udp_v6_push_pending_frames+0x360/0x360 [ 2116.110704] ? mark_lock+0xf5/0x2df0 [ 2116.110720] ? lock_acquire+0x197/0x470 [ 2116.110730] ? find_held_lock+0x2c/0x110 [ 2116.110745] ? __might_fault+0xd3/0x180 [ 2116.110757] ? lock_downgrade+0x6d0/0x6d0 [ 2116.110771] ? lock_downgrade+0x6d0/0x6d0 [ 2116.110785] ? sock_has_perm+0x1ea/0x280 [ 2116.110799] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2116.110814] ? _copy_from_user+0xfb/0x1b0 [ 2116.110834] ? __import_iovec+0x458/0x590 [ 2116.110846] ? udp_v6_push_pending_frames+0x360/0x360 [ 2116.110861] inet6_sendmsg+0x105/0x140 [ 2116.110872] ? inet6_compat_ioctl+0x320/0x320 [ 2116.110883] __sock_sendmsg+0xf2/0x190 [ 2116.110895] ____sys_sendmsg+0x70d/0x870 [ 2116.110908] ? sock_write_iter+0x3d0/0x3d0 [ 2116.110918] ? do_recvmmsg+0x6d0/0x6d0 [ 2116.110930] ? perf_trace_lock+0xac/0x490 [ 2116.110945] ? __lockdep_reset_lock+0x180/0x180 [ 2116.110955] ? perf_trace_lock+0xac/0x490 [ 2116.110970] ___sys_sendmsg+0xf3/0x170 [ 2116.110983] ? sendmsg_copy_msghdr+0x160/0x160 [ 2116.110999] ? lock_downgrade+0x6d0/0x6d0 [ 2116.111012] ? find_held_lock+0x2c/0x110 [ 2116.111031] ? __fget_files+0x296/0x4c0 [ 2116.111050] ? __fget_light+0xea/0x290 [ 2116.111067] __sys_sendmsg+0xe5/0x1b0 [ 2116.111078] ? __sys_sendmsg_sock+0x40/0x40 [ 2116.111090] ? rcu_read_lock_any_held+0x75/0xa0 [ 2116.111114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2116.111126] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2116.111135] ? trace_hardirqs_on+0x5b/0x180 [ 2116.111150] do_syscall_64+0x33/0x40 [ 2116.111161] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2116.111169] RIP: 0033:0x7f9f7e251b19 [ 2116.111182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2116.111189] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2116.111202] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2116.111209] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2116.111215] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.111222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2116.111229] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2116.146498] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2116.146518] EXT4-fs (loop4): group descriptors corrupted! [ 2116.200252] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 2116.200252] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 2116.200252] [ 2116.200279] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 2116.237149] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue [ 2116.241868] audit: type=1326 audit(1706527076.297:125): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.284641] audit: type=1326 audit(1706527076.339:126): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.285880] audit: type=1326 audit(1706527076.340:127): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.308122] FAULT_INJECTION: forcing a failure. [ 2116.308122] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.333331] audit: type=1326 audit(1706527076.340:128): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.333881] CPU: 0 PID: 27479 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2116.333889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2116.333902] Call Trace: [ 2116.342763] audit: type=1326 audit(1706527076.340:129): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.344179] dump_stack+0x107/0x167 [ 2116.344195] should_fail.cold+0x5/0xa [ 2116.344217] should_failslab+0x5/0x20 [ 2116.347995] audit: type=1326 audit(1706527076.340:130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.349145] __kmalloc_node_track_caller+0x74/0x3b0 [ 2116.349158] ? ip_frag_next+0x11d/0x9e0 [ 2116.349173] __alloc_skb+0xb1/0x5b0 [ 2116.349190] ip_frag_next+0x11d/0x9e0 [ 2116.351955] audit: type=1326 audit(1706527076.348:131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.353126] ? perf_trace_lock+0xac/0x490 [ 2116.353140] ? selinux_ip_postroute_compat+0x390/0x390 [ 2116.353153] ip_do_fragment+0x96b/0x1dd0 [ 2116.353170] ? ip_frag_next+0x9e0/0x9e0 [ 2116.355992] audit: type=1326 audit(1706527076.348:132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.357902] ? ip_finish_output2+0x21f0/0x21f0 [ 2116.357912] ? nf_hook+0x137/0x510 11:17:56 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2116.357923] ? lock_downgrade+0x6d0/0x6d0 [ 2116.357941] ? lock_downgrade+0x6d0/0x6d0 [ 2116.358921] audit: type=1326 audit(1706527076.349:133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.359364] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2116.360316] audit: type=1326 audit(1706527076.349:134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=27456 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359274eb19 code=0x7ffc0000 [ 2116.360611] ip_fragment.constprop.0+0x174/0x240 [ 2116.360629] __ip_finish_output.part.0+0x3db/0xb50 [ 2116.374037] ? ip_fragment.constprop.0+0x240/0x240 [ 2116.374045] ? nf_hook+0x510/0x510 [ 2116.374056] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2116.374071] ip_output+0x2f7/0x600 [ 2116.374085] ip_local_out+0xb4/0x1a0 [ 2116.374099] iptunnel_xmit+0x591/0x8b0 [ 2116.374117] ip_tunnel_xmit+0x124a/0x2f50 [ 2116.374135] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2116.374147] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2116.374158] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2116.374168] ? kmem_cache_free+0xa7/0x2d0 [ 2116.374186] ? perf_trace_lock+0xac/0x490 [ 2116.374194] ? kfree_skbmem+0xef/0x1b0 [ 2116.374205] ? kmem_cache_free+0x249/0x2d0 [ 2116.374219] sit_tunnel_xmit+0xef0/0x2960 [ 2116.374234] ? find_held_lock+0x2c/0x110 [ 2116.374244] ? ipip_rcv+0x4f0/0x4f0 [ 2116.374258] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2116.374268] ? lock_downgrade+0x6d0/0x6d0 [ 2116.374279] ? run_filter+0x4d0/0x4d0 [ 2116.374290] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2116.374309] dev_hard_start_xmit+0x1cb/0x6f0 [ 2116.374324] __dev_queue_xmit+0x17ec/0x2710 [ 2116.374339] ? find_held_lock+0x2c/0x110 [ 2116.374352] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2116.374375] ? mark_held_locks+0x9e/0xe0 11:17:56 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2116.374389] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2116.374403] neigh_connected_output+0x382/0x4d0 [ 2116.374422] ip_finish_output2+0x6f1/0x21f0 [ 2116.374434] ? ip_copy_metadata+0x5f7/0xa40 [ 2116.374445] ? ip_frag_next+0x9e0/0x9e0 [ 2116.374456] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2116.374472] ip_do_fragment+0x189e/0x1dd0 [ 2116.374483] ? ip_frag_next+0x9e0/0x9e0 [ 2116.374501] ? ip_finish_output2+0x21f0/0x21f0 [ 2116.374510] ? nf_hook+0x137/0x510 [ 2116.374526] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2116.374539] ? nf_hook_slow+0xfc/0x1e0 [ 2116.374557] ip_fragment.constprop.0+0x174/0x240 [ 2116.374570] __ip_finish_output.part.0+0x3db/0xb50 [ 2116.374582] ? ip_fragment.constprop.0+0x240/0x240 [ 2116.374595] ? netif_rx_ni+0xe7/0x300 [ 2116.374610] ip_mc_output+0x401/0xa30 [ 2116.374624] ip_send_skb+0xdd/0x260 [ 2116.374638] udp_send_skb+0x6da/0x11d0 [ 2116.374655] udp_sendmsg+0x139a/0x2170 [ 2116.374666] ? mark_lock+0xf5/0x2df0 [ 2116.374677] ? ip_frag_init+0x350/0x350 [ 2116.374689] ? mark_lock+0xf5/0x2df0 [ 2116.374699] ? perf_trace_lock+0xac/0x490 [ 2116.374709] ? udp_setsockopt+0xc0/0xc0 [ 2116.374719] ? mark_lock+0xf5/0x2df0 [ 2116.374730] ? __lockdep_reset_lock+0x180/0x180 [ 2116.374744] ? mark_lock+0xf5/0x2df0 [ 2116.374757] ? mark_lock+0xf5/0x2df0 [ 2116.374768] ? lock_chain_count+0x20/0x20 [ 2116.374778] ? __lock_acquire+0xbb1/0x5b00 [ 2116.374789] ? lock_chain_count+0x20/0x20 [ 2116.374808] ? perf_trace_lock+0xac/0x490 [ 2116.374818] ? __lockdep_reset_lock+0x180/0x180 [ 2116.374835] udpv6_sendmsg+0x1bed/0x2af0 [ 2116.374856] ? udp_v6_push_pending_frames+0x360/0x360 [ 2116.374871] ? mark_lock+0xf5/0x2df0 [ 2116.374885] ? lock_acquire+0x197/0x470 [ 2116.374894] ? find_held_lock+0x2c/0x110 [ 2116.374909] ? __might_fault+0xd3/0x180 [ 2116.374919] ? lock_downgrade+0x6d0/0x6d0 [ 2116.374932] ? lock_downgrade+0x6d0/0x6d0 [ 2116.374945] ? sock_has_perm+0x1ea/0x280 [ 2116.374958] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2116.374972] ? _copy_from_user+0xfb/0x1b0 [ 2116.374991] ? __import_iovec+0x458/0x590 [ 2116.375001] ? udp_v6_push_pending_frames+0x360/0x360 [ 2116.375016] inet6_sendmsg+0x105/0x140 [ 2116.375026] ? inet6_compat_ioctl+0x320/0x320 [ 2116.375036] __sock_sendmsg+0xf2/0x190 [ 2116.375047] ____sys_sendmsg+0x70d/0x870 [ 2116.375060] ? sock_write_iter+0x3d0/0x3d0 [ 2116.375069] ? do_recvmmsg+0x6d0/0x6d0 [ 2116.375079] ? perf_trace_lock+0xac/0x490 [ 2116.375093] ? __lockdep_reset_lock+0x180/0x180 [ 2116.375102] ? perf_trace_lock+0xac/0x490 [ 2116.375117] ___sys_sendmsg+0xf3/0x170 [ 2116.375129] ? sendmsg_copy_msghdr+0x160/0x160 [ 2116.375143] ? lock_downgrade+0x6d0/0x6d0 [ 2116.375155] ? find_held_lock+0x2c/0x110 [ 2116.375173] ? __fget_files+0x296/0x4c0 [ 2116.375190] ? __fget_light+0xea/0x290 [ 2116.375206] __sys_sendmsg+0xe5/0x1b0 [ 2116.375216] ? __sys_sendmsg_sock+0x40/0x40 [ 2116.375228] ? rcu_read_lock_any_held+0x75/0xa0 [ 2116.375249] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2116.375261] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2116.375269] ? trace_hardirqs_on+0x5b/0x180 [ 2116.375283] do_syscall_64+0x33/0x40 [ 2116.375293] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2116.375301] RIP: 0033:0x7f9f7e251b19 [ 2116.375312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2116.375318] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2116.375330] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2116.375336] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2116.375342] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2116.375349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2116.375355] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2116.420366] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2116.420374] EXT4-fs (loop4): group descriptors corrupted! 11:18:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfe}]) [ 2130.800032] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock 11:18:10 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 35) [ 2130.801612] EXT4-fs (loop4): group descriptors corrupted! [ 2130.812294] FAULT_INJECTION: forcing a failure. [ 2130.812294] name failslab, interval 1, probability 0, space 0, times 0 [ 2130.814851] CPU: 1 PID: 27503 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2130.816377] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2130.818193] Call Trace: [ 2130.818780] dump_stack+0x107/0x167 [ 2130.819594] should_fail.cold+0x5/0xa [ 2130.820436] ? create_object.isra.0+0x3a/0xa20 [ 2130.821443] should_failslab+0x5/0x20 [ 2130.822290] kmem_cache_alloc+0x5b/0x310 [ 2130.823223] create_object.isra.0+0x3a/0xa20 [ 2130.824193] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2130.825323] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2130.826441] ? ip_frag_next+0x11d/0x9e0 [ 2130.827338] __alloc_skb+0xb1/0x5b0 [ 2130.828151] ip_frag_next+0x11d/0x9e0 [ 2130.829001] ? perf_trace_lock+0xac/0x490 [ 2130.829914] ? selinux_ip_postroute_compat+0x390/0x390 [ 2130.831082] ip_do_fragment+0x96b/0x1dd0 [ 2130.831976] ? ip_frag_next+0x9e0/0x9e0 [ 2130.832870] ? ip_finish_output2+0x21f0/0x21f0 [ 2130.833868] ? nf_hook+0x137/0x510 [ 2130.834667] ? lock_downgrade+0x6d0/0x6d0 [ 2130.835570] ? lock_downgrade+0x6d0/0x6d0 [ 2130.836479] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2130.837624] ip_fragment.constprop.0+0x174/0x240 [ 2130.838675] __ip_finish_output.part.0+0x3db/0xb50 [ 2130.839759] ? ip_fragment.constprop.0+0x240/0x240 [ 2130.840833] ? nf_hook+0x510/0x510 [ 2130.841618] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2130.842607] ip_output+0x2f7/0x600 [ 2130.843395] ip_local_out+0xb4/0x1a0 [ 2130.844211] iptunnel_xmit+0x591/0x8b0 [ 2130.845079] ip_tunnel_xmit+0x124a/0x2f50 [ 2130.845997] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2130.847168] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2130.848460] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2130.849451] ? kmem_cache_free+0xa7/0x2d0 [ 2130.850369] ? perf_trace_lock+0xac/0x490 [ 2130.851280] ? kfree_skbmem+0xef/0x1b0 [ 2130.852129] ? kmem_cache_free+0x249/0x2d0 [ 2130.853055] sit_tunnel_xmit+0xef0/0x2960 [ 2130.853971] ? find_held_lock+0x2c/0x110 [ 2130.854872] ? ipip_rcv+0x4f0/0x4f0 [ 2130.855670] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2130.856648] ? lock_downgrade+0x6d0/0x6d0 [ 2130.857549] ? run_filter+0x4d0/0x4d0 [ 2130.858381] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2130.859380] dev_hard_start_xmit+0x1cb/0x6f0 [ 2130.860350] __dev_queue_xmit+0x17ec/0x2710 [ 2130.861300] ? find_held_lock+0x2c/0x110 [ 2130.862190] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2130.863215] ? mark_held_locks+0x9e/0xe0 [ 2130.864112] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2130.865260] neigh_connected_output+0x382/0x4d0 [ 2130.866287] ip_finish_output2+0x6f1/0x21f0 [ 2130.867241] ? ip_copy_metadata+0x5f7/0xa40 [ 2130.868182] ? ip_frag_next+0x9e0/0x9e0 [ 2130.869046] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2130.870050] ip_do_fragment+0x189e/0x1dd0 [ 2130.870974] ? ip_frag_next+0x9e0/0x9e0 [ 2130.871861] ? ip_finish_output2+0x21f0/0x21f0 [ 2130.873169] ? nf_hook+0x137/0x510 11:18:10 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:18:10 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f00000008c0)=ANY=[], 0x629) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) sendfile(r1, r0, 0x0, 0xffffffff000) 11:18:10 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x5}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = openat$hpet(0xffffffffffffff9c, 0x0, 0x80000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) r5 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) [ 2130.874058] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2130.875399] ? nf_hook_slow+0xfc/0x1e0 mq_timedsend(r5, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005cb80)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}], 0x7f, "9656c75f04ba4d"}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x2, 0x10) lseek(r1, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r2, 0x0, 0x480c1, 0x186) copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0) 11:18:10 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) signalfd4(r0, &(0x7f0000000080)={[0xfffffffffffffffc]}, 0x8, 0x0) getpgid(0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x68, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0xc, 0x0, 0x0, @pid}, @generic="d8e1b95d7093b2a4c0df989838ef06cac5c525ce503c89652c95ec4319edba7c3942807e0e3eaffcca0f36efd4b3e0876d4a079d23359eb148938043833c394cc87ac4"]}, 0x68}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) io_uring_enter(r1, 0x728b, 0xaadf, 0x3, &(0x7f00000002c0)={[0xb6]}, 0x8) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1081030000000000) [ 2130.876446] ip_fragment.constprop.0+0x174/0x240 sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001e00)={0x22d0, 0x40, 0x400, 0x70bd2a, 0x25dfdbff, {0x17}, [@nested={0x5e, 0x1d, 0x0, 0x1, [@generic="1196df8e2c469f671b482dbe8a55588036264b065567f559afc7faab4f9f1cb008e10dd1885828cba0e7e7bd7c4791bb962a6bf8b3625fc5bed53b2f871571ed7335a67a59e89354249d2d62dcdbba3e001d43e49d4dbd262b0a"]}, @nested={0x1146, 0x28, 0x0, 0x1, [@generic="fcd23c661f244f3f366478f46f4aae0e8698729a812616b62de6f3fd8a2733271cb401eb5518cb3c5982d73b413167a0d656dc380b52930c68cfc868dd56d43be650bb", @generic="101231d45503292b0b9f13240cbbe18a9478f6dd3b4f6f3c250149ada4a3ee6e8c7dfc2aa948bd500f66d86c11fca9100c30a710d148302343dace068019a61f5fc29f5028339b5abb6a42f5977c2d25c16188a825d2ec24ed5e39775167492796ea6de594941a08fcc504f6d004fc9b94ce98688e83d6901fe6a902382c2fb726aac4ac22ec13441900c0f4323be6cc49b38c42e53b0674106f48e532943f053a8bb69abb9cc4946c15ae525df3615df419045a94d9e80a557c18355c34b2182eb65c1992f524cf838e0d11f2ba8abb73546934eb3bfa6a86446c2f5054e11315f8923f628888d67d5b10ffac18387cabcf490807ff94904e79be973f404daa1cf7092f30104bd4d74530e3e71cf9b97f7b23741e8d59ba2c7ae5747970f43666cfddf50219423ca1bac2aa71f9d68a93c3ff3f16f26f8505dd1653ca507eb34f3bd6a56bd3179b796306be220712420d31f163ec13974a94a9c78c762fbe97e82c61b788804811c1938bb60c593463348865c4a1b0e624e8b4c67b71ef127262367c9bcdf07748fa66fc25f3327fe4967caa0ea8d14ae688a2231256654d270fff7aab17cacc8373680d500c8ca5d5e5c9b8fc3923b70dc22b9f04aadd2a87a9fb6e6b4fee88b00501ccb8520d3d9426003fb4415d950cb7410b55a3ae51b4266b07cc93b1fad0a6b6cb81a13ec717ba8f527bd2b6ad2603e037ecb9ea1955c08f6d96c62e2a9e4eaac01947ec912d674bdbe5ee4ebf0b18d3176d49074049f9b6e09c688ed707c9b313580efa970bed94b6d0f28c417663be6ec395c712a1c7ed45d67a5823d725db34f28cd6a212c0b80a9e0d4929ebd75fb4c2e6e2b923543f054766163fa2e9a8ced44758ba530fdf099d07f8bd6e120b41305afbc8c0e030b30e0d5e00f58bc120d7781bff1ea30a474ee3fe14ba23c86c7d3f9a52dea735cdd241432b0650cb98bb8e838b0e8898a89f7d04eeb9e2ace05fb856b43bc052ae4c90542cb4d3c6217008a779be554264fcef257ea897ae0405e481c5633eeaac61a154a1af0d77353d90897b9b68b2aeed079a250a3fee9cfe15e04402a2702a0d17974b193bb23295df1b480d6ec4e9026faf38801b66e01d4efa05bfe3c4646ddb131d429a25e50a27d3c2b49e63eaccd863f85e4c35e263acf00eac047fd319597b62bed174be1adcce43bd7110f64dd60ee97251e4737333d980be09c9e83baf591d013108429cdfe09c399f78b324d4c0d06c1dce1c47443c8e2023edd40bb749345f28d4b5b32a30855c84e070ca017de405d2a114eb28f6ce4f5a7ab0b221fb9a8d1e2a868f8551dc60109899b9e6d98dc0b018570eea4c1a733aea4f3020c515b04d6e62ecb8ecb9e8c4251750fc767914689942935f1a1adcf5d2de31ed676e780e94d4f83863665bdfe9f85433ec3a2a5231898ca2ddb18a9ae25ec6b7d41d99734d3ea98bbbb629cb5a6c6431cea40d44dbb6dd720aa3f108dd3039f0f8603d82e81e322b8b8e2bc02379a6cb7120d483a57a88b87987e920a62f7e7dd2349f1418b784a27307c83c56faa5cf06a1669e09607805f524034ddea6bc7b01ad381c12feba60c507e70ae5afd7896e6535d449758ca31f2995ef7f151cb3abc89a1f30262b42dc487cb4d9bec797f8c0981e97984b7a3cd14c49cab7eb2325540ae10694a1c1cb098e086418bdfb4be771edd3ec6d713e7430a015df00cf257c77687eec9e67a49f2a5244875629de3328bb8e9ebce881ac9919773424affd6c04d68971baae5f39bee63c20c230012191417b1113928b420d91adbb3a985ff28bf5eaec180f2dec3a234382dbcaa68dff4553acf7ff40f6767c7aa7fdb95d8277d4664cbf85ebc8f8346dd9205f6fa1f7eb86ed02b4f0efcd166c851afa6d212d4cb9e20b123314ef9cce933718a3dd738db017cd64e676a9386664123d1b1fdd18d19e40934d0393c837e0166cb381c99efc304cb56685ebab6f528aeaa7b1ff5bb9539d6065d4c8f8da4bed7fab0a14cf0294d31b50884cfb88f31742fab7910cdcb17419bdfa425c3f178dfa0d97a5ef547ac77b418a1257f0a0c717184c1879306fcc4d0d7713a9533ab3c0a091994684c531dbf6c5c218274f3ea05d3d5cfd7141c8ec6ddd317a894136a194033fa5eb7499b17caf933897ee41bdca8f40bcc70a96656eeb52a62a66a214261fa2a34df9d7642aa126247273a3a1e056db6da74065e3b828bb9c93cba4743272eb1017f9abd99fc7becb129fc787cde8af8bc07f26661a4cceb60fc1b8063598735ed54584e8c3beafd2fa944b0c363c50c1cc59a3881b104204a5cb95e0e12864b9cfaf104a363f0c70f870d10fccf104b1bd2f5bd84392450e24151efc0a7c34a4d6420c16e74ef46e2859c9c0b34a1e2d878636462319c4a2f62ec21de361569b6c54b76a3ec1482103fc938ea745b4b8ed0fdb8c822994f707c729367c4e2061efbc12ec77a36793be6fed5f883ab1ca6cb0080d23727a9cd6eee73661f65bf396bcbc05beb926fb3174655bf69fe546398c3665ba0ab7f85154ea8da53b7c13a9357cd5d99f8b68852b36c7909d88208fec607b0455f46babc99d81d509126a0c6428e690524132d0b87ba2e136487582d2a70b135eaefaebd4cfc8a85f292a9cd311b1a928dd7b724a5a17f9c08e5d4aed55b2d4fee1f255d55ff19a3682a36ec359e37f918cbcaca384f26358fdca058e34fc122f73794a18cf40b0c3dd8b9fc0e34cc710a8b2933f108b1d38c8ee87e1543f2ad7ebc30260726d9d27d8cf4454eb1cbdcd512b06086bdd3cc1792739ade8056ed1897f011a68471071e3b1e83ac441126dd5044a92b1d0e77ca9dab58c1c78c0409c42deacef99699d0ab35e3fcb58956f6e028fed30e2eef20237a50ad6790001166612be6e72f39c8e3ac0010778efcd62a798196c03d9bdb5ad8275838a4ded48dfa339ebd6592ae40ce6c0c75641c76d1bbaea6afbbe310683acd55195c3c1cccb74065a0fa520db33ea1c8323baa79745e92d929957e91bf13533387f9cfcce08e2145e80379b64db5622528053fb225466f877404875a42ae3d3a7110c3a2d20885018b6654f6915c3b168d4c4d1fa8618119f9d285f4e9d0ac527fd9896c7b8734b46462390969d340cc918fed9aae5584d6ca8aaede8a429e8dd062cffd1f7f69be94c06a07a49d74af71f447b4181f0d22935381422a1e0431208d3577cfa1a688ebc4c1c207f1cc1a304c7b5aec49ba86ca3e488ca91399586ef715a126430520a1443448e6f8c5c75143a49221963a64d16b7a7547c4a9c8e8aa184c56a6ec24fe852fa1fa4699561fb2db580074f909973100af450bdeecdeac8bb644309a221cbf11a249c3f68db0f4feabdfd40d96250af8b6615bf20813e2e719fe89ad4ba37d4d4fcc526b109121f2865543318dcee1ebfbcf3c7b69d57d54766ce1e03794c495adfb18e0bba38634e6cfed803f2f9edadc4ebe76bbc7c3372cbe65ae7d948fd528aeb711b76d12676113902cd633f07b1ede18b89be9e16e0ccffbab83f06df2c90576882cb5c98b9bc7e9b7a8e4da5046b80d70b460a4eb8f48b9ac012d9f8159fc261c38fd9187c090f392bf3acf5150ba8607100cedcb278b1250e1509cabc570fe624b243bcc385186d9c3047d6bc6bc71c7562e4e5c3c82433cced5d879b593cb60edda0f7778810fc20933765fbd5d431860d223bc9f75fb33f2903101abd53908947635936bef4303a840fbef452caa716e1dc116551d0bcaf4c55ec3dc52717c798700c9118380106d794f48a817f3aaa3b56006808088e1fee361902cca3b48e0ddf1f426321b988fe387d50dd8b86dfa07df93019e1053312981ac9e1ae086b8e7623cab8b513ec8131321943c01fa99b13cdf47ff44e604e9bdb6b8c4403de09119a393532f731f8877b8356742b1093d896c6d944ceb331f49d0e192f3140e00adb493f0d9d3a5e3b3847b3aa8889c1286fe0347d5b8071173c8bb23fb42a8affa88697d0ff91b6bff7b36181f7c32bdf428dbb7bb457e837e8500642111494a65f2745b9f65d012672aa3c3980c817b1f77371a2788bdde054857bf195d48bd4d7ea8e93081fe20e8cdbacf7e81778b9bd6c9bef473b4fc7534c64de271d2a1c25337fb4760ac603fd40b90fc3a55139f4d1fb87fa50ef298e142feb149ca5690b816f58982893ff400d5389918278d59b84866cc3da54ef52a2ed1df462efef68b62e5abb6783c12380dea1cf89a9bde7c2b25289ce2456062ede6a7128bcba3c3249b30c2b4f6d5a985f54fba135df5901085336707e42e15b34e47fe548f72603c4b247c1ad1ea162fa019aedbc137da72f9af577825b8dc33324c5fe5ae79f8119364abfc078c82a6d3ec872c9a0df748552883e9795ec880aca03c31fc398ff0c56f643a58e3b53d0de4e581ee25f53b3df7a0936fa3c126d9efc10a22f2e0183abce6c37d2f55f2edc6296a368874f9bb4a11e29accbe4ea931b9a5b347c4284098b77822584bf138154890110dfee58b38063684d9e567d701ea14549b17ce1f7a88d87542563e8607221bee03303e12297c22ca31afe61e412d9e5d20c5978b7a748ea12e4a46c9433d63e0055b986ea0907bd6fffe9a8f56867f9b64e00fbb359616218e088ae1914ad7fbc22453bd7d2fb61686f273b13e208805521bc22c1dc34a8fb92bfe7bbc42063412740e4c9e55a59c7e78310026c2963dfdd355c438776a9b474d18353ce611227dc1e766897995a9ce4556f711cd28464da14a77d8481c6131942fc35da979bb6897243da0a2737439d5582021e2f63fa2c9f615019d8456f42efbcf527be381210627ede2b3f84745ea89ee207ec954bee1e209a4558de20602c65e15746799ec238be396174af6a768a022595e830603725a74f10828adbf8db90fd3835533dbc221f5a82856ddbdaa1557e35fef696cac297e9427ad1b87fc6f649fc8a92a33ea848c0f2f70f3d5e488394b15ef26334d46dfdf5cf0abbb0b9f86b9bbaa1ed874987f504498af12c0f73c2b5b9168b3e929dd4ff65faa276c3b0cd965bde1cd9a829e69b3024fb9e7fdcdb1db30fcbf8559aa031691c7d48c624df8b16e64ba29088e511abccafe3533bf57b8a1c4f5a25d18293e606b53443a96a1252b1dd65e268ddee02c3a86e4e277b1b228ec1b94e258b9cb745d9a597561cefdb42e0a15b3956c79c33d332751482f481a5d7942a99c89decb84c9fcce66754d18d74bf7470a9d9ddeecaa96bf769a5770a129dce8eb47d0602ebbe4768517db4ca8fb4ea042158467cc6ed66798d0ddb65813e40cdeec6ba58623b087db814d8667de5667638086c279c9c695a11e457be0fe6c3b1d437741d94fd72c9d71db36fd2518c88ee615d1da9122d29170ce103526a69412f828b9eb0551570e6e4749a498e1fb535962b0914a1d7a8c3a67b2eea75525fd12f8543089f0b1410b15bb365857f40a4a7eed81c67f0bc8c4785cc354b9d43e14673c4ad37916c50a2fb473f9496fca47df54f76dc6f578c7293a7d39a88a4441297fe56675609eb9b7e64b5029e170be5f67f2d5cb69ac34653bb2015fd9ec0cd7051a8a4b6c9e2e306a981f60a923062f8889da20e3d0339d935688967f2f52a9ff0070da5a0d100402d9384e0a898dbb449a04040498780e0aef62f153a1efa9eb5bfb5aa5ba04b45ed75e4bc1ef92e4a2eb70ad9ea85a5aa23549c0600bb91e68d87c9024bb1585df68047a4fd1248e7df941fff985ebf4d13a7f7f9db", @generic="381684a22a624d601ec0748ac3c4b5ef677851aa93a5e4db0a650c2509f7b068e488db9721a44e381f6c93be1251c83ec3a250239fc66ea3bfe83af37d3574b2a989d6605c5746e873547fd293472ad164f1bcab54220ab98685d1326afc097797c6398d3cede750af817bc36f3f7536929cd64431279fab4a5d0b9c3e48740273c8f3809626d92c9e5eb09de3af6b991f34fce0ab456d005504a6c78c261768aebce04c784f55eab79a4bf144e0f7ed475e563521bbf48e02e7e1aa6c4450218eef38975d3962c3c15052686c02ba2e71e835ca2c4f22f01d819f7d85bce5e697cd83f1403f56321ee3c9", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, @nested={0x44, 0x71, 0x0, 0x1, [@typed={0x2a, 0x4f, 0x0, 0x0, @binary="7cfe2f373eb3e15d004278897e0d52a381cf63a87e4a58f0cb825e1164d70481f135a805fc0d"}, @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x7ff}, @typed={0x7, 0x32, 0x0, 0x0, @str='lo\x00'}]}, @nested={0x10ab, 0x5b, 0x0, 0x1, [@generic="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", @generic="8ca94482306881f58764284e9cbc3eb294ea2336805fb94643d2658fc4a2074ac49e11af095db525a8caf2426a66c657e572894325b82b061beca77b00978bb288d49496c64bd7c112cd8f78a4b7af9a5240bb4321d68924462bacdb32790ab2f047f68f36d4cda8015ac91159afb07cb2c4ac6095d7470673266d6f3df41bcf6e724436c34dca1135eee8acf94d35900696a04092671c44bf61137d5f1638", @typed={0x8, 0x36, 0x0, 0x0, @u32=0xfe}]}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@multicast2}, @generic="c1e7c9159533f5791c27565b4b93915970374bc81f35baa836"]}, 0x22d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) 11:18:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2130.877635] __ip_finish_output.part.0+0x3db/0xb50 [ 2130.878819] ? ip_fragment.constprop.0+0x240/0x240 [ 2130.879912] ? netif_rx_ni+0xe7/0x300 [ 2130.880761] ip_mc_output+0x401/0xa30 [ 2130.881607] ip_send_skb+0xdd/0x260 [ 2130.882409] udp_send_skb+0x6da/0x11d0 [ 2130.883292] udp_sendmsg+0x139a/0x2170 [ 2130.884144] ? mark_lock+0xf5/0x2df0 [ 2130.884966] ? ip_frag_init+0x350/0x350 [ 2130.885847] ? mark_lock+0xf5/0x2df0 [ 2130.886686] ? perf_trace_lock+0xac/0x490 [ 2130.887583] ? udp_setsockopt+0xc0/0xc0 [ 2130.888478] ? mark_lock+0xf5/0x2df0 [ 2130.889356] ? __lockdep_reset_lock+0x180/0x180 [ 2130.890370] ? mark_lock+0xf5/0x2df0 [ 2130.891192] ? mark_lock+0xf5/0x2df0 [ 2130.892002] ? lock_chain_count+0x20/0x20 [ 2130.892901] ? __lock_acquire+0xbb1/0x5b00 [ 2130.893815] ? lock_chain_count+0x20/0x20 [ 2130.894734] ? perf_trace_lock+0xac/0x490 [ 2130.895632] ? __lockdep_reset_lock+0x180/0x180 [ 2130.896646] udpv6_sendmsg+0x1bed/0x2af0 [ 2130.897567] ? udp_v6_push_pending_frames+0x360/0x360 [ 2130.898748] ? mark_lock+0xf5/0x2df0 [ 2130.899586] ? lock_acquire+0x197/0x470 [ 2130.900467] ? find_held_lock+0x2c/0x110 [ 2130.901380] ? __might_fault+0xd3/0x180 [ 2130.902272] ? lock_downgrade+0x6d0/0x6d0 [ 2130.903209] ? lock_downgrade+0x6d0/0x6d0 [ 2130.904154] ? sock_has_perm+0x1ea/0x280 [ 2130.905064] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2130.906226] ? _copy_from_user+0xfb/0x1b0 [ 2130.907176] ? __import_iovec+0x458/0x590 [ 2130.908098] ? udp_v6_push_pending_frames+0x360/0x360 [ 2130.909236] inet6_sendmsg+0x105/0x140 [ 2130.910147] ? inet6_compat_ioctl+0x320/0x320 [ 2130.911163] __sock_sendmsg+0xf2/0x190 [ 2130.912016] ____sys_sendmsg+0x70d/0x870 [ 2130.912861] ? sock_write_iter+0x3d0/0x3d0 [ 2130.913732] ? do_recvmmsg+0x6d0/0x6d0 [ 2130.914554] ? perf_trace_lock+0xac/0x490 [ 2130.915422] ? __lockdep_reset_lock+0x180/0x180 [ 2130.916458] ? perf_trace_lock+0xac/0x490 [ 2130.917340] ___sys_sendmsg+0xf3/0x170 [ 2130.918153] ? sendmsg_copy_msghdr+0x160/0x160 [ 2130.919147] ? lock_downgrade+0x6d0/0x6d0 [ 2130.920012] ? find_held_lock+0x2c/0x110 [ 2130.920860] ? __fget_files+0x296/0x4c0 [ 2130.921690] ? __fget_light+0xea/0x290 [ 2130.922506] __sys_sendmsg+0xe5/0x1b0 [ 2130.923313] ? __sys_sendmsg_sock+0x40/0x40 [ 2130.924217] ? rcu_read_lock_any_held+0x75/0xa0 [ 2130.925200] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2130.926292] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2130.927363] ? trace_hardirqs_on+0x5b/0x180 [ 2130.928264] do_syscall_64+0x33/0x40 [ 2130.929043] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2130.930128] RIP: 0033:0x7f9f7e251b19 [ 2130.930924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2130.934716] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2130.936305] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2130.937789] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2130.939256] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2130.940717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2130.942181] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:18:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:11 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="0200000003000000", 0x8, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2131.067081] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 2131.068736] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2131.081050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27618 comm=syz-executor.2 [ 2131.106427] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 2131.107852] EXT4-fs (loop4): group descriptors corrupted! [ 2131.120580] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 2131.121714] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2131.134980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=27623 comm=syz-executor.2 11:18:11 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x81, 0x9, {0x0, 0x6f5}, 0xcca7, 0x9}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x16004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x0, 0x103, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202342) write$sndseq(r4, &(0x7f0000000480)=[{0x8, 0x0, 0x5, 0x80, @tick=0x8, {0xe0, 0x7}, {0x8, 0x20}, @addr={0x5, 0x9}}, {0x2, 0x1, 0x20, 0x40, @time={0x40000000, 0x2cc}, {0x0, 0x6}, {0xac, 0x2}, @quote={{0x7, 0x2}, 0x6, &(0x7f0000000300)={0x8a, 0x7e, 0x3f, 0x1f, @time={0x8a, 0x8}, {}, {0x5, 0xff}, @ext={0x61, &(0x7f00000003c0)="3a76e0bc23818d92b0c4b4646a6dfe1a6618ef6e2a7762a194091703a2dde6504e4c2ad91d7cd6d9781a7349340b41991201b69450b695933870fe707c4aab7c5bf8759c8484402f35e4eba61c7df9bcbd5a299f2481d14be9eaf60e8495e073ca"}}}}, {0x0, 0x6, 0xff, 0x1, @tick, {0x6, 0x4}, {0x0, 0x20}, @ext={0x27, &(0x7f0000000440)="50f92f937a0654e01c7e5d6d77235b3e6b19a3a15d6457504da001d2c5a4a6c060128606702f4d"}}, {0x9, 0x5, 0x1, 0x3f, @time={0xffffff80, 0xaa}, {0x50, 0x9b}, {0x2, 0x7}, @result={0x1ff, 0xffff}}, {0x1, 0x7f, 0x1, 0x6, @time={0x800, 0x8}, {0xf8, 0x1f}, {0x46, 0xfd}, @raw32={[0x2, 0x1, 0x1]}}, {0x0, 0x3, 0x0, 0x20, @time={0xfffff2d5, 0x9}, {0x20, 0x4}, {0x80, 0x3b}, @connect={{0x7, 0x6b}, {0x3, 0xff}}}, {0x0, 0x4, 0x7, 0x6, @tick=0x20000000, {0x1, 0x2}, {0x40, 0x8}, @connect={{0xff, 0x1}, {0x20, 0x81}}}], 0xc4) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x8040) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:18:11 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x300}]) 11:18:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) mknodat$loop(r0, &(0x7f0000000300)='./file0\x00', 0x1000, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/255) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x65) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) openat(r3, &(0x7f0000000340)='./file1/file0\x00', 0x200000, 0x8) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r4, 0x406, 0xffffffffffffffff) fcntl$dupfd(r2, 0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r5) write$bt_hci(r2, &(0x7f0000002d00)=ANY=[@ANYRES64=r6], 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40086607, &(0x7f0000000040)={0x80000}) 11:18:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 36) 11:18:11 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)=""/129, 0x81}, {&(0x7f0000000140)=""/37, 0x25}], 0x2, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2131.168345] ALSA: seq fatal error: cannot create timer (-22) [ 2131.213781] ALSA: seq fatal error: cannot create timer (-22) 11:18:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x500}]) 11:18:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f00000000c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed410000000800001c00000000000000e0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000040)={[{@nombcache}]}) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) sendmmsg$sock(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="d95c968b7f2c08674eddff591bc97b658aec29f5f08553dd190ee54c4c626320083ecf8d1e81e5e29c57", 0x2a}, {&(0x7f0000000200)="4f59f6baf861d4cdc5d23579d07f5f84bf01b8f802a59e62d106c24e66e157145b425d32a08eee6d135b8209e5110853b6bb4840a495e12e597a4da70ff7a5c6fa2634eda47fe2e797e6de71f04c918d13f5940083b27410660714c70b11de5652916cc7c9408ac9d04e95af1f9777f6b80ff8be44d545002d4b4994a684ad5e668f9cf4ecb73b53ec555c6fd4f77372476af429b2d4bb90ce2657200cf29cd986e22bfd0caceaabdb3550e424607bd95776b144c205f0ef18699f0d2ebc2920010ed9bdf12d0857f2e72be2f0a3a368eee69fd8a55b166d4798d893a9", 0xdd}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f0000000300)="a5b4c2daf18d6b1dbbd1753c2c5e10fd58a07993ce1064746040edb1cff4e33f8c8d64077213934a558c47e3b59b54abef10e7ce0a745b9fdc1618850777f6339fbf24191d2ab886d051f34d3fc0d8e659280c62d04a2b837e9e682e28ffe81b292a5a7ada4c08aa9f28b6b766d475d4260e41900890815bc822630594acac6afa446d789a6156e0742a4313f34d7ed703a86ac01194a8feb36912c515bc29bf3bc80e5d4d3e8b2d0858f3b988b69891bf86315546f5", 0xb6}, {&(0x7f00000014c0)="2b7915e73450121302b96e02ef2454e3913724b686354dff612cabade08a4e68afb6f3e0955ab83b7c4f71267478d7901040daa476c080c636c4b4d742995a59ddea163db3e904d202a5dbc885a30faf5f2bfe3b4cf666c68ba9f7d30191a3b37df31718ba252a0e228e66322130856eae6f9fa344c5d2d8c7d7f1166580fcd05767adb70276bcb05d04513f8228a3ec6399c2d0c34378086ce8f95ac146b995dfb4b9b1e2a04b3bee9fa0861899e13ed5aa9c9f0bcc795c2485b7977c14ca405232cc5b6f66e32c97817678", 0xcc}], 0x5, &(0x7f00000015c0)=[@mark={{0x14}}], 0x18}}, {{&(0x7f0000001600)=@rc={0x1f, @none, 0x2}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001680)="c08a30e1f41f96521a62104006cb20fc1c9d79e7e017e61b55776af68e89f70770c0bb9320bc2a92a846b4c397aa44331c0202c39f049f5fcd9a9d1419bd14822d496f1f557bb7f8ae94f1", 0x4b}, {&(0x7f0000001700)="cb7121ecbe1145e5c00defbf6b4f606bc4a8696dd812a78dc3873bccdd4041eb38095b14a1412b439be36c7bf2ab4f31dc990860d18eecc1c3356a558ce07e5e7ff108cdee0315bb1e0786b9be691cabd166913156becc5900aea86fb2c0169c402c20cd80febc043e19af7d892aaf5eff63b73c", 0x74}, {&(0x7f0000001780)="2dca46da86c6de018a0b1be017c2e0f8ebb4826db0eb8cf9222c867a90834b5806c02bf7ca2ac76a568735e868af1b56f414658bebd4635872137905078b9a78d0ac132fa9269d62579eb98a8162163b1d2bf822658d93bea4334f251b8594110a7260f5a17f1496b640ae6d45358fb92ffebb9b39c7108cba0d4ac8c9af6dbde37117f92ff07e88440127767ac84623fee5780a423cf069f4869086dd157d4c0df41e5a2d4a9957b85f7e311f056ad22ebf18ce30ef6d0c6d654ef19064b4542dfc09e65ca0478fe168014f8f961f8e4eee6ee24be0da492e1572d29d27a63e910a8f2efb3195f9", 0xe8}, {&(0x7f0000001880)="0a07f1d784021db585ea080d19f487576ad4b685d0bea919e2352098d90f89fd9f0333d43f73d7c219db1869917e7d22349b3cecef1b791bb58ee170fba891cc2abe5656241fdeb2425d4b2797c1be35edebde6cccb4f965a50e137750bc0bd54ac94b04a3e5b9a56df0f0e032410c576a6d21ad522abccb7f3bff6fd2944fcfee31e7fef0368f29f771b54954e8e90d09ddab19bc51b075335eb5240b80b89dde2fa3c0f5b7f5f18610c0f6", 0xac}, {&(0x7f0000001940)="c1b1a65bbd66b95100da1a8343bb89f0a22effc5f59532284995c524d9234ebfcf3eecb32626fdc1685f82f3871850a08250f45304b8f48ccaa38370b904a364964abeaeeb9b46479c03d4006a4e149f365e90ae6c8cff9ef94f9a4a9101bed55519e31a9965488a5881632a4af851fee26b0b15e2c86ca21595d4e16fcab6a8915e7192209603a94118a5bc96c7117085ef239e51a70d2200d473f7fe1ccc0e23fd817c22af24cd8621f41d61c3d8eedf026dea9b700acda8e22f38c3d54f20c312b84333326e2b932c34cff16a3e5ded6e2c4d1a9806ac297c6ac7f892ff1bc960717c4005b06287f4223920a0dc1ed275b9f9020dd0b73c6007c20d961ffabea56aca1b91a1ca259bacad224dc7ad1a4214bc97da91b1736568ad42e8eed916beb494d70007931deb14d9ba9064fd2d14747c6d5525b95ca127938041259b684b006111e82a0c86f99402f8fe06cada101305d1e981bf51df3fc46a5fd5a52514740efb7a811df9269a34a24a603d06751e4dedc72460588971d136b75da0ef73d0c06a10c5758871351b705033b7f821f490206e84728c8cf88005c5dc83422317c9dde3b19d51fb0608f12b0879192bef590125ccd95371290236564a3058b3b9f3bb591a24afde02c712d25e4cbfc7458c82a70930456f449d6070e8619188ab193d35122261b75edbc3a023cb4687b6c8a05fe462a4e43f49d1e15e120bbd5425c5b606365d4b747e12caa2f54487f06e6d014b4738158b8de0645a1e178864c10ec1965d31ae65d880d637bec747a6b3840d90318b8fa15e2ea37a71070ac08d38be069bedbb564b9e00f9c37997eec157c8de1b9297ba8a2bec8ec77c816cd06c8a3a81996c62837ff44f78d424da6aa42ea3cbb2be4b7357f10a2f7cf2284474eb888cc0db7df9e98757dff1e3c6d4785f9d8f190ce2ef2013b4c901b7cfdf2c67b62175608d63cf1a6413e2d3d28456dc81abedeb459709af005d92fc4689be49b0255bb79c74fb88542d9b64c99cbb27fb2fb984bf7292c87bf0ab3159652286504a48eb2cdb6572e06e51b427fdc04a5813f7d5af5cf88faf46c9c804d977c52d6a849902a10ca9cf3e1579a7ef96d083af188c83375461ea6507fcca24a0db2cdf736ce57df71ec1478d44d67e5a156ec0da9c765d6a7ff2011f39c4e7b935701725adc9c1fe0bc14ce6c003c29b097643fcf47d63e2bdfab769e3610a52f89203b63f44ddd7f399a90a903d04aafe3caee7021aa46b6ecd663788b8b16bacc1c1b6c7970604bbee3744f06e969a9aa4e52de86ffd3a0f22c02bf145d8bca26b2389ad0edaed26de8fda15bda1c9ad260801b524f7c2a4c0892857e2cdfed8fa7bd2881fe8e26aec06d3b1493351e3aa08aecd88d32b592943a06b2433ac819c84a1ee9f2fc3c57f74119fc17ad4a7f8dcd7406b32a042f52291687e04e072e8a90efddea0870008c872b92106fe449e81dbae9b39f757d928f1cf6c6348b0f4338d1b549509b3aeaa2c4d894dcba90b724fb80946ede08053d0385d13b46d38d078387839fe8e4b3889d60164479d9814fc65f69aa35d1dcd0a3ae6c978a13fd38e7073902d85b33f3f5a52cf0b9e3fcb1941cc24413211b1316f524cc5415b6e5d4cdb9a7ba32d94aede3b3dbffbdd4d505725c6a97e2df642057ea755a13591a084340dfd34d29c571ab29ca09abefdba43373ac77cee5b1047e5292b042ec0746338a3ec121d94ae03c286fba2a3ad391dfc77d9ec9a68f8fbf6be1fda6f6be42bc6725a83391a2767409c924911b69083dec043778f812be17feee18ac86d3c65a33b4d0555d8f664ecd5e1621dd6955495e850875e9bc5b842e050ae6afa39772296c24b85758cba6b288a44e0aeb74d8de65e85a45adb86b2abd31bf4545d7c936eb8ce4ed107f7351e5e0d802fa5279570c9aed414008eaf792a75071daefe060343739b3246b22a7c99fc51585f12a7c8f218eaba3c097ef2aa387db337febec44302799ef508eeac613301360ad4aa45196da44cce72c5f473301203fa1a1924d16bcb13b646c819b0cbe531861de816cbf8ec3c80b9250595339e743dff200f2d6025f9eb4e4b902768b315c28e08a312b978541d67b42d33bd635974d1230032c823de5967919058c3bf9d53532800817d43640c6d3ffd3ffe6d9a639f5ecce721076996e982499b0792ca22615d66e00d8f7e30d831ebaddbddef5eb43d77523c8e314c0fec94c3fbb718c7c14a4eefeb8f25e1b0ee17aa27c8819d577c50abddf9b6f99d008753cbf8cb95c9ae34b1aef0e03986fb159147b68f2d83c81c71d27647cd2294aebdc8f6e3cb4937fd5b1d9b8d01b315732d8e30df73b3a8b17ba1c21707c557499cb6abcd6b4144aca4c35549d7531ca2199a04796f830da9d364a52e22d0d70c910c440f69f1b4bc82ef39d54e9c0f41bbf09e74a1faae159c7e372b96d28930a3d5ffb7b6092462413f1257683e9a10d183d610629e2883463f4e263259a57428100ab4b19a98cd7e5fbe66e4d70fe7328e555f2187612634541a9b7fbe09e098fdfc28dd9bd92548d57c17b07b13ae4dc9c7062d5b054978fda23d81f25e2d8d5188170d5a2b1664eca5862d42cd0b6e33669c448d34a5d12806b78d214d8161bbdd59057b18c0c83a5e2597788be2111c3935303805fc3a0786e644265cdc78af1d4be4c36b18a4cf6d3bff1002e55d28c32f5aede0fa49e09228486ddc9fb80d3ce82c019906361ffb9d9dba712a65900b0949ffb0fc7af3955d400c727aaf9ac9a9a104f3d757a879a6bcd14901819929f20d6ff5f82f1e2180877919a93e0c48fe8649c2a02e8739743515c53369218837b675ce6765bbde076056eafc44d2b9e1e40ce342f0eb8c1c99f84e19a43b1405cecbbf69394a7374acacf0bfb218bfdc7d099e2d1e21909a55a4c49f1436723927feab06866dce6865fb0b3a1601df8a9536fe1702f152c0a5361f91eaf0abfce9315a5ede87cbfeeebfd326ce2ed0baf06d8eb523158d1224cd1f8d7fce5541f86447ffe1d0a4f40e1ac126e9a4e65b968e9fe50ac985b7bf76110ab7559e7c00213bbe553200ba4aeba4c5e015408af1a53bd0e5d90674d9378486c6818fd940a95145e330d5f43a9e41c4f65e5ca0d2f83361ab6bd3cee43c2203c2662af72d692064a9ceef47c8518007ca787cf43c456d5015caac23339cec47376eebbbb12efb3e41f09e41398c5e61ea14eef378fa21722bbb04b55b7cf90496484b2864f2b5b6a7961aaeec7004e026e94a7df783874158721fc211bbeeabaf508c61d62b1f3aab564c266dded5687413ee28434b60ec4698c537a6000cddbeed124228beb94557501884194bab48a2f5a55c9781ffd9be9cedafd5fda606b4248df2425193c3093db10cd12eaeb78b7cf633dcd2898fd55de7547021c80ff0b1ab14b79bd717e2ac0707a91da39e5b406dacd62c389faafab92dfd18f613f947b18518254b0df9eb91949626b8e541a3da955458691a8042556d6dc68053e02f938dd9d8f46e68315118f440189ab2e0b20ebb9982c433170aef57cb37dd2f8da8d7e21c3fb731a8f3f491103ba454735617bc4b35325e3c8e3cfbaab7c4f1f51d38f229f79b66c01845c2cdf7a99f60f2ed2c57ca0d5f213cd780367186794fdc58edec7bb7607af2a63b2b652cb7f74f13ab99cb4dc2e5cb823b32123e89fc4aa49d11b3c6a824a0258e91fc51af78cef74e0c01aa31e36db17d67645083b7fa732856ea382332119a5cc6bd581e74000afce17fb2e499d806b095cdc2eefdb51e3188d910fda3c64d507c5cdf10d03c404ab6b3d909356cac3dc9af8e8f063d56dd318b162775f8a7ecd03ec541ca01a2f2a6db6e2386feb561b5b338b497e5d3f99c584aea243663872fec6af7c68b2a1b78bdfe37eee9108e064ad0f0515cb330f657d7f734d255dafc9117f27018997d1eed2590371dcc2b15960225e44c96c00e9118623331c9db3d6fad234e95f030268aa206398ffd82e5d1b910c9571f564dbc73db4e680528013e3bfef644189e5a3d91820c9e264327729c9aa3b30142a6d80d3e6026040f9a93fd5378f0c39fbf84df81add9fca287969399fba132e904c2a9414b925a2282478a39cd35f1f6af9843aa43f423564b726da9abd5d7361c1c2b0931c045e585fd41d6dc26f96a92751fa9c3db6c4e5d591acc221264fe04fb0a2a21b986f8e91152833462d4d7dc0b4ab31525cea593d7f2e9cfbc44f48669e4acd493cfe30f6c3fb4abcac2a5832b2da8d278a7854f3fdd1ba2da42c6f290a0ab3ef5922e32a5a6105dfd33df689602d1b062cf6dd1108a5fa4f630bfc82be61022ccb3f2e4fbd8a6ff79a1ef2a28115ab7a19f8f5b9150dcb6db6ec82495f3d45852843e9b808499c2d813b9d812f08be53ec0d060de6dc9a6ce2735de126e3a75012f367fccc70ff1ba6f4c77d9364acd9d22afc65f85f271b0e3ec975aea9f9af39cca993135f38ce8ce8ab31222ca7e2313909308c1da152622de7267f8be9dea2f4ebb772964f8be8171016ade10d4b3fc77f7c4873e2181c40a1e591d4349e869fd4aae09929a19617000af2dee97d337ed5c3994097ea88b2ac2142f7cc4af829462ebf666ead9b92573394d7e84db4364b1d25b3c6acafc4a7e9329d16e20c923e12e50ad57e325f879cb99d518eb335bdec034ac4eb3db656b7fbe78ca584fa0ac9752546046e8d69a374f6c0ed72d68a61daf6f8bd3733d47751335911a28cf7bc6881668e1f6e78622cce2bd69e08a896b70d5f675090910b009245d3b19bd6178d1dee1404b452303a3a657412c45cc81f1ac5c877b7ede8f3b697b96785f1e7382d38862e00a773961242f9775819b5241ff4bab3f1b4627ed7033834c14cfcf07b71f2ec47d1b03e9055cc32d57c15712cd18f90028490ea83e37d9c2970bf418002ee420838efddaca1d468af194de480534cd036633a9f07981f1f5b935e773623f709f3bc306bf7271e806cd06d094a13cc110d5419e437e3ecac0c962f2a9376263348fbf9d3decacdb6e267dfcfb72c0bce229f484f6bb8f9ee31c6d3044690f228bb870b532d39d99fde2789e812111a53a6f3f7ee324ffdebb3dd5e5d25b3a4d78f669741de5ae38a0780e59e12bf1aaa7e87726cd0bd75098132f2f7cced3295572a01382ba862da8eacdebd775d4110014710914c5720a341140a527f125fd77a5a7efeaf20b1b25d4f16e5039aef72b059f6b0eb976b3d610011fec03d85e65182e36b3d3aef354acf33c98ae854764a2908a3d5e068bf9ad2389670387884677017f5976dc598888f691e78ab011d1b7de799d74bdb9102422c9d1d4ed0257b77855746f9c948289c1f6c28988624e11a2bbc45d5ca136c14530348d60be32113f1faf17323b41b88eea31cab8276e53e8dce186d516d9b9d5868f958c212de2d922738d8fc68b4055013ac2119a4d4ecd9f31f783202e60cd6e056bfbcacaaea88dfd68ff43436d1030223c253697f78a92468c05775c81a75e06390f17a321b411fce6f60aac76d464dbca82af8ec0f15e8b4c12d6cd54821f4038bcbde89a4bc176239da072da2ef015b3c4993bbe1aba247c0d33eba19a7985b91aa5deb1286b4dcc23573e5f7c72f5e379e16876c8375b110fc8b1b524c41b7aefd18d87a5333195a033d1c62e1535c38b030624073ce8d50c55b9a7fc796470ec911c49f13f9dcc0c323aac7763c91c802d1d9edf66c6a7f3e8a95159c9ade2b74ce06a148cc120208af8", 0x1000}, {&(0x7f0000002940)="fd4d8760e67b20e85ee6f1f4d24dada7ea5fafd9aafd51c2a6fecd60076d971d8bc3639087618cc99bf47f857fc128c8637a32b0d510548c11a3df89ee3531620f422d0ba00b4ceb0c3c32c00da560b96885a059c55695", 0x57}, {&(0x7f00000029c0)="68739ed97da2d1c6f5f14097a5aacc8b84da2719a718cdebed0e67ff76233129e610b845f3034151ddf62c28192ee5760158dd48c0004b4f003d8fa433389fd3b4adabf9fa7ca57763c28d56d8f676241cbb6a6d8ff940c90ccf5308894af1e23eb7b27ea1fb3aef8befe5fe90baf8a39fd444116b56075bc102a9ad14f22ff3f0322aaa164db313681896bbb400f91380e2433ccb6367a17be5454bd59239759b47949c8ef27733291cef70f452eac7ac19371c82805b85d5cdd8e8fa795e3a3f797dc9de95319a7180918876ee3764b7dd84293768f279c5bb4800b601393888010e41b7eb51ecdc81c177cc18e96e4416", 0xf2}], 0x7, &(0x7f0000002b40)=[@timestamping={{0x14, 0x1, 0x25, 0x79d}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3e6}}, @mark={{0x14, 0x1, 0x24, 0x20}}, @timestamping={{0x14, 0x1, 0x25, 0xc2a}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xd8}}], 0x2, 0x8001) 11:18:11 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2131.265737] FAULT_INJECTION: forcing a failure. [ 2131.265737] name failslab, interval 1, probability 0, space 0, times 0 [ 2131.267304] CPU: 0 PID: 27641 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2131.268188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2131.269271] Call Trace: [ 2131.269628] dump_stack+0x107/0x167 [ 2131.270128] should_fail.cold+0x5/0xa [ 2131.270655] ? lock_release+0x680/0x680 [ 2131.271206] ? skb_clone+0x14f/0x3d0 [ 2131.271682] should_failslab+0x5/0x20 [ 2131.272164] kmem_cache_alloc+0x5b/0x310 [ 2131.272685] skb_clone+0x14f/0x3d0 [ 2131.273164] dev_queue_xmit_nit+0x3a7/0xb00 [ 2131.273760] dev_hard_start_xmit+0xab/0x6f0 [ 2131.274348] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2131.275092] __dev_queue_xmit+0x17ec/0x2710 [ 2131.275692] ? find_held_lock+0x2c/0x110 [ 2131.276254] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2131.276889] ? mark_held_locks+0x9e/0xe0 [ 2131.277449] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2131.278168] neigh_connected_output+0x382/0x4d0 [ 2131.278801] ip_finish_output2+0x6f1/0x21f0 [ 2131.279396] ? ip_copy_metadata+0x5f7/0xa40 [ 2131.279985] ? ip_frag_next+0x9e0/0x9e0 [ 2131.280532] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2131.281159] ip_do_fragment+0x189e/0x1dd0 [ 2131.281732] ? ip_frag_next+0x9e0/0x9e0 [ 2131.282285] ? ip_finish_output2+0x21f0/0x21f0 [ 2131.282900] ? nf_hook+0x137/0x510 [ 2131.283360] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2131.284042] ? nf_hook_slow+0xfc/0x1e0 [ 2131.284570] ip_fragment.constprop.0+0x174/0x240 [ 2131.285217] __ip_finish_output.part.0+0x3db/0xb50 [ 2131.285880] ? ip_fragment.constprop.0+0x240/0x240 [ 2131.286524] ? netif_rx_ni+0xe7/0x300 [ 2131.287030] ip_mc_output+0x401/0xa30 [ 2131.287519] ip_send_skb+0xdd/0x260 [ 2131.287978] udp_send_skb+0x6da/0x11d0 [ 2131.288521] udp_sendmsg+0x139a/0x2170 [ 2131.289053] ? mark_lock+0xf5/0x2df0 [ 2131.289563] ? ip_frag_init+0x350/0x350 [ 2131.290105] ? mark_lock+0xf5/0x2df0 [ 2131.290615] ? perf_trace_lock+0xac/0x490 [ 2131.291168] ? udp_setsockopt+0xc0/0xc0 [ 2131.291690] ? mark_lock+0xf5/0x2df0 [ 2131.292198] ? __lockdep_reset_lock+0x180/0x180 [ 2131.292837] ? mark_lock+0xf5/0x2df0 [ 2131.293352] ? mark_lock+0xf5/0x2df0 [ 2131.293860] ? lock_chain_count+0x20/0x20 [ 2131.294422] ? __lock_acquire+0xbb1/0x5b00 [ 2131.295017] ? lock_chain_count+0x20/0x20 [ 2131.295586] ? perf_trace_lock+0xac/0x490 [ 2131.296107] ? __lockdep_reset_lock+0x180/0x180 [ 2131.296692] udpv6_sendmsg+0x1bed/0x2af0 [ 2131.297253] ? udp_v6_push_pending_frames+0x360/0x360 [ 2131.297962] ? mark_lock+0xf5/0x2df0 [ 2131.298468] ? lock_acquire+0x197/0x470 [ 2131.299003] ? find_held_lock+0x2c/0x110 [ 2131.299549] ? __might_fault+0xd3/0x180 [ 2131.300078] ? lock_downgrade+0x6d0/0x6d0 [ 2131.300617] ? lock_downgrade+0x6d0/0x6d0 [ 2131.301185] ? sock_has_perm+0x1ea/0x280 [ 2131.301730] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2131.302429] ? _copy_from_user+0xfb/0x1b0 [ 2131.303007] ? __import_iovec+0x458/0x590 [ 2131.303575] ? udp_v6_push_pending_frames+0x360/0x360 [ 2131.304282] inet6_sendmsg+0x105/0x140 [ 2131.304805] ? inet6_compat_ioctl+0x320/0x320 [ 2131.305406] __sock_sendmsg+0xf2/0x190 [ 2131.305906] ____sys_sendmsg+0x70d/0x870 [ 2131.306450] ? sock_write_iter+0x3d0/0x3d0 [ 2131.307009] ? do_recvmmsg+0x6d0/0x6d0 [ 2131.307510] ? perf_trace_lock+0xac/0x490 [ 2131.308053] ? __lockdep_reset_lock+0x180/0x180 [ 2131.308679] ? perf_trace_lock+0xac/0x490 [ 2131.309215] ___sys_sendmsg+0xf3/0x170 [ 2131.309722] ? sendmsg_copy_msghdr+0x160/0x160 [ 2131.310351] ? lock_downgrade+0x6d0/0x6d0 [ 2131.310897] ? find_held_lock+0x2c/0x110 [ 2131.311431] ? __fget_files+0x296/0x4c0 [ 2131.311949] ? __fget_light+0xea/0x290 [ 2131.312463] __sys_sendmsg+0xe5/0x1b0 [ 2131.312965] ? __sys_sendmsg_sock+0x40/0x40 [ 2131.313527] ? rcu_read_lock_any_held+0x75/0xa0 [ 2131.314135] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2131.314863] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2131.315519] ? trace_hardirqs_on+0x5b/0x180 [ 2131.316101] do_syscall_64+0x33/0x40 [ 2131.316584] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2131.317268] RIP: 0033:0x7f9f7e251b19 [ 2131.317774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2131.320235] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2131.321247] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2131.322199] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2131.323160] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2131.324110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2131.325050] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2131.351285] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2131.352484] EXT4-fs (loop4): group descriptors corrupted! 11:18:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:18:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 37) 11:18:25 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000340)={0xa9c2, 0x81, 0x9, {0x0, 0x6f5}, 0xcca7, 0x9}) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000240)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000200)) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x16004, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x0, 0x103, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202342) write$sndseq(r4, &(0x7f0000000480)=[{0x8, 0x0, 0x5, 0x80, @tick=0x8, {0xe0, 0x7}, {0x8, 0x20}, @addr={0x5, 0x9}}, {0x2, 0x1, 0x20, 0x40, @time={0x40000000, 0x2cc}, {0x0, 0x6}, {0xac, 0x2}, @quote={{0x7, 0x2}, 0x6, &(0x7f0000000300)={0x8a, 0x7e, 0x3f, 0x1f, @time={0x8a, 0x8}, {}, {0x5, 0xff}, @ext={0x61, &(0x7f00000003c0)="3a76e0bc23818d92b0c4b4646a6dfe1a6618ef6e2a7762a194091703a2dde6504e4c2ad91d7cd6d9781a7349340b41991201b69450b695933870fe707c4aab7c5bf8759c8484402f35e4eba61c7df9bcbd5a299f2481d14be9eaf60e8495e073ca"}}}}, {0x0, 0x6, 0xff, 0x1, @tick, {0x6, 0x4}, {0x0, 0x20}, @ext={0x27, &(0x7f0000000440)="50f92f937a0654e01c7e5d6d77235b3e6b19a3a15d6457504da001d2c5a4a6c060128606702f4d"}}, {0x9, 0x5, 0x1, 0x3f, @time={0xffffff80, 0xaa}, {0x50, 0x9b}, {0x2, 0x7}, @result={0x1ff, 0xffff}}, {0x1, 0x7f, 0x1, 0x6, @time={0x800, 0x8}, {0xf8, 0x1f}, {0x46, 0xfd}, @raw32={[0x2, 0x1, 0x1]}}, {0x0, 0x3, 0x0, 0x20, @time={0xfffff2d5, 0x9}, {0x20, 0x4}, {0x80, 0x3b}, @connect={{0x7, 0x6b}, {0x3, 0xff}}}, {0x0, 0x4, 0x7, 0x6, @tick=0x20000000, {0x1, 0x2}, {0x40, 0x8}, @connect={{0xff, 0x1}, {0x20, 0x81}}}], 0xc4) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x7, 0x8040) ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000080)) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11:18:25 executing program 7: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x1, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x80) pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100004d18000000ce0e8173b3b5b36f15f830e43dc5bf41cad8c00724e0e123c540fbb356232400d3e2f7fd87b5ab7aacac1dfbc43259272cc2e2706bd53c7b50d61a3a97125f8e92e436a973133acd8dd3c94a2d8f33697f2ed978c3b49e26f6b8e0b44d57a466b78ccd806838ecbb314209a24b8195ef2d89ca39370003f64ed2d2f6", @ANYRES32=r0, @ANYBLOB="0700000000e000002e2f66696c65f453"]) r3 = perf_event_open(0x0, 0x0, 0x4, r2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x26) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000200)=0x33e0, 0x4) r6 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, r6) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) copy_file_range(r3, &(0x7f0000000180), r5, &(0x7f00000001c0)=0x1, 0x40, 0x0) sendfile(r5, r4, 0x0, 0x9bbb) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000380)={0x7, 0x7, 0x2}, &(0x7f00000003c0)=0x28) 11:18:25 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000100)) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_setup(0x0, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x20, 0x0, 0x1cf}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0xa, 0xfffffffc) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x8914, &(0x7f00000001c0)={'veth0_vlan\x00', {0x2, 0x0, @empty}}) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@gcm_128={{0x181}, "038db6e8233c23d9", "b231e40393c68559be475c82199ac23c", "63d338fd", "5f2fdaeb8a6300bc"}, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000080)={0x6}) dup3(r3, r0, 0x0) 11:18:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x700}]) [ 2145.389840] FAULT_INJECTION: forcing a failure. [ 2145.389840] name failslab, interval 1, probability 0, space 0, times 0 [ 2145.392454] CPU: 0 PID: 27768 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2145.393939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2145.395790] Call Trace: [ 2145.396387] dump_stack+0x107/0x167 [ 2145.396416] should_fail.cold+0x5/0xa [ 2145.396441] ? create_object.isra.0+0x3a/0xa20 [ 2145.396465] should_failslab+0x5/0x20 [ 2145.396485] kmem_cache_alloc+0x5b/0x310 [ 2145.396514] create_object.isra.0+0x3a/0xa20 [ 2145.396536] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2145.396564] kmem_cache_alloc+0x159/0x310 [ 2145.396594] skb_clone+0x14f/0x3d0 [ 2145.396622] dev_queue_xmit_nit+0x3a7/0xb00 [ 2145.396661] dev_hard_start_xmit+0xab/0x6f0 [ 2145.396683] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2145.396712] __dev_queue_xmit+0x17ec/0x2710 [ 2145.396742] ? find_held_lock+0x2c/0x110 [ 2145.396768] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2145.396808] ? mark_held_locks+0x9e/0xe0 [ 2145.411651] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2145.412861] neigh_connected_output+0x382/0x4d0 [ 2145.413786] ALSA: seq fatal error: cannot create timer (-22) [ 2145.413947] ip_finish_output2+0x6f1/0x21f0 [ 2145.416101] ? ip_copy_metadata+0x5f7/0xa40 [ 2145.417089] ? ip_frag_next+0x9e0/0x9e0 [ 2145.417999] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2145.419069] ip_do_fragment+0x189e/0x1dd0 [ 2145.420025] ? ip_frag_next+0x9e0/0x9e0 [ 2145.420959] ? ip_finish_output2+0x21f0/0x21f0 [ 2145.422010] ? nf_hook+0x137/0x510 [ 2145.422853] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2145.424052] ? nf_hook_slow+0xfc/0x1e0 [ 2145.424091] ip_fragment.constprop.0+0x174/0x240 [ 2145.424118] __ip_finish_output.part.0+0x3db/0xb50 [ 2145.424145] ? ip_fragment.constprop.0+0x240/0x240 [ 2145.424171] ? netif_rx_ni+0xe7/0x300 [ 2145.424201] ip_mc_output+0x401/0xa30 [ 2145.424231] ip_send_skb+0xdd/0x260 [ 2145.424258] udp_send_skb+0x6da/0x11d0 [ 2145.424296] udp_sendmsg+0x139a/0x2170 [ 2145.424318] ? mark_lock+0xf5/0x2df0 [ 2145.424340] ? ip_frag_init+0x350/0x350 [ 2145.424366] ? mark_lock+0xf5/0x2df0 [ 2145.424387] ? perf_trace_lock+0xac/0x490 [ 2145.424408] ? udp_setsockopt+0xc0/0xc0 [ 2145.424429] ? mark_lock+0xf5/0x2df0 [ 2145.424451] ? __lockdep_reset_lock+0x180/0x180 [ 2145.424481] ? mark_lock+0xf5/0x2df0 [ 2145.424507] ? mark_lock+0xf5/0x2df0 [ 2145.424530] ? lock_chain_count+0x20/0x20 [ 2145.424551] ? __lock_acquire+0xbb1/0x5b00 [ 2145.424574] ? lock_chain_count+0x20/0x20 [ 2145.424613] ? perf_trace_lock+0xac/0x490 [ 2145.424635] ? __lockdep_reset_lock+0x180/0x180 [ 2145.424669] udpv6_sendmsg+0x1bed/0x2af0 [ 2145.424711] ? udp_v6_push_pending_frames+0x360/0x360 [ 2145.424743] ? mark_lock+0xf5/0x2df0 [ 2145.424772] ? lock_acquire+0x197/0x470 [ 2145.424792] ? find_held_lock+0x2c/0x110 [ 2145.424820] ? __might_fault+0xd3/0x180 [ 2145.424843] ? lock_downgrade+0x6d0/0x6d0 [ 2145.424871] ? lock_downgrade+0x6d0/0x6d0 [ 2145.424902] ? sock_has_perm+0x1ea/0x280 [ 2145.424928] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2145.424955] ? _copy_from_user+0xfb/0x1b0 [ 2145.424993] ? __import_iovec+0x458/0x590 [ 2145.425015] ? udp_v6_push_pending_frames+0x360/0x360 [ 2145.425042] inet6_sendmsg+0x105/0x140 [ 2145.425064] ? inet6_compat_ioctl+0x320/0x320 [ 2145.425084] __sock_sendmsg+0xf2/0x190 [ 2145.425107] ____sys_sendmsg+0x70d/0x870 [ 2145.425132] ? sock_write_iter+0x3d0/0x3d0 [ 2145.425149] ? do_recvmmsg+0x6d0/0x6d0 [ 2145.425171] ? perf_trace_lock+0xac/0x490 [ 2145.425201] ? __lockdep_reset_lock+0x180/0x180 [ 2145.425219] ? perf_trace_lock+0xac/0x490 [ 2145.425249] ___sys_sendmsg+0xf3/0x170 [ 2145.425274] ? sendmsg_copy_msghdr+0x160/0x160 [ 2145.425303] ? lock_downgrade+0x6d0/0x6d0 [ 2145.425329] ? find_held_lock+0x2c/0x110 [ 2145.425364] ? __fget_files+0x296/0x4c0 [ 2145.425400] ? __fget_light+0xea/0x290 [ 2145.425433] __sys_sendmsg+0xe5/0x1b0 [ 2145.425454] ? __sys_sendmsg_sock+0x40/0x40 [ 2145.425474] ? rcu_read_lock_any_held+0x75/0xa0 [ 2145.425521] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2145.476895] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2145.476913] ? trace_hardirqs_on+0x5b/0x180 11:18:25 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2145.476941] do_syscall_64+0x33/0x40 11:18:25 executing program 0: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', 0x100, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sendfile(r1, r0, 0x0, 0x80464c453f) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r2, r1) [ 2145.476961] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2145.476976] RIP: 0033:0x7f9f7e251b19 [ 2145.476998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:18:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xf00}]) [ 2145.477010] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 11:18:25 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2145.477034] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2145.477047] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2145.477059] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2145.477072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2145.477085] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2145.512677] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2145.512692] EXT4-fs (loop4): group descriptors corrupted! [ 2145.562009] device veth0_vlan entered promiscuous mode 11:18:40 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:40 executing program 0: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0) io_uring_enter(r0, 0x76d2, 0x0, 0x0, 0x0, 0x0) 11:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 38) 11:18:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00}]) 11:18:40 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100000000000, 0x0, &(0x7f0000000240), 0x5001440, &(0x7f0000001480)=ANY=[@ANYBLOB='unhide,mode=0x00000000000031a5,map=acorn,unhide,nojoliet,utf8,sbsector=0x00423d,uid=\x00'/94, @ANYRES32]) r0 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r0, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) [ 2160.641363] FAULT_INJECTION: forcing a failure. [ 2160.641363] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.642632] CPU: 1 PID: 27919 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2160.643405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.644312] Call Trace: [ 2160.644602] dump_stack+0x107/0x167 [ 2160.645009] should_fail.cold+0x5/0xa [ 2160.645420] ? create_object.isra.0+0x3a/0xa20 [ 2160.645924] should_failslab+0x5/0x20 [ 2160.646330] kmem_cache_alloc+0x5b/0x310 [ 2160.646765] ? lock_acquire+0x197/0x470 [ 2160.647219] create_object.isra.0+0x3a/0xa20 [ 2160.647694] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2160.648246] kmem_cache_alloc+0x159/0x310 [ 2160.648704] skb_clone+0x14f/0x3d0 [ 2160.649091] dev_queue_xmit_nit+0x3a7/0xb00 [ 2160.649572] dev_hard_start_xmit+0xab/0x6f0 [ 2160.650036] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2160.650612] __dev_queue_xmit+0x17ec/0x2710 [ 2160.651088] ? find_held_lock+0x2c/0x110 [ 2160.651526] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2160.652025] ? mark_held_locks+0x9e/0xe0 [ 2160.652474] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2160.653064] neigh_connected_output+0x382/0x4d0 [ 2160.653586] ip_finish_output2+0x6f1/0x21f0 [ 2160.654074] ? ip_copy_metadata+0x5f7/0xa40 [ 2160.654549] ? ip_frag_next+0x9e0/0x9e0 [ 2160.654999] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2160.655497] ip_do_fragment+0x189e/0x1dd0 11:18:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:18:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)=ANY=[@ANYBLOB="bfaec146e183e35b0e8331a3493d4cfdb960aa6c6604b7a495a325e78bfb7de06631b844e689dbf2e025e34e6b90f9217a4342051e2c8dc982c814bb4397f289fb8d008573a7e35a27667defa8213253680a65cd0938bcebd6038d390af83d0f638b63b377d0e6db3dc788e2f4334ac126437af132fa560dfe70da75550cb7e0d1d143457e5b0d8f5a4bb0c1b04bfa3e3849a2e8c33b9c47bcb2f1c1c252c9a5c7ea26a7e067deca4cefc9e1b76c", @ANYRES32=r0, @ANYBLOB="ff000000000000002e2f66696c653000"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a8018000180140003000000303f00"/28], 0x38}}, 0x20000000) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) openat(r6, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x80) r7 = getpid() pidfd_open(r7, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0xff, 0x20, 0x9, 0x1, 0x0, 0x5fd8, 0x88408, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0x30, 0x6, 0x80000001, 0x1, 0x558f, 0x15e, 0x8000, 0x0, 0xffffd446}, r7, 0xc, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x342, 0x0) write$binfmt_elf64(r8, &(0x7f0000000180)=ANY=[], 0xfdef) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000003c0)) read(r0, &(0x7f0000000100)=""/153, 0x99) [ 2160.655956] ? ip_frag_next+0x9e0/0x9e0 [ 2160.656505] ? ip_finish_output2+0x21f0/0x21f0 [ 2160.656989] ? nf_hook+0x137/0x510 [ 2160.657373] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2160.657926] ? nf_hook_slow+0xfc/0x1e0 [ 2160.658351] ip_fragment.constprop.0+0x174/0x240 [ 2160.658862] __ip_finish_output.part.0+0x3db/0xb50 [ 2160.659410] ? ip_fragment.constprop.0+0x240/0x240 [ 2160.659937] ? netif_rx_ni+0xe7/0x300 [ 2160.660343] ip_mc_output+0x401/0xa30 [ 2160.660755] ip_send_skb+0xdd/0x260 [ 2160.661148] udp_send_skb+0x6da/0x11d0 [ 2160.661585] udp_sendmsg+0x139a/0x2170 [ 2160.661996] ? mark_lock+0xf5/0x2df0 [ 2160.662400] ? ip_frag_init+0x350/0x350 [ 2160.662826] ? mark_lock+0xf5/0x2df0 [ 2160.663236] ? perf_trace_lock+0xac/0x490 [ 2160.663674] ? udp_setsockopt+0xc0/0xc0 [ 2160.664095] ? mark_lock+0xf5/0x2df0 [ 2160.664497] ? __lockdep_reset_lock+0x180/0x180 [ 2160.665003] ? mark_lock+0xf5/0x2df0 [ 2160.665396] ? mark_lock+0xf5/0x2df0 [ 2160.665794] ? lock_chain_count+0x20/0x20 [ 2160.666238] ? __lock_acquire+0xbb1/0x5b00 [ 2160.666690] ? lock_chain_count+0x20/0x20 [ 2160.667157] ? perf_trace_lock+0xac/0x490 [ 2160.667597] ? __lockdep_reset_lock+0x180/0x180 [ 2160.668105] udpv6_sendmsg+0x1bed/0x2af0 [ 2160.668546] ? udp_v6_push_pending_frames+0x360/0x360 [ 2160.669104] ? mark_lock+0xf5/0x2df0 [ 2160.669511] ? lock_acquire+0x197/0x470 [ 2160.669933] ? find_held_lock+0x2c/0x110 [ 2160.670373] ? __might_fault+0xd3/0x180 [ 2160.670797] ? lock_downgrade+0x6d0/0x6d0 [ 2160.671254] ? lock_downgrade+0x6d0/0x6d0 [ 2160.671704] ? sock_has_perm+0x1ea/0x280 [ 2160.672141] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2160.672702] ? _copy_from_user+0xfb/0x1b0 [ 2160.673151] ? __import_iovec+0x458/0x590 [ 2160.673601] ? udp_v6_push_pending_frames+0x360/0x360 [ 2160.674154] inet6_sendmsg+0x105/0x140 [ 2160.674569] ? inet6_compat_ioctl+0x320/0x320 [ 2160.675053] __sock_sendmsg+0xf2/0x190 [ 2160.675469] ____sys_sendmsg+0x70d/0x870 [ 2160.675904] ? sock_write_iter+0x3d0/0x3d0 [ 2160.676353] ? do_recvmmsg+0x6d0/0x6d0 [ 2160.676767] ? perf_trace_lock+0xac/0x490 [ 2160.677214] ? __lockdep_reset_lock+0x180/0x180 [ 2160.677718] ? perf_trace_lock+0xac/0x490 [ 2160.678167] ___sys_sendmsg+0xf3/0x170 [ 2160.678585] ? sendmsg_copy_msghdr+0x160/0x160 [ 2160.679090] ? lock_downgrade+0x6d0/0x6d0 [ 2160.679540] ? find_held_lock+0x2c/0x110 [ 2160.679984] ? __fget_files+0x296/0x4c0 [ 2160.680419] ? __fget_light+0xea/0x290 [ 2160.680853] __sys_sendmsg+0xe5/0x1b0 [ 2160.681264] ? __sys_sendmsg_sock+0x40/0x40 [ 2160.681734] ? rcu_read_lock_any_held+0x75/0xa0 [ 2160.682245] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.682811] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.683375] ? trace_hardirqs_on+0x5b/0x180 [ 2160.683855] do_syscall_64+0x33/0x40 [ 2160.684261] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2160.684814] RIP: 0033:0x7f9f7e251b19 [ 2160.685217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.687201] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.688013] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2160.688830] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2160.689584] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.690392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.691246] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2160.710377] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 2160.711901] EXT4-fs (loop4): group descriptors corrupted! 11:18:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xeffd}]) 11:18:40 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:40 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 39) [ 2160.809147] FAULT_INJECTION: forcing a failure. [ 2160.809147] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.810876] CPU: 0 PID: 28030 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2160.811958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2160.813205] Call Trace: [ 2160.813614] dump_stack+0x107/0x167 [ 2160.814164] should_fail.cold+0x5/0xa [ 2160.814756] ? create_object.isra.0+0x3a/0xa20 [ 2160.815482] should_failslab+0x5/0x20 [ 2160.816052] kmem_cache_alloc+0x5b/0x310 [ 2160.816677] create_object.isra.0+0x3a/0xa20 [ 2160.817313] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2160.818076] kmem_cache_alloc+0x159/0x310 [ 2160.818715] ? fnhe_hashfun+0x79/0x130 [ 2160.819302] dst_alloc+0x9e/0x5d0 [ 2160.819839] rt_dst_alloc+0x73/0x440 [ 2160.820394] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2160.821180] ip_route_output_key_hash+0x18d/0x340 [ 2160.821895] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2160.822708] ? ip_mc_output+0x401/0xa30 [ 2160.823284] ? ip_send_skb+0xdd/0x260 [ 2160.823848] ? udp_send_skb+0x6da/0x11d0 [ 2160.824435] ? __sys_sendmsg+0xe5/0x1b0 [ 2160.825026] ? do_syscall_64+0x33/0x40 [ 2160.825601] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2160.826355] ? lock_acquire+0x197/0x470 [ 2160.826959] ip_route_output_flow+0x23/0x150 [ 2160.827612] ip_tunnel_xmit+0x70e/0x2f50 [ 2160.828198] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2160.828963] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2160.829817] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2160.830496] ? kmem_cache_free+0xa7/0x2d0 [ 2160.831143] ? perf_trace_lock+0xac/0x490 [ 2160.831759] ? kfree_skbmem+0xef/0x1b0 [ 2160.832335] ? kmem_cache_free+0x249/0x2d0 [ 2160.832970] sit_tunnel_xmit+0xef0/0x2960 [ 2160.833588] ? find_held_lock+0x2c/0x110 [ 2160.834191] ? ipip_rcv+0x4f0/0x4f0 [ 2160.834732] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2160.835400] ? lock_downgrade+0x6d0/0x6d0 [ 2160.836013] ? run_filter+0x4d0/0x4d0 [ 2160.836564] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2160.837239] dev_hard_start_xmit+0x1cb/0x6f0 [ 2160.837896] __dev_queue_xmit+0x17ec/0x2710 [ 2160.838540] ? find_held_lock+0x2c/0x110 [ 2160.839150] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2160.839829] ? mark_held_locks+0x9e/0xe0 [ 2160.840438] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2160.841208] neigh_connected_output+0x382/0x4d0 [ 2160.841896] ip_finish_output2+0x6f1/0x21f0 [ 2160.842552] ? ip_copy_metadata+0x5f7/0xa40 [ 2160.843193] ? ip_frag_next+0x9e0/0x9e0 [ 2160.843792] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2160.844448] ip_do_fragment+0x189e/0x1dd0 [ 2160.845081] ? ip_frag_next+0x9e0/0x9e0 [ 2160.845658] ? ip_finish_output2+0x21f0/0x21f0 [ 2160.846342] ? nf_hook+0x137/0x510 [ 2160.846865] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2160.847668] ? nf_hook_slow+0xfc/0x1e0 [ 2160.848234] ip_fragment.constprop.0+0x174/0x240 [ 2160.848958] __ip_finish_output.part.0+0x3db/0xb50 [ 2160.849655] ? ip_fragment.constprop.0+0x240/0x240 [ 2160.850402] ? netif_rx_ni+0xe7/0x300 [ 2160.850954] ip_mc_output+0x401/0xa30 [ 2160.851539] ip_send_skb+0xdd/0x260 [ 2160.852069] udp_send_skb+0x6da/0x11d0 [ 2160.852674] udp_sendmsg+0x139a/0x2170 [ 2160.853229] ? mark_lock+0xf5/0x2df0 [ 2160.853785] ? ip_frag_init+0x350/0x350 [ 2160.854353] ? perf_trace_lock+0xac/0x490 [ 2160.854977] ? udp_setsockopt+0xc0/0xc0 [ 2160.855542] ? mark_lock+0xf5/0x2df0 [ 2160.856106] ? __lockdep_reset_lock+0x180/0x180 [ 2160.856776] ? mark_lock+0xf5/0x2df0 [ 2160.857335] ? mark_lock+0xf5/0x2df0 [ 2160.857863] ? lock_chain_count+0x20/0x20 [ 2160.858483] ? __lock_acquire+0xbb1/0x5b00 [ 2160.859100] ? lock_chain_count+0x20/0x20 [ 2160.859729] ? perf_trace_lock+0xac/0x490 [ 2160.860326] ? SOFTIRQ_verbose+0x10/0x10 [ 2160.860929] ? __lockdep_reset_lock+0x180/0x180 [ 2160.861609] udpv6_sendmsg+0x1bed/0x2af0 [ 2160.862229] ? udp_v6_push_pending_frames+0x360/0x360 [ 2160.862973] ? SOFTIRQ_verbose+0x10/0x10 [ 2160.863585] ? mark_lock+0xf5/0x2df0 [ 2160.864130] ? lock_acquire+0x197/0x470 [ 2160.864723] ? find_held_lock+0x2c/0x110 [ 2160.865310] ? __might_fault+0xd3/0x180 [ 2160.865905] ? lock_downgrade+0x6d0/0x6d0 [ 2160.866501] ? lock_downgrade+0x6d0/0x6d0 [ 2160.867121] ? sock_has_perm+0x1ea/0x280 [ 2160.867711] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2160.868472] ? _copy_from_user+0xfb/0x1b0 [ 2160.869079] ? __import_iovec+0x458/0x590 [ 2160.869680] ? udp_v6_push_pending_frames+0x360/0x360 [ 2160.870423] inet6_sendmsg+0x105/0x140 [ 2160.871019] ? inet6_compat_ioctl+0x320/0x320 [ 2160.871661] __sock_sendmsg+0xf2/0x190 [ 2160.872219] ____sys_sendmsg+0x70d/0x870 [ 2160.872801] ? sock_write_iter+0x3d0/0x3d0 [ 2160.873404] ? do_recvmmsg+0x6d0/0x6d0 [ 2160.873958] ? perf_trace_lock+0xac/0x490 [ 2160.874562] ? __lockdep_reset_lock+0x180/0x180 [ 2160.875247] ? perf_trace_lock+0xac/0x490 [ 2160.875846] ? SOFTIRQ_verbose+0x10/0x10 [ 2160.876427] ___sys_sendmsg+0xf3/0x170 [ 2160.876988] ? sendmsg_copy_msghdr+0x160/0x160 [ 2160.877643] ? lock_downgrade+0x6d0/0x6d0 [ 2160.878241] ? find_held_lock+0x2c/0x110 [ 2160.878835] ? __fget_files+0x296/0x4c0 [ 2160.879424] ? __fget_light+0xea/0x290 [ 2160.879991] __sys_sendmsg+0xe5/0x1b0 [ 2160.880528] ? __sys_sendmsg_sock+0x40/0x40 [ 2160.881147] ? rcu_read_lock_any_held+0x75/0xa0 [ 2160.881821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2160.882568] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2160.883306] ? trace_hardirqs_on+0x5b/0x180 [ 2160.883924] do_syscall_64+0x33/0x40 [ 2160.884448] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2160.885185] RIP: 0033:0x7f9f7e251b19 [ 2160.885713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2160.888344] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2160.889420] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2160.890460] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2160.891480] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2160.892663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.893972] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:18:40 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000002ec0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb9dcc0d8da3a4f6f42444a1948f422c8d8d2d8bba069588783e32b713"}, 0xd8) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) ioctl(r0, 0x6, &(0x7f0000000200)="ab57f581d44dbbb67981b3a94ee8d2d59d2f739e5b25135abe9b6e6c42bbcd21373b94442e4fd82b944d36b11f6d87782abfb4c27cb13a48cc11cb8ad27739a2f3d84c5830c55c6ea89ae0bf67a63961e6dbdb4862f062b3420b436014c2e3c7e3169ccce51ccbfc6531d7b2b0afa54e5696cf9bb06b50a3159114f60d9e25e67ca4b754338a06e0ba7197e0b8d1fd406207c536bc7094effd9caca1adeb6481720ab75df549b52e9d6988980db3607371b967639bbab4a7d4352b5e598ec2d247cfa7b0e3a6042d540434d8d7f98fa075e7d32b") pwrite64(0xffffffffffffffff, &(0x7f0000000100)="2e12754dfbefc88d5e", 0x9, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10000}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000001e00)=""/4096, 0x1000, 0xcd08, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0) 11:18:40 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfcfd}]) 11:18:40 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2160.960587] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 11:18:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfdef}]) 11:18:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 40) [ 2161.071942] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 11:18:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2161.080410] FAULT_INJECTION: forcing a failure. [ 2161.080410] name failslab, interval 1, probability 0, space 0, times 0 [ 2161.081646] CPU: 1 PID: 28069 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2161.082390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2161.083290] Call Trace: [ 2161.083591] dump_stack+0x107/0x167 [ 2161.083986] should_fail.cold+0x5/0xa [ 2161.084406] ? __alloc_skb+0x6d/0x5b0 [ 2161.084818] should_failslab+0x5/0x20 [ 2161.085224] kmem_cache_alloc_node+0x55/0x330 [ 2161.085722] __alloc_skb+0x6d/0x5b0 [ 2161.086122] ip_frag_next+0x11d/0x9e0 [ 2161.086551] ? perf_trace_lock+0xac/0x490 [ 2161.087007] ? selinux_ip_postroute_compat+0x390/0x390 [ 2161.087567] ip_do_fragment+0x96b/0x1dd0 [ 2161.087999] ? ip_frag_next+0x9e0/0x9e0 [ 2161.088438] ? ip_finish_output2+0x21f0/0x21f0 [ 2161.088926] ? nf_hook+0x137/0x510 [ 2161.089308] ? lock_downgrade+0x6d0/0x6d0 [ 2161.089756] ? lock_downgrade+0x6d0/0x6d0 [ 2161.090200] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2161.090759] ip_fragment.constprop.0+0x174/0x240 [ 2161.091289] __ip_finish_output.part.0+0x3db/0xb50 [ 2161.091815] ? ip_fragment.constprop.0+0x240/0x240 [ 2161.092330] ? nf_hook+0x510/0x510 [ 2161.092722] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2161.093196] ip_output+0x2f7/0x600 [ 2161.093577] ip_local_out+0xb4/0x1a0 [ 2161.093980] iptunnel_xmit+0x591/0x8b0 [ 2161.094417] ip_tunnel_xmit+0x124a/0x2f50 [ 2161.094885] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2161.095445] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2161.096077] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2161.096568] ? kmem_cache_free+0xa7/0x2d0 [ 2161.097015] ? perf_trace_lock+0xac/0x490 [ 2161.097463] ? kfree_skbmem+0xef/0x1b0 [ 2161.097886] ? kmem_cache_free+0x249/0x2d0 [ 2161.098347] sit_tunnel_xmit+0xef0/0x2960 [ 2161.098801] ? find_held_lock+0x2c/0x110 [ 2161.099248] ? ipip_rcv+0x4f0/0x4f0 [ 2161.099643] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2161.100114] ? lock_downgrade+0x6d0/0x6d0 [ 2161.100566] ? run_filter+0x4d0/0x4d0 [ 2161.100980] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2161.101472] dev_hard_start_xmit+0x1cb/0x6f0 [ 2161.101952] __dev_queue_xmit+0x17ec/0x2710 [ 2161.102421] ? find_held_lock+0x2c/0x110 [ 2161.102865] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2161.103374] ? mark_held_locks+0x9e/0xe0 [ 2161.103814] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2161.104380] neigh_connected_output+0x382/0x4d0 [ 2161.104894] ip_finish_output2+0x6f1/0x21f0 [ 2161.105374] ? ip_copy_metadata+0x5f7/0xa40 [ 2161.105862] ? ip_frag_next+0x9e0/0x9e0 [ 2161.106290] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2161.106798] ip_do_fragment+0x189e/0x1dd0 [ 2161.107255] ? ip_frag_next+0x9e0/0x9e0 [ 2161.107717] ? ip_finish_output2+0x21f0/0x21f0 [ 2161.108219] ? nf_hook+0x137/0x510 [ 2161.108619] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2161.109177] ? nf_hook_slow+0xfc/0x1e0 [ 2161.109618] ip_fragment.constprop.0+0x174/0x240 [ 2161.110132] __ip_finish_output.part.0+0x3db/0xb50 [ 2161.110662] ? ip_fragment.constprop.0+0x240/0x240 [ 2161.111198] ? netif_rx_ni+0xe7/0x300 [ 2161.111612] ip_mc_output+0x401/0xa30 [ 2161.112035] ip_send_skb+0xdd/0x260 [ 2161.112435] udp_send_skb+0x6da/0x11d0 [ 2161.112878] udp_sendmsg+0x139a/0x2170 [ 2161.113299] ? mark_lock+0xf5/0x2df0 [ 2161.113717] ? ip_frag_init+0x350/0x350 [ 2161.114175] ? perf_trace_lock+0xac/0x490 [ 2161.114639] ? udp_setsockopt+0xc0/0xc0 [ 2161.115088] ? mark_lock+0xf5/0x2df0 [ 2161.115479] ? __lockdep_reset_lock+0x180/0x180 [ 2161.115982] ? mark_lock+0xf5/0x2df0 [ 2161.116395] ? mark_lock+0xf5/0x2df0 [ 2161.116808] ? lock_chain_count+0x20/0x20 [ 2161.117257] ? __lock_acquire+0xbb1/0x5b00 [ 2161.117710] ? lock_chain_count+0x20/0x20 [ 2161.118169] ? perf_trace_lock+0xac/0x490 [ 2161.118632] ? SOFTIRQ_verbose+0x10/0x10 [ 2161.119078] ? __lockdep_reset_lock+0x180/0x180 [ 2161.119599] udpv6_sendmsg+0x1bed/0x2af0 [ 2161.120056] ? udp_v6_push_pending_frames+0x360/0x360 [ 2161.120609] ? SOFTIRQ_verbose+0x10/0x10 [ 2161.121056] ? mark_lock+0xf5/0x2df0 [ 2161.121456] ? lock_acquire+0x197/0x470 [ 2161.121896] ? find_held_lock+0x2c/0x110 [ 2161.122330] ? __might_fault+0xd3/0x180 [ 2161.122774] ? lock_downgrade+0x6d0/0x6d0 [ 2161.123263] ? lock_downgrade+0x6d0/0x6d0 [ 2161.123721] ? sock_has_perm+0x1ea/0x280 [ 2161.124168] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2161.124732] ? _copy_from_user+0xfb/0x1b0 [ 2161.125187] ? __import_iovec+0x458/0x590 [ 2161.125646] ? udp_v6_push_pending_frames+0x360/0x360 [ 2161.126198] inet6_sendmsg+0x105/0x140 [ 2161.126616] ? inet6_compat_ioctl+0x320/0x320 [ 2161.127114] __sock_sendmsg+0xf2/0x190 [ 2161.127568] ____sys_sendmsg+0x70d/0x870 [ 2161.128020] ? sock_write_iter+0x3d0/0x3d0 [ 2161.128472] ? do_recvmmsg+0x6d0/0x6d0 [ 2161.128900] ? perf_trace_lock+0xac/0x490 [ 2161.129346] ? __lockdep_reset_lock+0x180/0x180 [ 2161.129853] ? perf_trace_lock+0xac/0x490 [ 2161.130297] ? SOFTIRQ_verbose+0x10/0x10 [ 2161.130752] ___sys_sendmsg+0xf3/0x170 [ 2161.131185] ? sendmsg_copy_msghdr+0x160/0x160 [ 2161.131687] ? lock_downgrade+0x6d0/0x6d0 [ 2161.132133] ? find_held_lock+0x2c/0x110 [ 2161.132575] ? __fget_files+0x296/0x4c0 [ 2161.133010] ? __fget_light+0xea/0x290 [ 2161.133434] __sys_sendmsg+0xe5/0x1b0 [ 2161.133844] ? __sys_sendmsg_sock+0x40/0x40 [ 2161.134308] ? rcu_read_lock_any_held+0x75/0xa0 [ 2161.134847] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2161.135434] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2161.135989] ? trace_hardirqs_on+0x5b/0x180 [ 2161.136474] do_syscall_64+0x33/0x40 [ 2161.136878] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2161.137427] RIP: 0033:0x7f9f7e251b19 [ 2161.137836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2161.139824] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2161.140630] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2161.141394] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2161.142157] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2161.142926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2161.143696] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:18:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfc}]) 11:18:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:41 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:18:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2161.589154] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 11:18:58 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:18:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:18:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 41) 11:18:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfdfe}]) 11:18:58 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2178.853455] FAULT_INJECTION: forcing a failure. [ 2178.853455] name failslab, interval 1, probability 0, space 0, times 0 [ 2178.855852] CPU: 1 PID: 28101 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2178.855864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2178.855870] Call Trace: [ 2178.855894] dump_stack+0x107/0x167 [ 2178.855919] should_fail.cold+0x5/0xa [ 2178.855940] ? __alloc_skb+0x6d/0x5b0 [ 2178.855963] should_failslab+0x5/0x20 [ 2178.855982] kmem_cache_alloc_node+0x55/0x330 [ 2178.856008] __alloc_skb+0x6d/0x5b0 [ 2178.856034] ip_frag_next+0x11d/0x9e0 [ 2178.856057] ? perf_trace_lock+0xac/0x490 [ 2178.856077] ? selinux_ip_postroute_compat+0x390/0x390 [ 2178.856100] ip_do_fragment+0x96b/0x1dd0 [ 2178.856119] ? ip_frag_next+0x9e0/0x9e0 [ 2178.856153] ? ip_finish_output2+0x21f0/0x21f0 [ 2178.856171] ? nf_hook+0x137/0x510 [ 2178.856190] ? lock_downgrade+0x6d0/0x6d0 [ 2178.856208] ? lock_downgrade+0x6d0/0x6d0 [ 2178.856232] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2178.856270] ip_fragment.constprop.0+0x174/0x240 [ 2178.856294] __ip_finish_output.part.0+0x3db/0xb50 11:18:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 11:18:58 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000700100000f000000000000000000000004000000000002000020000020000000d1f4655fd1f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000d0a9da48497c4915a7449265c083aec0010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300000004", 0x5, 0x640}, {&(0x7f0000010400)="03000000040000000500000017000f000300040000000000000000000f008551", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000d1f4655fd1f4655fd1f4655f000000000000040020", 0x1d, 0x1800}, {&(0x7f0000011000)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000050000000020000000400000052", 0x49, 0x1c00}, {&(0x7f0000000380)="8081000000180000d1f4655fd1f4655fd1f4655f00000000000001002000000010000800000000000af3020004", 0x2d, 0x2000}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x14000}], 0x0, &(0x7f0000013800)) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='coda\x00', 0x100008, &(0x7f0000000140)='ext4\x00') 11:18:58 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="008d7c1aae7830b5c28b705c401e1003d980a35fd0d508c0b04f33e9ef3d2573b7ea2bf119fc28125b0c8afd6b0ecff4d26bb3cb632bd09ee8a077d2d8b25b0e6ee2b072ea139b2f5b83fc89ab2cf77ab5cbb2578861e750dd0da7c6194474a96229aecc392cdb30c3ea165d2487db75d8a57c872606e6c621362088238fcc88283279a7fbb5d1c895ad513bb6456dfd794cde0d0e0baec4b5d5c3ea4bffa88e978779a660d0e5b7b29a3e5a740d4899fbbf73a6489c896b907ba7bedd3810752bffc3c9654232b45c1428155d2485159a7a69176a36322d462b63cc68be889c355f2832b5c6271186d84a574597fdab9af43127dfb3f9c8b05a1c3192ad6859ef50e07ad4"]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) perf_event_open(&(0x7f0000001140)={0x3, 0x80, 0x8, 0x7, 0x0, 0x1, 0x0, 0x7, 0x20001, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x4, 0x10000, 0x5, 0x1, 0x800, 0x7, 0x40, 0x0, 0x9, 0x0, 0x10001}, 0x0, 0x9, r5, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000140)={0x0, [{0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}], 0x7f, "9656c75f04ba4d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005e700)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0/file0\x00', 0x911802, 0x140) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005e900)={0xc6e0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x8, "a41504786c9fb5"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f000005f900)={0x80000000000, [], 0x5, "6b65fad3a2e74e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000061900)={{0x0, 0x7, 0x101, 0x2, 0x9, 0x7f, 0x1, 0xfffffff9, 0x3f, 0x80, 0x7, 0x6, 0xf8, 0x20000000000000, 0x4}}) [ 2178.856317] ? ip_fragment.constprop.0+0x240/0x240 [ 2178.856332] ? nf_hook+0x510/0x510 [ 2178.856350] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2178.856377] ip_output+0x2f7/0x600 [ 2178.856402] ip_local_out+0xb4/0x1a0 [ 2178.856426] iptunnel_xmit+0x591/0x8b0 [ 2178.856458] ip_tunnel_xmit+0x124a/0x2f50 [ 2178.856496] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2178.856516] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2178.856538] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2178.856555] ? kmem_cache_free+0xa7/0x2d0 [ 2178.856587] ? perf_trace_lock+0xac/0x490 [ 2178.856603] ? kfree_skbmem+0xef/0x1b0 [ 2178.856622] ? kmem_cache_free+0x249/0x2d0 [ 2178.856647] sit_tunnel_xmit+0xef0/0x2960 [ 2178.856674] ? find_held_lock+0x2c/0x110 [ 2178.856692] ? ipip_rcv+0x4f0/0x4f0 [ 2178.856715] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2178.856735] ? lock_downgrade+0x6d0/0x6d0 [ 2178.856758] ? run_filter+0x4d0/0x4d0 [ 2178.856778] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2178.856812] dev_hard_start_xmit+0x1cb/0x6f0 [ 2178.896642] __dev_queue_xmit+0x17ec/0x2710 [ 2178.896674] ? find_held_lock+0x2c/0x110 [ 2178.896698] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2178.896729] ? mark_held_locks+0x9e/0xe0 [ 2178.896754] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2178.896780] neigh_connected_output+0x382/0x4d0 [ 2178.896816] ip_finish_output2+0x6f1/0x21f0 [ 2178.896840] ? ip_copy_metadata+0x5f7/0xa40 [ 2178.896860] ? ip_frag_next+0x9e0/0x9e0 [ 2178.896879] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2178.896909] ip_do_fragment+0x189e/0x1dd0 [ 2178.896929] ? ip_frag_next+0x9e0/0x9e0 [ 2178.896964] ? ip_finish_output2+0x21f0/0x21f0 [ 2178.896981] ? nf_hook+0x137/0x510 [ 2178.897011] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2178.897032] ? nf_hook_slow+0xfc/0x1e0 [ 2178.897066] ip_fragment.constprop.0+0x174/0x240 [ 2178.897089] __ip_finish_output.part.0+0x3db/0xb50 [ 2178.897112] ? ip_fragment.constprop.0+0x240/0x240 [ 2178.897135] ? netif_rx_ni+0xe7/0x300 [ 2178.897162] ip_mc_output+0x401/0xa30 [ 2178.897188] ip_send_skb+0xdd/0x260 [ 2178.897213] udp_send_skb+0x6da/0x11d0 [ 2178.897246] udp_sendmsg+0x139a/0x2170 [ 2178.897265] ? mark_lock+0xf5/0x2df0 [ 2178.897285] ? ip_frag_init+0x350/0x350 [ 2178.897307] ? mark_lock+0xf5/0x2df0 [ 2178.897326] ? perf_trace_lock+0xac/0x490 [ 2178.897345] ? udp_setsockopt+0xc0/0xc0 [ 2178.897363] ? mark_lock+0xf5/0x2df0 [ 2178.897383] ? __lockdep_reset_lock+0x180/0x180 [ 2178.897409] ? mark_lock+0xf5/0x2df0 [ 2178.897432] ? mark_lock+0xf5/0x2df0 [ 2178.897451] ? lock_chain_count+0x20/0x20 [ 2178.897471] ? __lock_acquire+0xbb1/0x5b00 [ 2178.897491] ? lock_chain_count+0x20/0x20 [ 2178.897525] ? perf_trace_lock+0xac/0x490 [ 2178.897544] ? __lockdep_reset_lock+0x180/0x180 [ 2178.897574] udpv6_sendmsg+0x1bed/0x2af0 [ 2178.897612] ? udp_v6_push_pending_frames+0x360/0x360 [ 2178.897640] ? mark_lock+0xf5/0x2df0 [ 2178.897665] ? lock_acquire+0x197/0x470 [ 2178.897683] ? find_held_lock+0x2c/0x110 [ 2178.897710] ? __might_fault+0xd3/0x180 [ 2178.897729] ? lock_downgrade+0x6d0/0x6d0 [ 2178.897752] ? lock_downgrade+0x6d0/0x6d0 [ 2178.897778] ? sock_has_perm+0x1ea/0x280 [ 2178.897801] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2178.897826] ? _copy_from_user+0xfb/0x1b0 [ 2178.897859] ? __import_iovec+0x458/0x590 [ 2178.897878] ? udp_v6_push_pending_frames+0x360/0x360 [ 2178.897903] inet6_sendmsg+0x105/0x140 [ 2178.897923] ? inet6_compat_ioctl+0x320/0x320 [ 2178.897940] __sock_sendmsg+0xf2/0x190 [ 2178.897962] ____sys_sendmsg+0x70d/0x870 [ 2178.897987] ? sock_write_iter+0x3d0/0x3d0 [ 2178.898003] ? do_recvmmsg+0x6d0/0x6d0 [ 2178.898022] ? perf_trace_lock+0xac/0x490 [ 2178.898048] ? __lockdep_reset_lock+0x180/0x180 [ 2178.898065] ? perf_trace_lock+0xac/0x490 [ 2178.898091] ___sys_sendmsg+0xf3/0x170 [ 2178.898113] ? sendmsg_copy_msghdr+0x160/0x160 [ 2178.898139] ? lock_downgrade+0x6d0/0x6d0 [ 2178.898162] ? find_held_lock+0x2c/0x110 [ 2178.898193] ? __fget_files+0x296/0x4c0 [ 2178.898224] ? __fget_light+0xea/0x290 [ 2178.898253] __sys_sendmsg+0xe5/0x1b0 [ 2178.898272] ? __sys_sendmsg_sock+0x40/0x40 [ 2178.898291] ? rcu_read_lock_any_held+0x75/0xa0 [ 2178.898331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2178.898351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2178.898366] ? trace_hardirqs_on+0x5b/0x180 [ 2178.898391] do_syscall_64+0x33/0x40 [ 2178.898409] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2178.898423] RIP: 0033:0x7f9f7e251b19 [ 2178.898448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2178.898458] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2178.898480] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2178.898491] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2178.898503] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2178.898514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2178.898525] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2178.912123] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) [ 2178.980398] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2178.980614] EXT4-fs error (device loop7): ext4_quota_enable:6425: comm syz-executor.7: Bad quota inode: 4, type: 1 [ 2178.980723] EXT4-fs warning (device loop7): ext4_enable_quotas:6463: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2178.981679] EXT4-fs (loop7): mount failed [ 2179.028603] EXT4-fs error (device loop7): ext4_ext_check_inode:500: inode #4: comm syz-executor.7: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 2179.046187] EXT4-fs error (device loop7): ext4_quota_enable:6425: comm syz-executor.7: Bad quota inode: 4, type: 1 [ 2179.048367] EXT4-fs warning (device loop7): ext4_enable_quotas:6463: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2179.056727] EXT4-fs (loop7): mount failed 11:19:12 executing program 7: arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r1, &(0x7f00000002c0)=""/218, 0xda) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pidfd_getfd(r2, r3, 0x0) 11:19:12 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:19:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfe00}]) 11:19:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 11:19:12 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:19:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:12 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b07000000009ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d00"/117], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) r0 = fork() ptrace(0x10, r0) fork() ptrace$cont(0x9, r0, 0x7fffffff, 0x4) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r2, &(0x7f0000000140)=""/4096, 0x1000, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x0, 0x1, 0x40, 0x0, 0xedf, 0x154c4, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x440, 0x6, 0x717, 0x7, 0x5, 0x0, 0x1, 0x0, 0x101, 0x0, 0x7f}, r1, 0xf, r2, 0x2) pipe2(&(0x7f0000001140)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000001180)=0x3, 0x4) 11:19:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 42) [ 2192.046412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2192.054260] FAULT_INJECTION: forcing a failure. [ 2192.054260] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.056993] CPU: 1 PID: 28141 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2192.058637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.060595] Call Trace: [ 2192.061221] dump_stack+0x107/0x167 [ 2192.062091] should_fail.cold+0x5/0xa [ 2192.062997] ? create_object.isra.0+0x3a/0xa20 [ 2192.064106] should_failslab+0x5/0x20 [ 2192.065026] kmem_cache_alloc+0x5b/0x310 [ 2192.065996] create_object.isra.0+0x3a/0xa20 [ 2192.067038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2192.068252] kmem_cache_alloc_node+0x169/0x330 [ 2192.069343] __alloc_skb+0x6d/0x5b0 [ 2192.070216] ip_frag_next+0x11d/0x9e0 [ 2192.071126] ? perf_trace_lock+0xac/0x490 [ 2192.071826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2192.072118] ? selinux_ip_postroute_compat+0x390/0x390 [ 2192.072147] ip_do_fragment+0x96b/0x1dd0 [ 2192.075329] ? ip_frag_next+0x9e0/0x9e0 [ 2192.076292] ? ip_finish_output2+0x21f0/0x21f0 [ 2192.077355] ? nf_hook+0x137/0x510 [ 2192.078195] ? lock_downgrade+0x6d0/0x6d0 [ 2192.079170] ? lock_downgrade+0x6d0/0x6d0 [ 2192.080145] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2192.081379] ip_fragment.constprop.0+0x174/0x240 [ 2192.082493] __ip_finish_output.part.0+0x3db/0xb50 [ 2192.083655] ? ip_fragment.constprop.0+0x240/0x240 [ 2192.084810] ? nf_hook+0x510/0x510 [ 2192.085635] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2192.086671] ip_output+0x2f7/0x600 [ 2192.087539] ip_local_out+0xb4/0x1a0 [ 2192.088428] iptunnel_xmit+0x591/0x8b0 [ 2192.089368] ip_tunnel_xmit+0x124a/0x2f50 [ 2192.090356] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2192.091560] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2192.092942] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2192.093994] ? kmem_cache_free+0xa7/0x2d0 [ 2192.094974] ? perf_trace_lock+0xac/0x490 [ 2192.095947] ? kfree_skbmem+0xef/0x1b0 [ 2192.096851] ? kmem_cache_free+0x249/0x2d0 [ 2192.097842] sit_tunnel_xmit+0xef0/0x2960 [ 2192.098810] ? find_held_lock+0x2c/0x110 [ 2192.099761] ? ipip_rcv+0x4f0/0x4f0 [ 2192.100611] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2192.101653] ? lock_downgrade+0x6d0/0x6d0 [ 2192.102611] ? run_filter+0x4d0/0x4d0 [ 2192.103522] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2192.104578] dev_hard_start_xmit+0x1cb/0x6f0 [ 2192.105610] __dev_queue_xmit+0x17ec/0x2710 [ 2192.106613] ? find_held_lock+0x2c/0x110 [ 2192.107560] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2192.108623] ? mark_held_locks+0x9e/0xe0 [ 2192.109564] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2192.110775] neigh_connected_output+0x382/0x4d0 [ 2192.111867] ip_finish_output2+0x6f1/0x21f0 [ 2192.112864] ? ip_copy_metadata+0x5f7/0xa40 [ 2192.113857] ? ip_frag_next+0x9e0/0x9e0 [ 2192.114770] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2192.115858] ip_do_fragment+0x189e/0x1dd0 [ 2192.116809] ? ip_frag_next+0x9e0/0x9e0 [ 2192.117739] ? ip_finish_output2+0x21f0/0x21f0 [ 2192.118784] ? nf_hook+0x137/0x510 [ 2192.119618] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2192.120805] ? nf_hook_slow+0xfc/0x1e0 [ 2192.121719] ip_fragment.constprop.0+0x174/0x240 [ 2192.122808] __ip_finish_output.part.0+0x3db/0xb50 [ 2192.123948] ? ip_fragment.constprop.0+0x240/0x240 [ 2192.125078] ? netif_rx_ni+0xe7/0x300 [ 2192.125961] ip_mc_output+0x401/0xa30 [ 2192.126844] ip_send_skb+0xdd/0x260 [ 2192.127704] udp_send_skb+0x6da/0x11d0 [ 2192.128618] udp_sendmsg+0x139a/0x2170 [ 2192.129511] ? mark_lock+0xf5/0x2df0 [ 2192.130367] ? ip_frag_init+0x350/0x350 [ 2192.131284] ? mark_lock+0xf5/0x2df0 [ 2192.132154] ? perf_trace_lock+0xac/0x490 [ 2192.133109] ? udp_setsockopt+0xc0/0xc0 [ 2192.134022] ? mark_lock+0xf5/0x2df0 [ 2192.134879] ? __lockdep_reset_lock+0x180/0x180 [ 2192.135975] ? mark_lock+0xf5/0x2df0 [ 2192.136837] ? mark_lock+0xf5/0x2df0 [ 2192.137697] ? lock_chain_count+0x20/0x20 [ 2192.138650] ? __lock_acquire+0xbb1/0x5b00 [ 2192.139632] ? lock_chain_count+0x20/0x20 [ 2192.140610] ? perf_trace_lock+0xac/0x490 [ 2192.141574] ? __lockdep_reset_lock+0x180/0x180 [ 2192.142665] udpv6_sendmsg+0x1bed/0x2af0 [ 2192.143637] ? udp_v6_push_pending_frames+0x360/0x360 [ 2192.144844] ? mark_lock+0xf5/0x2df0 [ 2192.145718] ? lock_acquire+0x197/0x470 [ 2192.146640] ? find_held_lock+0x2c/0x110 [ 2192.147615] ? __might_fault+0xd3/0x180 [ 2192.148549] ? lock_downgrade+0x6d0/0x6d0 [ 2192.149526] ? lock_downgrade+0x6d0/0x6d0 [ 2192.150507] ? sock_has_perm+0x1ea/0x280 [ 2192.151472] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2192.152685] ? _copy_from_user+0xfb/0x1b0 [ 2192.153682] ? __import_iovec+0x458/0x590 [ 2192.154664] ? udp_v6_push_pending_frames+0x360/0x360 [ 2192.155901] inet6_sendmsg+0x105/0x140 [ 2192.156824] ? inet6_compat_ioctl+0x320/0x320 [ 2192.157882] __sock_sendmsg+0xf2/0x190 [ 2192.158806] ____sys_sendmsg+0x70d/0x870 [ 2192.159792] ? sock_write_iter+0x3d0/0x3d0 [ 2192.160672] ? do_recvmmsg+0x6d0/0x6d0 [ 2192.161457] ? perf_trace_lock+0xac/0x490 [ 2192.162304] ? __lockdep_reset_lock+0x180/0x180 [ 2192.163221] ? perf_trace_lock+0xac/0x490 [ 2192.164078] ___sys_sendmsg+0xf3/0x170 [ 2192.164870] ? sendmsg_copy_msghdr+0x160/0x160 [ 2192.165800] ? lock_downgrade+0x6d0/0x6d0 [ 2192.166657] ? find_held_lock+0x2c/0x110 [ 2192.167505] ? __fget_files+0x296/0x4c0 [ 2192.168334] ? __fget_light+0xea/0x290 [ 2192.169136] __sys_sendmsg+0xe5/0x1b0 [ 2192.169902] ? __sys_sendmsg_sock+0x40/0x40 [ 2192.170786] ? rcu_read_lock_any_held+0x75/0xa0 [ 2192.171782] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2192.172846] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2192.173884] ? trace_hardirqs_on+0x5b/0x180 [ 2192.174764] do_syscall_64+0x33/0x40 [ 2192.175528] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2192.176566] RIP: 0033:0x7f9f7e251b19 [ 2192.177325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.181058] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2192.182588] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2192.184032] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2192.185465] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.186896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2192.188340] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2192.207766] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 11:19:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 11:19:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 43) 11:19:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfefd}]) 11:19:12 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:19:12 executing program 7: times(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c000000260001010000000000000000000000001800008008000000", @ANYRES32=0x0, @ANYBLOB="0c0000000000080000000000de20cad2245ce6c18d1c9f3470640a2640c08ed4d333b2ce9f0d2e0a24b99c5a9bf41f7c5c6d5db31151bf862a200be73234b8f5be33193613fe754728a75be2dea9dd90ccc38e30bfb8403b7c426ac2daf1d10a4e5dadb94f3ca04df8b4258f07aa73853ecc6c5b876ba1941804423850ef7ad9b16721a7b8ad9facd44023c1bab7d0651c43953405c8f91dffe4a1cfffebdf7e53c66bdcdad8c64770fb2bbbc7ee94"], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x24000800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000140)=""/205, 0xcd) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) 11:19:12 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2192.275694] FAULT_INJECTION: forcing a failure. [ 2192.275694] name failslab, interval 1, probability 0, space 0, times 0 [ 2192.276939] CPU: 0 PID: 28195 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2192.277698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2192.278602] Call Trace: [ 2192.278895] dump_stack+0x107/0x167 [ 2192.279312] should_fail.cold+0x5/0xa [ 2192.279738] ? ___slab_alloc+0x155/0x700 [ 2192.280185] ? create_object.isra.0+0x3a/0xa20 [ 2192.280696] should_failslab+0x5/0x20 [ 2192.281105] kmem_cache_alloc+0x5b/0x310 [ 2192.281563] create_object.isra.0+0x3a/0xa20 [ 2192.282041] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2192.282610] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2192.283162] ? ip_frag_next+0x11d/0x9e0 [ 2192.283608] __alloc_skb+0xb1/0x5b0 [ 2192.284010] ip_frag_next+0x11d/0x9e0 [ 2192.284438] ? perf_trace_lock+0xac/0x490 [ 2192.284888] ? selinux_ip_postroute_compat+0x390/0x390 [ 2192.285455] ip_do_fragment+0x96b/0x1dd0 [ 2192.285903] ? ip_frag_next+0x9e0/0x9e0 [ 2192.286353] ? ip_finish_output2+0x21f0/0x21f0 [ 2192.286858] ? nf_hook+0x137/0x510 [ 2192.287256] ? lock_downgrade+0x6d0/0x6d0 [ 2192.287745] ? lock_downgrade+0x6d0/0x6d0 [ 2192.288198] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2192.288816] ip_fragment.constprop.0+0x174/0x240 [ 2192.289355] __ip_finish_output.part.0+0x3db/0xb50 [ 2192.289918] ? ip_fragment.constprop.0+0x240/0x240 [ 2192.290459] ? nf_hook+0x510/0x510 [ 2192.290860] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2192.291380] ip_output+0x2f7/0x600 [ 2192.291793] ip_local_out+0xb4/0x1a0 [ 2192.292230] iptunnel_xmit+0x591/0x8b0 [ 2192.292682] ip_tunnel_xmit+0x124a/0x2f50 [ 2192.293154] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2192.293744] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2192.294409] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2192.294927] ? kmem_cache_free+0xa7/0x2d0 [ 2192.295405] ? perf_trace_lock+0xac/0x490 [ 2192.295863] ? kfree_skbmem+0xef/0x1b0 [ 2192.296316] ? kmem_cache_free+0x249/0x2d0 [ 2192.296799] sit_tunnel_xmit+0xef0/0x2960 [ 2192.297280] ? find_held_lock+0x2c/0x110 [ 2192.297735] ? ipip_rcv+0x4f0/0x4f0 [ 2192.298154] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2192.298655] ? lock_downgrade+0x6d0/0x6d0 [ 2192.299127] ? run_filter+0x4d0/0x4d0 [ 2192.299585] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2192.300106] dev_hard_start_xmit+0x1cb/0x6f0 [ 2192.300609] __dev_queue_xmit+0x17ec/0x2710 [ 2192.301103] ? find_held_lock+0x2c/0x110 [ 2192.301567] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2192.302091] ? mark_held_locks+0x9e/0xe0 [ 2192.302554] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2192.303149] neigh_connected_output+0x382/0x4d0 [ 2192.303671] ip_finish_output2+0x6f1/0x21f0 [ 2192.304146] ? ip_copy_metadata+0x5f7/0xa40 [ 2192.304621] ? ip_frag_next+0x9e0/0x9e0 [ 2192.305056] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2192.305556] ip_do_fragment+0x189e/0x1dd0 [ 2192.306007] ? ip_frag_next+0x9e0/0x9e0 [ 2192.306448] ? ip_finish_output2+0x21f0/0x21f0 [ 2192.306940] ? nf_hook+0x137/0x510 [ 2192.307342] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2192.307901] ? nf_hook_slow+0xfc/0x1e0 [ 2192.308331] ip_fragment.constprop.0+0x174/0x240 [ 2192.308848] __ip_finish_output.part.0+0x3db/0xb50 [ 2192.309386] ? ip_fragment.constprop.0+0x240/0x240 [ 2192.309926] ? netif_rx_ni+0xe7/0x300 [ 2192.310349] ip_mc_output+0x401/0xa30 [ 2192.310766] ip_send_skb+0xdd/0x260 [ 2192.311163] udp_send_skb+0x6da/0x11d0 [ 2192.311615] udp_sendmsg+0x139a/0x2170 [ 2192.312046] ? mark_lock+0xf5/0x2df0 [ 2192.312455] ? ip_frag_init+0x350/0x350 [ 2192.312886] ? mark_lock+0xf5/0x2df0 [ 2192.313294] ? perf_trace_lock+0xac/0x490 [ 2192.313740] ? udp_setsockopt+0xc0/0xc0 [ 2192.314172] ? mark_lock+0xf5/0x2df0 [ 2192.314575] ? __lockdep_reset_lock+0x180/0x180 [ 2192.315082] ? mark_lock+0xf5/0x2df0 [ 2192.315509] ? mark_lock+0xf5/0x2df0 [ 2192.315919] ? lock_chain_count+0x20/0x20 [ 2192.316369] ? __lock_acquire+0xbb1/0x5b00 [ 2192.316835] ? lock_chain_count+0x20/0x20 [ 2192.317296] ? perf_trace_lock+0xac/0x490 [ 2192.317745] ? __lockdep_reset_lock+0x180/0x180 [ 2192.318253] udpv6_sendmsg+0x1bed/0x2af0 [ 2192.318716] ? udp_v6_push_pending_frames+0x360/0x360 [ 2192.319279] ? mark_lock+0xf5/0x2df0 [ 2192.319712] ? lock_acquire+0x197/0x470 [ 2192.320146] ? find_held_lock+0x2c/0x110 [ 2192.320595] ? __might_fault+0xd3/0x180 [ 2192.321023] ? lock_downgrade+0x6d0/0x6d0 [ 2192.321484] ? lock_downgrade+0x6d0/0x6d0 [ 2192.321938] ? sock_has_perm+0x1ea/0x280 [ 2192.322387] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2192.322956] ? _copy_from_user+0xfb/0x1b0 [ 2192.323421] ? __import_iovec+0x458/0x590 [ 2192.323884] ? udp_v6_push_pending_frames+0x360/0x360 [ 2192.324450] inet6_sendmsg+0x105/0x140 [ 2192.324883] ? inet6_compat_ioctl+0x320/0x320 [ 2192.325370] __sock_sendmsg+0xf2/0x190 [ 2192.325797] ____sys_sendmsg+0x70d/0x870 [ 2192.326244] ? sock_write_iter+0x3d0/0x3d0 [ 2192.326707] ? do_recvmmsg+0x6d0/0x6d0 [ 2192.327133] ? perf_trace_lock+0xac/0x490 [ 2192.327603] ? __lockdep_reset_lock+0x180/0x180 [ 2192.328108] ? perf_trace_lock+0xac/0x490 [ 2192.328568] ___sys_sendmsg+0xf3/0x170 [ 2192.329000] ? sendmsg_copy_msghdr+0x160/0x160 [ 2192.329494] ? lock_downgrade+0x6d0/0x6d0 [ 2192.329954] ? find_held_lock+0x2c/0x110 [ 2192.329999] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2192.330401] ? __fget_files+0x296/0x4c0 [ 2192.332560] ? __fget_light+0xea/0x290 [ 2192.332982] __sys_sendmsg+0xe5/0x1b0 [ 2192.333395] ? __sys_sendmsg_sock+0x40/0x40 [ 2192.333866] ? rcu_read_lock_any_held+0x75/0xa0 [ 2192.334384] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2192.334951] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2192.335510] ? trace_hardirqs_on+0x5b/0x180 [ 2192.335988] do_syscall_64+0x33/0x40 [ 2192.336391] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2192.336945] RIP: 0033:0x7f9f7e251b19 [ 2192.337347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2192.339332] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2192.340145] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2192.340906] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2192.341669] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2192.342442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2192.343203] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2192.415064] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2192.421450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 11:19:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:19:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 44) [ 2206.417675] FAULT_INJECTION: forcing a failure. [ 2206.417675] name failslab, interval 1, probability 0, space 0, times 0 [ 2206.418962] CPU: 0 PID: 28282 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2206.419727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2206.420643] Call Trace: [ 2206.420937] dump_stack+0x107/0x167 [ 2206.421342] should_fail.cold+0x5/0xa [ 2206.421766] ? lock_release+0x680/0x680 [ 2206.422205] ? skb_clone+0x14f/0x3d0 [ 2206.422617] should_failslab+0x5/0x20 [ 2206.423044] kmem_cache_alloc+0x5b/0x310 [ 2206.423509] skb_clone+0x14f/0x3d0 [ 2206.423913] dev_queue_xmit_nit+0x3a7/0xb00 [ 2206.424393] dev_hard_start_xmit+0xab/0x6f0 [ 2206.424870] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2206.425447] __dev_queue_xmit+0x17ec/0x2710 [ 2206.425921] ? find_held_lock+0x2c/0x110 [ 2206.426368] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2206.426872] ? mark_held_locks+0x9e/0xe0 [ 2206.427325] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2206.427907] neigh_connected_output+0x382/0x4d0 [ 2206.428431] ip_finish_output2+0x6f1/0x21f0 [ 2206.428905] ? ip_copy_metadata+0x5f7/0xa40 [ 2206.429375] ? ip_frag_next+0x9e0/0x9e0 [ 2206.429808] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2206.430310] ip_do_fragment+0x189e/0x1dd0 [ 2206.430764] ? ip_frag_next+0x9e0/0x9e0 [ 2206.431208] ? ip_finish_output2+0x21f0/0x21f0 [ 2206.431715] ? nf_hook+0x137/0x510 [ 2206.432117] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2206.432685] ? nf_hook_slow+0xfc/0x1e0 [ 2206.433136] ip_fragment.constprop.0+0x174/0x240 [ 2206.433660] __ip_finish_output.part.0+0x3db/0xb50 [ 2206.434201] ? ip_fragment.constprop.0+0x240/0x240 [ 2206.434740] ? netif_rx_ni+0xe7/0x300 [ 2206.435165] ip_mc_output+0x401/0xa30 [ 2206.435596] ip_send_skb+0xdd/0x260 [ 2206.436008] udp_send_skb+0x6da/0x11d0 [ 2206.436442] udp_sendmsg+0x139a/0x2170 [ 2206.436869] ? mark_lock+0xf5/0x2df0 [ 2206.437281] ? ip_frag_init+0x350/0x350 [ 2206.437716] ? mark_lock+0xf5/0x2df0 [ 2206.438123] ? perf_trace_lock+0xac/0x490 [ 2206.438576] ? udp_setsockopt+0xc0/0xc0 [ 2206.439012] ? mark_lock+0xf5/0x2df0 [ 2206.439425] ? __lockdep_reset_lock+0x180/0x180 [ 2206.439962] ? mark_lock+0xf5/0x2df0 [ 2206.440376] ? mark_lock+0xf5/0x2df0 [ 2206.440787] ? lock_chain_count+0x20/0x20 [ 2206.441245] ? __lock_acquire+0xbb1/0x5b00 [ 2206.441712] ? lock_chain_count+0x20/0x20 [ 2206.442174] ? perf_trace_lock+0xac/0x490 [ 2206.442626] ? __lockdep_reset_lock+0x180/0x180 [ 2206.443144] udpv6_sendmsg+0x1bed/0x2af0 [ 2206.443606] ? udp_v6_push_pending_frames+0x360/0x360 [ 2206.444172] ? mark_lock+0xf5/0x2df0 [ 2206.444589] ? lock_acquire+0x197/0x470 [ 2206.445020] ? find_held_lock+0x2c/0x110 [ 2206.445462] ? __might_fault+0xd3/0x180 [ 2206.445899] ? lock_downgrade+0x6d0/0x6d0 [ 2206.446362] ? lock_downgrade+0x6d0/0x6d0 [ 2206.446817] ? sock_has_perm+0x1ea/0x280 [ 2206.447259] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2206.447842] ? _copy_from_user+0xfb/0x1b0 [ 2206.448297] ? __import_iovec+0x458/0x590 [ 2206.448752] ? udp_v6_push_pending_frames+0x360/0x360 [ 2206.449319] inet6_sendmsg+0x105/0x140 [ 2206.449741] ? inet6_compat_ioctl+0x320/0x320 [ 2206.450232] __sock_sendmsg+0xf2/0x190 [ 2206.450655] ____sys_sendmsg+0x70d/0x870 [ 2206.451102] ? sock_write_iter+0x3d0/0x3d0 [ 2206.451563] ? do_recvmmsg+0x6d0/0x6d0 [ 2206.451986] ? perf_trace_lock+0xac/0x490 [ 2206.452444] ? __lockdep_reset_lock+0x180/0x180 [ 2206.452947] ? perf_trace_lock+0xac/0x490 [ 2206.453399] ___sys_sendmsg+0xf3/0x170 [ 2206.453823] ? sendmsg_copy_msghdr+0x160/0x160 [ 2206.454326] ? lock_downgrade+0x6d0/0x6d0 [ 2206.454778] ? find_held_lock+0x2c/0x110 [ 2206.455234] ? __fget_files+0x296/0x4c0 [ 2206.455721] ? __fget_light+0xea/0x290 [ 2206.456154] __sys_sendmsg+0xe5/0x1b0 [ 2206.456570] ? __sys_sendmsg_sock+0x40/0x40 [ 2206.457040] ? rcu_read_lock_any_held+0x75/0xa0 [ 2206.457559] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2206.458128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2206.458683] ? trace_hardirqs_on+0x5b/0x180 [ 2206.459170] do_syscall_64+0x33/0x40 [ 2206.459594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2206.460157] RIP: 0033:0x7f9f7e251b19 [ 2206.460565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2206.462558] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2206.463385] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2206.464165] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2206.464932] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2206.465701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2206.466467] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2206.490885] EXT4-fs (loop4): bad geometry: block count 128 exceeds size of device (8 blocks) 11:19:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfeffff}]) 11:19:26 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:19:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:26 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:19:26 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x4000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="177f97b28df9c604d70513be1c265d9e4f414e6eb8cb5c785fc2142b07000000009ced6fde70e42ed7ee9f02fd46ba3728fdf9a6a43dbab5dc7a6ce2ee35da5cad75994153a9256371dd99421322df942f5966227507984b0811312aa1c77d4296fda181f1ced94df90d00"/117], 0x30}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x2f) fork() fork() syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000380)=ANY=[], 0xa) r0 = fork() ptrace(0x10, r0) fork() ptrace$cont(0x9, r0, 0x7fffffff, 0x4) r1 = getpid() pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r2, &(0x7f0000000140)=""/4096, 0x1000, 0x0) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x6, 0x0, 0x1, 0x40, 0x0, 0xedf, 0x154c4, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x7}, 0x440, 0x6, 0x717, 0x7, 0x5, 0x0, 0x1, 0x0, 0x101, 0x0, 0x7f}, r1, 0xf, r2, 0x2) pipe2(&(0x7f0000001140)={0xffffffffffffffff}, 0x84000) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000001180)=0x3, 0x4) 11:19:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:26 executing program 0: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 11:19:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x1000000}]) 11:19:26 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0xffffbffffffffffe, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000080)="503c3c9ec7046a3f2746989090614d51d28429132a589e532f6fecae8e00cfee413c6cfa5892846366c9bbe4314af72b637ef7b6c6bd3a25173726079ed7fa45a25119d55c8808418387a4b525bd88682e598b5a1f811f5fe26ab213b0c686531b1c67ff57f55e2fec87fabab38878c6f4a35ac15c846138fd631d24fb21506504298170076b57dc7b0949d80fd61c79335dd3c24b7425312b", 0x99, 0x21ff2a33}, {0x0, 0x0, 0x2}], 0x0, &(0x7f0000000180)={[{@data_err_abort}, {@abort}, {@sb={'sb', 0x3d, 0x20}}, {@orlov}, {@oldalloc}], [{@euid_lt}]}) 11:19:26 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2206.678472] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 11:19:26 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:26 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:19:26 executing program 0: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) [ 2206.693367] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2206.724540] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 11:19:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x2000000}]) 11:19:41 executing program 2: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/178, 0xb2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad01907103c1df3928cb15b27437eb6e994a4bed70de6", 0x97, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa000) r1 = accept4(r0, &(0x7f0000000600)=@pppol2tpin6, &(0x7f0000000680)=0x80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ftruncate(0xffffffffffffffff, 0x8001) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000004c0)={0x10000, 0x1, 0x7fffffff, {0x80000000, 0x200}, 0x2, 0x9}) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x20008000) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000540), 0x400000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000016c0)=ANY=[@ANYBLOB="6d616e676c65000000003e0000000000000000000200000000000000000000000006000000668ef7dfe448"], &(0x7f00000005c0)=0x2a) 11:19:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:19:41 executing program 0: ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 11:19:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 45) 11:19:41 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000340), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in=@multicast2}}, 0xe8) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa31f52699464f0800450000780000000000119078000000000000000000004e200064907802000000000000000000000060e9eca51b913db8f2e8c451c6492a93273f060081aebb3fe13e979fdb657cdcef341e008f200504f312e7b8462700f336cd250a0cb728d6eec84085575dab02c8aca1d59b8892d6f675cca0eefe4b0b"], 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4, r7}) stat(0x0, &(0x7f0000001c00)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r8, r2, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x80000001) 11:19:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:19:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2221.222071] FAULT_INJECTION: forcing a failure. [ 2221.222071] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.224558] CPU: 1 PID: 28337 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2221.226059] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.227853] Call Trace: [ 2221.228430] dump_stack+0x107/0x167 [ 2221.229227] should_fail.cold+0x5/0xa [ 2221.230054] ? lock_release+0x680/0x680 [ 2221.230911] ? skb_clone+0x14f/0x3d0 [ 2221.231742] should_failslab+0x5/0x20 [ 2221.232567] kmem_cache_alloc+0x5b/0x310 [ 2221.233473] skb_clone+0x14f/0x3d0 [ 2221.234258] dev_queue_xmit_nit+0x3a7/0xb00 [ 2221.235211] dev_hard_start_xmit+0xab/0x6f0 [ 2221.236154] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2221.237295] __dev_queue_xmit+0x17ec/0x2710 [ 2221.238240] ? find_held_lock+0x2c/0x110 [ 2221.239148] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2221.240151] ? mark_held_locks+0x9e/0xe0 [ 2221.241036] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2221.242175] neigh_connected_output+0x382/0x4d0 [ 2221.243204] ip_finish_output2+0x6f1/0x21f0 [ 2221.244163] ? ip_frag_next+0x9e0/0x9e0 [ 2221.245027] ? ip_send_check+0x9/0xb0 [ 2221.245842] ? ip_frag_next+0x6fd/0x9e0 [ 2221.246716] ip_do_fragment+0x8fc/0x1dd0 [ 2221.247625] ? ip_frag_next+0x9e0/0x9e0 [ 2221.248527] ? ip_finish_output2+0x21f0/0x21f0 [ 2221.249524] ? nf_hook+0x137/0x510 [ 2221.250295] ? lock_downgrade+0x6d0/0x6d0 [ 2221.251200] ? trace_hardirqs_on+0x5b/0x180 [ 2221.252173] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2221.253317] ip_fragment.constprop.0+0x174/0x240 [ 2221.254347] __ip_finish_output.part.0+0x3db/0xb50 [ 2221.255427] ? ip_fragment.constprop.0+0x240/0x240 [ 2221.256507] ? netif_rx_ni+0xe7/0x300 [ 2221.257345] ip_mc_output+0x401/0xa30 [ 2221.258180] ip_send_skb+0xdd/0x260 [ 2221.258986] udp_send_skb+0x6da/0x11d0 [ 2221.259872] udp_sendmsg+0x139a/0x2170 [ 2221.260717] ? mark_lock+0xf5/0x2df0 [ 2221.261525] ? ip_frag_init+0x350/0x350 [ 2221.262397] ? mark_lock+0xf5/0x2df0 [ 2221.263205] ? perf_trace_lock+0xac/0x490 [ 2221.264119] ? udp_setsockopt+0xc0/0xc0 [ 2221.264989] ? mark_lock+0xf5/0x2df0 [ 2221.265805] ? __lockdep_reset_lock+0x180/0x180 [ 2221.265849] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2221.266815] ? mark_lock+0xf5/0x2df0 [ 2221.266841] ? mark_lock+0xf5/0x2df0 [ 2221.266870] ? lock_chain_count+0x20/0x20 [ 2221.270584] ? __lock_acquire+0xbb1/0x5b00 [ 2221.271500] ? lock_chain_count+0x20/0x20 [ 2221.272420] ? perf_trace_lock+0xac/0x490 [ 2221.273321] ? __lockdep_reset_lock+0x180/0x180 [ 2221.274338] udpv6_sendmsg+0x1bed/0x2af0 [ 2221.275235] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.276361] ? mark_lock+0xf5/0x2df0 [ 2221.277172] ? lock_acquire+0x197/0x470 [ 2221.278027] ? find_held_lock+0x2c/0x110 [ 2221.278907] ? __might_fault+0xd3/0x180 [ 2221.279780] ? lock_downgrade+0x6d0/0x6d0 [ 2221.280677] ? lock_downgrade+0x6d0/0x6d0 [ 2221.281575] ? sock_has_perm+0x1ea/0x280 [ 2221.282452] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2221.283566] ? _copy_from_user+0xfb/0x1b0 [ 2221.284481] ? __import_iovec+0x458/0x590 [ 2221.285374] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.286488] inet6_sendmsg+0x105/0x140 [ 2221.287326] ? inet6_compat_ioctl+0x320/0x320 [ 2221.288295] __sock_sendmsg+0xf2/0x190 [ 2221.289134] ____sys_sendmsg+0x70d/0x870 [ 2221.290013] ? sock_write_iter+0x3d0/0x3d0 [ 2221.290921] ? do_recvmmsg+0x6d0/0x6d0 [ 2221.291773] ? perf_trace_lock+0xac/0x490 [ 2221.292676] ? __lockdep_reset_lock+0x180/0x180 [ 2221.293674] ? perf_trace_lock+0xac/0x490 [ 2221.294574] ___sys_sendmsg+0xf3/0x170 [ 2221.295415] ? sendmsg_copy_msghdr+0x160/0x160 [ 2221.296411] ? lock_downgrade+0x6d0/0x6d0 [ 2221.297308] ? find_held_lock+0x2c/0x110 [ 2221.298195] ? __fget_files+0x296/0x4c0 [ 2221.299067] ? __fget_light+0xea/0x290 [ 2221.299936] __sys_sendmsg+0xe5/0x1b0 [ 2221.300761] ? __sys_sendmsg_sock+0x40/0x40 [ 2221.301691] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.302767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.303897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.305006] ? trace_hardirqs_on+0x5b/0x180 [ 2221.305943] do_syscall_64+0x33/0x40 [ 2221.306745] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2221.307855] RIP: 0033:0x7f9f7e251b19 [ 2221.308662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.312633] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2221.314275] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2221.315821] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2221.317359] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.318897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.320449] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:19:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) 11:19:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:41 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x3000000}]) 11:19:41 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2221.468362] device lo entered promiscuous mode 11:19:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 46) 11:19:41 executing program 2: symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000980)='./file1\x00') lsetxattr$system_posix_acl(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0) lgetxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=@random={'os2.', 'system.posix_acl_default\x00'}, &(0x7f0000000280)=""/174, 0xae) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0x103) 11:19:41 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:41 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) [ 2221.593652] FAULT_INJECTION: forcing a failure. [ 2221.593652] name failslab, interval 1, probability 0, space 0, times 0 [ 2221.596108] CPU: 0 PID: 28366 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2221.597564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2221.599316] Call Trace: [ 2221.599884] dump_stack+0x107/0x167 [ 2221.600653] should_fail.cold+0x5/0xa [ 2221.601458] ? dst_alloc+0x9e/0x5d0 [ 2221.602227] should_failslab+0x5/0x20 [ 2221.603021] kmem_cache_alloc+0x5b/0x310 [ 2221.603873] ? fnhe_hashfun+0x79/0x130 [ 2221.604687] dst_alloc+0x9e/0x5d0 [ 2221.605415] rt_dst_alloc+0x73/0x440 [ 2221.606225] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2221.607328] ip_route_output_key_hash+0x18d/0x340 [ 2221.608357] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2221.609514] ? ip_mc_output+0x401/0xa30 [ 2221.610348] ? ip_send_skb+0xdd/0x260 [ 2221.611149] ? udp_send_skb+0x6da/0x11d0 [ 2221.612017] ? __sys_sendmsg+0xe5/0x1b0 [ 2221.612860] ? do_syscall_64+0x33/0x40 [ 2221.613660] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2221.614795] ? lock_acquire+0x197/0x470 [ 2221.615624] ip_route_output_flow+0x23/0x150 [ 2221.616549] ip_tunnel_xmit+0x70e/0x2f50 [ 2221.617400] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2221.618472] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2221.619712] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2221.620697] ? kmem_cache_free+0xa7/0x2d0 [ 2221.621568] ? perf_trace_lock+0xac/0x490 [ 2221.622421] ? kfree_skbmem+0xef/0x1b0 [ 2221.623229] ? kmem_cache_free+0x249/0x2d0 [ 2221.624118] sit_tunnel_xmit+0xef0/0x2960 [ 2221.624986] ? find_held_lock+0x2c/0x110 [ 2221.625828] ? ipip_rcv+0x4f0/0x4f0 [ 2221.626587] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2221.627516] ? lock_downgrade+0x6d0/0x6d0 [ 2221.628395] ? run_filter+0x4d0/0x4d0 [ 2221.629185] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2221.630136] dev_hard_start_xmit+0x1cb/0x6f0 [ 2221.631057] __dev_queue_xmit+0x17ec/0x2710 [ 2221.631972] ? find_held_lock+0x2c/0x110 [ 2221.632820] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2221.633779] ? mark_held_locks+0x9e/0xe0 [ 2221.634629] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2221.635742] neigh_connected_output+0x382/0x4d0 [ 2221.636721] ip_finish_output2+0x6f1/0x21f0 [ 2221.637622] ? ip_copy_metadata+0x5f7/0xa40 [ 2221.638517] ? ip_frag_next+0x9e0/0x9e0 [ 2221.639345] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2221.640313] ip_do_fragment+0x189e/0x1dd0 [ 2221.641174] ? ip_frag_next+0x9e0/0x9e0 [ 2221.642013] ? ip_finish_output2+0x21f0/0x21f0 [ 2221.642955] ? nf_hook+0x137/0x510 [ 2221.643704] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2221.644775] ? nf_hook_slow+0xfc/0x1e0 [ 2221.645595] ip_fragment.constprop.0+0x174/0x240 [ 2221.646581] __ip_finish_output.part.0+0x3db/0xb50 [ 2221.647602] ? ip_fragment.constprop.0+0x240/0x240 [ 2221.648648] ? netif_rx_ni+0xe7/0x300 [ 2221.649443] ip_mc_output+0x401/0xa30 [ 2221.650239] ip_send_skb+0xdd/0x260 [ 2221.650998] udp_send_skb+0x6da/0x11d0 [ 2221.651829] udp_sendmsg+0x139a/0x2170 [ 2221.652636] ? mark_lock+0xf5/0x2df0 [ 2221.653408] ? ip_frag_init+0x350/0x350 [ 2221.654235] ? mark_lock+0xf5/0x2df0 [ 2221.655011] ? perf_trace_lock+0xac/0x490 [ 2221.655891] ? udp_setsockopt+0xc0/0xc0 [ 2221.656713] ? mark_lock+0xf5/0x2df0 [ 2221.657486] ? __lockdep_reset_lock+0x180/0x180 [ 2221.658456] ? mark_lock+0xf5/0x2df0 [ 2221.659233] ? mark_lock+0xf5/0x2df0 [ 2221.660016] ? lock_chain_count+0x20/0x20 [ 2221.660880] ? __lock_acquire+0xbb1/0x5b00 [ 2221.661758] ? lock_chain_count+0x20/0x20 [ 2221.662631] ? perf_trace_lock+0xac/0x490 [ 2221.663490] ? __lockdep_reset_lock+0x180/0x180 [ 2221.664478] udpv6_sendmsg+0x1bed/0x2af0 [ 2221.665339] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.666416] ? mark_lock+0xf5/0x2df0 [ 2221.667195] ? lock_acquire+0x197/0x470 [ 2221.668039] ? find_held_lock+0x2c/0x110 [ 2221.668888] ? __might_fault+0xd3/0x180 [ 2221.669708] ? lock_downgrade+0x6d0/0x6d0 [ 2221.670567] ? lock_downgrade+0x6d0/0x6d0 [ 2221.671427] ? sock_has_perm+0x1ea/0x280 [ 2221.672278] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2221.673348] ? _copy_from_user+0xfb/0x1b0 [ 2221.674217] ? __import_iovec+0x458/0x590 [ 2221.675074] ? udp_v6_push_pending_frames+0x360/0x360 [ 2221.676152] inet6_sendmsg+0x105/0x140 [ 2221.676974] ? inet6_compat_ioctl+0x320/0x320 [ 2221.677877] __sock_sendmsg+0xf2/0x190 [ 2221.678663] ____sys_sendmsg+0x70d/0x870 [ 2221.679485] ? sock_write_iter+0x3d0/0x3d0 [ 2221.680352] ? do_recvmmsg+0x6d0/0x6d0 [ 2221.681135] ? perf_trace_lock+0xac/0x490 [ 2221.681978] ? __lockdep_reset_lock+0x180/0x180 [ 2221.682911] ? perf_trace_lock+0xac/0x490 [ 2221.683769] ___sys_sendmsg+0xf3/0x170 [ 2221.684566] ? sendmsg_copy_msghdr+0x160/0x160 [ 2221.685516] ? lock_downgrade+0x6d0/0x6d0 [ 2221.686364] ? find_held_lock+0x2c/0x110 [ 2221.687217] ? __fget_files+0x296/0x4c0 [ 2221.688061] ? __fget_light+0xea/0x290 [ 2221.688874] __sys_sendmsg+0xe5/0x1b0 [ 2221.689655] ? __sys_sendmsg_sock+0x40/0x40 [ 2221.690536] ? rcu_read_lock_any_held+0x75/0xa0 [ 2221.691514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2221.692622] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2221.693684] ? trace_hardirqs_on+0x5b/0x180 [ 2221.694578] do_syscall_64+0x33/0x40 [ 2221.695351] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2221.696419] RIP: 0033:0x7f9f7e251b19 [ 2221.697190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2221.701047] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2221.702617] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2221.704118] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2221.705600] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2221.707104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2221.708592] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2221.761242] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:19:41 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:19:41 executing program 7: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x800) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001140)={&(0x7f0000000100), &(0x7f0000000140)=""/4096, 0x1000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xfffff7b7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000001180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x20000300}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000012c0)=0x0) syz_open_procfs(r4, &(0x7f0000001300)='net/udplite6\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001200)='system.posix_acl_default\x00', &(0x7f00000014c0)=ANY=[@ANYRESDEC, @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="020004005072f668152d8fde7409c7d6b1488db7ab217ce2253654c492192f20c6959b396b4b654fe4ad2121e775676e2719d0d99474515b5ac2dd591c9161ce84ef8694fed3dfad58dca485cc046112100ab8eece5ac7977f8e6ebfa50df2e7612490508bbe020207d20c70ab286c28ac744086aaef38b436dc4d16d1f394fe82deed23247489060aae60a3959d364dd7367d56", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="040001000000000008000400", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000040000000000"], 0x54, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 11:19:41 executing program 2: ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/154) syz_mount_image$nfs4(0x0, 0x0, 0x800, 0x3, &(0x7f00000001c0), 0x0, 0x0) 11:19:58 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:19:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x4000000}]) 11:19:58 executing program 7: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x800) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001140)={&(0x7f0000000100), &(0x7f0000000140)=""/4096, 0x1000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xfffff7b7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000001180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x20000300}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000012c0)=0x0) syz_open_procfs(r4, &(0x7f0000001300)='net/udplite6\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001200)='system.posix_acl_default\x00', &(0x7f00000014c0)=ANY=[@ANYRESDEC, @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="020004005072f668152d8fde7409c7d6b1488db7ab217ce2253654c492192f20c6959b396b4b654fe4ad2121e775676e2719d0d99474515b5ac2dd591c9161ce84ef8694fed3dfad58dca485cc046112100ab8eece5ac7977f8e6ebfa50df2e7612490508bbe020207d20c70ab286c28ac744086aaef38b436dc4d16d1f394fe82deed23247489060aae60a3959d364dd7367d56", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="040001000000000008000400", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000040000000000"], 0x54, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 11:19:58 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 47) 11:19:58 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:19:58 executing program 2: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') chdir(&(0x7f0000000000)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$getflags(r1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x4}, 0xfffffffe, 0x6e6bb2, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40081, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0xa8f82, 0x0) ioctl$SG_IO(r2, 0x2285, 0x0) ioctl$DVD_READ_STRUCT(r2, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ftruncate(r2, 0x1000003) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r3, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000180)=ANY=[@ANYBLOB="507e00b3e47952dc18af7e00", @ANYRES32=r0, @ANYBLOB]) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x20001, 0x0) unshare(0x48020200) dup2(r3, r3) 11:19:58 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:19:58 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) [ 2238.969418] FAULT_INJECTION: forcing a failure. [ 2238.969418] name failslab, interval 1, probability 0, space 0, times 0 [ 2238.971906] CPU: 1 PID: 28502 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2238.973413] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2238.975206] Call Trace: [ 2238.975784] dump_stack+0x107/0x167 [ 2238.976589] should_fail.cold+0x5/0xa [ 2238.977414] ? dst_alloc+0x9e/0x5d0 [ 2238.978210] should_failslab+0x5/0x20 [ 2238.979032] kmem_cache_alloc+0x5b/0x310 [ 2238.979930] ? fnhe_hashfun+0x79/0x130 [ 2238.980776] dst_alloc+0x9e/0x5d0 [ 2238.981533] rt_dst_alloc+0x73/0x440 [ 2238.982340] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2238.983481] ip_route_output_key_hash+0x18d/0x340 [ 2238.984527] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2238.985705] ? ip_mc_output+0x401/0xa30 [ 2238.986584] ? ip_send_skb+0xdd/0x260 [ 2238.987405] ? udp_send_skb+0x6da/0x11d0 [ 2238.988300] ? __sys_sendmsg+0xe5/0x1b0 [ 2238.989161] ? do_syscall_64+0x33/0x40 [ 2238.989993] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2238.991148] ? lock_acquire+0x197/0x470 [ 2238.992017] ip_route_output_flow+0x23/0x150 [ 2238.992976] ip_tunnel_xmit+0x70e/0x2f50 [ 2238.993865] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2238.994975] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2238.996262] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2238.997245] ? kmem_cache_free+0xa7/0x2d0 [ 2238.998155] ? perf_trace_lock+0xac/0x490 [ 2238.999047] ? kfree_skbmem+0xef/0x1b0 [ 2238.999905] ? kmem_cache_free+0x249/0x2d0 [ 2239.000829] sit_tunnel_xmit+0xef0/0x2960 [ 2239.001736] ? find_held_lock+0x2c/0x110 [ 2239.002612] ? ipip_rcv+0x4f0/0x4f0 [ 2239.003402] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2239.004379] ? lock_downgrade+0x6d0/0x6d0 [ 2239.005276] ? run_filter+0x4d0/0x4d0 [ 2239.006099] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2239.007084] dev_hard_start_xmit+0x1cb/0x6f0 [ 2239.008061] __dev_queue_xmit+0x17ec/0x2710 [ 2239.009007] ? find_held_lock+0x2c/0x110 [ 2239.009889] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2239.010887] ? mark_held_locks+0x9e/0xe0 [ 2239.011771] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2239.012914] neigh_connected_output+0x382/0x4d0 [ 2239.013934] ip_finish_output2+0x6f1/0x21f0 [ 2239.014868] ? ip_copy_metadata+0x5f7/0xa40 [ 2239.015800] ? ip_frag_next+0x9e0/0x9e0 [ 2239.016673] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2239.017669] ip_do_fragment+0x189e/0x1dd0 [ 2239.018564] ? ip_frag_next+0x9e0/0x9e0 [ 2239.019436] ? ip_finish_output2+0x21f0/0x21f0 [ 2239.020425] ? nf_hook+0x137/0x510 [ 2239.021209] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2239.022325] ? nf_hook_slow+0xfc/0x1e0 [ 2239.023184] ip_fragment.constprop.0+0x174/0x240 [ 2239.024214] __ip_finish_output.part.0+0x3db/0xb50 [ 2239.025288] ? ip_fragment.constprop.0+0x240/0x240 [ 2239.026349] ? netif_rx_ni+0xe7/0x300 [ 2239.027179] ip_mc_output+0x401/0xa30 [ 2239.028025] ip_send_skb+0xdd/0x260 [ 2239.028825] udp_send_skb+0x6da/0x11d0 [ 2239.029681] udp_sendmsg+0x139a/0x2170 [ 2239.030521] ? mark_lock+0xf5/0x2df0 [ 2239.031324] ? ip_frag_init+0x350/0x350 [ 2239.032192] ? mark_lock+0xf5/0x2df0 [ 2239.032997] ? perf_trace_lock+0xac/0x490 [ 2239.033893] ? udp_setsockopt+0xc0/0xc0 [ 2239.034752] ? mark_lock+0xf5/0x2df0 [ 2239.035556] ? __lockdep_reset_lock+0x180/0x180 [ 2239.036585] ? mark_lock+0xf5/0x2df0 [ 2239.037393] ? mark_lock+0xf5/0x2df0 [ 2239.038197] ? lock_chain_count+0x20/0x20 [ 2239.039092] ? __lock_acquire+0xbb1/0x5b00 [ 2239.040032] ? lock_chain_count+0x20/0x20 [ 2239.040944] ? perf_trace_lock+0xac/0x490 [ 2239.041838] ? __lockdep_reset_lock+0x180/0x180 [ 2239.042852] udpv6_sendmsg+0x1bed/0x2af0 [ 2239.043748] ? udp_v6_push_pending_frames+0x360/0x360 [ 2239.044883] ? mark_lock+0xf5/0x2df0 [ 2239.045696] ? lock_acquire+0x197/0x470 [ 2239.046548] ? find_held_lock+0x2c/0x110 [ 2239.047430] ? __might_fault+0xd3/0x180 [ 2239.048276] ? lock_downgrade+0x6d0/0x6d0 [ 2239.049176] ? lock_downgrade+0x6d0/0x6d0 [ 2239.050074] ? sock_has_perm+0x1ea/0x280 [ 2239.050951] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2239.052083] ? _copy_from_user+0xfb/0x1b0 [ 2239.052993] ? __import_iovec+0x458/0x590 [ 2239.053883] ? udp_v6_push_pending_frames+0x360/0x360 [ 2239.054999] inet6_sendmsg+0x105/0x140 [ 2239.055851] ? inet6_compat_ioctl+0x320/0x320 [ 2239.056813] __sock_sendmsg+0xf2/0x190 [ 2239.057651] ____sys_sendmsg+0x70d/0x870 [ 2239.058528] ? sock_write_iter+0x3d0/0x3d0 [ 2239.059433] ? do_recvmmsg+0x6d0/0x6d0 [ 2239.060272] ? perf_trace_lock+0xac/0x490 [ 2239.061172] ? __lockdep_reset_lock+0x180/0x180 [ 2239.062168] ? perf_trace_lock+0xac/0x490 [ 2239.063067] ___sys_sendmsg+0xf3/0x170 [ 2239.063931] ? sendmsg_copy_msghdr+0x160/0x160 [ 2239.064923] ? lock_downgrade+0x6d0/0x6d0 [ 2239.065820] ? find_held_lock+0x2c/0x110 [ 2239.066706] ? __fget_files+0x296/0x4c0 [ 2239.067579] ? __fget_light+0xea/0x290 [ 2239.068435] __sys_sendmsg+0xe5/0x1b0 [ 2239.069255] ? __sys_sendmsg_sock+0x40/0x40 [ 2239.070180] ? rcu_read_lock_any_held+0x75/0xa0 [ 2239.071205] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2239.072339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2239.073442] ? trace_hardirqs_on+0x5b/0x180 [ 2239.074376] do_syscall_64+0x33/0x40 [ 2239.075179] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2239.076298] RIP: 0033:0x7f9f7e251b19 [ 2239.077101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2239.081050] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2239.082681] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2239.084213] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2239.085743] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2239.087274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2239.088822] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2239.126619] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2239.159964] sr 1:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. 11:20:13 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 11:20:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x5000000}]) 11:20:13 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x2013032, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x7037, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r0, 0x0, 0x0, 0x0, 0x0) 11:20:13 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:20:13 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:13 executing program 7: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x800) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9101) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000001140)={&(0x7f0000000100), &(0x7f0000000140)=""/4096, 0x1000}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0xfffff7b7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000001180)) r2 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x20000300}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0}, &(0x7f0000001280)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000012c0)=0x0) syz_open_procfs(r4, &(0x7f0000001300)='net/udplite6\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r5, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001200)='system.posix_acl_default\x00', &(0x7f00000014c0)=ANY=[@ANYRESDEC, @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r6, @ANYBLOB="020004005072f668152d8fde7409c7d6b1488db7ab217ce2253654c492192f20c6959b396b4b654fe4ad2121e775676e2719d0d99474515b5ac2dd591c9161ce84ef8694fed3dfad58dca485cc046112100ab8eece5ac7977f8e6ebfa50df2e7612490508bbe020207d20c70ab286c28ac744086aaef38b436dc4d16d1f394fe82deed23247489060aae60a3959d364dd7367d56", @ANYRES32, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r5, @ANYBLOB="040001000000000008000400", @ANYRES32=0xee00, @ANYBLOB="10000400000000002000040000000000"], 0x54, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 11:20:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 48) 11:20:13 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2253.966627] FAULT_INJECTION: forcing a failure. [ 2253.966627] name failslab, interval 1, probability 0, space 0, times 0 [ 2253.967907] CPU: 0 PID: 28635 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2253.968672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2253.969579] Call Trace: [ 2253.969875] dump_stack+0x107/0x167 [ 2253.970278] should_fail.cold+0x5/0xa [ 2253.970704] ? dst_alloc+0x9e/0x5d0 [ 2253.971105] should_failslab+0x5/0x20 [ 2253.971523] kmem_cache_alloc+0x5b/0x310 [ 2253.971972] ? fnhe_hashfun+0x79/0x130 [ 2253.972417] dst_alloc+0x9e/0x5d0 [ 2253.972809] rt_dst_alloc+0x73/0x440 [ 2253.973217] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2253.973800] ip_route_output_key_hash+0x18d/0x340 [ 2253.974329] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2253.974930] ? ip_mc_output+0x401/0xa30 [ 2253.975364] ? ip_send_skb+0xdd/0x260 [ 2253.975783] ? udp_send_skb+0x6da/0x11d0 [ 2253.976258] ? __sys_sendmsg+0xe5/0x1b0 [ 2253.976696] ? do_syscall_64+0x33/0x40 [ 2253.977125] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2253.977703] ? lock_acquire+0x197/0x470 [ 2253.978150] ip_route_output_flow+0x23/0x150 [ 2253.978629] ip_tunnel_xmit+0x70e/0x2f50 [ 2253.979081] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 11:20:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) [ 2253.979646] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2253.980491] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2253.980991] ? kmem_cache_free+0xa7/0x2d0 [ 2253.981448] ? perf_trace_lock+0xac/0x490 [ 2253.981899] ? kfree_skbmem+0xef/0x1b0 [ 2253.982328] ? kmem_cache_free+0x249/0x2d0 [ 2253.982792] sit_tunnel_xmit+0xef0/0x2960 [ 2253.983251] ? find_held_lock+0x2c/0x110 [ 2253.983696] ? ipip_rcv+0x4f0/0x4f0 [ 2253.984102] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2253.984594] ? lock_downgrade+0x6d0/0x6d0 [ 2253.985062] ? run_filter+0x4d0/0x4d0 [ 2253.985496] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2253.986013] dev_hard_start_xmit+0x1cb/0x6f0 [ 2253.986517] __dev_queue_xmit+0x17ec/0x2710 [ 2253.987015] ? find_held_lock+0x2c/0x110 [ 2253.987482] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2253.988019] ? mark_held_locks+0x9e/0xe0 [ 2253.988483] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2253.989084] neigh_connected_output+0x382/0x4d0 [ 2253.989592] ip_finish_output2+0x6f1/0x21f0 [ 2253.990084] ? ip_copy_metadata+0x5f7/0xa40 [ 2253.990570] ? ip_frag_next+0x9e0/0x9e0 [ 2253.991016] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2253.991540] ip_do_fragment+0x189e/0x1dd0 [ 2253.992027] ? ip_frag_next+0x9e0/0x9e0 [ 2253.992490] ? ip_finish_output2+0x21f0/0x21f0 [ 2253.993010] ? nf_hook+0x137/0x510 [ 2253.993427] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2253.994008] ? nf_hook_slow+0xfc/0x1e0 [ 2253.994459] ip_fragment.constprop.0+0x174/0x240 [ 2253.994975] __ip_finish_output.part.0+0x3db/0xb50 [ 2253.995543] ? ip_fragment.constprop.0+0x240/0x240 [ 2253.996107] ? netif_rx_ni+0xe7/0x300 [ 2253.996545] ip_mc_output+0x401/0xa30 [ 2253.996979] ip_send_skb+0xdd/0x260 [ 2253.997402] udp_send_skb+0x6da/0x11d0 [ 2253.997859] udp_sendmsg+0x139a/0x2170 [ 2253.998301] ? mark_lock+0xf5/0x2df0 [ 2253.998727] ? ip_frag_init+0x350/0x350 [ 2253.999182] ? mark_lock+0xf5/0x2df0 [ 2253.999608] ? perf_trace_lock+0xac/0x490 [ 2254.000085] ? udp_setsockopt+0xc0/0xc0 [ 2254.000540] ? mark_lock+0xf5/0x2df0 [ 2254.000966] ? __lockdep_reset_lock+0x180/0x180 [ 2254.001503] ? mark_lock+0xf5/0x2df0 [ 2254.001927] ? mark_lock+0xf5/0x2df0 [ 2254.002351] ? lock_chain_count+0x20/0x20 [ 2254.002823] ? __lock_acquire+0xbb1/0x5b00 11:20:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x7000000}]) [ 2254.003304] ? lock_chain_count+0x20/0x20 [ 2254.003864] ? perf_trace_lock+0xac/0x490 [ 2254.004318] ? __lockdep_reset_lock+0x180/0x180 [ 2254.004825] udpv6_sendmsg+0x1bed/0x2af0 [ 2254.005271] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.005833] ? mark_lock+0xf5/0x2df0 [ 2254.006237] ? lock_acquire+0x197/0x470 [ 2254.006672] ? find_held_lock+0x2c/0x110 [ 2254.007110] ? __might_fault+0xd3/0x180 [ 2254.007535] ? lock_downgrade+0x6d0/0x6d0 [ 2254.007983] ? lock_downgrade+0x6d0/0x6d0 [ 2254.008439] ? sock_has_perm+0x1ea/0x280 [ 2254.008877] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2254.009432] ? _copy_from_user+0xfb/0x1b0 [ 2254.009887] ? __import_iovec+0x458/0x590 [ 2254.010330] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.010905] inet6_sendmsg+0x105/0x140 [ 2254.011337] ? inet6_compat_ioctl+0x320/0x320 [ 2254.011830] __sock_sendmsg+0xf2/0x190 [ 2254.012283] ____sys_sendmsg+0x70d/0x870 [ 2254.012733] ? sock_write_iter+0x3d0/0x3d0 [ 2254.013201] ? do_recvmmsg+0x6d0/0x6d0 [ 2254.013631] ? perf_trace_lock+0xac/0x490 [ 2254.014091] ? __lockdep_reset_lock+0x180/0x180 [ 2254.014605] ? perf_trace_lock+0xac/0x490 [ 2254.015069] ___sys_sendmsg+0xf3/0x170 [ 2254.015509] ? sendmsg_copy_msghdr+0x160/0x160 [ 2254.016024] ? lock_downgrade+0x6d0/0x6d0 [ 2254.016484] ? find_held_lock+0x2c/0x110 [ 2254.016938] ? __fget_files+0x296/0x4c0 [ 2254.017383] ? __fget_light+0xea/0x290 [ 2254.017822] __sys_sendmsg+0xe5/0x1b0 [ 2254.018243] ? __sys_sendmsg_sock+0x40/0x40 [ 2254.018726] ? rcu_read_lock_any_held+0x75/0xa0 [ 2254.019247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2254.019824] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2254.020399] ? trace_hardirqs_on+0x5b/0x180 [ 2254.020883] do_syscall_64+0x33/0x40 [ 2254.021290] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2254.021857] RIP: 0033:0x7f9f7e251b19 [ 2254.022265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2254.024279] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2254.025121] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2254.025914] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2254.026704] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2254.027489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2254.028278] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2254.039598] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{0x0, 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2254.112938] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:20:14 executing program 0: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000000)) 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 49) 11:20:14 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000040)=0x3f, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000200)=r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00'}) bind$packet(r1, &(0x7f0000000240)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r1, r0, 0x0, 0x500000001) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000000080), &(0x7f0000000100)) syz_open_procfs(0x0, 0x0) 11:20:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x8000000}]) 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2254.197078] FAULT_INJECTION: forcing a failure. [ 2254.197078] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.199506] CPU: 1 PID: 28658 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2254.200939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2254.202653] Call Trace: [ 2254.203212] dump_stack+0x107/0x167 [ 2254.203963] should_fail.cold+0x5/0xa [ 2254.204786] ? create_object.isra.0+0x3a/0xa20 [ 2254.205733] should_failslab+0x5/0x20 [ 2254.206511] kmem_cache_alloc+0x5b/0x310 [ 2254.207361] create_object.isra.0+0x3a/0xa20 [ 2254.208285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2254.209324] kmem_cache_alloc_node+0x169/0x330 [ 2254.210268] __alloc_skb+0x6d/0x5b0 [ 2254.211019] ip_frag_next+0x11d/0x9e0 [ 2254.211808] ? perf_trace_lock+0xac/0x490 [ 2254.212673] ? selinux_ip_postroute_compat+0x390/0x390 [ 2254.213756] ip_do_fragment+0x96b/0x1dd0 [ 2254.214592] ? ip_frag_next+0x9e0/0x9e0 [ 2254.215423] ? ip_finish_output2+0x21f0/0x21f0 [ 2254.216372] ? nf_hook+0x137/0x510 [ 2254.217104] ? lock_downgrade+0x6d0/0x6d0 [ 2254.217947] ? lock_downgrade+0x6d0/0x6d0 [ 2254.218802] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2254.219872] ip_fragment.constprop.0+0x174/0x240 [ 2254.220853] __ip_finish_output.part.0+0x3db/0xb50 [ 2254.221859] ? ip_fragment.constprop.0+0x240/0x240 [ 2254.222850] ? nf_hook+0x510/0x510 [ 2254.223572] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2254.224496] ip_output+0x2f7/0x600 [ 2254.225231] ip_local_out+0xb4/0x1a0 [ 2254.225997] iptunnel_xmit+0x591/0x8b0 [ 2254.226803] ip_tunnel_xmit+0x124a/0x2f50 [ 2254.227669] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2254.228728] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2254.229944] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2254.230874] ? kmem_cache_free+0xa7/0x2d0 [ 2254.231735] ? perf_trace_lock+0xac/0x490 [ 2254.232590] ? kfree_skbmem+0xef/0x1b0 [ 2254.233392] ? kmem_cache_free+0x249/0x2d0 [ 2254.234277] sit_tunnel_xmit+0xef0/0x2960 [ 2254.235142] ? find_held_lock+0x2c/0x110 [ 2254.235970] ? ipip_rcv+0x4f0/0x4f0 [ 2254.236743] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2254.237661] ? lock_downgrade+0x6d0/0x6d0 [ 2254.238518] ? run_filter+0x4d0/0x4d0 [ 2254.239304] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2254.240247] dev_hard_start_xmit+0x1cb/0x6f0 [ 2254.241165] __dev_queue_xmit+0x17ec/0x2710 [ 2254.242051] ? find_held_lock+0x2c/0x110 [ 2254.242892] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2254.243837] ? mark_held_locks+0x9e/0xe0 [ 2254.244713] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2254.245796] neigh_connected_output+0x382/0x4d0 [ 2254.246774] ip_finish_output2+0x6f1/0x21f0 [ 2254.247666] ? ip_copy_metadata+0x5f7/0xa40 [ 2254.248567] ? ip_frag_next+0x9e0/0x9e0 [ 2254.249392] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2254.250356] ip_do_fragment+0x189e/0x1dd0 [ 2254.251214] ? ip_frag_next+0x9e0/0x9e0 [ 2254.252059] ? ip_finish_output2+0x21f0/0x21f0 [ 2254.253012] ? nf_hook+0x137/0x510 [ 2254.253756] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2254.254824] ? nf_hook_slow+0xfc/0x1e0 [ 2254.255642] ip_fragment.constprop.0+0x174/0x240 [ 2254.256632] __ip_finish_output.part.0+0x3db/0xb50 [ 2254.257644] ? ip_fragment.constprop.0+0x240/0x240 [ 2254.258651] ? netif_rx_ni+0xe7/0x300 [ 2254.259442] ip_mc_output+0x401/0xa30 [ 2254.260253] ip_send_skb+0xdd/0x260 [ 2254.261006] udp_send_skb+0x6da/0x11d0 [ 2254.261817] udp_sendmsg+0x139a/0x2170 [ 2254.262617] ? mark_lock+0xf5/0x2df0 [ 2254.263386] ? ip_frag_init+0x350/0x350 [ 2254.264223] ? mark_lock+0xf5/0x2df0 [ 2254.264988] ? perf_trace_lock+0xac/0x490 [ 2254.265847] ? udp_setsockopt+0xc0/0xc0 [ 2254.266669] ? mark_lock+0xf5/0x2df0 [ 2254.267433] ? __lockdep_reset_lock+0x180/0x180 [ 2254.268399] ? mark_lock+0xf5/0x2df0 [ 2254.269171] ? mark_lock+0xf5/0x2df0 [ 2254.269945] ? lock_chain_count+0x20/0x20 [ 2254.270802] ? __lock_acquire+0xbb1/0x5b00 [ 2254.271666] ? lock_chain_count+0x20/0x20 [ 2254.272551] ? perf_trace_lock+0xac/0x490 [ 2254.273411] ? __lockdep_reset_lock+0x180/0x180 [ 2254.274376] udpv6_sendmsg+0x1bed/0x2af0 [ 2254.275231] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.276310] ? mark_lock+0xf5/0x2df0 [ 2254.277074] ? lock_acquire+0x197/0x470 [ 2254.277880] ? find_held_lock+0x2c/0x110 [ 2254.278709] ? __might_fault+0xd3/0x180 [ 2254.279516] ? lock_downgrade+0x6d0/0x6d0 [ 2254.280373] ? lock_downgrade+0x6d0/0x6d0 [ 2254.281223] ? sock_has_perm+0x1ea/0x280 [ 2254.282041] ? selinux_socket_post_create+0x7f0/0x7f0 11:20:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) [ 2254.283092] ? _copy_from_user+0xfb/0x1b0 [ 2254.284117] ? __import_iovec+0x458/0x590 [ 2254.284961] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.286005] inet6_sendmsg+0x105/0x140 [ 2254.286794] ? inet6_compat_ioctl+0x320/0x320 [ 2254.287697] __sock_sendmsg+0xf2/0x190 [ 2254.288506] ____sys_sendmsg+0x70d/0x870 [ 2254.289328] ? sock_write_iter+0x3d0/0x3d0 [ 2254.290190] ? do_recvmmsg+0x6d0/0x6d0 [ 2254.290986] ? perf_trace_lock+0xac/0x490 [ 2254.291934] ? __lockdep_reset_lock+0x180/0x180 [ 2254.292945] ? perf_trace_lock+0xac/0x490 [ 2254.293794] ___sys_sendmsg+0xf3/0x170 [ 2254.294588] ? sendmsg_copy_msghdr+0x160/0x160 [ 2254.295526] ? lock_downgrade+0x6d0/0x6d0 [ 2254.296461] ? find_held_lock+0x2c/0x110 [ 2254.297381] ? __fget_files+0x296/0x4c0 [ 2254.298258] ? __fget_light+0xea/0x290 [ 2254.299172] __sys_sendmsg+0xe5/0x1b0 [ 2254.299947] ? __sys_sendmsg_sock+0x40/0x40 [ 2254.300833] ? rcu_read_lock_any_held+0x75/0xa0 [ 2254.301912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2254.303066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2254.304175] ? trace_hardirqs_on+0x5b/0x180 [ 2254.305105] do_syscall_64+0x33/0x40 [ 2254.305929] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2254.306972] RIP: 0033:0x7f9f7e251b19 [ 2254.307736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2254.311438] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2254.312993] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2254.314427] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2254.315871] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2254.317338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2254.318764] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:20:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:20:14 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 11:20:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2254.467858] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040), 0x0, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xf000000}]) 11:20:14 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 11:20:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2254.535436] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 50) 11:20:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x10000000}]) 11:20:14 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:20:14 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2254.601380] FAULT_INJECTION: forcing a failure. [ 2254.601380] name failslab, interval 1, probability 0, space 0, times 0 [ 2254.602656] CPU: 0 PID: 28694 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2254.603405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2254.604341] Call Trace: [ 2254.604632] dump_stack+0x107/0x167 [ 2254.605032] should_fail.cold+0x5/0xa [ 2254.605447] ? create_object.isra.0+0x3a/0xa20 [ 2254.605962] should_failslab+0x5/0x20 [ 2254.606391] kmem_cache_alloc+0x5b/0x310 [ 2254.606842] create_object.isra.0+0x3a/0xa20 [ 2254.607325] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2254.607881] kmem_cache_alloc_node+0x169/0x330 [ 2254.608393] __alloc_skb+0x6d/0x5b0 [ 2254.608791] ip_frag_next+0x11d/0x9e0 [ 2254.609201] ? perf_trace_lock+0xac/0x490 [ 2254.609659] ? selinux_ip_postroute_compat+0x390/0x390 [ 2254.610234] ip_do_fragment+0x96b/0x1dd0 [ 2254.610687] ? ip_frag_next+0x9e0/0x9e0 [ 2254.611121] ? ip_finish_output2+0x21f0/0x21f0 [ 2254.611619] ? nf_hook+0x137/0x510 [ 2254.612000] ? lock_downgrade+0x6d0/0x6d0 [ 2254.612462] ? lock_downgrade+0x6d0/0x6d0 [ 2254.612911] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2254.613489] ip_fragment.constprop.0+0x174/0x240 [ 2254.613999] __ip_finish_output.part.0+0x3db/0xb50 [ 2254.614533] ? ip_fragment.constprop.0+0x240/0x240 [ 2254.615075] ? nf_hook+0x510/0x510 [ 2254.615478] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2254.615962] ip_output+0x2f7/0x600 [ 2254.616391] ip_local_out+0xb4/0x1a0 [ 2254.616816] iptunnel_xmit+0x591/0x8b0 [ 2254.617266] ip_tunnel_xmit+0x124a/0x2f50 [ 2254.617743] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2254.618330] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2254.618996] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2254.619509] ? kmem_cache_free+0xa7/0x2d0 [ 2254.619990] ? perf_trace_lock+0xac/0x490 [ 2254.620488] ? kfree_skbmem+0xef/0x1b0 [ 2254.620914] ? kmem_cache_free+0x249/0x2d0 [ 2254.621406] sit_tunnel_xmit+0xef0/0x2960 [ 2254.621879] ? find_held_lock+0x2c/0x110 [ 2254.622339] ? ipip_rcv+0x4f0/0x4f0 [ 2254.622760] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2254.623265] ? lock_downgrade+0x6d0/0x6d0 [ 2254.623727] ? run_filter+0x4d0/0x4d0 [ 2254.624177] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2254.624694] dev_hard_start_xmit+0x1cb/0x6f0 [ 2254.625199] __dev_queue_xmit+0x17ec/0x2710 [ 2254.625692] ? find_held_lock+0x2c/0x110 [ 2254.626164] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2254.626687] ? mark_held_locks+0x9e/0xe0 [ 2254.627150] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2254.627740] neigh_connected_output+0x382/0x4d0 [ 2254.628294] ip_finish_output2+0x6f1/0x21f0 [ 2254.628782] ? ip_copy_metadata+0x5f7/0xa40 [ 2254.629272] ? ip_frag_next+0x9e0/0x9e0 [ 2254.629726] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2254.630249] ip_do_fragment+0x189e/0x1dd0 [ 2254.630724] ? ip_frag_next+0x9e0/0x9e0 [ 2254.631181] ? ip_finish_output2+0x21f0/0x21f0 [ 2254.631696] ? nf_hook+0x137/0x510 [ 2254.632111] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2254.632693] ? nf_hook_slow+0xfc/0x1e0 [ 2254.633143] ip_fragment.constprop.0+0x174/0x240 [ 2254.633678] __ip_finish_output.part.0+0x3db/0xb50 [ 2254.634235] ? ip_fragment.constprop.0+0x240/0x240 [ 2254.634787] ? netif_rx_ni+0xe7/0x300 [ 2254.635220] ip_mc_output+0x401/0xa30 [ 2254.635652] ip_send_skb+0xdd/0x260 [ 2254.636083] udp_send_skb+0x6da/0x11d0 [ 2254.636544] udp_sendmsg+0x139a/0x2170 [ 2254.636986] ? mark_lock+0xf5/0x2df0 [ 2254.637403] ? ip_frag_init+0x350/0x350 [ 2254.637841] ? mark_lock+0xf5/0x2df0 [ 2254.638269] ? perf_trace_lock+0xac/0x490 [ 2254.638738] ? udp_setsockopt+0xc0/0xc0 [ 2254.639183] ? mark_lock+0xf5/0x2df0 [ 2254.639604] ? __lockdep_reset_lock+0x180/0x180 [ 2254.640122] ? mark_lock+0xf5/0x2df0 [ 2254.640547] ? mark_lock+0xf5/0x2df0 [ 2254.640966] ? lock_chain_count+0x20/0x20 [ 2254.641436] ? __lock_acquire+0xbb1/0x5b00 [ 2254.641917] ? lock_chain_count+0x20/0x20 [ 2254.642391] ? perf_trace_lock+0xac/0x490 [ 2254.642852] ? __lockdep_reset_lock+0x180/0x180 [ 2254.643379] udpv6_sendmsg+0x1bed/0x2af0 [ 2254.643847] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.644437] ? mark_lock+0xf5/0x2df0 [ 2254.644867] ? lock_acquire+0x197/0x470 [ 2254.645312] ? find_held_lock+0x2c/0x110 [ 2254.645775] ? __might_fault+0xd3/0x180 [ 2254.646221] ? lock_downgrade+0x6d0/0x6d0 [ 2254.646690] ? lock_downgrade+0x6d0/0x6d0 [ 2254.647158] ? sock_has_perm+0x1ea/0x280 [ 2254.647619] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2254.648227] ? _copy_from_user+0xfb/0x1b0 [ 2254.648702] ? __import_iovec+0x458/0x590 [ 2254.649173] ? udp_v6_push_pending_frames+0x360/0x360 [ 2254.649760] inet6_sendmsg+0x105/0x140 [ 2254.650194] ? inet6_compat_ioctl+0x320/0x320 [ 2254.650699] __sock_sendmsg+0xf2/0x190 [ 2254.651142] ____sys_sendmsg+0x70d/0x870 [ 2254.651595] ? sock_write_iter+0x3d0/0x3d0 [ 2254.652090] ? do_recvmmsg+0x6d0/0x6d0 [ 2254.652527] ? perf_trace_lock+0xac/0x490 [ 2254.652994] ? __lockdep_reset_lock+0x180/0x180 [ 2254.653515] ? perf_trace_lock+0xac/0x490 [ 2254.653986] ___sys_sendmsg+0xf3/0x170 [ 2254.654422] ? sendmsg_copy_msghdr+0x160/0x160 [ 2254.654938] ? lock_downgrade+0x6d0/0x6d0 [ 2254.655403] ? find_held_lock+0x2c/0x110 [ 2254.655866] ? __fget_files+0x296/0x4c0 [ 2254.656342] ? __fget_light+0xea/0x290 [ 2254.656784] __sys_sendmsg+0xe5/0x1b0 [ 2254.657212] ? __sys_sendmsg_sock+0x40/0x40 [ 2254.657697] ? rcu_read_lock_any_held+0x75/0xa0 [ 2254.658234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2254.658821] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2254.659394] ? trace_hardirqs_on+0x5b/0x180 [ 2254.659885] do_syscall_64+0x33/0x40 [ 2254.660321] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2254.660900] RIP: 0033:0x7f9f7e251b19 [ 2254.661322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2254.663388] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2254.664252] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2254.665057] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2254.665858] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2254.666658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2254.667462] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2254.692140] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:20:31 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) (fail_nth: 1) 11:20:31 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 11:20:31 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0", 0x2d, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x3f000000}]) 11:20:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 11:20:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 51) 11:20:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2271.863311] FAULT_INJECTION: forcing a failure. [ 2271.863311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.865971] CPU: 1 PID: 28718 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2271.867369] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.869055] Call Trace: [ 2271.869592] dump_stack+0x107/0x167 [ 2271.870332] should_fail.cold+0x5/0xa [ 2271.871107] _copy_from_user+0x2e/0x1b0 [ 2271.871915] copy_clone_args_from_user+0x147/0x790 [ 2271.872768] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2271.872915] ? __lockdep_reset_lock+0x180/0x180 [ 2271.872939] ? sighand_ctor+0x40/0x40 [ 2271.875819] ? find_held_lock+0x2c/0x110 [ 2271.875846] ? ksys_write+0x21a/0x260 [ 2271.875864] ? lock_downgrade+0x6d0/0x6d0 [ 2271.875887] __do_sys_clone3+0x9d/0x320 [ 2271.875906] ? __do_sys_clone+0x110/0x110 [ 2271.875933] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2271.875956] ? wait_for_completion_io+0x270/0x270 [ 2271.875978] ? rcu_read_lock_any_held+0x75/0xa0 [ 2271.875994] ? vfs_write+0x354/0xa70 [ 2271.876017] ? fput_many+0x2f/0x1a0 [ 2271.876036] ? ksys_write+0x1a9/0x260 [ 2271.876055] ? __ia32_sys_read+0xb0/0xb0 11:20:31 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2271.876079] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.876096] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.876112] ? trace_hardirqs_on+0x5b/0x180 [ 2271.876135] do_syscall_64+0x33/0x40 11:20:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 52) [ 2271.876153] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2271.876165] RIP: 0033:0x7fc197dc8b19 [ 2271.876185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.876196] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2271.876236] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2271.876248] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2271.876259] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.876270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.876282] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2271.882143] FAULT_INJECTION: forcing a failure. [ 2271.882143] name failslab, interval 1, probability 0, space 0, times 0 [ 2271.882168] CPU: 1 PID: 28720 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2271.882179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.882185] Call Trace: [ 2271.882204] dump_stack+0x107/0x167 [ 2271.882229] should_fail.cold+0x5/0xa [ 2271.882255] ? create_object.isra.0+0x3a/0xa20 [ 2271.882278] should_failslab+0x5/0x20 [ 2271.882297] kmem_cache_alloc+0x5b/0x310 [ 2271.882323] create_object.isra.0+0x3a/0xa20 [ 2271.882342] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2271.882369] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2271.882387] ? ip_frag_next+0x11d/0x9e0 [ 2271.882414] __alloc_skb+0xb1/0x5b0 [ 2271.882439] ip_frag_next+0x11d/0x9e0 [ 2271.882460] ? perf_trace_lock+0xac/0x490 [ 2271.882481] ? selinux_ip_postroute_compat+0x390/0x390 [ 2271.882513] ip_do_fragment+0x96b/0x1dd0 [ 2271.882533] ? ip_frag_next+0x9e0/0x9e0 [ 2271.882567] ? ip_finish_output2+0x21f0/0x21f0 [ 2271.882584] ? nf_hook+0x137/0x510 [ 2271.882604] ? lock_downgrade+0x6d0/0x6d0 [ 2271.882622] ? lock_downgrade+0x6d0/0x6d0 [ 2271.882645] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2271.882683] ip_fragment.constprop.0+0x174/0x240 [ 2271.882707] __ip_finish_output.part.0+0x3db/0xb50 [ 2271.882730] ? ip_fragment.constprop.0+0x240/0x240 [ 2271.882745] ? nf_hook+0x510/0x510 [ 2271.882763] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2271.882791] ip_output+0x2f7/0x600 [ 2271.882817] ip_local_out+0xb4/0x1a0 [ 2271.882840] iptunnel_xmit+0x591/0x8b0 [ 2271.882872] ip_tunnel_xmit+0x124a/0x2f50 [ 2271.882905] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2271.882924] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2271.882945] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2271.882962] ? kmem_cache_free+0xa7/0x2d0 [ 2271.882995] ? perf_trace_lock+0xac/0x490 [ 2271.883010] ? kfree_skbmem+0xef/0x1b0 [ 2271.883030] ? kmem_cache_free+0x249/0x2d0 [ 2271.883055] sit_tunnel_xmit+0xef0/0x2960 [ 2271.883081] ? find_held_lock+0x2c/0x110 [ 2271.883100] ? ipip_rcv+0x4f0/0x4f0 [ 2271.883124] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2271.883150] ? lock_downgrade+0x6d0/0x6d0 [ 2271.883170] ? run_filter+0x4d0/0x4d0 [ 2271.883189] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2271.883224] dev_hard_start_xmit+0x1cb/0x6f0 [ 2271.883253] __dev_queue_xmit+0x17ec/0x2710 [ 2271.883282] ? find_held_lock+0x2c/0x110 [ 2271.883307] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2271.883338] ? mark_held_locks+0x9e/0xe0 [ 2271.883364] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2271.883390] neigh_connected_output+0x382/0x4d0 [ 2271.883425] ip_finish_output2+0x6f1/0x21f0 [ 2271.883450] ? ip_copy_metadata+0x5f7/0xa40 [ 2271.883471] ? ip_frag_next+0x9e0/0x9e0 [ 2271.883490] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2271.883520] ip_do_fragment+0x189e/0x1dd0 [ 2271.883540] ? ip_frag_next+0x9e0/0x9e0 [ 2271.883574] ? ip_finish_output2+0x21f0/0x21f0 [ 2271.883591] ? nf_hook+0x137/0x510 [ 2271.883620] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2271.883642] ? nf_hook_slow+0xfc/0x1e0 [ 2271.883675] ip_fragment.constprop.0+0x174/0x240 [ 2271.883699] __ip_finish_output.part.0+0x3db/0xb50 [ 2271.883722] ? ip_fragment.constprop.0+0x240/0x240 [ 2271.883746] ? netif_rx_ni+0xe7/0x300 [ 2271.883773] ip_mc_output+0x401/0xa30 [ 2271.883799] ip_send_skb+0xdd/0x260 [ 2271.883824] udp_send_skb+0x6da/0x11d0 [ 2271.883857] udp_sendmsg+0x139a/0x2170 [ 2271.883876] ? mark_lock+0xf5/0x2df0 [ 2271.883896] ? ip_frag_init+0x350/0x350 [ 2271.883918] ? mark_lock+0xf5/0x2df0 [ 2271.883937] ? perf_trace_lock+0xac/0x490 [ 2271.883956] ? udp_setsockopt+0xc0/0xc0 [ 2271.883974] ? mark_lock+0xf5/0x2df0 [ 2271.883994] ? __lockdep_reset_lock+0x180/0x180 [ 2271.884021] ? mark_lock+0xf5/0x2df0 [ 2271.884045] ? mark_lock+0xf5/0x2df0 [ 2271.884075] ? lock_chain_count+0x20/0x20 [ 2271.884095] ? __lock_acquire+0xbb1/0x5b00 [ 2271.884115] ? lock_chain_count+0x20/0x20 [ 2271.884149] ? perf_trace_lock+0xac/0x490 [ 2271.884168] ? __lockdep_reset_lock+0x180/0x180 [ 2271.884198] udpv6_sendmsg+0x1bed/0x2af0 [ 2271.884261] ? udp_v6_push_pending_frames+0x360/0x360 [ 2271.884289] ? mark_lock+0xf5/0x2df0 [ 2271.884315] ? lock_acquire+0x197/0x470 [ 2271.884332] ? find_held_lock+0x2c/0x110 [ 2271.884358] ? __might_fault+0xd3/0x180 [ 2271.884377] ? lock_downgrade+0x6d0/0x6d0 [ 2271.884401] ? lock_downgrade+0x6d0/0x6d0 [ 2271.884426] ? sock_has_perm+0x1ea/0x280 [ 2271.884449] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2271.884473] ? _copy_from_user+0xfb/0x1b0 [ 2271.884507] ? __import_iovec+0x458/0x590 [ 2271.884534] ? udp_v6_push_pending_frames+0x360/0x360 [ 2271.884558] inet6_sendmsg+0x105/0x140 [ 2271.884578] ? inet6_compat_ioctl+0x320/0x320 [ 2271.884595] __sock_sendmsg+0xf2/0x190 [ 2271.884616] ____sys_sendmsg+0x70d/0x870 [ 2271.884638] ? sock_write_iter+0x3d0/0x3d0 [ 2271.884655] ? do_recvmmsg+0x6d0/0x6d0 [ 2271.884673] ? perf_trace_lock+0xac/0x490 [ 2271.884700] ? __lockdep_reset_lock+0x180/0x180 [ 2271.884716] ? perf_trace_lock+0xac/0x490 [ 2271.884743] ___sys_sendmsg+0xf3/0x170 [ 2271.884765] ? sendmsg_copy_msghdr+0x160/0x160 [ 2271.884791] ? lock_downgrade+0x6d0/0x6d0 [ 2271.884814] ? find_held_lock+0x2c/0x110 [ 2271.884845] ? __fget_files+0x296/0x4c0 [ 2271.884877] ? __fget_light+0xea/0x290 [ 2271.884907] __sys_sendmsg+0xe5/0x1b0 [ 2271.884926] ? __sys_sendmsg_sock+0x40/0x40 [ 2271.884943] ? rcu_read_lock_any_held+0x75/0xa0 [ 2271.884984] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.885002] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.885016] ? trace_hardirqs_on+0x5b/0x180 [ 2271.885041] do_syscall_64+0x33/0x40 [ 2271.885059] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2271.885071] RIP: 0033:0x7f9f7e251b19 [ 2271.885091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2271.885102] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2271.885123] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2271.885134] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2271.885146] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.885157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2271.885169] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2271.897404] FAULT_INJECTION: forcing a failure. [ 2271.897404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.897423] CPU: 1 PID: 28713 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2271.897433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2271.897439] Call Trace: [ 2271.897464] dump_stack+0x107/0x167 [ 2271.897488] should_fail.cold+0x5/0xa [ 2271.897512] _copy_to_user+0x2e/0x180 [ 2271.897537] simple_read_from_buffer+0xcc/0x160 [ 2271.897562] proc_fail_nth_read+0x198/0x230 [ 2271.897585] ? proc_sessionid_read+0x230/0x230 [ 2271.897608] ? security_file_permission+0x24e/0x570 [ 2271.897626] ? perf_trace_initcall_start+0x101/0x380 [ 2271.897655] ? proc_sessionid_read+0x230/0x230 [ 2271.897673] vfs_read+0x228/0x580 [ 2271.897698] ksys_read+0x12d/0x260 [ 2271.897717] ? vfs_write+0xa70/0xa70 [ 2271.897742] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2271.897759] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2271.897784] do_syscall_64+0x33/0x40 [ 2271.897802] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2271.897814] RIP: 0033:0x7f1b96ca069c [ 2271.897833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2271.897844] RSP: 002b:00007f1b94263170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2271.897864] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f1b96ca069c [ 2271.897876] RDX: 000000000000000f RSI: 00007f1b942631e0 RDI: 0000000000000004 [ 2271.897887] RBP: 00007f1b942631d0 R08: 0000000000000000 R09: 0000000000000000 [ 2271.897899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.897910] R13: 00007ffe5d2eb22f R14: 00007f1b94263300 R15: 0000000000022000 [ 2272.012443] FAULT_INJECTION: forcing a failure. [ 2272.012443] name failslab, interval 1, probability 0, space 0, times 0 [ 2272.012470] CPU: 0 PID: 28726 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2272.012482] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2272.012488] Call Trace: [ 2272.012514] dump_stack+0x107/0x167 [ 2272.012545] should_fail.cold+0x5/0xa [ 2272.012565] ? lock_release+0x680/0x680 [ 2272.012586] ? skb_clone+0x14f/0x3d0 [ 2272.012609] should_failslab+0x5/0x20 [ 2272.012628] kmem_cache_alloc+0x5b/0x310 [ 2272.012655] skb_clone+0x14f/0x3d0 [ 2272.012682] dev_queue_xmit_nit+0x3a7/0xb00 [ 2272.012717] dev_hard_start_xmit+0xab/0x6f0 [ 2272.012738] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2272.012764] __dev_queue_xmit+0x17ec/0x2710 [ 2272.012792] ? find_held_lock+0x2c/0x110 [ 2272.012816] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2272.012847] ? mark_held_locks+0x9e/0xe0 [ 2272.012873] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2272.012899] neigh_connected_output+0x382/0x4d0 [ 2272.012936] ip_finish_output2+0x6f1/0x21f0 [ 2272.012960] ? ip_copy_metadata+0x5f7/0xa40 [ 2272.012980] ? ip_frag_next+0x9e0/0x9e0 [ 2272.012999] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2272.013030] ip_do_fragment+0x189e/0x1dd0 [ 2272.013050] ? ip_frag_next+0x9e0/0x9e0 [ 2272.013084] ? ip_finish_output2+0x21f0/0x21f0 [ 2272.013102] ? nf_hook+0x137/0x510 [ 2272.013132] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2272.013155] ? nf_hook_slow+0xfc/0x1e0 [ 2272.013189] ip_fragment.constprop.0+0x174/0x240 [ 2272.013213] __ip_finish_output.part.0+0x3db/0xb50 [ 2272.013236] ? ip_fragment.constprop.0+0x240/0x240 [ 2272.013260] ? netif_rx_ni+0xe7/0x300 [ 2272.013287] ip_mc_output+0x401/0xa30 [ 2272.013313] ip_send_skb+0xdd/0x260 [ 2272.013338] udp_send_skb+0x6da/0x11d0 [ 2272.013372] udp_sendmsg+0x139a/0x2170 [ 2272.013391] ? mark_lock+0xf5/0x2df0 [ 2272.013411] ? ip_frag_init+0x350/0x350 [ 2272.013434] ? mark_lock+0xf5/0x2df0 [ 2272.013452] ? perf_trace_lock+0xac/0x490 [ 2272.013472] ? udp_setsockopt+0xc0/0xc0 [ 2272.013491] ? mark_lock+0xf5/0x2df0 [ 2272.013510] ? __lockdep_reset_lock+0x180/0x180 [ 2272.013537] ? mark_lock+0xf5/0x2df0 [ 2272.013560] ? mark_lock+0xf5/0x2df0 [ 2272.013579] ? lock_chain_count+0x20/0x20 [ 2272.013599] ? __lock_acquire+0xbb1/0x5b00 [ 2272.013620] ? lock_chain_count+0x20/0x20 [ 2272.013654] ? perf_trace_lock+0xac/0x490 [ 2272.013674] ? __lockdep_reset_lock+0x180/0x180 [ 2272.013705] udpv6_sendmsg+0x1bed/0x2af0 [ 2272.013743] ? udp_v6_push_pending_frames+0x360/0x360 [ 2272.013771] ? mark_lock+0xf5/0x2df0 [ 2272.013798] ? lock_acquire+0x197/0x470 [ 2272.013815] ? find_held_lock+0x2c/0x110 [ 2272.013841] ? __might_fault+0xd3/0x180 [ 2272.013861] ? lock_downgrade+0x6d0/0x6d0 [ 2272.013885] ? lock_downgrade+0x6d0/0x6d0 [ 2272.013912] ? sock_has_perm+0x1ea/0x280 [ 2272.013935] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2272.013960] ? _copy_from_user+0xfb/0x1b0 [ 2272.013995] ? __import_iovec+0x458/0x590 [ 2272.014015] ? udp_v6_push_pending_frames+0x360/0x360 [ 2272.014040] inet6_sendmsg+0x105/0x140 [ 2272.014060] ? inet6_compat_ioctl+0x320/0x320 [ 2272.014078] __sock_sendmsg+0xf2/0x190 [ 2272.014098] ____sys_sendmsg+0x70d/0x870 [ 2272.014121] ? sock_write_iter+0x3d0/0x3d0 [ 2272.014138] ? do_recvmmsg+0x6d0/0x6d0 [ 2272.014157] ? perf_trace_lock+0xac/0x490 [ 2272.014184] ? __lockdep_reset_lock+0x180/0x180 [ 2272.014200] ? perf_trace_lock+0xac/0x490 [ 2272.014228] ___sys_sendmsg+0xf3/0x170 [ 2272.014250] ? sendmsg_copy_msghdr+0x160/0x160 [ 2272.014277] ? lock_downgrade+0x6d0/0x6d0 [ 2272.014300] ? find_held_lock+0x2c/0x110 [ 2272.014331] ? __fget_files+0x296/0x4c0 [ 2272.014363] ? __fget_light+0xea/0x290 [ 2272.014393] __sys_sendmsg+0xe5/0x1b0 [ 2272.014412] ? __sys_sendmsg_sock+0x40/0x40 [ 2272.014431] ? rcu_read_lock_any_held+0x75/0xa0 [ 2272.014473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2272.014492] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2272.014508] ? trace_hardirqs_on+0x5b/0x180 [ 2272.014534] do_syscall_64+0x33/0x40 [ 2272.014552] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2272.014565] RIP: 0033:0x7f9f7e251b19 [ 2272.014585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2272.014596] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2272.014617] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2272.014629] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2272.014641] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2272.014653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2272.014665] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:20:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) 11:20:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xeffdffff}]) 11:20:47 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000080)) 11:20:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:20:47 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) [ 2287.394160] FAULT_INJECTION: forcing a failure. [ 2287.394160] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.396078] CPU: 0 PID: 28733 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2287.397100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.398296] Call Trace: [ 2287.398683] dump_stack+0x107/0x167 [ 2287.399213] should_fail.cold+0x5/0xa [ 2287.399773] ? copy_process+0x3285/0x7800 [ 2287.400391] should_failslab+0x5/0x20 [ 2287.400959] kmem_cache_alloc_node+0x55/0x330 [ 2287.401614] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.402367] copy_process+0x3285/0x7800 [ 2287.402948] ? __lockdep_reset_lock+0x180/0x180 [ 2287.403625] ? mark_lock+0xf5/0x2df0 [ 2287.404171] ? lock_acquire+0x197/0x470 [ 2287.404745] ? find_held_lock+0x2c/0x110 [ 2287.405341] ? __cleanup_sighand+0xb0/0xb0 [ 2287.405962] ? _copy_from_user+0xfb/0x1b0 [ 2287.406565] kernel_clone+0xe7/0x980 [ 2287.407100] ? __lockdep_reset_lock+0x180/0x180 [ 2287.407783] ? create_io_thread+0xf0/0xf0 [ 2287.408410] ? ksys_write+0x21a/0x260 [ 2287.408977] ? lock_downgrade+0x6d0/0x6d0 [ 2287.409582] __do_sys_clone3+0x1e5/0x320 [ 2287.410165] ? __do_sys_clone+0x110/0x110 [ 2287.410780] ? rcu_read_lock_any_held+0x75/0xa0 [ 2287.411450] ? vfs_write+0x354/0xa70 [ 2287.411998] ? fput_many+0x2f/0x1a0 [ 2287.412534] ? ksys_write+0x1a9/0x260 [ 2287.413082] ? __ia32_sys_read+0xb0/0xb0 [ 2287.413675] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.414431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.415182] ? trace_hardirqs_on+0x5b/0x180 [ 2287.415200] do_syscall_64+0x33/0x40 [ 2287.415212] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.415221] RIP: 0033:0x7fc197dc8b19 [ 2287.415235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.415242] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2287.415257] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2287.415265] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2287.415273] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.415280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.415288] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2287.437201] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2287.437422] EXT4-fs (loop4): get root inode failed [ 2287.437430] EXT4-fs (loop4): mount failed [ 2287.495738] FAULT_INJECTION: forcing a failure. [ 2287.495738] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.497341] CPU: 0 PID: 28749 Comm: syz-executor.5 Not tainted 5.10.209 #1 11:20:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 53) [ 2287.498491] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.499669] Call Trace: [ 2287.500056] dump_stack+0x107/0x167 [ 2287.500589] should_fail.cold+0x5/0xa [ 2287.501133] ? lock_release+0x680/0x680 [ 2287.501683] ? skb_clone+0x14f/0x3d0 [ 2287.502235] should_failslab+0x5/0x20 [ 2287.502773] kmem_cache_alloc+0x5b/0x310 [ 2287.503347] skb_clone+0x14f/0x3d0 [ 2287.503842] dev_queue_xmit_nit+0x3a7/0xb00 [ 2287.504479] dev_hard_start_xmit+0xab/0x6f0 [ 2287.505081] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2287.505861] __dev_queue_xmit+0x17ec/0x2710 [ 2287.506456] ? find_held_lock+0x2c/0x110 [ 2287.507050] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2287.507689] ? mark_held_locks+0x9e/0xe0 [ 2287.508291] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2287.509048] neigh_connected_output+0x382/0x4d0 [ 2287.509739] ip_finish_output2+0x6f1/0x21f0 [ 2287.510363] ? ip_copy_metadata+0x5f7/0xa40 [ 2287.510978] ? ip_frag_next+0x9e0/0x9e0 [ 2287.511549] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2287.512210] ip_do_fragment+0x189e/0x1dd0 [ 2287.512828] ? ip_frag_next+0x9e0/0x9e0 [ 2287.513420] ? ip_finish_output2+0x21f0/0x21f0 [ 2287.514070] ? nf_hook+0x137/0x510 11:20:47 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) 11:20:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x2, 0x0) [ 2287.514644] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2287.515393] ? nf_hook_slow+0xfc/0x1e0 [ 2287.515974] ip_fragment.constprop.0+0x174/0x240 [ 2287.516671] __ip_finish_output.part.0+0x3db/0xb50 [ 2287.517379] ? ip_fragment.constprop.0+0x240/0x240 [ 2287.518093] ? netif_rx_ni+0xe7/0x300 [ 2287.518647] ip_mc_output+0x401/0xa30 [ 2287.519199] ip_send_skb+0xdd/0x260 [ 2287.519738] udp_send_skb+0x6da/0x11d0 [ 2287.520307] udp_sendmsg+0x139a/0x2170 [ 2287.520890] ? mark_lock+0xf5/0x2df0 [ 2287.521428] ? ip_frag_init+0x350/0x350 [ 2287.522002] ? mark_lock+0xf5/0x2df0 [ 2287.522540] ? perf_trace_lock+0xac/0x490 [ 2287.523132] ? udp_setsockopt+0xc0/0xc0 [ 2287.523712] ? mark_lock+0xf5/0x2df0 [ 2287.524250] ? __lockdep_reset_lock+0x180/0x180 [ 2287.524931] ? mark_lock+0xf5/0x2df0 [ 2287.525475] ? mark_lock+0xf5/0x2df0 [ 2287.526014] ? lock_chain_count+0x20/0x20 [ 2287.526613] ? __lock_acquire+0xbb1/0x5b00 [ 2287.527218] ? lock_chain_count+0x20/0x20 [ 2287.527834] ? perf_trace_lock+0xac/0x490 [ 2287.528444] ? __lockdep_reset_lock+0x180/0x180 [ 2287.529120] udpv6_sendmsg+0x1bed/0x2af0 [ 2287.529720] ? udp_v6_push_pending_frames+0x360/0x360 [ 2287.530474] ? mark_lock+0xf5/0x2df0 [ 2287.531018] ? lock_acquire+0x197/0x470 [ 2287.531592] ? find_held_lock+0x2c/0x110 [ 2287.532187] ? __might_fault+0xd3/0x180 [ 2287.532794] ? lock_downgrade+0x6d0/0x6d0 [ 2287.533398] ? lock_downgrade+0x6d0/0x6d0 [ 2287.533998] ? sock_has_perm+0x1ea/0x280 [ 2287.534593] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2287.535340] ? _copy_from_user+0xfb/0x1b0 [ 2287.535944] ? __import_iovec+0x458/0x590 [ 2287.536549] ? udp_v6_push_pending_frames+0x360/0x360 [ 2287.537288] inet6_sendmsg+0x105/0x140 [ 2287.537848] ? inet6_compat_ioctl+0x320/0x320 [ 2287.538486] __sock_sendmsg+0xf2/0x190 [ 2287.539056] ____sys_sendmsg+0x70d/0x870 [ 2287.539657] ? sock_write_iter+0x3d0/0x3d0 [ 2287.540265] ? do_recvmmsg+0x6d0/0x6d0 [ 2287.540846] ? perf_trace_lock+0xac/0x490 [ 2287.541455] ? __lockdep_reset_lock+0x180/0x180 [ 2287.542131] ? perf_trace_lock+0xac/0x490 [ 2287.542742] ___sys_sendmsg+0xf3/0x170 [ 2287.543300] ? sendmsg_copy_msghdr+0x160/0x160 [ 2287.543957] ? lock_downgrade+0x6d0/0x6d0 [ 2287.544578] ? find_held_lock+0x2c/0x110 [ 2287.545166] ? __fget_files+0x296/0x4c0 [ 2287.545766] ? __fget_light+0xea/0x290 [ 2287.546324] __sys_sendmsg+0xe5/0x1b0 [ 2287.546870] ? __sys_sendmsg_sock+0x40/0x40 [ 2287.547502] ? rcu_read_lock_any_held+0x75/0xa0 [ 2287.548194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.548976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.549724] ? trace_hardirqs_on+0x5b/0x180 [ 2287.550358] do_syscall_64+0x33/0x40 [ 2287.550890] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.551648] RIP: 0033:0x7f9f7e251b19 [ 2287.552192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.554827] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2287.555922] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2287.556957] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2287.557984] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.559007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2287.560028] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:20:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:20:47 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:20:47 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r2, 0x811, 0x2000, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x40000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x9393e0, 0x0) [ 2287.592883] FAULT_INJECTION: forcing a failure. [ 2287.592883] name failslab, interval 1, probability 0, space 0, times 0 [ 2287.594576] CPU: 0 PID: 28758 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2287.595569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2287.596760] Call Trace: [ 2287.597132] dump_stack+0x107/0x167 [ 2287.597647] should_fail.cold+0x5/0xa [ 2287.598187] ? create_object.isra.0+0x3a/0xa20 [ 2287.598833] should_failslab+0x5/0x20 [ 2287.599364] kmem_cache_alloc+0x5b/0x310 [ 2287.599947] create_object.isra.0+0x3a/0xa20 [ 2287.600604] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2287.601327] kmem_cache_alloc_node+0x169/0x330 [ 2287.601990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.602743] copy_process+0x3285/0x7800 [ 2287.603305] ? __lockdep_reset_lock+0x180/0x180 [ 2287.603960] ? mark_lock+0xf5/0x2df0 [ 2287.604507] ? lock_acquire+0x197/0x470 [ 2287.605071] ? find_held_lock+0x2c/0x110 [ 2287.605666] ? __cleanup_sighand+0xb0/0xb0 [ 2287.606289] ? _copy_from_user+0xfb/0x1b0 [ 2287.606878] kernel_clone+0xe7/0x980 [ 2287.607404] ? __lockdep_reset_lock+0x180/0x180 [ 2287.608071] ? create_io_thread+0xf0/0xf0 [ 2287.608675] ? ksys_write+0x21a/0x260 [ 2287.609211] ? lock_downgrade+0x6d0/0x6d0 [ 2287.609799] __do_sys_clone3+0x1e5/0x320 [ 2287.610370] ? __do_sys_clone+0x110/0x110 [ 2287.610988] ? rcu_read_lock_any_held+0x75/0xa0 [ 2287.611676] ? vfs_write+0x354/0xa70 [ 2287.612198] ? fput_many+0x2f/0x1a0 [ 2287.612738] ? ksys_write+0x1a9/0x260 [ 2287.613274] ? __ia32_sys_read+0xb0/0xb0 [ 2287.613861] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2287.614600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2287.615350] ? trace_hardirqs_on+0x5b/0x180 [ 2287.615961] do_syscall_64+0x33/0x40 [ 2287.616505] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2287.617223] RIP: 0033:0x7fc197dc8b19 [ 2287.617762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2287.620359] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2287.621441] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2287.622452] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2287.623457] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2287.624474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2287.625479] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:20:47 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc0045878, 0x0) 11:20:47 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000040)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:20:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfcfdffff}]) [ 2287.668413] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2287.675559] EXT4-fs (loop4): get root inode failed [ 2287.676645] EXT4-fs (loop4): mount failed 11:21:01 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) 11:21:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff3}]}) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000940)='./file1\x00', &(0x7f0000000980)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000180)='./file1\x00', 0x0) r1 = syz_io_uring_setup(0x7, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0x8d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000540)) io_uring_enter(r1, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x1, 0x2}) 11:21:01 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:01 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f", 0x44, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:21:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfefdffff}]) [ 2301.077737] FAULT_INJECTION: forcing a failure. [ 2301.077737] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.079155] CPU: 0 PID: 28893 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2301.080025] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.081079] Call Trace: [ 2301.081415] dump_stack+0x107/0x167 [ 2301.081873] should_fail.cold+0x5/0xa [ 2301.082362] should_failslab+0x5/0x20 [ 2301.082845] __kmalloc_node_track_caller+0x74/0x3b0 [ 2301.083473] ? ip_frag_next+0x11d/0x9e0 [ 2301.083964] ? __local_bh_enable_ip+0x9d/0x100 [ 2301.084560] __alloc_skb+0xb1/0x5b0 [ 2301.085025] ip_frag_next+0x11d/0x9e0 [ 2301.085520] ip_do_fragment+0x96b/0x1dd0 [ 2301.086051] ? ip_frag_next+0x9e0/0x9e0 [ 2301.086584] ? ip_finish_output2+0x21f0/0x21f0 [ 2301.087133] ? nf_hook+0x137/0x510 [ 2301.087602] ? lock_downgrade+0x6d0/0x6d0 [ 2301.088148] ? trace_hardirqs_on+0x5b/0x180 [ 2301.088740] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2301.089422] ip_fragment.constprop.0+0x174/0x240 [ 2301.090046] __ip_finish_output.part.0+0x3db/0xb50 [ 2301.090692] ? ip_fragment.constprop.0+0x240/0x240 [ 2301.091338] ? netif_rx_ni+0xe7/0x300 [ 2301.091832] ip_mc_output+0x401/0xa30 [ 2301.092340] ip_send_skb+0xdd/0x260 [ 2301.092820] udp_send_skb+0x6da/0x11d0 [ 2301.093325] udp_sendmsg+0x139a/0x2170 [ 2301.093843] ? mark_lock+0xf5/0x2df0 [ 2301.094328] ? ip_frag_init+0x350/0x350 [ 2301.094856] ? mark_lock+0xf5/0x2df0 [ 2301.095347] ? perf_trace_lock+0xac/0x490 [ 2301.095846] ? udp_setsockopt+0xc0/0xc0 [ 2301.096369] ? mark_lock+0xf5/0x2df0 [ 2301.096839] ? __lockdep_reset_lock+0x180/0x180 [ 2301.097464] ? mark_lock+0xf5/0x2df0 [ 2301.097952] ? mark_lock+0xf5/0x2df0 [ 2301.098440] ? lock_chain_count+0x20/0x20 [ 2301.098980] ? __lock_acquire+0xbb1/0x5b00 [ 2301.099529] ? lock_chain_count+0x20/0x20 [ 2301.100089] ? perf_trace_lock+0xac/0x490 [ 2301.100693] ? __lockdep_reset_lock+0x180/0x180 [ 2301.101312] udpv6_sendmsg+0x1bed/0x2af0 [ 2301.101857] ? udp_v6_push_pending_frames+0x360/0x360 [ 2301.102546] ? mark_lock+0xf5/0x2df0 [ 2301.103031] ? lock_acquire+0x197/0x470 [ 2301.103548] ? find_held_lock+0x2c/0x110 [ 2301.104073] ? __might_fault+0xd3/0x180 [ 2301.104605] ? lock_downgrade+0x6d0/0x6d0 [ 2301.105142] ? lock_downgrade+0x6d0/0x6d0 [ 2301.105674] ? sock_has_perm+0x1ea/0x280 [ 2301.106198] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2301.106873] ? _copy_from_user+0xfb/0x1b0 [ 2301.107419] ? __import_iovec+0x458/0x590 [ 2301.107957] ? udp_v6_push_pending_frames+0x360/0x360 [ 2301.108635] inet6_sendmsg+0x105/0x140 [ 2301.109131] ? inet6_compat_ioctl+0x320/0x320 [ 2301.109704] __sock_sendmsg+0xf2/0x190 [ 2301.110205] ____sys_sendmsg+0x70d/0x870 [ 2301.110730] ? sock_write_iter+0x3d0/0x3d0 [ 2301.111275] ? do_recvmmsg+0x6d0/0x6d0 [ 2301.111775] ? perf_trace_lock+0xac/0x490 [ 2301.112312] ? __lockdep_reset_lock+0x180/0x180 [ 2301.112919] ? perf_trace_lock+0xac/0x490 [ 2301.113453] ___sys_sendmsg+0xf3/0x170 [ 2301.113952] ? sendmsg_copy_msghdr+0x160/0x160 [ 2301.114555] ? lock_downgrade+0x6d0/0x6d0 [ 2301.115093] ? find_held_lock+0x2c/0x110 [ 2301.115624] ? __fget_files+0x296/0x4c0 [ 2301.116142] ? __fget_light+0xea/0x290 [ 2301.116678] __sys_sendmsg+0xe5/0x1b0 [ 2301.117163] ? __sys_sendmsg_sock+0x40/0x40 [ 2301.117717] ? rcu_read_lock_any_held+0x75/0xa0 [ 2301.118334] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.119008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.119656] ? trace_hardirqs_on+0x5b/0x180 [ 2301.120213] do_syscall_64+0x33/0x40 [ 2301.120705] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2301.121343] RIP: 0033:0x7f9f7e251b19 [ 2301.121795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.124090] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2301.125056] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2301.125959] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2301.126800] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2301.127704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2301.128629] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:21:01 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3302, 0x0) 11:21:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 54) [ 2301.135792] EXT4-fs error (device loop4): ext4_fill_super:4962: inode #2: comm syz-executor.4: iget: special inode unallocated [ 2301.142550] EXT4-fs (loop4): get root inode failed [ 2301.143623] EXT4-fs (loop4): mount failed 11:21:01 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3304, 0x0) [ 2301.170023] FAULT_INJECTION: forcing a failure. [ 2301.170023] name failslab, interval 1, probability 0, space 0, times 0 [ 2301.172496] CPU: 1 PID: 28901 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2301.173914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2301.175584] Call Trace: [ 2301.176127] dump_stack+0x107/0x167 [ 2301.176890] should_fail.cold+0x5/0xa [ 2301.177670] ? create_object.isra.0+0x3a/0xa20 [ 2301.178608] should_failslab+0x5/0x20 [ 2301.179386] kmem_cache_alloc+0x5b/0x310 [ 2301.180222] create_object.isra.0+0x3a/0xa20 [ 2301.181134] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2301.182183] kmem_cache_alloc_node+0x169/0x330 [ 2301.183128] copy_process+0x3285/0x7800 [ 2301.183942] ? __lockdep_reset_lock+0x180/0x180 [ 2301.184899] ? mark_lock+0xf5/0x2df0 [ 2301.185670] ? lock_acquire+0x197/0x470 [ 2301.186480] ? find_held_lock+0x2c/0x110 [ 2301.187324] ? __cleanup_sighand+0xb0/0xb0 [ 2301.188201] ? _copy_from_user+0xfb/0x1b0 [ 2301.189063] kernel_clone+0xe7/0x980 [ 2301.189827] ? __lockdep_reset_lock+0x180/0x180 [ 2301.190781] ? create_io_thread+0xf0/0xf0 [ 2301.191644] ? ksys_write+0x21a/0x260 [ 2301.192423] ? lock_downgrade+0x6d0/0x6d0 [ 2301.193290] __do_sys_clone3+0x1e5/0x320 [ 2301.194122] ? __do_sys_clone+0x110/0x110 [ 2301.194986] ? rcu_read_lock_any_held+0x75/0xa0 [ 2301.195937] ? vfs_write+0x354/0xa70 [ 2301.196714] ? fput_many+0x2f/0x1a0 [ 2301.197462] ? ksys_write+0x1a9/0x260 [ 2301.198242] ? __ia32_sys_read+0xb0/0xb0 [ 2301.199078] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2301.200145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2301.201201] ? trace_hardirqs_on+0x5b/0x180 [ 2301.202087] do_syscall_64+0x33/0x40 [ 2301.202848] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2301.203892] RIP: 0033:0x7fc197dc8b19 [ 2301.204662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2301.208431] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2301.210004] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2301.211469] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2301.212930] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2301.214393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2301.215848] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:21:01 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x10) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000a00000000000000fe8000000000000000000000000000bb000000000000000000000000000000000000000000001700"/144], 0x90) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8034e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000007c669fd78266d53ecbb016b40866fb640b08cd4c4c53a4010000008ec2281e541e7f81a4b0e7cee8db82ef7a3af95502c383310265d42817f0a4032af15d232a26d8e2e7a6013f75ae9e4289e7c512e429e33a61e2496627c997c050b7d83c6908cbb4"]}) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)}, 0x0) execveat(0xffffffffffffffff, &(0x7f00000014c0)='./file0\x00', &(0x7f0000001680)=[&(0x7f0000001500)=':$\\&/\xb6%{]-!\x00', &(0x7f0000001540)='}\xb9!(\x00', &(0x7f0000001580)='^\x00', &(0x7f00000015c0)='nl80211\x00', &(0x7f0000001600)=']-\x00', 0x0], &(0x7f0000001780)=[&(0x7f00000016c0)='nl80211\x00', &(0x7f0000001700)='\x00', &(0x7f0000001740)='\x00'], 0x1000) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0x6, [0x40, 0x5, 0x6, 0x3, 0x8, 0x10000]}) [ 2315.884318] FAULT_INJECTION: forcing a failure. [ 2315.884318] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.885770] CPU: 0 PID: 29016 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2315.886560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.887488] Call Trace: [ 2315.887787] dump_stack+0x107/0x167 [ 2315.888195] should_fail.cold+0x5/0xa [ 2315.888629] ? prepare_creds+0x25/0x5e0 [ 2315.889107] should_failslab+0x5/0x20 [ 2315.889145] Restarting kernel threads ... [ 2315.889540] kmem_cache_alloc+0x5b/0x310 [ 2315.889553] ? lock_downgrade+0x6d0/0x6d0 [ 2315.889566] prepare_creds+0x25/0x5e0 [ 2315.889578] copy_creds+0x72/0x580 [ 2315.889591] copy_process+0xfdc/0x7800 [ 2315.889602] ? __lockdep_reset_lock+0x180/0x180 [ 2315.889621] ? mark_lock+0xf5/0x2df0 [ 2315.889635] ? lock_acquire+0x197/0x470 [ 2315.889645] ? find_held_lock+0x2c/0x110 [ 2315.891200] done. [ 2315.891230] ? __cleanup_sighand+0xb0/0xb0 [ 2315.895806] ? _copy_from_user+0xfb/0x1b0 [ 2315.896278] kernel_clone+0xe7/0x980 [ 2315.896722] ? __lockdep_reset_lock+0x180/0x180 [ 2315.897247] ? create_io_thread+0xf0/0xf0 [ 2315.897728] ? ksys_write+0x21a/0x260 [ 2315.898136] ? lock_downgrade+0x6d0/0x6d0 [ 2315.898614] __do_sys_clone3+0x1e5/0x320 [ 2315.899082] ? __do_sys_clone+0x110/0x110 [ 2315.899560] ? rcu_read_lock_any_held+0x75/0xa0 [ 2315.900073] ? vfs_write+0x354/0xa70 [ 2315.900500] ? fput_many+0x2f/0x1a0 [ 2315.900921] ? ksys_write+0x1a9/0x260 [ 2315.901353] ? __ia32_sys_read+0xb0/0xb0 [ 2315.901813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.902400] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.902949] ? trace_hardirqs_on+0x5b/0x180 [ 2315.903437] do_syscall_64+0x33/0x40 [ 2315.903857] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.904432] RIP: 0033:0x7fc197dc8b19 [ 2315.904860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.906912] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2315.907770] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2315.908573] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2315.909390] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.910183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.910987] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:21:15 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3305, 0x0) 11:21:15 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) 11:21:15 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) r2 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r2, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:15 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000080000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:21:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 55) 11:21:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffdef}]) 11:21:15 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:15 executing program 2: creat(0x0, 0x2) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x3, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24081, 0x0) fcntl$dupfd(r1, 0x0, r0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="f705636e78d7fe56dc785801c1639135f64ee7b44ea8862a6e57b093fb04375b3e0f873e7d29c115a4c23c962b433c021ece0cc82189b2e928912c82fb", 0x3d, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x4, 0x6, 0xfd, 0x0, 0x2, 0x20201, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x40000, 0x1000, 0x0, 0x7, 0xffff, 0x0, 0x94e, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x6817f38971100a5c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) io_uring_setup(0x3, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x10100, 0x1, 0x4}, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x23456}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000600)={0x2, 0x0, {0x7, @struct={0x4, 0x9}, 0x0, 0xa9c, 0xfffffffffffffffd, 0x2, 0x9, 0xfff, 0x59, @usage=0x1, 0x3, 0x6, [0x8000000000008, 0x3, 0x80000000, 0x8, 0x80000000, 0x4]}, {0x8000, @struct={0x3, 0x1f}, 0x0, 0x80000001, 0x3, 0x1a, 0x4, 0x6, 0x19, @usage=0x101, 0x9, 0x2, [0x3, 0x5, 0x1, 0x3, 0x9, 0x6]}, {0x5, @struct={0x3, 0x4}, 0x0, 0xb909, 0x0, 0x800, 0x2, 0x1, 0x81, @struct={0x7, 0x8}, 0x4, 0x0, [0x3, 0x20, 0xce, 0x1dc5, 0x8, 0xbe9]}, {0x90f, 0x100}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a00)={r5, 0x6, 0x400, 0x1}) fork() 11:21:16 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) [ 2315.950263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2315.959785] EXT4-fs (loop4): invalid first ino: 0 [ 2315.965731] FAULT_INJECTION: forcing a failure. [ 2315.965731] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.968045] CPU: 1 PID: 29032 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2315.969475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.971161] Call Trace: [ 2315.971706] dump_stack+0x107/0x167 [ 2315.972472] should_fail.cold+0x5/0xa [ 2315.973261] ? dst_alloc+0x9e/0x5d0 [ 2315.974015] should_failslab+0x5/0x20 11:21:16 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3309, 0x0) [ 2315.974812] kmem_cache_alloc+0x5b/0x310 [ 2315.975733] ? fnhe_hashfun+0x79/0x130 [ 2315.976536] dst_alloc+0x9e/0x5d0 [ 2315.977277] rt_dst_alloc+0x73/0x440 [ 2315.978031] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2315.979101] ip_route_output_key_hash+0x18d/0x340 11:21:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2315.980080] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2315.981291] ? ip_mc_output+0x401/0xa30 [ 2315.982094] ? ip_send_skb+0xdd/0x260 [ 2315.982867] ? udp_send_skb+0x6da/0x11d0 [ 2315.983695] ? __sys_sendmsg+0xe5/0x1b0 [ 2315.984510] ? do_syscall_64+0x33/0x40 [ 2315.985316] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2315.986409] ? lock_acquire+0x197/0x470 [ 2315.987221] ip_route_output_flow+0x23/0x150 [ 2315.988121] ip_tunnel_xmit+0x70e/0x2f50 [ 2315.988966] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2315.990020] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2315.991221] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2315.992150] ? kmem_cache_free+0xa7/0x2d0 [ 2315.993010] ? perf_trace_lock+0xac/0x490 [ 2315.993851] ? kfree_skbmem+0xef/0x1b0 [ 2315.994640] ? kmem_cache_free+0x249/0x2d0 [ 2315.995510] sit_tunnel_xmit+0xef0/0x2960 [ 2315.996348] ? find_held_lock+0x2c/0x110 [ 2315.997199] ? ipip_rcv+0x4f0/0x4f0 [ 2315.997948] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2315.998871] ? lock_downgrade+0x6d0/0x6d0 [ 2315.999710] ? run_filter+0x4d0/0x4d0 [ 2316.000488] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2316.001421] dev_hard_start_xmit+0x1cb/0x6f0 [ 2316.002329] __dev_queue_xmit+0x17ec/0x2710 [ 2316.003211] ? find_held_lock+0x2c/0x110 [ 2316.004044] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2316.004991] ? mark_held_locks+0x9e/0xe0 [ 2316.005824] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2316.006889] neigh_connected_output+0x382/0x4d0 [ 2316.007853] ip_finish_output2+0x6f1/0x21f0 [ 2316.008747] ? ip_copy_metadata+0x5f7/0xa40 [ 2316.009634] ? ip_frag_next+0x9e0/0x9e0 [ 2316.010439] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2316.011385] ip_do_fragment+0x189e/0x1dd0 [ 2316.012225] ? ip_frag_next+0x9e0/0x9e0 [ 2316.013078] ? ip_finish_output2+0x21f0/0x21f0 [ 2316.014007] ? nf_hook+0x137/0x510 [ 2316.014740] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2316.015786] ? nf_hook_slow+0xfc/0x1e0 [ 2316.016594] ip_fragment.constprop.0+0x174/0x240 [ 2316.017577] __ip_finish_output.part.0+0x3db/0xb50 [ 2316.018580] ? ip_fragment.constprop.0+0x240/0x240 [ 2316.019576] ? netif_rx_ni+0xe7/0x300 [ 2316.020360] ip_mc_output+0x401/0xa30 [ 2316.021152] ip_send_skb+0xdd/0x260 [ 2316.021902] udp_send_skb+0x6da/0x11d0 [ 2316.022705] udp_sendmsg+0x139a/0x2170 [ 2316.023498] ? mark_lock+0xf5/0x2df0 [ 2316.024249] ? ip_frag_init+0x350/0x350 [ 2316.025075] ? mark_lock+0xf5/0x2df0 [ 2316.025825] ? perf_trace_lock+0xac/0x490 [ 2316.026671] ? udp_setsockopt+0xc0/0xc0 [ 2316.027634] ? mark_lock+0xf5/0x2df0 [ 2316.028558] ? __lockdep_reset_lock+0x180/0x180 [ 2316.029735] ? mark_lock+0xf5/0x2df0 [ 2316.030672] ? mark_lock+0xf5/0x2df0 [ 2316.031564] ? lock_chain_count+0x20/0x20 [ 2316.032572] ? __lock_acquire+0xbb1/0x5b00 [ 2316.033633] ? lock_chain_count+0x20/0x20 [ 2316.034556] ? perf_trace_lock+0xac/0x490 [ 2316.035446] ? __lockdep_reset_lock+0x180/0x180 [ 2316.036498] udpv6_sendmsg+0x1bed/0x2af0 [ 2316.037387] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.038527] ? mark_lock+0xf5/0x2df0 [ 2316.039359] ? lock_acquire+0x197/0x470 [ 2316.040310] ? find_held_lock+0x2c/0x110 [ 2316.041203] ? __might_fault+0xd3/0x180 [ 2316.042028] ? lock_downgrade+0x6d0/0x6d0 [ 2316.042879] ? lock_downgrade+0x6d0/0x6d0 [ 2316.043729] ? sock_has_perm+0x1ea/0x280 [ 2316.044562] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2316.045633] ? _copy_from_user+0xfb/0x1b0 [ 2316.046493] ? __import_iovec+0x458/0x590 [ 2316.047343] ? udp_v6_push_pending_frames+0x360/0x360 [ 2316.048400] inet6_sendmsg+0x105/0x140 [ 2316.049203] ? inet6_compat_ioctl+0x320/0x320 [ 2316.050117] __sock_sendmsg+0xf2/0x190 [ 2316.050908] ____sys_sendmsg+0x70d/0x870 [ 2316.051750] ? sock_write_iter+0x3d0/0x3d0 [ 2316.052604] ? do_recvmmsg+0x6d0/0x6d0 [ 2316.053416] ? perf_trace_lock+0xac/0x490 [ 2316.054268] ? __lockdep_reset_lock+0x180/0x180 [ 2316.055216] ? perf_trace_lock+0xac/0x490 [ 2316.056088] ___sys_sendmsg+0xf3/0x170 [ 2316.056905] ? sendmsg_copy_msghdr+0x160/0x160 [ 2316.057843] ? lock_downgrade+0x6d0/0x6d0 [ 2316.058700] ? find_held_lock+0x2c/0x110 [ 2316.059545] ? __fget_files+0x296/0x4c0 [ 2316.060367] ? __fget_light+0xea/0x290 [ 2316.061191] __sys_sendmsg+0xe5/0x1b0 [ 2316.061977] ? __sys_sendmsg_sock+0x40/0x40 [ 2316.062856] ? rcu_read_lock_any_held+0x75/0xa0 [ 2316.063830] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.064934] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.065987] ? trace_hardirqs_on+0x5b/0x180 [ 2316.066872] do_syscall_64+0x33/0x40 [ 2316.067630] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2316.068671] RIP: 0033:0x7f9f7e251b19 [ 2316.069447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.073197] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2316.074750] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2316.076204] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2316.077671] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.079131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2316.080583] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2316.099132] FAULT_INJECTION: forcing a failure. [ 2316.099132] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.100400] CPU: 0 PID: 29039 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2316.101159] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2316.102050] Call Trace: [ 2316.102346] dump_stack+0x107/0x167 [ 2316.102754] should_fail.cold+0x5/0xa [ 2316.103174] ? create_object.isra.0+0x3a/0xa20 [ 2316.103675] should_failslab+0x5/0x20 [ 2316.104089] kmem_cache_alloc+0x5b/0x310 [ 2316.104529] create_object.isra.0+0x3a/0xa20 [ 2316.105014] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2316.105564] kmem_cache_alloc+0x159/0x310 [ 2316.106016] prepare_creds+0x25/0x5e0 [ 2316.106428] copy_creds+0x72/0x580 [ 2316.106812] copy_process+0xfdc/0x7800 [ 2316.107231] ? __lockdep_reset_lock+0x180/0x180 [ 2316.107727] ? mark_lock+0xf5/0x2df0 [ 2316.108131] ? lock_acquire+0x197/0x470 [ 2316.108563] ? find_held_lock+0x2c/0x110 [ 2316.109023] ? __cleanup_sighand+0xb0/0xb0 [ 2316.109501] ? _copy_from_user+0xfb/0x1b0 [ 2316.109956] kernel_clone+0xe7/0x980 [ 2316.110371] ? __lockdep_reset_lock+0x180/0x180 [ 2316.110882] ? create_io_thread+0xf0/0xf0 [ 2316.111347] ? ksys_write+0x21a/0x260 [ 2316.111769] ? lock_downgrade+0x6d0/0x6d0 [ 2316.112232] __do_sys_clone3+0x1e5/0x320 [ 2316.112682] ? __do_sys_clone+0x110/0x110 [ 2316.113167] ? rcu_read_lock_any_held+0x75/0xa0 [ 2316.113688] ? vfs_write+0x354/0xa70 [ 2316.114098] ? fput_many+0x2f/0x1a0 [ 2316.114498] ? ksys_write+0x1a9/0x260 [ 2316.114920] ? __ia32_sys_read+0xb0/0xb0 [ 2316.115368] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2316.115949] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2316.116516] ? trace_hardirqs_on+0x5b/0x180 [ 2316.117006] do_syscall_64+0x33/0x40 [ 2316.117417] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2316.117982] RIP: 0033:0x7fc197dc8b19 [ 2316.118403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2316.120428] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2316.121263] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2316.122051] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2316.122838] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2316.123622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2316.124406] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:21:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffdfc}]) 11:21:16 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:16 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000080000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:21:16 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x330b, 0x0) [ 2316.185429] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2316.241931] EXT4-fs (loop4): invalid first ino: 0 11:21:16 executing program 2: creat(0x0, 0x2) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000100)={0x0, 0x867e, 0x0, 0x3, 0x399}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000002c0)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24081, 0x0) fcntl$dupfd(r1, 0x0, r0) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="f705636e78d7fe56dc785801c1639135f64ee7b44ea8862a6e57b093fb04375b3e0f873e7d29c115a4c23c962b433c021ece0cc82189b2e928912c82fb", 0x3d, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x4, 0x6, 0xfd, 0x0, 0x2, 0x20201, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x40000, 0x1000, 0x0, 0x7, 0xffff, 0x0, 0x94e, 0x0, 0x6, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x6817f38971100a5c) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/148, 0x94}, {&(0x7f0000000580)=""/98, 0x62}, {&(0x7f0000000440)=""/181, 0xb5}, {&(0x7f0000000300)=""/67, 0x43}], 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x34}}, 0x0) syz_io_uring_setup(0x3167, 0x0, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000340)=0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r4, r4) io_uring_setup(0x3, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)={0x10100, 0x1, 0x4}, &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x23456}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000600)={0x2, 0x0, {0x7, @struct={0x4, 0x9}, 0x0, 0xa9c, 0xfffffffffffffffd, 0x2, 0x9, 0xfff, 0x59, @usage=0x1, 0x3, 0x6, [0x8000000000008, 0x3, 0x80000000, 0x8, 0x80000000, 0x4]}, {0x8000, @struct={0x3, 0x1f}, 0x0, 0x80000001, 0x3, 0x1a, 0x4, 0x6, 0x19, @usage=0x101, 0x9, 0x2, [0x3, 0x5, 0x1, 0x3, 0x9, 0x6]}, {0x5, @struct={0x3, 0x4}, 0x0, 0xb909, 0x0, 0x800, 0x2, 0x1, 0x81, @struct={0x7, 0x8}, 0x4, 0x0, [0x3, 0x20, 0xce, 0x1dc5, 0x8, 0xbe9]}, {0x90f, 0x100}}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000a00)={r5, 0x6, 0x400, 0x1}) fork() 11:21:16 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffdfe}]) [ 2316.435940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2329.936352] FAULT_INJECTION: forcing a failure. [ 2329.936352] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.937650] CPU: 0 PID: 29079 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2329.938390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.939290] Call Trace: [ 2329.939586] dump_stack+0x107/0x167 [ 2329.939998] should_fail.cold+0x5/0xa [ 2329.940424] ? __alloc_skb+0x6d/0x5b0 [ 2329.940844] should_failslab+0x5/0x20 [ 2329.941274] kmem_cache_alloc_node+0x55/0x330 [ 2329.941774] __alloc_skb+0x6d/0x5b0 [ 2329.942177] ip_frag_next+0x11d/0x9e0 [ 2329.942594] ? perf_trace_lock+0xac/0x490 [ 2329.943053] ? selinux_ip_postroute_compat+0x390/0x390 [ 2329.943634] ip_do_fragment+0x96b/0x1dd0 [ 2329.944077] ? ip_frag_next+0x9e0/0x9e0 [ 2329.944521] ? ip_finish_output2+0x21f0/0x21f0 [ 2329.945032] ? nf_hook+0x137/0x510 [ 2329.945418] ? lock_downgrade+0x6d0/0x6d0 [ 2329.945869] ? lock_downgrade+0x6d0/0x6d0 [ 2329.946328] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2329.946907] ip_fragment.constprop.0+0x174/0x240 [ 2329.947446] __ip_finish_output.part.0+0x3db/0xb50 [ 2329.948008] ? ip_fragment.constprop.0+0x240/0x240 [ 2329.948572] ? nf_hook+0x510/0x510 [ 2329.948970] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2329.949478] ip_output+0x2f7/0x600 [ 2329.949864] ip_local_out+0xb4/0x1a0 [ 2329.950293] iptunnel_xmit+0x591/0x8b0 [ 2329.950746] ip_tunnel_xmit+0x124a/0x2f50 [ 2329.951224] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2329.951808] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2329.952490] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2329.953017] ? kmem_cache_free+0xa7/0x2d0 [ 2329.953035] ? perf_trace_lock+0xac/0x490 [ 2329.953044] ? kfree_skbmem+0xef/0x1b0 11:21:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x81, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000140)="690b9c7e949754b098eb86818d861f0f", 0x10) dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x894c, 0x0) r4 = syz_io_uring_setup(0x5, &(0x7f0000000080), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000540)) io_uring_enter(r4, 0x4eae, 0x9b5b, 0x0, 0x0, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000080), 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) 11:21:29 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) 11:21:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 56) 11:21:29 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x330f, 0x0) 11:21:29 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:29 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffe00}]) [ 2329.953054] ? kmem_cache_free+0x249/0x2d0 [ 2329.953068] sit_tunnel_xmit+0xef0/0x2960 [ 2329.953082] ? find_held_lock+0x2c/0x110 11:21:30 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f0000000080000000010000", 0x4f, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2329.953092] ? ipip_rcv+0x4f0/0x4f0 [ 2329.953105] ? dev_queue_xmit_nit+0x7f5/0xb00 11:21:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2329.953115] ? lock_downgrade+0x6d0/0x6d0 [ 2329.953126] ? run_filter+0x4d0/0x4d0 [ 2329.953137] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2329.953156] dev_hard_start_xmit+0x1cb/0x6f0 [ 2329.953171] __dev_queue_xmit+0x17ec/0x2710 [ 2329.953185] ? find_held_lock+0x2c/0x110 [ 2329.953198] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2329.953215] ? mark_held_locks+0x9e/0xe0 [ 2329.953228] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 11:21:30 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc0045878, 0x0) [ 2329.953242] neigh_connected_output+0x382/0x4d0 [ 2329.953261] ip_finish_output2+0x6f1/0x21f0 [ 2329.953273] ? ip_copy_metadata+0x5f7/0xa40 11:21:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 57) 11:21:30 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2329.953284] ? ip_frag_next+0x9e0/0x9e0 [ 2329.953294] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2329.953310] ip_do_fragment+0x189e/0x1dd0 [ 2329.953321] ? ip_frag_next+0x9e0/0x9e0 [ 2329.953339] ? ip_finish_output2+0x21f0/0x21f0 [ 2329.953349] ? nf_hook+0x137/0x510 [ 2329.953364] ? __sanitizer_cov_trace_switch+0x45/0x80 11:21:30 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x3312, 0x0) 11:21:30 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) [ 2329.953376] ? nf_hook_slow+0xfc/0x1e0 [ 2329.953394] ip_fragment.constprop.0+0x174/0x240 [ 2329.953407] __ip_finish_output.part.0+0x3db/0xb50 [ 2329.953419] ? ip_fragment.constprop.0+0x240/0x240 [ 2329.953432] ? netif_rx_ni+0xe7/0x300 11:21:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 58) 11:21:30 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2329.953446] ip_mc_output+0x401/0xa30 [ 2329.953460] ip_send_skb+0xdd/0x260 [ 2329.953474] udp_send_skb+0x6da/0x11d0 [ 2329.953492] udp_sendmsg+0x139a/0x2170 [ 2329.953502] ? mark_lock+0xf5/0x2df0 [ 2329.953513] ? ip_frag_init+0x350/0x350 [ 2329.953524] ? mark_lock+0xf5/0x2df0 [ 2329.953534] ? perf_trace_lock+0xac/0x490 [ 2329.953545] ? udp_setsockopt+0xc0/0xc0 [ 2329.953555] ? mark_lock+0xf5/0x2df0 [ 2329.953565] ? __lockdep_reset_lock+0x180/0x180 [ 2329.953579] ? mark_lock+0xf5/0x2df0 [ 2329.953592] ? mark_lock+0xf5/0x2df0 [ 2329.953602] ? lock_chain_count+0x20/0x20 [ 2329.953613] ? __lock_acquire+0xbb1/0x5b00 [ 2329.953624] ? lock_chain_count+0x20/0x20 [ 2329.953642] ? perf_trace_lock+0xac/0x490 [ 2329.953652] ? __lockdep_reset_lock+0x180/0x180 [ 2329.953668] udpv6_sendmsg+0x1bed/0x2af0 [ 2329.953688] ? udp_v6_push_pending_frames+0x360/0x360 [ 2329.953703] ? mark_lock+0xf5/0x2df0 [ 2329.953717] ? lock_acquire+0x197/0x470 [ 2329.953726] ? find_held_lock+0x2c/0x110 [ 2329.953740] ? __might_fault+0xd3/0x180 [ 2329.953750] ? lock_downgrade+0x6d0/0x6d0 [ 2329.953763] ? lock_downgrade+0x6d0/0x6d0 [ 2329.953776] ? sock_has_perm+0x1ea/0x280 [ 2329.953789] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2329.953803] ? _copy_from_user+0xfb/0x1b0 [ 2329.953821] ? __import_iovec+0x458/0x590 [ 2329.953832] ? udp_v6_push_pending_frames+0x360/0x360 [ 2329.953845] inet6_sendmsg+0x105/0x140 [ 2329.953856] ? inet6_compat_ioctl+0x320/0x320 [ 2329.953865] __sock_sendmsg+0xf2/0x190 [ 2329.953876] ____sys_sendmsg+0x70d/0x870 [ 2329.953888] ? sock_write_iter+0x3d0/0x3d0 [ 2329.953897] ? do_recvmmsg+0x6d0/0x6d0 [ 2329.953907] ? perf_trace_lock+0xac/0x490 [ 2329.953921] ? __lockdep_reset_lock+0x180/0x180 [ 2329.953930] ? perf_trace_lock+0xac/0x490 [ 2329.953944] ___sys_sendmsg+0xf3/0x170 [ 2329.953956] ? sendmsg_copy_msghdr+0x160/0x160 [ 2329.953970] ? lock_downgrade+0x6d0/0x6d0 [ 2329.953983] ? find_held_lock+0x2c/0x110 [ 2329.953999] ? __fget_files+0x296/0x4c0 [ 2329.954016] ? __fget_light+0xea/0x290 [ 2329.954031] __sys_sendmsg+0xe5/0x1b0 [ 2329.954042] ? __sys_sendmsg_sock+0x40/0x40 [ 2329.954052] ? rcu_read_lock_any_held+0x75/0xa0 [ 2329.954073] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.954084] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.954092] ? trace_hardirqs_on+0x5b/0x180 [ 2329.954105] do_syscall_64+0x33/0x40 [ 2329.954115] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2329.954122] RIP: 0033:0x7f9f7e251b19 [ 2329.954133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.954139] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2329.954150] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2329.954157] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2329.954162] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.954169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2329.954175] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2329.968052] FAULT_INJECTION: forcing a failure. [ 2329.968052] name failslab, interval 1, probability 0, space 0, times 0 [ 2329.968074] CPU: 1 PID: 29085 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2329.968085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2329.968092] Call Trace: [ 2329.968122] dump_stack+0x107/0x167 [ 2329.968148] should_fail.cold+0x5/0xa [ 2329.968174] ? security_prepare_creds+0x112/0x190 [ 2329.968197] should_failslab+0x5/0x20 [ 2329.968215] __kmalloc+0x72/0x390 [ 2329.968245] security_prepare_creds+0x112/0x190 [ 2329.968270] prepare_creds+0x452/0x5e0 [ 2329.968290] copy_creds+0x72/0x580 [ 2329.968314] copy_process+0xfdc/0x7800 [ 2329.968336] ? __lockdep_reset_lock+0x180/0x180 [ 2329.968353] ? mark_lock+0xf5/0x2df0 [ 2329.968380] ? lock_acquire+0x197/0x470 [ 2329.968397] ? find_held_lock+0x2c/0x110 [ 2329.968432] ? __cleanup_sighand+0xb0/0xb0 [ 2329.968472] ? _copy_from_user+0xfb/0x1b0 [ 2329.968500] kernel_clone+0xe7/0x980 [ 2329.968522] ? __lockdep_reset_lock+0x180/0x180 [ 2329.968543] ? create_io_thread+0xf0/0xf0 [ 2329.968577] ? ksys_write+0x21a/0x260 [ 2329.968597] ? lock_downgrade+0x6d0/0x6d0 [ 2329.968621] __do_sys_clone3+0x1e5/0x320 [ 2329.968640] ? __do_sys_clone+0x110/0x110 [ 2329.968680] ? rcu_read_lock_any_held+0x75/0xa0 [ 2329.968697] ? vfs_write+0x354/0xa70 [ 2329.968720] ? fput_many+0x2f/0x1a0 [ 2329.968741] ? ksys_write+0x1a9/0x260 [ 2329.968761] ? __ia32_sys_read+0xb0/0xb0 [ 2329.968786] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2329.968805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2329.968821] ? trace_hardirqs_on+0x5b/0x180 [ 2329.968846] do_syscall_64+0x33/0x40 [ 2329.968873] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2329.968886] RIP: 0033:0x7fc197dc8b19 [ 2329.968907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2329.968917] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2329.968939] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2329.968951] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2329.968963] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2329.968974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2329.968986] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2330.001252] EXT4-fs (loop4): invalid first ino: 0 [ 2330.069908] FAULT_INJECTION: forcing a failure. [ 2330.069908] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.069921] CPU: 0 PID: 29097 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2330.069928] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.069932] Call Trace: [ 2330.069947] dump_stack+0x107/0x167 [ 2330.069963] should_fail.cold+0x5/0xa [ 2330.069977] ? create_object.isra.0+0x3a/0xa20 [ 2330.069990] should_failslab+0x5/0x20 [ 2330.070000] kmem_cache_alloc+0x5b/0x310 [ 2330.070015] create_object.isra.0+0x3a/0xa20 [ 2330.070025] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.070040] kmem_cache_alloc_node+0x169/0x330 [ 2330.070055] __alloc_skb+0x6d/0x5b0 [ 2330.070070] ip_frag_next+0x11d/0x9e0 [ 2330.070087] ? perf_trace_lock+0xac/0x490 [ 2330.070104] ? selinux_ip_postroute_compat+0x390/0x390 [ 2330.070116] ip_do_fragment+0x96b/0x1dd0 [ 2330.070127] ? ip_frag_next+0x9e0/0x9e0 [ 2330.070145] ? ip_finish_output2+0x21f0/0x21f0 [ 2330.070155] ? nf_hook+0x137/0x510 [ 2330.070166] ? lock_downgrade+0x6d0/0x6d0 [ 2330.070176] ? lock_downgrade+0x6d0/0x6d0 [ 2330.070189] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2330.070209] ip_fragment.constprop.0+0x174/0x240 [ 2330.070222] __ip_finish_output.part.0+0x3db/0xb50 [ 2330.070234] ? ip_fragment.constprop.0+0x240/0x240 [ 2330.070243] ? nf_hook+0x510/0x510 [ 2330.070253] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2330.070267] ip_output+0x2f7/0x600 [ 2330.070281] ip_local_out+0xb4/0x1a0 [ 2330.070293] iptunnel_xmit+0x591/0x8b0 [ 2330.070311] ip_tunnel_xmit+0x124a/0x2f50 [ 2330.070329] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2330.070340] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2330.070352] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2330.070361] ? kmem_cache_free+0xa7/0x2d0 [ 2330.070379] ? perf_trace_lock+0xac/0x490 [ 2330.070387] ? kfree_skbmem+0xef/0x1b0 [ 2330.070399] ? kmem_cache_free+0x249/0x2d0 [ 2330.070413] sit_tunnel_xmit+0xef0/0x2960 [ 2330.070427] ? find_held_lock+0x2c/0x110 [ 2330.070437] ? ipip_rcv+0x4f0/0x4f0 [ 2330.070451] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2330.070461] ? lock_downgrade+0x6d0/0x6d0 [ 2330.070472] ? run_filter+0x4d0/0x4d0 [ 2330.070483] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2330.070501] dev_hard_start_xmit+0x1cb/0x6f0 [ 2330.070517] __dev_queue_xmit+0x17ec/0x2710 [ 2330.070531] ? find_held_lock+0x2c/0x110 [ 2330.070544] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2330.070561] ? mark_held_locks+0x9e/0xe0 [ 2330.070574] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2330.070588] neigh_connected_output+0x382/0x4d0 [ 2330.070607] ip_finish_output2+0x6f1/0x21f0 [ 2330.070619] ? ip_copy_metadata+0x5f7/0xa40 [ 2330.070631] ? ip_frag_next+0x9e0/0x9e0 [ 2330.070641] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2330.070657] ip_do_fragment+0x189e/0x1dd0 [ 2330.070667] ? ip_frag_next+0x9e0/0x9e0 [ 2330.070686] ? ip_finish_output2+0x21f0/0x21f0 [ 2330.070695] ? nf_hook+0x137/0x510 [ 2330.070710] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2330.070723] ? nf_hook_slow+0xfc/0x1e0 [ 2330.070741] ip_fragment.constprop.0+0x174/0x240 [ 2330.070753] __ip_finish_output.part.0+0x3db/0xb50 [ 2330.070766] ? ip_fragment.constprop.0+0x240/0x240 [ 2330.070778] ? netif_rx_ni+0xe7/0x300 [ 2330.070793] ip_mc_output+0x401/0xa30 [ 2330.070807] ip_send_skb+0xdd/0x260 [ 2330.070821] udp_send_skb+0x6da/0x11d0 [ 2330.070838] udp_sendmsg+0x139a/0x2170 [ 2330.070848] ? mark_lock+0xf5/0x2df0 [ 2330.070859] ? ip_frag_init+0x350/0x350 [ 2330.070871] ? mark_lock+0xf5/0x2df0 [ 2330.070881] ? perf_trace_lock+0xac/0x490 [ 2330.070892] ? udp_setsockopt+0xc0/0xc0 [ 2330.070902] ? mark_lock+0xf5/0x2df0 [ 2330.070912] ? __lockdep_reset_lock+0x180/0x180 [ 2330.070927] ? mark_lock+0xf5/0x2df0 [ 2330.070939] ? mark_lock+0xf5/0x2df0 [ 2330.070950] ? lock_chain_count+0x20/0x20 [ 2330.070960] ? __lock_acquire+0xbb1/0x5b00 [ 2330.070971] ? lock_chain_count+0x20/0x20 [ 2330.070989] ? perf_trace_lock+0xac/0x490 [ 2330.071000] ? __lockdep_reset_lock+0x180/0x180 [ 2330.071016] udpv6_sendmsg+0x1bed/0x2af0 [ 2330.071036] ? udp_v6_push_pending_frames+0x360/0x360 [ 2330.071051] ? mark_lock+0xf5/0x2df0 [ 2330.071065] ? lock_acquire+0x197/0x470 [ 2330.071074] ? find_held_lock+0x2c/0x110 [ 2330.071089] ? __might_fault+0xd3/0x180 [ 2330.071099] ? lock_downgrade+0x6d0/0x6d0 [ 2330.071112] ? lock_downgrade+0x6d0/0x6d0 [ 2330.071125] ? sock_has_perm+0x1ea/0x280 [ 2330.071137] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2330.071151] ? _copy_from_user+0xfb/0x1b0 [ 2330.071169] ? __import_iovec+0x458/0x590 [ 2330.071180] ? udp_v6_push_pending_frames+0x360/0x360 [ 2330.071193] inet6_sendmsg+0x105/0x140 [ 2330.071204] ? inet6_compat_ioctl+0x320/0x320 [ 2330.071213] __sock_sendmsg+0xf2/0x190 [ 2330.071224] ____sys_sendmsg+0x70d/0x870 [ 2330.071236] ? sock_write_iter+0x3d0/0x3d0 [ 2330.071245] ? do_recvmmsg+0x6d0/0x6d0 [ 2330.071255] ? perf_trace_lock+0xac/0x490 [ 2330.071269] ? __lockdep_reset_lock+0x180/0x180 [ 2330.071277] ? perf_trace_lock+0xac/0x490 [ 2330.071291] ___sys_sendmsg+0xf3/0x170 [ 2330.071304] ? sendmsg_copy_msghdr+0x160/0x160 [ 2330.071317] ? lock_downgrade+0x6d0/0x6d0 [ 2330.071330] ? find_held_lock+0x2c/0x110 [ 2330.071346] ? __fget_files+0x296/0x4c0 [ 2330.071363] ? __fget_light+0xea/0x290 [ 2330.071379] __sys_sendmsg+0xe5/0x1b0 [ 2330.071389] ? __sys_sendmsg_sock+0x40/0x40 [ 2330.071399] ? rcu_read_lock_any_held+0x75/0xa0 [ 2330.071421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.071432] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.071439] ? trace_hardirqs_on+0x5b/0x180 [ 2330.071453] do_syscall_64+0x33/0x40 [ 2330.071463] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2330.071470] RIP: 0033:0x7f9f7e251b19 [ 2330.071482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.071487] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.071499] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2330.071506] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2330.071512] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.071518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2330.071524] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2330.140256] EXT4-fs (loop4): unsupported inode size: 0 [ 2330.140271] EXT4-fs (loop4): blocksize: 2048 [ 2330.141293] FAULT_INJECTION: forcing a failure. [ 2330.141293] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.141308] CPU: 0 PID: 29109 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2330.141315] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.141319] Call Trace: [ 2330.141333] dump_stack+0x107/0x167 [ 2330.141357] should_fail.cold+0x5/0xa [ 2330.141378] should_failslab+0x5/0x20 [ 2330.141397] __kmalloc_node_track_caller+0x74/0x3b0 [ 2330.141419] ? ip_frag_next+0x11d/0x9e0 [ 2330.141437] __alloc_skb+0xb1/0x5b0 [ 2330.141453] ip_frag_next+0x11d/0x9e0 [ 2330.141466] ? perf_trace_lock+0xac/0x490 [ 2330.141479] ? selinux_ip_postroute_compat+0x390/0x390 [ 2330.141495] ip_do_fragment+0x96b/0x1dd0 [ 2330.141512] ? ip_frag_next+0x9e0/0x9e0 [ 2330.141536] ? ip_finish_output2+0x21f0/0x21f0 [ 2330.141551] ? nf_hook+0x137/0x510 [ 2330.141568] ? lock_downgrade+0x6d0/0x6d0 [ 2330.141584] ? lock_downgrade+0x6d0/0x6d0 [ 2330.141603] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2330.141628] ip_fragment.constprop.0+0x174/0x240 [ 2330.141645] __ip_finish_output.part.0+0x3db/0xb50 [ 2330.141662] ? ip_fragment.constprop.0+0x240/0x240 [ 2330.141677] ? nf_hook+0x510/0x510 [ 2330.141692] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2330.141708] ip_output+0x2f7/0x600 [ 2330.141723] ip_local_out+0xb4/0x1a0 [ 2330.141739] iptunnel_xmit+0x591/0x8b0 [ 2330.141763] ip_tunnel_xmit+0x124a/0x2f50 [ 2330.141783] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2330.141800] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2330.141816] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2330.141832] ? kmem_cache_free+0xa7/0x2d0 [ 2330.141857] ? perf_trace_lock+0xac/0x490 [ 2330.141872] ? kfree_skbmem+0xef/0x1b0 [ 2330.141889] ? kmem_cache_free+0x249/0x2d0 [ 2330.141906] sit_tunnel_xmit+0xef0/0x2960 [ 2330.141922] ? find_held_lock+0x2c/0x110 [ 2330.141937] ? ipip_rcv+0x4f0/0x4f0 [ 2330.141955] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2330.141972] ? lock_downgrade+0x6d0/0x6d0 [ 2330.141989] ? run_filter+0x4d0/0x4d0 [ 2330.142005] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2330.142032] dev_hard_start_xmit+0x1cb/0x6f0 [ 2330.142050] __dev_queue_xmit+0x17ec/0x2710 [ 2330.142066] ? find_held_lock+0x2c/0x110 [ 2330.142084] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2330.142102] ? mark_held_locks+0x9e/0xe0 [ 2330.142120] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2330.142136] neigh_connected_output+0x382/0x4d0 [ 2330.142162] ip_finish_output2+0x6f1/0x21f0 [ 2330.142178] ? ip_copy_metadata+0x5f7/0xa40 [ 2330.142193] ? ip_frag_next+0x9e0/0x9e0 [ 2330.142210] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2330.142227] ip_do_fragment+0x189e/0x1dd0 [ 2330.142243] ? ip_frag_next+0x9e0/0x9e0 [ 2330.142268] ? ip_finish_output2+0x21f0/0x21f0 [ 2330.142284] ? nf_hook+0x137/0x510 [ 2330.142302] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2330.142319] ? nf_hook_slow+0xfc/0x1e0 [ 2330.142339] ip_fragment.constprop.0+0x174/0x240 [ 2330.142352] __ip_finish_output.part.0+0x3db/0xb50 [ 2330.142370] ? ip_fragment.constprop.0+0x240/0x240 [ 2330.142387] ? netif_rx_ni+0xe7/0x300 [ 2330.142403] ip_mc_output+0x401/0xa30 [ 2330.142418] ip_send_skb+0xdd/0x260 [ 2330.142436] udp_send_skb+0x6da/0x11d0 [ 2330.142454] udp_sendmsg+0x139a/0x2170 [ 2330.142465] ? mark_lock+0xf5/0x2df0 [ 2330.142482] ? ip_frag_init+0x350/0x350 [ 2330.142498] ? mark_lock+0xf5/0x2df0 [ 2330.142514] ? perf_trace_lock+0xac/0x490 [ 2330.142530] ? udp_setsockopt+0xc0/0xc0 [ 2330.142546] ? mark_lock+0xf5/0x2df0 [ 2330.142563] ? __lockdep_reset_lock+0x180/0x180 [ 2330.142580] ? mark_lock+0xf5/0x2df0 [ 2330.142596] ? mark_lock+0xf5/0x2df0 [ 2330.142613] ? lock_chain_count+0x20/0x20 [ 2330.142629] ? __lock_acquire+0xbb1/0x5b00 [ 2330.142646] ? lock_chain_count+0x20/0x20 [ 2330.142671] ? perf_trace_lock+0xac/0x490 [ 2330.142688] ? __lockdep_reset_lock+0x180/0x180 [ 2330.142705] udpv6_sendmsg+0x1bed/0x2af0 [ 2330.142732] ? udp_v6_push_pending_frames+0x360/0x360 [ 2330.142748] ? mark_lock+0xf5/0x2df0 [ 2330.142765] ? lock_acquire+0x197/0x470 [ 2330.142782] ? find_held_lock+0x2c/0x110 [ 2330.142798] ? __might_fault+0xd3/0x180 [ 2330.142815] ? lock_downgrade+0x6d0/0x6d0 [ 2330.142833] ? lock_downgrade+0x6d0/0x6d0 [ 2330.142850] ? sock_has_perm+0x1ea/0x280 [ 2330.142869] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2330.142886] ? _copy_from_user+0xfb/0x1b0 [ 2330.142911] ? __import_iovec+0x458/0x590 [ 2330.142929] ? udp_v6_push_pending_frames+0x360/0x360 [ 2330.142947] inet6_sendmsg+0x105/0x140 [ 2330.142965] ? inet6_compat_ioctl+0x320/0x320 [ 2330.142983] __sock_sendmsg+0xf2/0x190 [ 2330.142999] ____sys_sendmsg+0x70d/0x870 [ 2330.143016] ? sock_write_iter+0x3d0/0x3d0 [ 2330.143033] ? do_recvmmsg+0x6d0/0x6d0 [ 2330.143050] ? perf_trace_lock+0xac/0x490 [ 2330.143068] ? __lockdep_reset_lock+0x180/0x180 [ 2330.143085] ? perf_trace_lock+0xac/0x490 [ 2330.143102] ___sys_sendmsg+0xf3/0x170 [ 2330.143119] ? sendmsg_copy_msghdr+0x160/0x160 [ 2330.143137] ? lock_downgrade+0x6d0/0x6d0 [ 2330.143154] ? find_held_lock+0x2c/0x110 [ 2330.143173] ? __fget_files+0x296/0x4c0 [ 2330.143192] ? __fget_light+0xea/0x290 [ 2330.143208] __sys_sendmsg+0xe5/0x1b0 [ 2330.143219] ? __sys_sendmsg_sock+0x40/0x40 [ 2330.143230] ? rcu_read_lock_any_held+0x75/0xa0 [ 2330.143253] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.143264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.143277] ? trace_hardirqs_on+0x5b/0x180 [ 2330.143291] do_syscall_64+0x33/0x40 [ 2330.143301] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2330.143309] RIP: 0033:0x7f9f7e251b19 [ 2330.143321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.143327] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2330.143340] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2330.143347] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2330.143354] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.143361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2330.143369] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2330.146255] FAULT_INJECTION: forcing a failure. [ 2330.146255] name failslab, interval 1, probability 0, space 0, times 0 [ 2330.146275] CPU: 1 PID: 29106 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2330.146286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2330.146292] Call Trace: [ 2330.146315] dump_stack+0x107/0x167 [ 2330.146339] should_fail.cold+0x5/0xa [ 2330.146361] ? create_object.isra.0+0x3a/0xa20 [ 2330.146382] should_failslab+0x5/0x20 [ 2330.146402] kmem_cache_alloc+0x5b/0x310 [ 2330.146426] create_object.isra.0+0x3a/0xa20 [ 2330.146450] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2330.146478] __kmalloc+0x16e/0x390 [ 2330.146509] security_prepare_creds+0x112/0x190 [ 2330.146533] prepare_creds+0x452/0x5e0 [ 2330.146552] copy_creds+0x72/0x580 [ 2330.146575] copy_process+0xfdc/0x7800 [ 2330.146596] ? __lockdep_reset_lock+0x180/0x180 [ 2330.146612] ? mark_lock+0xf5/0x2df0 [ 2330.146638] ? lock_acquire+0x197/0x470 [ 2330.146655] ? find_held_lock+0x2c/0x110 [ 2330.146688] ? __cleanup_sighand+0xb0/0xb0 [ 2330.146723] ? _copy_from_user+0xfb/0x1b0 [ 2330.146750] kernel_clone+0xe7/0x980 [ 2330.146768] ? __lockdep_reset_lock+0x180/0x180 [ 2330.146788] ? create_io_thread+0xf0/0xf0 [ 2330.146820] ? ksys_write+0x21a/0x260 [ 2330.146839] ? lock_downgrade+0x6d0/0x6d0 [ 2330.146863] __do_sys_clone3+0x1e5/0x320 [ 2330.146881] ? __do_sys_clone+0x110/0x110 [ 2330.146919] ? rcu_read_lock_any_held+0x75/0xa0 [ 2330.146935] ? vfs_write+0x354/0xa70 [ 2330.146957] ? fput_many+0x2f/0x1a0 [ 2330.146976] ? ksys_write+0x1a9/0x260 [ 2330.146995] ? __ia32_sys_read+0xb0/0xb0 [ 2330.147019] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2330.147038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2330.147054] ? trace_hardirqs_on+0x5b/0x180 [ 2330.147078] do_syscall_64+0x33/0x40 [ 2330.147096] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2330.147109] RIP: 0033:0x7fc197dc8b19 [ 2330.147130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2330.147140] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2330.147162] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2330.147173] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2330.147185] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2330.147196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2330.147208] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:21:45 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x4b47, 0x0) 11:21:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 59) 11:21:45 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) 11:21:45 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:21:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000280)="ed41000000080000e0f46552e0f4655fe0f465ae198c7706cab0bb7a57", 0x1d, 0x2100}], 0x0, &(0x7f00000000c0)={[{@abort}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsname={'fsname', 0x3d, '-,'}}]}) 11:21:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x7ffffffff000}]) 11:21:45 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r1, &(0x7f0000000140)=""/4096, 0x1000, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) [ 2345.739215] FAULT_INJECTION: forcing a failure. [ 2345.739215] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.741220] CPU: 1 PID: 29125 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2345.742135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.743168] Call Trace: [ 2345.743506] dump_stack+0x107/0x167 [ 2345.743969] should_fail.cold+0x5/0xa [ 2345.744457] ? __delayacct_tsk_init+0x1b/0x80 [ 2345.745029] should_failslab+0x5/0x20 [ 2345.745509] kmem_cache_alloc+0x5b/0x310 [ 2345.746017] ? prepare_creds+0x466/0x5e0 [ 2345.746531] __delayacct_tsk_init+0x1b/0x80 [ 2345.747071] copy_process+0x3319/0x7800 [ 2345.747579] ? __lockdep_reset_lock+0x180/0x180 [ 2345.748155] ? mark_lock+0xf5/0x2df0 [ 2345.748633] ? lock_acquire+0x197/0x470 [ 2345.749141] ? find_held_lock+0x2c/0x110 [ 2345.749665] ? __cleanup_sighand+0xb0/0xb0 [ 2345.750211] ? _copy_from_user+0xfb/0x1b0 [ 2345.750747] kernel_clone+0xe7/0x980 [ 2345.751224] ? __lockdep_reset_lock+0x180/0x180 [ 2345.751819] ? create_io_thread+0xf0/0xf0 [ 2345.752357] ? ksys_write+0x21a/0x260 [ 2345.752835] ? lock_downgrade+0x6d0/0x6d0 [ 2345.753373] __do_sys_clone3+0x1e5/0x320 [ 2345.753895] ? __do_sys_clone+0x110/0x110 [ 2345.754433] ? rcu_read_lock_any_held+0x75/0xa0 [ 2345.755029] ? vfs_write+0x354/0xa70 [ 2345.755505] ? fput_many+0x2f/0x1a0 [ 2345.755969] ? ksys_write+0x1a9/0x260 [ 2345.756455] ? __ia32_sys_read+0xb0/0xb0 [ 2345.756968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.757650] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.758302] ? trace_hardirqs_on+0x5b/0x180 [ 2345.758857] do_syscall_64+0x33/0x40 [ 2345.759337] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2345.759989] RIP: 0033:0x7fc197dc8b19 [ 2345.760470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.762797] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2345.763763] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2345.764656] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2345.765575] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2345.766481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2345.767390] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2345.783690] EXT4-fs (loop4): unsupported inode size: 0 [ 2345.784977] EXT4-fs (loop4): blocksize: 2048 [ 2345.797268] FAULT_INJECTION: forcing a failure. [ 2345.797268] name failslab, interval 1, probability 0, space 0, times 0 [ 2345.799613] CPU: 0 PID: 29133 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2345.801034] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2345.802749] Call Trace: [ 2345.803298] dump_stack+0x107/0x167 [ 2345.804062] should_fail.cold+0x5/0xa [ 2345.804856] ? create_object.isra.0+0x3a/0xa20 [ 2345.805823] should_failslab+0x5/0x20 [ 2345.806617] kmem_cache_alloc+0x5b/0x310 [ 2345.807458] create_object.isra.0+0x3a/0xa20 [ 2345.808364] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2345.809421] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2345.810484] ? ip_frag_next+0x11d/0x9e0 [ 2345.811324] __alloc_skb+0xb1/0x5b0 [ 2345.812091] ip_frag_next+0x11d/0x9e0 [ 2345.812894] ? perf_trace_lock+0xac/0x490 [ 2345.813777] ? selinux_ip_postroute_compat+0x390/0x390 [ 2345.814875] ip_do_fragment+0x96b/0x1dd0 [ 2345.815727] ? ip_frag_next+0x9e0/0x9e0 [ 2345.816577] ? ip_finish_output2+0x21f0/0x21f0 [ 2345.817545] ? nf_hook+0x137/0x510 [ 2345.818290] ? lock_downgrade+0x6d0/0x6d0 [ 2345.819157] ? lock_downgrade+0x6d0/0x6d0 [ 2345.820030] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2345.821136] ip_fragment.constprop.0+0x174/0x240 [ 2345.822133] __ip_finish_output.part.0+0x3db/0xb50 [ 2345.823165] ? ip_fragment.constprop.0+0x240/0x240 [ 2345.824188] ? nf_hook+0x510/0x510 [ 2345.824936] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2345.825873] ip_output+0x2f7/0x600 [ 2345.826636] ip_local_out+0xb4/0x1a0 [ 2345.827402] iptunnel_xmit+0x591/0x8b0 11:21:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xf0ffffff7f0000}]) [ 2345.828215] ip_tunnel_xmit+0x124a/0x2f50 [ 2345.829412] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2345.830684] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2345.832138] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2345.833263] ? kmem_cache_free+0xa7/0x2d0 [ 2345.834311] ? perf_trace_lock+0xac/0x490 [ 2345.835322] ? kfree_skbmem+0xef/0x1b0 [ 2345.836282] ? kmem_cache_free+0x249/0x2d0 [ 2345.837345] sit_tunnel_xmit+0xef0/0x2960 [ 2345.838272] ? find_held_lock+0x2c/0x110 [ 2345.839101] ? ipip_rcv+0x4f0/0x4f0 [ 2345.839866] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2345.840784] ? lock_downgrade+0x6d0/0x6d0 [ 2345.841663] ? run_filter+0x4d0/0x4d0 [ 2345.842443] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2345.843394] dev_hard_start_xmit+0x1cb/0x6f0 [ 2345.844303] __dev_queue_xmit+0x17ec/0x2710 [ 2345.845223] ? find_held_lock+0x2c/0x110 [ 2345.846058] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2345.847024] ? mark_held_locks+0x9e/0xe0 [ 2345.847863] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2345.848969] neigh_connected_output+0x382/0x4d0 [ 2345.849952] ip_finish_output2+0x6f1/0x21f0 [ 2345.850872] ? ip_copy_metadata+0x5f7/0xa40 [ 2345.851755] ? ip_frag_next+0x9e0/0x9e0 [ 2345.852590] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2345.853542] ip_do_fragment+0x189e/0x1dd0 [ 2345.854407] ? ip_frag_next+0x9e0/0x9e0 [ 2345.855234] ? ip_finish_output2+0x21f0/0x21f0 [ 2345.856197] ? nf_hook+0x137/0x510 [ 2345.856938] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2345.858033] ? nf_hook_slow+0xfc/0x1e0 [ 2345.858846] ip_fragment.constprop.0+0x174/0x240 [ 2345.859856] __ip_finish_output.part.0+0x3db/0xb50 [ 2345.860864] ? ip_fragment.constprop.0+0x240/0x240 [ 2345.861901] ? netif_rx_ni+0xe7/0x300 [ 2345.862688] ip_mc_output+0x401/0xa30 [ 2345.863487] ip_send_skb+0xdd/0x260 [ 2345.864239] udp_send_skb+0x6da/0x11d0 [ 2345.865093] udp_sendmsg+0x139a/0x2170 [ 2345.865892] ? mark_lock+0xf5/0x2df0 [ 2345.866696] ? ip_frag_init+0x350/0x350 [ 2345.867512] ? mark_lock+0xf5/0x2df0 [ 2345.868296] ? perf_trace_lock+0xac/0x490 [ 2345.869154] ? udp_setsockopt+0xc0/0xc0 [ 2345.869982] ? mark_lock+0xf5/0x2df0 [ 2345.870747] ? __lockdep_reset_lock+0x180/0x180 [ 2345.871734] ? mark_lock+0xf5/0x2df0 [ 2345.872504] ? mark_lock+0xf5/0x2df0 [ 2345.873301] ? lock_chain_count+0x20/0x20 [ 2345.874147] ? __lock_acquire+0xbb1/0x5b00 [ 2345.875040] ? lock_chain_count+0x20/0x20 [ 2345.875907] ? perf_trace_lock+0xac/0x490 [ 2345.876778] ? __lockdep_reset_lock+0x180/0x180 [ 2345.877754] udpv6_sendmsg+0x1bed/0x2af0 [ 2345.878629] ? udp_v6_push_pending_frames+0x360/0x360 [ 2345.879718] ? mark_lock+0xf5/0x2df0 [ 2345.880486] ? lock_acquire+0x197/0x470 [ 2345.881324] ? find_held_lock+0x2c/0x110 [ 2345.882161] ? __might_fault+0xd3/0x180 [ 2345.882994] ? lock_downgrade+0x6d0/0x6d0 [ 2345.883846] ? lock_downgrade+0x6d0/0x6d0 [ 2345.884720] ? sock_has_perm+0x1ea/0x280 [ 2345.885576] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2345.886674] ? _copy_from_user+0xfb/0x1b0 [ 2345.887559] ? __import_iovec+0x458/0x590 [ 2345.888408] ? udp_v6_push_pending_frames+0x360/0x360 [ 2345.889509] inet6_sendmsg+0x105/0x140 [ 2345.890308] ? inet6_compat_ioctl+0x320/0x320 [ 2345.891253] __sock_sendmsg+0xf2/0x190 [ 2345.892056] ____sys_sendmsg+0x70d/0x870 [ 2345.892892] ? sock_write_iter+0x3d0/0x3d0 [ 2345.893798] ? do_recvmmsg+0x6d0/0x6d0 [ 2345.894594] ? perf_trace_lock+0xac/0x490 [ 2345.895481] ? __lockdep_reset_lock+0x180/0x180 [ 2345.896465] ? perf_trace_lock+0xac/0x490 [ 2345.897338] ___sys_sendmsg+0xf3/0x170 [ 2345.898165] ? sendmsg_copy_msghdr+0x160/0x160 [ 2345.899106] ? lock_downgrade+0x6d0/0x6d0 [ 2345.899984] ? find_held_lock+0x2c/0x110 [ 2345.900827] ? __fget_files+0x296/0x4c0 [ 2345.901712] ? __fget_light+0xea/0x290 [ 2345.902517] __sys_sendmsg+0xe5/0x1b0 [ 2345.903319] ? __sys_sendmsg_sock+0x40/0x40 [ 2345.904197] ? rcu_read_lock_any_held+0x75/0xa0 [ 2345.905216] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2345.906291] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2345.907372] ? trace_hardirqs_on+0x5b/0x180 [ 2345.908263] do_syscall_64+0x33/0x40 [ 2345.909048] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2345.910099] RIP: 0033:0x7f9f7e251b19 [ 2345.910894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2345.914657] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2345.916273] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2345.917789] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2345.919294] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2345.920808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2345.922325] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:21:45 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:45 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0xbc5) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xb80, 0x0) lseek(r1, 0x0, 0x118cfbbc44a013d4) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x0, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) close(r4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x6, 0x80, 0x1, 0x5, 0x0, 0x4, 0x0, 0xfffd, 0x2000, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x0, 0x7, 0x0, 0x9, 0x200, 0x3, 0xa, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, 0x0) lseek(r3, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x488882, 0x3) copy_file_range(r5, 0x0, r3, 0x0, 0x200f5ef, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x6, 0x1, 0xff, 0x0, 0x0, 0x1, 0x42000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000000c0), 0xa}, 0x4280, 0x2, 0x7, 0x5, 0x6, 0xdb8, 0x81, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 11:21:46 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:21:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfeffffffffffff}]) 11:21:46 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x4b49, 0x0) 11:21:46 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:21:46 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) 11:21:46 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b", 0x55, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2346.171573] EXT4-fs (loop4): unsupported inode size: 0 [ 2346.172749] EXT4-fs (loop4): blocksize: 2048 [ 2346.196205] FAULT_INJECTION: forcing a failure. [ 2346.196205] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.197775] CPU: 1 PID: 29259 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2346.198548] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2346.199442] Call Trace: [ 2346.199741] dump_stack+0x107/0x167 [ 2346.200140] should_fail.cold+0x5/0xa [ 2346.200565] ? security_prepare_creds+0x112/0x190 [ 2346.201105] should_failslab+0x5/0x20 [ 2346.201524] __kmalloc+0x72/0x390 [ 2346.201912] security_prepare_creds+0x112/0x190 [ 2346.202421] prepare_creds+0x452/0x5e0 [ 2346.202868] copy_creds+0x72/0x580 [ 2346.203274] copy_process+0xfdc/0x7800 [ 2346.203698] ? __lockdep_reset_lock+0x180/0x180 [ 2346.204229] ? mark_lock+0xf5/0x2df0 [ 2346.204658] ? lock_acquire+0x197/0x470 [ 2346.205102] ? find_held_lock+0x2c/0x110 [ 2346.205562] ? __cleanup_sighand+0xb0/0xb0 [ 2346.206048] ? _copy_from_user+0xfb/0x1b0 [ 2346.206528] kernel_clone+0xe7/0x980 [ 2346.206955] ? __lockdep_reset_lock+0x180/0x180 [ 2346.207488] ? create_io_thread+0xf0/0xf0 [ 2346.207942] ? ksys_write+0x21a/0x260 [ 2346.208361] ? lock_downgrade+0x6d0/0x6d0 [ 2346.208814] __do_sys_clone3+0x1e5/0x320 [ 2346.209258] ? __do_sys_clone+0x110/0x110 [ 2346.209721] ? rcu_read_lock_any_held+0x75/0xa0 [ 2346.210219] ? vfs_write+0x354/0xa70 [ 2346.210632] ? fput_many+0x2f/0x1a0 [ 2346.211050] ? ksys_write+0x1a9/0x260 [ 2346.211481] ? __ia32_sys_read+0xb0/0xb0 [ 2346.211938] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2346.212532] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2346.213119] ? trace_hardirqs_on+0x5b/0x180 [ 2346.213610] do_syscall_64+0x33/0x40 [ 2346.214030] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2346.214606] RIP: 0033:0x7fc197dc8b19 [ 2346.215021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2346.217061] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2346.217920] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2346.218729] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2346.219524] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.220326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2346.221131] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2363.238974] FAULT_INJECTION: forcing a failure. [ 2363.238974] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.242125] CPU: 0 PID: 29268 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2363.243575] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.245293] Call Trace: [ 2363.245850] dump_stack+0x107/0x167 [ 2363.246614] should_fail.cold+0x5/0xa [ 2363.247422] ? inherit_task_group.isra.0+0x244/0x5c0 [ 2363.248476] should_failslab+0x5/0x20 [ 2363.249288] kmem_cache_alloc_trace+0x55/0x320 [ 2363.250264] inherit_task_group.isra.0+0x244/0x5c0 [ 2363.251306] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2363.252374] ? trace_hardirqs_on+0x5b/0x180 [ 2363.253320] perf_event_init_task+0x375/0x800 [ 2363.254259] ? perf_event_attrs+0x40/0x40 [ 2363.255110] ? __hrtimer_init+0x12c/0x270 [ 2363.255966] ? memset+0x20/0x50 [ 2363.256655] copy_process+0x182e/0x7800 [ 2363.257487] ? __lockdep_reset_lock+0x180/0x180 [ 2363.258443] ? mark_lock+0xf5/0x2df0 [ 2363.259218] ? lock_acquire+0x197/0x470 [ 2363.260033] ? find_held_lock+0x2c/0x110 [ 2363.260888] ? __cleanup_sighand+0xb0/0xb0 [ 2363.261798] ? _copy_from_user+0xfb/0x1b0 [ 2363.262662] kernel_clone+0xe7/0x980 [ 2363.263426] ? __lockdep_reset_lock+0x180/0x180 [ 2363.264378] ? create_io_thread+0xf0/0xf0 [ 2363.265260] ? ksys_write+0x21a/0x260 [ 2363.266046] ? lock_downgrade+0x6d0/0x6d0 [ 2363.266902] __do_sys_clone3+0x1e5/0x320 [ 2363.267735] ? __do_sys_clone+0x110/0x110 [ 2363.268600] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.269348] FAULT_INJECTION: forcing a failure. [ 2363.269348] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.269557] ? vfs_write+0x354/0xa70 [ 2363.272612] ? fput_many+0x2f/0x1a0 [ 2363.273362] ? ksys_write+0x1a9/0x260 [ 2363.274144] ? __ia32_sys_read+0xb0/0xb0 [ 2363.274976] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.276052] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.277095] ? trace_hardirqs_on+0x5b/0x180 [ 2363.278007] do_syscall_64+0x33/0x40 [ 2363.278764] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.279811] RIP: 0033:0x7fc197dc8b19 [ 2363.280571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.284340] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2363.285917] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2363.287366] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2363.288826] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.290288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.291747] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2363.293227] CPU: 1 PID: 29274 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2363.294644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.296324] Call Trace: [ 2363.296868] dump_stack+0x107/0x167 [ 2363.297627] should_fail.cold+0x5/0xa 11:22:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:22:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) [ 2363.298402] ? lock_release+0x680/0x680 11:22:03 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2363.299437] ? skb_clone+0x14f/0x3d0 [ 2363.300317] should_failslab+0x5/0x20 11:22:03 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x541b, 0x0) 11:22:03 executing program 7: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) 11:22:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x100000000000000}]) 11:22:03 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x3, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./mnt\x00', 0x0) 11:22:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 60) [ 2363.301098] kmem_cache_alloc+0x5b/0x310 [ 2363.302076] skb_clone+0x14f/0x3d0 [ 2363.302826] dev_queue_xmit_nit+0x3a7/0xb00 [ 2363.303718] dev_hard_start_xmit+0xab/0x6f0 [ 2363.303748] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2363.303775] __dev_queue_xmit+0x17ec/0x2710 [ 2363.303803] ? find_held_lock+0x2c/0x110 [ 2363.303827] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2363.303859] ? mark_held_locks+0x9e/0xe0 [ 2363.303885] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2363.303911] neigh_connected_output+0x382/0x4d0 [ 2363.303948] ip_finish_output2+0x6f1/0x21f0 [ 2363.303972] ? ip_copy_metadata+0x5f7/0xa40 [ 2363.303993] ? ip_frag_next+0x9e0/0x9e0 [ 2363.304013] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2363.304045] ip_do_fragment+0x189e/0x1dd0 [ 2363.304064] ? ip_frag_next+0x9e0/0x9e0 [ 2363.304100] ? ip_finish_output2+0x21f0/0x21f0 [ 2363.304117] ? nf_hook+0x137/0x510 [ 2363.304148] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2363.304170] ? nf_hook_slow+0xfc/0x1e0 [ 2363.304205] ip_fragment.constprop.0+0x174/0x240 [ 2363.304229] __ip_finish_output.part.0+0x3db/0xb50 [ 2363.304252] ? ip_fragment.constprop.0+0x240/0x240 [ 2363.304276] ? netif_rx_ni+0xe7/0x300 [ 2363.304303] ip_mc_output+0x401/0xa30 [ 2363.304330] ip_send_skb+0xdd/0x260 [ 2363.304356] udp_send_skb+0x6da/0x11d0 [ 2363.304390] udp_sendmsg+0x139a/0x2170 [ 2363.304415] ? mark_lock+0xf5/0x2df0 [ 2363.319078] EXT4-fs (loop4): unsupported inode size: 0 [ 2363.319209] ? ip_frag_init+0x350/0x350 [ 2363.320024] EXT4-fs (loop4): blocksize: 2048 [ 2363.320932] ? mark_lock+0xf5/0x2df0 [ 2363.320951] ? perf_trace_lock+0xac/0x490 [ 2363.320974] ? udp_setsockopt+0xc0/0xc0 [ 2363.332485] ? mark_lock+0xf5/0x2df0 [ 2363.332505] ? __lockdep_reset_lock+0x180/0x180 [ 2363.332533] ? mark_lock+0xf5/0x2df0 [ 2363.332557] ? mark_lock+0xf5/0x2df0 [ 2363.332577] ? lock_chain_count+0x20/0x20 [ 2363.332597] ? __lock_acquire+0xbb1/0x5b00 [ 2363.332618] ? lock_chain_count+0x20/0x20 [ 2363.332653] ? perf_trace_lock+0xac/0x490 [ 2363.332673] ? __lockdep_reset_lock+0x180/0x180 [ 2363.332704] udpv6_sendmsg+0x1bed/0x2af0 [ 2363.332742] ? udp_v6_push_pending_frames+0x360/0x360 [ 2363.332771] ? mark_lock+0xf5/0x2df0 [ 2363.332798] ? lock_acquire+0x197/0x470 [ 2363.332816] ? find_held_lock+0x2c/0x110 [ 2363.332842] ? __might_fault+0xd3/0x180 [ 2363.332862] ? lock_downgrade+0x6d0/0x6d0 [ 2363.332887] ? lock_downgrade+0x6d0/0x6d0 [ 2363.332913] ? sock_has_perm+0x1ea/0x280 [ 2363.332937] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2363.332962] ? _copy_from_user+0xfb/0x1b0 [ 2363.332997] ? __import_iovec+0x458/0x590 [ 2363.333017] ? udp_v6_push_pending_frames+0x360/0x360 [ 2363.333043] inet6_sendmsg+0x105/0x140 [ 2363.333063] ? inet6_compat_ioctl+0x320/0x320 [ 2363.333080] __sock_sendmsg+0xf2/0x190 [ 2363.333101] ____sys_sendmsg+0x70d/0x870 [ 2363.333124] ? sock_write_iter+0x3d0/0x3d0 [ 2363.333141] ? do_recvmmsg+0x6d0/0x6d0 [ 2363.333160] ? perf_trace_lock+0xac/0x490 [ 2363.333187] ? __lockdep_reset_lock+0x180/0x180 [ 2363.333203] ? perf_trace_lock+0xac/0x490 [ 2363.333231] ___sys_sendmsg+0xf3/0x170 [ 2363.333261] ? sendmsg_copy_msghdr+0x160/0x160 [ 2363.333288] ? lock_downgrade+0x6d0/0x6d0 [ 2363.333312] ? find_held_lock+0x2c/0x110 [ 2363.333343] ? __fget_files+0x296/0x4c0 [ 2363.333376] ? __fget_light+0xea/0x290 [ 2363.333406] __sys_sendmsg+0xe5/0x1b0 [ 2363.333426] ? __sys_sendmsg_sock+0x40/0x40 [ 2363.333445] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.333487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.333507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.333522] ? trace_hardirqs_on+0x5b/0x180 [ 2363.333549] do_syscall_64+0x33/0x40 [ 2363.333567] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.333580] RIP: 0033:0x7f9f7e251b19 [ 2363.333597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.333608] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2363.333630] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2363.333641] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 11:22:03 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) 11:22:03 executing program 7: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) [ 2363.333652] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.333664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.333675] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:03 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x5421, 0x0) 11:22:03 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11:22:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 61) [ 2363.513129] FAULT_INJECTION: forcing a failure. [ 2363.513129] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.515593] CPU: 0 PID: 29385 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2363.517017] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.518738] Call Trace: [ 2363.519291] dump_stack+0x107/0x167 [ 2363.520048] should_fail.cold+0x5/0xa [ 2363.520838] ? create_object.isra.0+0x3a/0xa20 [ 2363.521809] should_failslab+0x5/0x20 [ 2363.522597] kmem_cache_alloc+0x5b/0x310 [ 2363.523437] create_object.isra.0+0x3a/0xa20 [ 2363.524344] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2363.525403] kmem_cache_alloc_trace+0x151/0x320 [ 2363.526366] inherit_task_group.isra.0+0x244/0x5c0 [ 2363.527371] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 2363.528405] ? trace_hardirqs_on+0x5b/0x180 [ 2363.529305] perf_event_init_task+0x375/0x800 [ 2363.530228] ? perf_event_attrs+0x40/0x40 [ 2363.531077] ? __hrtimer_init+0x12c/0x270 [ 2363.531931] ? memset+0x20/0x50 [ 2363.532616] copy_process+0x182e/0x7800 [ 2363.533444] ? __lockdep_reset_lock+0x180/0x180 [ 2363.534395] ? mark_lock+0xf5/0x2df0 [ 2363.535162] ? lock_acquire+0x197/0x470 [ 2363.535981] ? find_held_lock+0x2c/0x110 [ 2363.536832] ? __cleanup_sighand+0xb0/0xb0 [ 2363.537731] ? _copy_from_user+0xfb/0x1b0 [ 2363.538588] kernel_clone+0xe7/0x980 [ 2363.539364] ? __lockdep_reset_lock+0x180/0x180 [ 2363.540320] ? create_io_thread+0xf0/0xf0 [ 2363.541191] ? ksys_write+0x21a/0x260 [ 2363.541993] ? lock_downgrade+0x6d0/0x6d0 [ 2363.542850] __do_sys_clone3+0x1e5/0x320 [ 2363.543683] ? __do_sys_clone+0x110/0x110 [ 2363.544550] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.545522] ? vfs_write+0x354/0xa70 [ 2363.546294] ? fput_many+0x2f/0x1a0 [ 2363.547039] ? ksys_write+0x1a9/0x260 [ 2363.547821] ? __ia32_sys_read+0xb0/0xb0 [ 2363.548658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.549748] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.550800] ? trace_hardirqs_on+0x5b/0x180 [ 2363.551689] do_syscall_64+0x33/0x40 [ 2363.552453] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.553502] RIP: 0033:0x7fc197dc8b19 [ 2363.554269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.558042] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2363.559601] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2363.561055] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2363.562529] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.563983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.565455] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:22:03 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x7}, 0x0, 0x1000}, 0x0, 0xfffffffffffffffc, r0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/102, 0x66}], 0x2, 0x8, 0x6aa12b08) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40084, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xef}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) readv(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/213, 0xd5}], 0x1) dup2(r3, r2) socket$inet6_udplite(0xa, 0x2, 0x88) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x4d51, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1040) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000340)={&(0x7f0000000500)=""/126, 0x7e}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x4eae, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000240)={0x0, 0x1, 0x1, 0xfb}) fork() ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 11:22:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x200000000000000}]) [ 2363.598600] FAULT_INJECTION: forcing a failure. [ 2363.598600] name failslab, interval 1, probability 0, space 0, times 0 [ 2363.601008] CPU: 0 PID: 29394 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2363.602460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2363.604155] Call Trace: [ 2363.604700] dump_stack+0x107/0x167 [ 2363.605459] should_fail.cold+0x5/0xa [ 2363.606248] ? create_object.isra.0+0x3a/0xa20 [ 2363.607180] should_failslab+0x5/0x20 [ 2363.607961] kmem_cache_alloc+0x5b/0x310 [ 2363.608787] ? lock_acquire+0x197/0x470 [ 2363.609627] create_object.isra.0+0x3a/0xa20 [ 2363.610525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2363.611573] kmem_cache_alloc+0x159/0x310 [ 2363.612432] skb_clone+0x14f/0x3d0 [ 2363.613177] dev_queue_xmit_nit+0x3a7/0xb00 [ 2363.614100] dev_hard_start_xmit+0xab/0x6f0 [ 2363.614979] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2363.616064] __dev_queue_xmit+0x17ec/0x2710 [ 2363.616949] ? find_held_lock+0x2c/0x110 [ 2363.617792] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2363.618740] ? mark_held_locks+0x9e/0xe0 [ 2363.619579] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2363.620651] neigh_connected_output+0x382/0x4d0 [ 2363.621647] ip_finish_output2+0x6f1/0x21f0 [ 2363.622532] ? ip_copy_metadata+0x5f7/0xa40 [ 2363.623417] ? ip_frag_next+0x9e0/0x9e0 [ 2363.624227] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2363.625175] ip_do_fragment+0x189e/0x1dd0 [ 2363.626030] ? ip_frag_next+0x9e0/0x9e0 [ 2363.626871] ? ip_finish_output2+0x21f0/0x21f0 [ 2363.627808] ? nf_hook+0x137/0x510 [ 2363.628542] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2363.629608] ? nf_hook_slow+0xfc/0x1e0 [ 2363.630417] ip_fragment.constprop.0+0x174/0x240 [ 2363.631384] __ip_finish_output.part.0+0x3db/0xb50 [ 2363.632395] ? ip_fragment.constprop.0+0x240/0x240 [ 2363.632420] ? netif_rx_ni+0xe7/0x300 [ 2363.632447] ip_mc_output+0x401/0xa30 [ 2363.632474] ip_send_skb+0xdd/0x260 [ 2363.632499] udp_send_skb+0x6da/0x11d0 [ 2363.632534] udp_sendmsg+0x139a/0x2170 [ 2363.637369] ? mark_lock+0xf5/0x2df0 [ 2363.638135] ? ip_frag_init+0x350/0x350 [ 2363.638973] ? mark_lock+0xf5/0x2df0 [ 2363.638992] ? perf_trace_lock+0xac/0x490 [ 2363.639012] ? udp_setsockopt+0xc0/0xc0 [ 2363.639031] ? mark_lock+0xf5/0x2df0 [ 2363.639051] ? __lockdep_reset_lock+0x180/0x180 [ 2363.639078] ? mark_lock+0xf5/0x2df0 [ 2363.639102] ? mark_lock+0xf5/0x2df0 [ 2363.639122] ? lock_chain_count+0x20/0x20 [ 2363.639142] ? __lock_acquire+0xbb1/0x5b00 [ 2363.639163] ? lock_chain_count+0x20/0x20 [ 2363.639208] ? perf_trace_lock+0xac/0x490 [ 2363.648073] ? __lockdep_reset_lock+0x180/0x180 [ 2363.648107] udpv6_sendmsg+0x1bed/0x2af0 [ 2363.649913] ? udp_v6_push_pending_frames+0x360/0x360 [ 2363.649942] ? mark_lock+0xf5/0x2df0 [ 2363.649969] ? lock_acquire+0x197/0x470 [ 2363.649986] ? find_held_lock+0x2c/0x110 [ 2363.650013] ? __might_fault+0xd3/0x180 [ 2363.650033] ? lock_downgrade+0x6d0/0x6d0 [ 2363.650057] ? lock_downgrade+0x6d0/0x6d0 [ 2363.650084] ? sock_has_perm+0x1ea/0x280 [ 2363.650107] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2363.650132] ? _copy_from_user+0xfb/0x1b0 [ 2363.650167] ? __import_iovec+0x458/0x590 [ 2363.650188] ? udp_v6_push_pending_frames+0x360/0x360 [ 2363.650213] inet6_sendmsg+0x105/0x140 [ 2363.650233] ? inet6_compat_ioctl+0x320/0x320 [ 2363.650251] __sock_sendmsg+0xf2/0x190 [ 2363.650272] ____sys_sendmsg+0x70d/0x870 [ 2363.650295] ? sock_write_iter+0x3d0/0x3d0 [ 2363.650312] ? do_recvmmsg+0x6d0/0x6d0 [ 2363.650331] ? perf_trace_lock+0xac/0x490 [ 2363.650358] ? __lockdep_reset_lock+0x180/0x180 [ 2363.650375] ? perf_trace_lock+0xac/0x490 [ 2363.650403] ___sys_sendmsg+0xf3/0x170 [ 2363.650425] ? sendmsg_copy_msghdr+0x160/0x160 [ 2363.650452] ? lock_downgrade+0x6d0/0x6d0 [ 2363.650476] ? find_held_lock+0x2c/0x110 [ 2363.650508] ? __fget_files+0x296/0x4c0 [ 2363.650541] ? __fget_light+0xea/0x290 [ 2363.650570] __sys_sendmsg+0xe5/0x1b0 [ 2363.650590] ? __sys_sendmsg_sock+0x40/0x40 [ 2363.650608] ? rcu_read_lock_any_held+0x75/0xa0 [ 2363.650650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2363.650668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2363.650683] ? trace_hardirqs_on+0x5b/0x180 [ 2363.650709] do_syscall_64+0x33/0x40 [ 2363.650727] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2363.650740] RIP: 0033:0x7f9f7e251b19 [ 2363.650760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2363.650771] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2363.650792] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2363.650804] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2363.650815] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2363.650826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2363.650838] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x5450, 0x0) 11:22:20 executing program 7: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) 11:22:20 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) msgget$private(0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x208001, 0x20) r2 = signalfd4(r0, &(0x7f0000000000)={[0x6]}, 0x8, 0x80800) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x8733, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x1000}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x4009000) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffb) clock_gettime(0x0, &(0x7f00000003c0)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001c40), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 11:22:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x300000000000000}]) 11:22:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 11:22:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 62) 11:22:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 13) 11:22:20 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2380.442831] FAULT_INJECTION: forcing a failure. [ 2380.442831] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.445192] CPU: 0 PID: 29418 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2380.446657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.448395] Call Trace: [ 2380.448952] dump_stack+0x107/0x167 [ 2380.449733] should_fail.cold+0x5/0xa [ 2380.450518] ? dst_alloc+0x9e/0x5d0 [ 2380.451222] FAULT_INJECTION: forcing a failure. [ 2380.451222] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.451292] should_failslab+0x5/0x20 [ 2380.454401] kmem_cache_alloc+0x5b/0x310 [ 2380.455250] ? fnhe_hashfun+0x79/0x130 [ 2380.456061] dst_alloc+0x9e/0x5d0 [ 2380.456793] rt_dst_alloc+0x73/0x440 [ 2380.457586] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2380.458689] ip_route_output_key_hash+0x18d/0x340 [ 2380.459691] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2380.460825] ? ip_mc_output+0x401/0xa30 [ 2380.461659] ? ip_send_skb+0xdd/0x260 [ 2380.462445] ? udp_send_skb+0x6da/0x11d0 [ 2380.463295] ? __sys_sendmsg+0xe5/0x1b0 [ 2380.464119] ? do_syscall_64+0x33/0x40 [ 2380.464928] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2380.466049] ? lock_acquire+0x197/0x470 [ 2380.466878] ip_route_output_flow+0x23/0x150 [ 2380.467800] ip_tunnel_xmit+0x70e/0x2f50 [ 2380.468653] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2380.469733] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2380.470963] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2380.471913] ? kmem_cache_free+0xa7/0x2d0 [ 2380.472789] ? perf_trace_lock+0xac/0x490 [ 2380.473669] ? kfree_skbmem+0xef/0x1b0 [ 2380.474480] ? kmem_cache_free+0x249/0x2d0 [ 2380.475363] sit_tunnel_xmit+0xef0/0x2960 [ 2380.476236] ? find_held_lock+0x2c/0x110 [ 2380.477079] ? ipip_rcv+0x4f0/0x4f0 [ 2380.477862] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2380.478797] ? lock_downgrade+0x6d0/0x6d0 [ 2380.479662] ? run_filter+0x4d0/0x4d0 [ 2380.480450] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2380.481395] dev_hard_start_xmit+0x1cb/0x6f0 [ 2380.482325] __dev_queue_xmit+0x17ec/0x2710 [ 2380.483235] ? find_held_lock+0x2c/0x110 [ 2380.484083] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2380.485047] ? mark_held_locks+0x9e/0xe0 [ 2380.485925] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2380.487017] neigh_connected_output+0x382/0x4d0 [ 2380.488006] ip_finish_output2+0x6f1/0x21f0 [ 2380.488914] ? ip_copy_metadata+0x5f7/0xa40 [ 2380.489829] ? ip_frag_next+0x9e0/0x9e0 [ 2380.490657] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2380.491617] ip_do_fragment+0x189e/0x1dd0 [ 2380.492481] ? ip_frag_next+0x9e0/0x9e0 [ 2380.493317] ? ip_finish_output2+0x21f0/0x21f0 [ 2380.494287] ? nf_hook+0x137/0x510 [ 2380.495037] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2380.496108] ? nf_hook_slow+0xfc/0x1e0 [ 2380.496928] ip_fragment.constprop.0+0x174/0x240 [ 2380.497930] __ip_finish_output.part.0+0x3db/0xb50 [ 2380.498953] ? ip_fragment.constprop.0+0x240/0x240 [ 2380.499977] ? netif_rx_ni+0xe7/0x300 [ 2380.500773] ip_mc_output+0x401/0xa30 [ 2380.501700] ip_send_skb+0xdd/0x260 [ 2380.502606] udp_send_skb+0x6da/0x11d0 [ 2380.503573] udp_sendmsg+0x139a/0x2170 [ 2380.504521] ? mark_lock+0xf5/0x2df0 [ 2380.505433] ? ip_frag_init+0x350/0x350 [ 2380.506458] ? mark_lock+0xf5/0x2df0 [ 2380.507375] ? perf_trace_lock+0xac/0x490 [ 2380.508395] ? udp_setsockopt+0xc0/0xc0 [ 2380.509367] ? mark_lock+0xf5/0x2df0 [ 2380.510291] ? __lockdep_reset_lock+0x180/0x180 [ 2380.511443] ? mark_lock+0xf5/0x2df0 [ 2380.512361] ? mark_lock+0xf5/0x2df0 [ 2380.513274] ? lock_chain_count+0x20/0x20 [ 2380.514300] ? __lock_acquire+0xbb1/0x5b00 [ 2380.515338] ? lock_chain_count+0x20/0x20 [ 2380.516373] ? perf_trace_lock+0xac/0x490 [ 2380.517390] ? __lockdep_reset_lock+0x180/0x180 [ 2380.518485] udpv6_sendmsg+0x1bed/0x2af0 [ 2380.519347] ? udp_v6_push_pending_frames+0x360/0x360 [ 2380.520427] ? mark_lock+0xf5/0x2df0 [ 2380.521209] ? lock_acquire+0x197/0x470 [ 2380.522043] ? find_held_lock+0x2c/0x110 [ 2380.522895] ? __might_fault+0xd3/0x180 [ 2380.523725] ? lock_downgrade+0x6d0/0x6d0 [ 2380.524591] ? lock_downgrade+0x6d0/0x6d0 [ 2380.525479] ? sock_has_perm+0x1ea/0x280 [ 2380.526325] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2380.527402] ? _copy_from_user+0xfb/0x1b0 [ 2380.528286] ? __import_iovec+0x458/0x590 [ 2380.529145] ? udp_v6_push_pending_frames+0x360/0x360 [ 2380.530223] inet6_sendmsg+0x105/0x140 [ 2380.531036] ? inet6_compat_ioctl+0x320/0x320 [ 2380.531967] __sock_sendmsg+0xf2/0x190 [ 2380.532777] ____sys_sendmsg+0x70d/0x870 [ 2380.533643] ? sock_write_iter+0x3d0/0x3d0 [ 2380.534516] ? do_recvmmsg+0x6d0/0x6d0 [ 2380.535323] ? perf_trace_lock+0xac/0x490 [ 2380.536197] ? __lockdep_reset_lock+0x180/0x180 [ 2380.537169] ? perf_trace_lock+0xac/0x490 [ 2380.538050] ___sys_sendmsg+0xf3/0x170 [ 2380.538864] ? sendmsg_copy_msghdr+0x160/0x160 [ 2380.539814] ? lock_downgrade+0x6d0/0x6d0 [ 2380.540687] ? find_held_lock+0x2c/0x110 [ 2380.541545] ? __fget_files+0x296/0x4c0 [ 2380.542378] ? __fget_light+0xea/0x290 [ 2380.543196] __sys_sendmsg+0xe5/0x1b0 [ 2380.543990] ? __sys_sendmsg_sock+0x40/0x40 [ 2380.544884] ? rcu_read_lock_any_held+0x75/0xa0 [ 2380.545885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2380.546973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2380.548034] ? trace_hardirqs_on+0x5b/0x180 [ 2380.548927] do_syscall_64+0x33/0x40 [ 2380.549709] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2380.550769] RIP: 0033:0x7f9f7e251b19 [ 2380.551540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.555350] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2380.556929] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2380.558406] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2380.559877] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2380.561343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.562827] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2380.564349] CPU: 1 PID: 29425 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2380.565856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.567573] Call Trace: [ 2380.568135] dump_stack+0x107/0x167 [ 2380.568899] should_fail.cold+0x5/0xa [ 2380.569718] ? perf_event_alloc.part.0+0x5b/0x2b70 [ 2380.570725] should_failslab+0x5/0x20 [ 2380.571506] kmem_cache_alloc_trace+0x55/0x320 [ 2380.572422] perf_event_alloc.part.0+0x5b/0x2b70 [ 2380.573396] ? lockdep_init_map_type+0x2c7/0x780 [ 2380.574380] inherit_event.constprop.0+0x168/0x8d0 [ 2380.575392] inherit_task_group.isra.0+0xb6/0x5c0 [ 2380.576396] perf_event_init_task+0x375/0x800 [ 2380.577338] ? perf_event_attrs+0x40/0x40 [ 2380.578201] ? __hrtimer_init+0x12c/0x270 [ 2380.579072] ? memset+0x20/0x50 [ 2380.579771] copy_process+0x182e/0x7800 [ 2380.580595] ? __lockdep_reset_lock+0x180/0x180 [ 2380.581572] ? mark_lock+0xf5/0x2df0 [ 2380.582344] ? lock_acquire+0x197/0x470 [ 2380.583154] ? find_held_lock+0x2c/0x110 [ 2380.584004] ? __cleanup_sighand+0xb0/0xb0 [ 2380.584897] ? _copy_from_user+0xfb/0x1b0 [ 2380.585768] kernel_clone+0xe7/0x980 [ 2380.586536] ? __lockdep_reset_lock+0x180/0x180 [ 2380.587490] ? create_io_thread+0xf0/0xf0 [ 2380.588364] ? ksys_write+0x21a/0x260 [ 2380.589146] ? lock_downgrade+0x6d0/0x6d0 [ 2380.590013] __do_sys_clone3+0x1e5/0x320 [ 2380.590847] ? __do_sys_clone+0x110/0x110 [ 2380.591720] ? rcu_read_lock_any_held+0x75/0xa0 [ 2380.592673] ? vfs_write+0x354/0xa70 [ 2380.593433] ? fput_many+0x2f/0x1a0 [ 2380.594197] ? ksys_write+0x1a9/0x260 [ 2380.594980] ? __ia32_sys_read+0xb0/0xb0 [ 2380.595839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2380.596931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2380.598005] ? trace_hardirqs_on+0x5b/0x180 [ 2380.598902] do_syscall_64+0x33/0x40 [ 2380.599668] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2380.600725] RIP: 0033:0x7fc197dc8b19 [ 2380.601508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.604594] EXT4-fs (loop4): unsupported inode size: 0 [ 2380.605273] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2380.605305] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2380.606449] EXT4-fs (loop4): blocksize: 2048 [ 2380.607952] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2380.607965] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2380.607976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.607995] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:22:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x5451, 0x0) 11:22:20 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) 11:22:20 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) 11:22:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 63) 11:22:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x400000000000000}]) 11:22:20 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 14) 11:22:20 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x5452, 0x0) 11:22:20 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = fork() perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0x3, 0x9, 0x8, 0x0, 0x0, 0x7, 0x10, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000013c0), 0x4}, 0x580, 0x7d67, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6b}, r1, 0xd, 0xffffffffffffffff, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="ca73da4133fc"}, 0x14) sendfile(r3, r2, 0x0, 0x500000001) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2, 0x1f, 0x6, 0x0, 0x0, 0x9, 0x80, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2144, 0x8, 0x1f, 0x3, 0x10001, 0x7fffffff, 0x1, 0x0, 0x6, 0x0, 0x2}, r1, 0xa, r2, 0xa) getpgrp(r1) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000001400)={'custom1\x00'}) 11:22:20 executing program 7: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) [ 2380.820227] FAULT_INJECTION: forcing a failure. [ 2380.820227] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.822607] CPU: 0 PID: 29541 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2380.824052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.825809] Call Trace: [ 2380.826371] dump_stack+0x107/0x167 [ 2380.827144] should_fail.cold+0x5/0xa [ 2380.827954] ? ___slab_alloc+0x360/0x700 [ 2380.828808] ? create_object.isra.0+0x3a/0xa20 [ 2380.829786] should_failslab+0x5/0x20 [ 2380.830577] kmem_cache_alloc+0x5b/0x310 [ 2380.831423] create_object.isra.0+0x3a/0xa20 [ 2380.832337] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2380.833396] kmem_cache_alloc+0x159/0x310 [ 2380.834278] dst_alloc+0x9e/0x5d0 [ 2380.835008] rt_dst_alloc+0x73/0x440 [ 2380.835786] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2380.836882] ip_route_output_key_hash+0x18d/0x340 [ 2380.837891] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2380.839020] ? ip_mc_output+0x401/0xa30 [ 2380.839837] ? ip_send_skb+0xdd/0x260 [ 2380.840624] ? udp_send_skb+0x6da/0x11d0 [ 2380.841488] ? __sys_sendmsg+0xe5/0x1b0 [ 2380.842314] ? do_syscall_64+0x33/0x40 [ 2380.843113] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2380.844214] ? lock_acquire+0x197/0x470 [ 2380.845041] ip_route_output_flow+0x23/0x150 [ 2380.845956] ip_tunnel_xmit+0x70e/0x2f50 [ 2380.846808] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2380.847874] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2380.849094] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2380.850044] ? kmem_cache_free+0xa7/0x2d0 [ 2380.850914] ? perf_trace_lock+0xac/0x490 [ 2380.851767] ? kfree_skbmem+0xef/0x1b0 [ 2380.852576] ? kmem_cache_free+0x249/0x2d0 [ 2380.853478] sit_tunnel_xmit+0xef0/0x2960 [ 2380.854346] ? find_held_lock+0x2c/0x110 [ 2380.855184] ? ipip_rcv+0x4f0/0x4f0 [ 2380.855950] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2380.856893] ? lock_downgrade+0x6d0/0x6d0 [ 2380.857762] ? run_filter+0x4d0/0x4d0 [ 2380.858557] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2380.859498] dev_hard_start_xmit+0x1cb/0x6f0 [ 2380.860417] __dev_queue_xmit+0x17ec/0x2710 [ 2380.861319] ? find_held_lock+0x2c/0x110 [ 2380.862183] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2380.863139] ? mark_held_locks+0x9e/0xe0 [ 2380.863998] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2380.865093] neigh_connected_output+0x382/0x4d0 [ 2380.866088] ip_finish_output2+0x6f1/0x21f0 [ 2380.867003] ? ip_copy_metadata+0x5f7/0xa40 [ 2380.867905] ? ip_frag_next+0x9e0/0x9e0 [ 2380.868728] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2380.869696] ip_do_fragment+0x189e/0x1dd0 [ 2380.870552] ? ip_frag_next+0x9e0/0x9e0 [ 2380.871395] ? ip_finish_output2+0x21f0/0x21f0 [ 2380.872337] ? nf_hook+0x137/0x510 [ 2380.873083] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2380.874155] ? nf_hook_slow+0xfc/0x1e0 [ 2380.874974] ip_fragment.constprop.0+0x174/0x240 [ 2380.875953] __ip_finish_output.part.0+0x3db/0xb50 [ 2380.876967] ? ip_fragment.constprop.0+0x240/0x240 [ 2380.878001] ? netif_rx_ni+0xe7/0x300 [ 2380.878800] ip_mc_output+0x401/0xa30 [ 2380.879595] ip_send_skb+0xdd/0x260 [ 2380.880351] udp_send_skb+0x6da/0x11d0 [ 2380.881167] udp_sendmsg+0x139a/0x2170 [ 2380.881977] ? mark_lock+0xf5/0x2df0 [ 2380.882747] ? ip_frag_init+0x350/0x350 [ 2380.883571] ? mark_lock+0xf5/0x2df0 [ 2380.884349] ? perf_trace_lock+0xac/0x490 [ 2380.885218] ? udp_setsockopt+0xc0/0xc0 [ 2380.886064] ? mark_lock+0xf5/0x2df0 [ 2380.886853] ? __lockdep_reset_lock+0x180/0x180 [ 2380.887841] ? mark_lock+0xf5/0x2df0 [ 2380.888625] ? mark_lock+0xf5/0x2df0 [ 2380.889416] ? lock_chain_count+0x20/0x20 [ 2380.890285] ? __lock_acquire+0xbb1/0x5b00 [ 2380.891171] ? lock_chain_count+0x20/0x20 [ 2380.892050] ? perf_trace_lock+0xac/0x490 [ 2380.892916] ? __lockdep_reset_lock+0x180/0x180 [ 2380.893912] udpv6_sendmsg+0x1bed/0x2af0 [ 2380.894781] ? udp_v6_push_pending_frames+0x360/0x360 [ 2380.895861] ? mark_lock+0xf5/0x2df0 [ 2380.896634] ? lock_acquire+0x197/0x470 [ 2380.897456] ? find_held_lock+0x2c/0x110 [ 2380.898305] ? __might_fault+0xd3/0x180 [ 2380.899122] ? lock_downgrade+0x6d0/0x6d0 [ 2380.899979] ? lock_downgrade+0x6d0/0x6d0 [ 2380.900839] ? sock_has_perm+0x1ea/0x280 [ 2380.901701] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2380.902768] ? _copy_from_user+0xfb/0x1b0 [ 2380.903636] ? __import_iovec+0x458/0x590 [ 2380.904489] ? udp_v6_push_pending_frames+0x360/0x360 [ 2380.905562] inet6_sendmsg+0x105/0x140 [ 2380.906362] ? inet6_compat_ioctl+0x320/0x320 [ 2380.907280] __sock_sendmsg+0xf2/0x190 [ 2380.908079] ____sys_sendmsg+0x70d/0x870 [ 2380.908917] ? sock_write_iter+0x3d0/0x3d0 [ 2380.909796] ? do_recvmmsg+0x6d0/0x6d0 [ 2380.910596] ? perf_trace_lock+0xac/0x490 [ 2380.911453] ? __lockdep_reset_lock+0x180/0x180 [ 2380.912402] ? perf_trace_lock+0xac/0x490 [ 2380.913260] ___sys_sendmsg+0xf3/0x170 [ 2380.914071] ? sendmsg_copy_msghdr+0x160/0x160 [ 2380.915016] ? lock_downgrade+0x6d0/0x6d0 [ 2380.915871] ? find_held_lock+0x2c/0x110 [ 2380.916717] ? __fget_files+0x296/0x4c0 [ 2380.917563] ? __fget_light+0xea/0x290 [ 2380.918372] __sys_sendmsg+0xe5/0x1b0 [ 2380.919152] ? __sys_sendmsg_sock+0x40/0x40 [ 2380.920037] ? rcu_read_lock_any_held+0x75/0xa0 [ 2380.921013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2380.922094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2380.923145] ? trace_hardirqs_on+0x5b/0x180 [ 2380.924035] do_syscall_64+0x33/0x40 [ 2380.924800] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2380.925855] RIP: 0033:0x7f9f7e251b19 [ 2380.926620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2380.930387] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2380.931943] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2380.933401] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2380.934866] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2380.936326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2380.937791] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:20 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b000000", 0x58, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2380.972802] FAULT_INJECTION: forcing a failure. [ 2380.972802] name failslab, interval 1, probability 0, space 0, times 0 [ 2380.975432] CPU: 1 PID: 29545 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2380.976864] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2380.978600] Call Trace: [ 2380.979147] dump_stack+0x107/0x167 [ 2380.979909] should_fail.cold+0x5/0xa [ 2380.980706] ? create_object.isra.0+0x3a/0xa20 [ 2380.981669] should_failslab+0x5/0x20 [ 2380.982450] kmem_cache_alloc+0x5b/0x310 [ 2380.983288] create_object.isra.0+0x3a/0xa20 [ 2380.984185] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2380.985229] kmem_cache_alloc_trace+0x151/0x320 [ 2380.986212] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2380.987364] perf_event_alloc.part.0+0x5b/0x2b70 [ 2380.988334] ? lockdep_init_map_type+0x2c7/0x780 [ 2380.989307] inherit_event.constprop.0+0x168/0x8d0 [ 2380.990328] inherit_task_group.isra.0+0xb6/0x5c0 [ 2380.991317] perf_event_init_task+0x375/0x800 [ 2380.992241] ? perf_event_attrs+0x40/0x40 [ 2380.993084] ? __hrtimer_init+0x12c/0x270 [ 2380.993940] ? memset+0x20/0x50 [ 2380.994620] copy_process+0x182e/0x7800 [ 2380.995433] ? __lockdep_reset_lock+0x180/0x180 [ 2380.996376] ? mark_lock+0xf5/0x2df0 [ 2380.997144] ? lock_acquire+0x197/0x470 [ 2380.997971] ? find_held_lock+0x2c/0x110 [ 2380.998813] ? __cleanup_sighand+0xb0/0xb0 [ 2380.999690] ? _copy_from_user+0xfb/0x1b0 [ 2381.000542] kernel_clone+0xe7/0x980 [ 2381.001298] ? __lockdep_reset_lock+0x180/0x180 [ 2381.002253] ? create_io_thread+0xf0/0xf0 [ 2381.003110] ? ksys_write+0x21a/0x260 [ 2381.003886] ? lock_downgrade+0x6d0/0x6d0 [ 2381.004734] __do_sys_clone3+0x1e5/0x320 [ 2381.005567] ? __do_sys_clone+0x110/0x110 [ 2381.006430] ? rcu_read_lock_any_held+0x75/0xa0 [ 2381.007372] ? vfs_write+0x354/0xa70 [ 2381.008133] ? fput_many+0x2f/0x1a0 [ 2381.008874] ? ksys_write+0x1a9/0x260 [ 2381.009668] ? __ia32_sys_read+0xb0/0xb0 [ 2381.010499] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.011563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.012606] ? trace_hardirqs_on+0x5b/0x180 [ 2381.013494] do_syscall_64+0x33/0x40 [ 2381.014250] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2381.015292] RIP: 0033:0x7fc197dc8b19 [ 2381.016051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2381.019791] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2381.021338] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2381.022806] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2381.024252] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2381.025714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2381.027160] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2381.032893] EXT4-fs (loop4): unsupported inode size: 0 [ 2381.034132] EXT4-fs (loop4): blocksize: 2048 11:22:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) 11:22:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x500000000000000}]) 11:22:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x5460, 0x0) 11:22:21 executing program 7: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) 11:22:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 15) 11:22:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x4000, 0xffffffffffffffff, 0x0) 11:22:21 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2381.272394] EXT4-fs (loop4): unsupported inode size: 0 [ 2381.273639] EXT4-fs (loop4): blocksize: 2048 [ 2381.305020] FAULT_INJECTION: forcing a failure. [ 2381.305020] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.310029] CPU: 1 PID: 29571 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2381.311445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2381.313183] Call Trace: [ 2381.313736] dump_stack+0x107/0x167 [ 2381.314486] should_fail.cold+0x5/0xa [ 2381.315276] ? selinux_perf_event_alloc+0x43/0x190 [ 2381.316282] should_failslab+0x5/0x20 [ 2381.317063] kmem_cache_alloc_trace+0x55/0x320 [ 2381.318025] selinux_perf_event_alloc+0x43/0x190 [ 2381.318988] security_perf_event_alloc+0x46/0xa0 [ 2381.319952] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2381.320955] inherit_event.constprop.0+0x168/0x8d0 [ 2381.322002] inherit_task_group.isra.0+0xb6/0x5c0 [ 2381.323000] perf_event_init_task+0x375/0x800 [ 2381.323947] ? perf_event_attrs+0x40/0x40 [ 2381.324783] ? __hrtimer_init+0x12c/0x270 [ 2381.325638] ? memset+0x20/0x50 [ 2381.326317] copy_process+0x182e/0x7800 [ 2381.327133] ? __lockdep_reset_lock+0x180/0x180 [ 2381.328067] ? mark_lock+0xf5/0x2df0 [ 2381.328831] ? lock_acquire+0x197/0x470 [ 2381.329655] ? find_held_lock+0x2c/0x110 [ 2381.330496] ? __cleanup_sighand+0xb0/0xb0 [ 2381.331382] ? _copy_from_user+0xfb/0x1b0 [ 2381.332250] kernel_clone+0xe7/0x980 [ 2381.333000] ? __lockdep_reset_lock+0x180/0x180 [ 2381.333957] ? create_io_thread+0xf0/0xf0 [ 2381.334831] ? ksys_write+0x21a/0x260 [ 2381.335593] ? lock_downgrade+0x6d0/0x6d0 [ 2381.336462] __do_sys_clone3+0x1e5/0x320 [ 2381.337277] ? __do_sys_clone+0x110/0x110 [ 2381.338195] ? rcu_read_lock_any_held+0x75/0xa0 [ 2381.339123] ? vfs_write+0x354/0xa70 [ 2381.339896] ? fput_many+0x2f/0x1a0 [ 2381.340657] ? ksys_write+0x1a9/0x260 [ 2381.341421] ? __ia32_sys_read+0xb0/0xb0 [ 2381.342257] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.343335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.344369] ? trace_hardirqs_on+0x5b/0x180 [ 2381.345262] do_syscall_64+0x33/0x40 [ 2381.346034] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2381.347083] RIP: 0033:0x7fc197dc8b19 [ 2381.347857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2381.351646] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2381.353208] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2381.354693] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2381.356154] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2381.357627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2381.359096] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 11:22:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 64) 11:22:35 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x40043311, 0x0) 11:22:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xdb1}, {0xa, 0x4e20, 0x6, @empty, 0x5004}, 0x2, [0x3ff, 0x8, 0x9, 0x6, 0x4, 0x1, 0x4, 0x4]}, 0x5c) r1 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r1, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000240)={'nr0\x00', {0x2, 0x0, @multicast1}}) 11:22:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 16) 11:22:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) 11:22:35 executing program 7: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5603, &(0x7f0000000000)) 11:22:35 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2395.360516] EXT4-fs (loop4): unsupported inode size: 0 [ 2395.361293] EXT4-fs (loop4): blocksize: 2048 [ 2395.392322] FAULT_INJECTION: forcing a failure. [ 2395.392322] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.394143] CPU: 0 PID: 29591 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2395.395134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.396315] Call Trace: [ 2395.396706] dump_stack+0x107/0x167 [ 2395.397220] should_fail.cold+0x5/0xa [ 2395.397796] ? create_object.isra.0+0x3a/0xa20 [ 2395.398446] should_failslab+0x5/0x20 [ 2395.398987] kmem_cache_alloc+0x5b/0x310 [ 2395.399578] create_object.isra.0+0x3a/0xa20 [ 2395.400207] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.400933] kmem_cache_alloc_trace+0x151/0x320 [ 2395.401625] selinux_perf_event_alloc+0x43/0x190 [ 2395.402296] security_perf_event_alloc+0x46/0xa0 [ 2395.402982] perf_event_alloc.part.0+0x18b3/0x2b70 [ 2395.403705] inherit_event.constprop.0+0x168/0x8d0 [ 2395.404402] inherit_task_group.isra.0+0xb6/0x5c0 [ 2395.405091] perf_event_init_task+0x375/0x800 [ 2395.405748] ? perf_event_attrs+0x40/0x40 [ 2395.406361] ? __hrtimer_init+0x12c/0x270 [ 2395.406963] ? memset+0x20/0x50 [ 2395.407434] copy_process+0x182e/0x7800 [ 2395.407997] ? __lockdep_reset_lock+0x180/0x180 [ 2395.408670] ? mark_lock+0xf5/0x2df0 [ 2395.409197] ? lock_acquire+0x197/0x470 [ 2395.409773] ? find_held_lock+0x2c/0x110 [ 2395.410363] ? __cleanup_sighand+0xb0/0xb0 [ 2395.410964] ? _copy_from_user+0xfb/0x1b0 [ 2395.411557] kernel_clone+0xe7/0x980 [ 2395.412073] ? __lockdep_reset_lock+0x180/0x180 [ 2395.412747] ? create_io_thread+0xf0/0xf0 [ 2395.413339] ? ksys_write+0x21a/0x260 [ 2395.413880] ? lock_downgrade+0x6d0/0x6d0 [ 2395.414465] __do_sys_clone3+0x1e5/0x320 [ 2395.415054] ? __do_sys_clone+0x110/0x110 [ 2395.415655] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.416317] ? vfs_write+0x354/0xa70 [ 2395.416842] ? fput_many+0x2f/0x1a0 [ 2395.417374] ? ksys_write+0x1a9/0x260 [ 2395.417931] ? __ia32_sys_read+0xb0/0xb0 [ 2395.418514] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.419256] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.419985] ? trace_hardirqs_on+0x5b/0x180 [ 2395.420582] do_syscall_64+0x33/0x40 [ 2395.421106] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.421838] RIP: 0033:0x7fc197dc8b19 [ 2395.422360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.424931] RSP: 002b:00007fc19533e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 2395.426001] RAX: ffffffffffffffda RBX: 00007fc197edbf60 RCX: 00007fc197dc8b19 [ 2395.427002] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 00000000200001c0 [ 2395.428010] RBP: 00007fc19533e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.429034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2395.430096] R13: 00007ffc299684cf R14: 00007fc19533e300 R15: 0000000000022000 [ 2395.433362] FAULT_INJECTION: forcing a failure. [ 2395.433362] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.435065] CPU: 0 PID: 29590 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2395.436088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.437330] Call Trace: [ 2395.437752] dump_stack+0x107/0x167 [ 2395.438281] should_fail.cold+0x5/0xa [ 2395.438866] ? __alloc_skb+0x6d/0x5b0 [ 2395.439440] should_failslab+0x5/0x20 [ 2395.440015] kmem_cache_alloc_node+0x55/0x330 [ 2395.440703] __alloc_skb+0x6d/0x5b0 [ 2395.441243] ip_frag_next+0x11d/0x9e0 [ 2395.441830] ? perf_trace_lock+0xac/0x490 [ 2395.442438] ? selinux_ip_postroute_compat+0x390/0x390 [ 2395.443221] ip_do_fragment+0x96b/0x1dd0 [ 2395.443830] ? ip_frag_next+0x9e0/0x9e0 [ 2395.444435] ? ip_finish_output2+0x21f0/0x21f0 [ 2395.445107] ? nf_hook+0x137/0x510 [ 2395.445640] ? lock_downgrade+0x6d0/0x6d0 [ 2395.446246] ? lock_downgrade+0x6d0/0x6d0 [ 2395.446865] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2395.447659] ip_fragment.constprop.0+0x174/0x240 [ 2395.448331] __ip_finish_output.part.0+0x3db/0xb50 [ 2395.449073] ? ip_fragment.constprop.0+0x240/0x240 [ 2395.449793] ? nf_hook+0x510/0x510 [ 2395.450346] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2395.450999] ip_output+0x2f7/0x600 [ 2395.451536] ip_local_out+0xb4/0x1a0 [ 2395.452094] iptunnel_xmit+0x591/0x8b0 [ 2395.452703] ip_tunnel_xmit+0x124a/0x2f50 [ 2395.453332] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2395.454101] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2395.454970] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2395.455636] ? kmem_cache_free+0xa7/0x2d0 [ 2395.456260] ? perf_trace_lock+0xac/0x490 [ 2395.456857] ? kfree_skbmem+0xef/0x1b0 [ 2395.457424] ? kmem_cache_free+0x249/0x2d0 [ 2395.458048] sit_tunnel_xmit+0xef0/0x2960 [ 2395.458671] ? find_held_lock+0x2c/0x110 [ 2395.459252] ? ipip_rcv+0x4f0/0x4f0 [ 2395.459792] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2395.460442] ? lock_downgrade+0x6d0/0x6d0 [ 2395.461043] ? run_filter+0x4d0/0x4d0 [ 2395.461593] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2395.462272] dev_hard_start_xmit+0x1cb/0x6f0 [ 2395.462906] __dev_queue_xmit+0x17ec/0x2710 [ 2395.463550] ? find_held_lock+0x2c/0x110 [ 2395.464128] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2395.464815] ? mark_held_locks+0x9e/0xe0 [ 2395.465390] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2395.466160] neigh_connected_output+0x382/0x4d0 [ 2395.466849] ip_finish_output2+0x6f1/0x21f0 [ 2395.467468] ? ip_copy_metadata+0x5f7/0xa40 [ 2395.468078] ? ip_frag_next+0x9e0/0x9e0 [ 2395.468668] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2395.469323] ip_do_fragment+0x189e/0x1dd0 [ 2395.469954] ? ip_frag_next+0x9e0/0x9e0 [ 2395.470530] ? ip_finish_output2+0x21f0/0x21f0 [ 2395.471178] ? nf_hook+0x137/0x510 [ 2395.471714] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2395.472449] ? nf_hook_slow+0xfc/0x1e0 [ 2395.473000] ip_fragment.constprop.0+0x174/0x240 [ 2395.473730] __ip_finish_output.part.0+0x3db/0xb50 [ 2395.474418] ? ip_fragment.constprop.0+0x240/0x240 [ 2395.475122] ? netif_rx_ni+0xe7/0x300 [ 2395.475662] ip_mc_output+0x401/0xa30 [ 2395.476208] ip_send_skb+0xdd/0x260 [ 2395.476741] udp_send_skb+0x6da/0x11d0 [ 2395.477302] udp_sendmsg+0x139a/0x2170 [ 2395.477867] ? mark_lock+0xf5/0x2df0 [ 2395.478403] ? ip_frag_init+0x350/0x350 [ 2395.478974] ? mark_lock+0xf5/0x2df0 [ 2395.479519] ? perf_trace_lock+0xac/0x490 [ 2395.480102] ? udp_setsockopt+0xc0/0xc0 [ 2395.480682] ? mark_lock+0xf5/0x2df0 [ 2395.481199] ? __lockdep_reset_lock+0x180/0x180 [ 2395.481881] ? mark_lock+0xf5/0x2df0 [ 2395.482417] ? mark_lock+0xf5/0x2df0 [ 2395.482952] ? lock_chain_count+0x20/0x20 [ 2395.483534] ? __lock_acquire+0xbb1/0x5b00 [ 2395.484130] ? lock_chain_count+0x20/0x20 [ 2395.484730] ? perf_trace_lock+0xac/0x490 [ 2395.485321] ? __lockdep_reset_lock+0x180/0x180 [ 2395.485995] udpv6_sendmsg+0x1bed/0x2af0 [ 2395.486593] ? udp_v6_push_pending_frames+0x360/0x360 [ 2395.487319] ? mark_lock+0xf5/0x2df0 [ 2395.487849] ? lock_acquire+0x197/0x470 [ 2395.488404] ? find_held_lock+0x2c/0x110 [ 2395.488984] ? __might_fault+0xd3/0x180 [ 2395.489537] ? lock_downgrade+0x6d0/0x6d0 [ 2395.490132] ? lock_downgrade+0x6d0/0x6d0 [ 2395.490730] ? sock_has_perm+0x1ea/0x280 [ 2395.491302] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2395.492027] ? _copy_from_user+0xfb/0x1b0 [ 2395.492619] ? __import_iovec+0x458/0x590 [ 2395.493195] ? udp_v6_push_pending_frames+0x360/0x360 [ 2395.493934] inet6_sendmsg+0x105/0x140 [ 2395.494478] ? inet6_compat_ioctl+0x320/0x320 [ 2395.495102] __sock_sendmsg+0xf2/0x190 [ 2395.495652] ____sys_sendmsg+0x70d/0x870 [ 2395.496229] ? sock_write_iter+0x3d0/0x3d0 [ 2395.496825] ? do_recvmmsg+0x6d0/0x6d0 [ 2395.497361] ? perf_trace_lock+0xac/0x490 [ 2395.497952] ? __lockdep_reset_lock+0x180/0x180 [ 2395.498610] ? perf_trace_lock+0xac/0x490 [ 2395.499188] ___sys_sendmsg+0xf3/0x170 [ 2395.499744] ? sendmsg_copy_msghdr+0x160/0x160 [ 2395.500382] ? lock_downgrade+0x6d0/0x6d0 [ 2395.500968] ? find_held_lock+0x2c/0x110 [ 2395.501546] ? __fget_files+0x296/0x4c0 [ 2395.502143] ? __fget_light+0xea/0x290 [ 2395.502706] __sys_sendmsg+0xe5/0x1b0 [ 2395.503246] ? __sys_sendmsg_sock+0x40/0x40 [ 2395.503851] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.504529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.505265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.506004] ? trace_hardirqs_on+0x5b/0x180 [ 2395.506617] do_syscall_64+0x33/0x40 [ 2395.507141] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.507863] RIP: 0033:0x7f9f7e251b19 [ 2395.508382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.510984] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2395.512057] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2395.513088] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2395.514122] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.515155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2395.516152] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x700000000000000}]) 11:22:35 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b00000000", 0x59, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:22:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x4000000, 0xffffffffffffffff, 0x0) 11:22:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, 0x0) 11:22:35 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x40049409, 0x0) 11:22:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:22:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x800000000000000}]) 11:22:35 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) 11:22:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 65) [ 2395.693952] EXT4-fs (loop4): unsupported inode size: 0 [ 2395.695252] EXT4-fs (loop4): blocksize: 2048 11:22:35 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, 0x0) 11:22:35 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x40086602, 0x0) [ 2395.783524] FAULT_INJECTION: forcing a failure. [ 2395.783524] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.785852] CPU: 1 PID: 29617 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2395.787249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2395.788943] Call Trace: [ 2395.789485] dump_stack+0x107/0x167 [ 2395.790264] should_fail.cold+0x5/0xa [ 2395.791042] ? create_object.isra.0+0x3a/0xa20 [ 2395.791980] should_failslab+0x5/0x20 [ 2395.792760] kmem_cache_alloc+0x5b/0x310 [ 2395.793583] create_object.isra.0+0x3a/0xa20 [ 2395.794479] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2395.795509] kmem_cache_alloc_node+0x169/0x330 [ 2395.796433] __alloc_skb+0x6d/0x5b0 [ 2395.797180] ip_frag_next+0x11d/0x9e0 [ 2395.797957] ? perf_trace_lock+0xac/0x490 [ 2395.798793] ? selinux_ip_postroute_compat+0x390/0x390 [ 2395.799847] ip_do_fragment+0x96b/0x1dd0 [ 2395.800667] ? ip_frag_next+0x9e0/0x9e0 [ 2395.801489] ? ip_finish_output2+0x21f0/0x21f0 [ 2395.802431] ? nf_hook+0x137/0x510 [ 2395.803151] ? lock_downgrade+0x6d0/0x6d0 [ 2395.803987] ? lock_downgrade+0x6d0/0x6d0 [ 2395.804825] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2395.805902] ip_fragment.constprop.0+0x174/0x240 [ 2395.806874] __ip_finish_output.part.0+0x3db/0xb50 [ 2395.807872] ? ip_fragment.constprop.0+0x240/0x240 [ 2395.808861] ? nf_hook+0x510/0x510 [ 2395.809601] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2395.810541] ip_output+0x2f7/0x600 [ 2395.811276] ip_local_out+0xb4/0x1a0 [ 2395.812054] iptunnel_xmit+0x591/0x8b0 [ 2395.812877] ip_tunnel_xmit+0x124a/0x2f50 [ 2395.813775] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2395.814836] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2395.816044] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2395.816980] ? kmem_cache_free+0xa7/0x2d0 [ 2395.817846] ? perf_trace_lock+0xac/0x490 [ 2395.818693] ? kfree_skbmem+0xef/0x1b0 [ 2395.819484] ? kmem_cache_free+0x249/0x2d0 [ 2395.820352] sit_tunnel_xmit+0xef0/0x2960 [ 2395.821206] ? find_held_lock+0x2c/0x110 [ 2395.822045] ? ipip_rcv+0x4f0/0x4f0 [ 2395.822792] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2395.823699] ? lock_downgrade+0x6d0/0x6d0 [ 2395.824538] ? run_filter+0x4d0/0x4d0 [ 2395.825315] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2395.826254] dev_hard_start_xmit+0x1cb/0x6f0 [ 2395.827153] __dev_queue_xmit+0x17ec/0x2710 [ 2395.828032] ? find_held_lock+0x2c/0x110 [ 2395.828860] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2395.829801] ? mark_held_locks+0x9e/0xe0 [ 2395.830628] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2395.831694] neigh_connected_output+0x382/0x4d0 [ 2395.832661] ip_finish_output2+0x6f1/0x21f0 [ 2395.833538] ? ip_copy_metadata+0x5f7/0xa40 [ 2395.834421] ? ip_frag_next+0x9e0/0x9e0 [ 2395.835237] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2395.836186] ip_do_fragment+0x189e/0x1dd0 [ 2395.837045] ? ip_frag_next+0x9e0/0x9e0 [ 2395.837904] ? ip_finish_output2+0x21f0/0x21f0 [ 2395.838842] ? nf_hook+0x137/0x510 [ 2395.839596] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2395.840682] ? nf_hook_slow+0xfc/0x1e0 [ 2395.841512] ip_fragment.constprop.0+0x174/0x240 [ 2395.842494] __ip_finish_output.part.0+0x3db/0xb50 [ 2395.843497] ? ip_fragment.constprop.0+0x240/0x240 [ 2395.844503] ? netif_rx_ni+0xe7/0x300 [ 2395.845285] ip_mc_output+0x401/0xa30 [ 2395.846081] ip_send_skb+0xdd/0x260 [ 2395.846827] udp_send_skb+0x6da/0x11d0 [ 2395.847638] udp_sendmsg+0x139a/0x2170 [ 2395.848432] ? mark_lock+0xf5/0x2df0 [ 2395.849186] ? ip_frag_init+0x350/0x350 [ 2395.850008] ? mark_lock+0xf5/0x2df0 [ 2395.850764] ? perf_trace_lock+0xac/0x490 [ 2395.851620] ? udp_setsockopt+0xc0/0xc0 [ 2395.852452] ? mark_lock+0xf5/0x2df0 [ 2395.853233] ? __lockdep_reset_lock+0x180/0x180 [ 2395.854218] ? mark_lock+0xf5/0x2df0 [ 2395.854992] ? mark_lock+0xf5/0x2df0 [ 2395.855773] ? lock_chain_count+0x20/0x20 [ 2395.856656] ? __lock_acquire+0xbb1/0x5b00 [ 2395.857561] ? lock_chain_count+0x20/0x20 [ 2395.858453] ? perf_trace_lock+0xac/0x490 [ 2395.859305] ? __lockdep_reset_lock+0x180/0x180 [ 2395.860261] udpv6_sendmsg+0x1bed/0x2af0 [ 2395.861099] ? udp_v6_push_pending_frames+0x360/0x360 [ 2395.862160] ? mark_lock+0xf5/0x2df0 [ 2395.862922] ? lock_acquire+0x197/0x470 [ 2395.863728] ? find_held_lock+0x2c/0x110 [ 2395.864554] ? __might_fault+0xd3/0x180 [ 2395.865356] ? lock_downgrade+0x6d0/0x6d0 [ 2395.866226] ? lock_downgrade+0x6d0/0x6d0 [ 2395.867082] ? sock_has_perm+0x1ea/0x280 [ 2395.867912] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2395.868970] ? _copy_from_user+0xfb/0x1b0 [ 2395.869833] ? __import_iovec+0x458/0x590 [ 2395.870703] ? udp_v6_push_pending_frames+0x360/0x360 [ 2395.871782] inet6_sendmsg+0x105/0x140 [ 2395.872599] ? inet6_compat_ioctl+0x320/0x320 [ 2395.873529] __sock_sendmsg+0xf2/0x190 [ 2395.874362] ____sys_sendmsg+0x70d/0x870 [ 2395.875213] ? sock_write_iter+0x3d0/0x3d0 [ 2395.876104] ? do_recvmmsg+0x6d0/0x6d0 [ 2395.876915] ? perf_trace_lock+0xac/0x490 [ 2395.877774] ? __lockdep_reset_lock+0x180/0x180 [ 2395.878711] ? perf_trace_lock+0xac/0x490 [ 2395.879560] ___sys_sendmsg+0xf3/0x170 [ 2395.880356] ? sendmsg_copy_msghdr+0x160/0x160 [ 2395.881291] ? lock_downgrade+0x6d0/0x6d0 [ 2395.882145] ? find_held_lock+0x2c/0x110 [ 2395.882983] ? __fget_files+0x296/0x4c0 [ 2395.883799] ? __fget_light+0xea/0x290 [ 2395.884600] __sys_sendmsg+0xe5/0x1b0 [ 2395.885367] ? __sys_sendmsg_sock+0x40/0x40 [ 2395.886263] ? rcu_read_lock_any_held+0x75/0xa0 [ 2395.887251] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2395.888352] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2395.889415] ? trace_hardirqs_on+0x5b/0x180 [ 2395.890325] do_syscall_64+0x33/0x40 [ 2395.891086] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2395.892164] RIP: 0033:0x7f9f7e251b19 [ 2395.892965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2395.896745] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2395.898296] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2395.899745] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2395.901191] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2395.902644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2395.904072] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:50 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x40000000, 0xffffffffffffffff, 0x0) 11:22:50 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x200000, 0xb, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60}, {&(0x7f0000010100)='RRaA\x00'/32, 0x20, 0x800}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010300)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002000000010006000000000000000000000000008000"/96, 0x60, 0x3000}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10000}, {&(0x7f0000010500)="f8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x10800}, {&(0x7f0000010600)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b4ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c45312020202020202000b4ea70325132510000ea70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c45322020202020202000b4ea70325132510000ea70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c2000b4ea70325132510000ea703251070064000000", 0x120, 0x11000}, {&(0x7f0000010800)="2e202020202020202020201000b4ea70325132510000ea7032510300000000002e2e2020202020202020201000b4ea70325132510000ea70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020202000b4ea70325132510000ea70325104001a040000", 0x80, 0x51000}, {&(0x7f0000010900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x91000}, {&(0x7f0000010e00)='syzkallers\x00'/32, 0x20, 0xd1000}, {&(0x7f0000010f00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x151000}], 0x0, &(0x7f0000011000)) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$nfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x7fff, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000340)="159155426b76ddc8feb392033c5bb5198cb106516f7aaee80e5b47c3009a4a5b1dc14fcdeb21410d9de575612645f0bfeab1dd49030ff024a9641f7fc00f6896a573e30c50fe16d9b5ec7191cc7caf4d59f4fbc16a1be96f181d5b47002451825c66ba33e574e218b6280f08f8eb6c0719597e51ea58b6806ef8c3bc7cd2ab24599d14fef7e41988988316a09afe50c7931e546623cd25ff50846e409ae2b548a6b722af308d2e704fbe8ea3ecf58c1bcfb35f25bfa5be8b1bb4ed0329ecc85e78d312426f18ec864f1a7e686f2aa8ef6d432cbd2d1e78f86a2aa702d4edfcd796fb140badba331d22ec07753e7e8ec2e4ca8a8c7ac357", 0xf7, 0x2}, {&(0x7f00000001c0)="7894772a43ab8d0013424c421b063d31ae623e3afa0b8ab8ec5cbe724589825b7453c952bc556f0b23", 0x29, 0x3}, {&(0x7f0000000440)="f13430d072c713aee0e6024a0883b877ed3315afb3e8ab5c254ea643f331cbb2609c8b2c800bf784ed9c650237429a28ec9b84da8ba452", 0x37, 0xfda0}, {&(0x7f0000000480)="70c9740cc6f21968ee157e6fa166e604696bf90473e9e8dbe0a8e90a247527ec3196182d7c89209056ae1b5d1af4025a94be5643ee381cf6f7d5bc2e36777a14247df48551323ce624f46ca1e83cbc98910ecb52620180dcd05783d765db49e4ba982f253e66fffc46a7924e7547008e1b7e4204341f555e28cf8cdb2235aa2e442eb3caedcbce4e184c0fe043071ea2e6fc518c8abeb60e1bcc51dff014b3c204d6f3149974ef3978cc60480846d8b27d8f3cd12700108e2ba5a6b7d0d9ad0dd5", 0xc1, 0x1}, {&(0x7f0000000580)="d5f9214c67f416ad740282091be0447f8fc5e735c67d390581585db463693792c00e4575aa762de16eec82d54dec4ff805739e4f41794c8b2bfb1e01ef77774e1329524c4c2d82bf97602d0800b74e6477a4b49226d0b546b4fc14630d91400028aa198d0bcc6015a3682b9262d67dc73fe8daca415c4f8f7fc05ed8a73414521cbc5287fad77bdfb0d9f9", 0x8b, 0x8}, {&(0x7f0000000640)="8c5444d6f20f60b6ab1981eed4941400a911ffa281ce97260958ee98805c482d4cc50f94ac6fe566d25a1fa6e2970f26bed77d51e666dee3581c3c1e0ca6effcd5cf23ed56462111324849d1c308d07accb8732b951619622c86fa3e53f635cf72b03546", 0x64, 0xadc4}], 0x20418, &(0x7f0000000780)={[{'vfat\x00'}, {}, {'vfat\x00'}, {'\'+\'{'}], [{@hash}, {@dont_hash}, {@uid_gt={'uid>', r0}}, {@subj_type={'subj_type', 0x3d, '@&'}}, {@euid_lt={'euid<', r1}}]}) 11:22:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xf00000000000000}]) 11:22:50 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, 0x0) 11:22:50 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:22:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40987300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:22:50 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x40087602, 0x0) 11:22:50 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 66) [ 2409.988484] FAULT_INJECTION: forcing a failure. [ 2409.988484] name failslab, interval 1, probability 0, space 0, times 0 [ 2409.989721] CPU: 0 PID: 29643 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2409.990500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2409.991409] Call Trace: [ 2409.991717] dump_stack+0x107/0x167 [ 2409.992120] should_fail.cold+0x5/0xa [ 2409.992535] should_failslab+0x5/0x20 [ 2409.992944] __kmalloc_node_track_caller+0x74/0x3b0 [ 2409.993484] ? ip_frag_next+0x11d/0x9e0 [ 2409.993926] __alloc_skb+0xb1/0x5b0 [ 2409.994329] ip_frag_next+0x11d/0x9e0 [ 2409.994754] ? perf_trace_lock+0xac/0x490 [ 2409.995212] ? selinux_ip_postroute_compat+0x390/0x390 [ 2409.995804] ip_do_fragment+0x96b/0x1dd0 [ 2409.996247] ? ip_frag_next+0x9e0/0x9e0 [ 2409.996688] ? ip_finish_output2+0x21f0/0x21f0 [ 2409.997179] ? nf_hook+0x137/0x510 [ 2409.997567] ? lock_downgrade+0x6d0/0x6d0 [ 2409.998021] ? lock_downgrade+0x6d0/0x6d0 [ 2409.998474] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2409.999049] ip_fragment.constprop.0+0x174/0x240 [ 2409.999586] __ip_finish_output.part.0+0x3db/0xb50 [ 2410.000143] ? ip_fragment.constprop.0+0x240/0x240 [ 2410.000687] ? nf_hook+0x510/0x510 [ 2410.001091] ? ip_rt_update_pmtu+0x2e8/0xaa0 [ 2410.001585] ip_output+0x2f7/0x600 [ 2410.002001] ip_local_out+0xb4/0x1a0 [ 2410.002426] iptunnel_xmit+0x591/0x8b0 [ 2410.002874] ip_tunnel_xmit+0x124a/0x2f50 [ 2410.003353] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2410.003936] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2410.004607] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2410.005127] ? kmem_cache_free+0xa7/0x2d0 [ 2410.005603] ? perf_trace_lock+0xac/0x490 [ 2410.006080] ? kfree_skbmem+0xef/0x1b0 [ 2410.006521] ? kmem_cache_free+0x249/0x2d0 [ 2410.007004] sit_tunnel_xmit+0xef0/0x2960 [ 2410.007479] ? find_held_lock+0x2c/0x110 [ 2410.007941] ? ipip_rcv+0x4f0/0x4f0 [ 2410.008355] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2410.008861] ? lock_downgrade+0x6d0/0x6d0 [ 2410.009339] ? run_filter+0x4d0/0x4d0 [ 2410.009792] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2410.010288] dev_hard_start_xmit+0x1cb/0x6f0 [ 2410.010790] __dev_queue_xmit+0x17ec/0x2710 [ 2410.011284] ? find_held_lock+0x2c/0x110 [ 2410.011750] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2410.012274] ? mark_held_locks+0x9e/0xe0 [ 2410.012738] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2410.013333] neigh_connected_output+0x382/0x4d0 [ 2410.013933] ip_finish_output2+0x6f1/0x21f0 [ 2410.014426] ? ip_copy_metadata+0x5f7/0xa40 [ 2410.014910] ? ip_frag_next+0x9e0/0x9e0 [ 2410.015362] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2410.015868] ip_do_fragment+0x189e/0x1dd0 [ 2410.016341] ? ip_frag_next+0x9e0/0x9e0 [ 2410.016800] ? ip_finish_output2+0x21f0/0x21f0 [ 2410.017313] ? nf_hook+0x137/0x510 [ 2410.017725] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2410.018329] ? nf_hook_slow+0xfc/0x1e0 [ 2410.018777] ip_fragment.constprop.0+0x174/0x240 [ 2410.019318] __ip_finish_output.part.0+0x3db/0xb50 [ 2410.019876] ? ip_fragment.constprop.0+0x240/0x240 [ 2410.020429] ? netif_rx_ni+0xe7/0x300 [ 2410.020868] ip_mc_output+0x401/0xa30 [ 2410.021305] ip_send_skb+0xdd/0x260 [ 2410.021724] udp_send_skb+0x6da/0x11d0 [ 2410.022184] udp_sendmsg+0x139a/0x2170 [ 2410.022623] ? mark_lock+0xf5/0x2df0 [ 2410.023046] ? ip_frag_init+0x350/0x350 [ 2410.023487] ? mark_lock+0xf5/0x2df0 [ 2410.023911] ? perf_trace_lock+0xac/0x490 [ 2410.024378] ? udp_setsockopt+0xc0/0xc0 [ 2410.024829] ? mark_lock+0xf5/0x2df0 [ 2410.025243] ? __lockdep_reset_lock+0x180/0x180 [ 2410.025783] ? mark_lock+0xf5/0x2df0 [ 2410.026202] ? mark_lock+0xf5/0x2df0 [ 2410.026628] ? lock_chain_count+0x20/0x20 [ 2410.027099] ? __lock_acquire+0xbb1/0x5b00 [ 2410.027578] ? lock_chain_count+0x20/0x20 [ 2410.028057] ? perf_trace_lock+0xac/0x490 [ 2410.028526] ? __lockdep_reset_lock+0x180/0x180 [ 2410.029062] udpv6_sendmsg+0x1bed/0x2af0 [ 2410.029527] ? udp_v6_push_pending_frames+0x360/0x360 [ 2410.030135] ? mark_lock+0xf5/0x2df0 [ 2410.030561] ? lock_acquire+0x197/0x470 [ 2410.031011] ? find_held_lock+0x2c/0x110 [ 2410.031474] ? __might_fault+0xd3/0x180 [ 2410.031926] ? lock_downgrade+0x6d0/0x6d0 [ 2410.032379] ? lock_downgrade+0x6d0/0x6d0 [ 2410.032849] ? sock_has_perm+0x1ea/0x280 [ 2410.033309] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2410.033907] ? _copy_from_user+0xfb/0x1b0 [ 2410.034381] ? __import_iovec+0x458/0x590 [ 2410.034854] ? udp_v6_push_pending_frames+0x360/0x360 [ 2410.035430] inet6_sendmsg+0x105/0x140 [ 2410.035877] ? inet6_compat_ioctl+0x320/0x320 [ 2410.036383] __sock_sendmsg+0xf2/0x190 [ 2410.036825] ____sys_sendmsg+0x70d/0x870 [ 2410.037268] ? sock_write_iter+0x3d0/0x3d0 [ 2410.037745] ? do_recvmmsg+0x6d0/0x6d0 [ 2410.038177] ? perf_trace_lock+0xac/0x490 [ 2410.038653] ? __lockdep_reset_lock+0x180/0x180 [ 2410.039175] ? perf_trace_lock+0xac/0x490 [ 2410.039647] ___sys_sendmsg+0xf3/0x170 [ 2410.040089] ? sendmsg_copy_msghdr+0x160/0x160 [ 2410.040613] ? lock_downgrade+0x6d0/0x6d0 [ 2410.041084] ? find_held_lock+0x2c/0x110 [ 2410.041554] ? __fget_files+0x296/0x4c0 [ 2410.042026] ? __fget_light+0xea/0x290 [ 2410.042479] __sys_sendmsg+0xe5/0x1b0 [ 2410.042906] ? __sys_sendmsg_sock+0x40/0x40 [ 2410.043390] ? rcu_read_lock_any_held+0x75/0xa0 [ 2410.043927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2410.044500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2410.045080] ? trace_hardirqs_on+0x5b/0x180 [ 2410.045553] do_syscall_64+0x33/0x40 [ 2410.045985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2410.046571] RIP: 0033:0x7f9f7e251b19 [ 2410.046989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.049077] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2410.049956] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2410.050762] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2410.051563] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.052379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.053184] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:22:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_mount_image$nfs4(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="947a031cb2b9da3b081504e3d17f709da0791002ad7241ae821f8cfc9b194b768a11fd88c53ab4d5d9006da66aa134fc87e1923fcb12880555a643934ad956aa92d938b62f00b70c470eacba6ab835c96d80a6288dbcc4493128cb00719c7c6e1ee08d7f38c9bc9bc1602dc72c0a160d685543a25e2b9421730d81c9306b7a514d50f613dec617dccd8dbc465f719a7c1f494a331c2317f2c751a8ed47805375a2e222f7cc41e76db8d19df82778da9f2ce95cc10499", 0xb6, 0x20}], 0x8048, &(0x7f0000000280)={[{'C*\xeb:#,+.'}, {}, {'@^@'}, {':\''}, {':})-\xf8+*\xc6)-$'}], [{@fowner_gt={'fowner>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_appraise}, {@euid_gt={'euid>', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '^)'}}, {@smackfshat={'smackfshat', 0x3d, ',^}{\'}'}}]}) preadv(r0, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:22:50 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x400c330d, 0x0) 11:22:50 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 1) [ 2410.106289] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2410.167315] FAULT_INJECTION: forcing a failure. [ 2410.167315] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2410.170223] CPU: 1 PID: 29756 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2410.171636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.173348] Call Trace: [ 2410.173917] dump_stack+0x107/0x167 [ 2410.174670] should_fail.cold+0x5/0xa [ 2410.175459] __alloc_pages_nodemask+0x182/0x600 [ 2410.176419] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2410.177642] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2410.178671] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2410.179736] alloc_pages_current+0x187/0x280 [ 2410.180644] __pmd_alloc+0x37/0x5e0 [ 2410.181399] handle_mm_fault+0x1ac4/0x3500 [ 2410.182296] ? __lock_acquire+0x1657/0x5b00 [ 2410.183177] ? __pmd_alloc+0x5e0/0x5e0 [ 2410.183993] ? vmacache_find+0x55/0x2a0 [ 2410.184807] ? vmacache_update+0xce/0x140 [ 2410.185673] do_user_addr_fault+0x56e/0xc60 [ 2410.186581] exc_page_fault+0xa2/0x1a0 [ 2410.187378] asm_exc_page_fault+0x1e/0x30 [ 2410.188242] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2410.189258] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f 11:22:50 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x4020940d, 0x0) [ 2410.192989] RSP: 0018:ffff8880502dfb98 EFLAGS: 00050293 [ 2410.194304] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2410.195757] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff8880458e8938 [ 2410.197228] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2410.198692] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2410.200149] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2410.201638] ? vt_ioctl+0x1ccb/0x2c90 [ 2410.202440] vt_ioctl+0x1d0b/0x2c90 [ 2410.203191] ? vt_waitactive+0x3a0/0x3a0 [ 2410.204024] ? __lock_acquire+0xbb1/0x5b00 [ 2410.204913] ? perf_trace_lock+0xac/0x490 [ 2410.205771] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2410.206852] ? vt_waitactive+0x3a0/0x3a0 [ 2410.207688] tty_ioctl+0x862/0x18b0 [ 2410.208437] ? tty_fasync+0x390/0x390 [ 2410.209233] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2410.210421] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2410.211465] ? do_vfs_ioctl+0x283/0x10d0 [ 2410.212292] ? selinux_bprm_creds_for_exec+0xb60/0xb60 11:22:50 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x8008330e, 0x0) [ 2410.213356] ? generic_block_fiemap+0x60/0x60 [ 2410.214352] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2410.215360] ? selinux_file_ioctl+0xb6/0x270 [ 2410.216266] ? tty_fasync+0x390/0x390 [ 2410.217048] __x64_sys_ioctl+0x19a/0x210 [ 2410.217914] do_syscall_64+0x33/0x40 [ 2410.218677] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2410.219729] RIP: 0033:0x7f359274eb19 [ 2410.220495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.224228] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2410.225761] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2410.227211] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2410.228651] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.230118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2410.231579] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 [ 2410.263159] nfs4: Unknown parameter 'C*ë:#' 11:23:05 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 2) 11:23:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) timer_gettime(r0, &(0x7f0000000240)) timer_create(0x4, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={&(0x7f0000000080)="7b08b225b1831b70ff4ddac2fa6b84cee8a6d35979d5ce0a8d5e255b18c306c18f6baa6aa833e0b4898a9e2eac2624388d42d0345e590402100f1d03c7831f13473b6d50ce16487a10f5ea4d6c731c3b4156d157ef5324a753d3ab7f3182b4f42b0c1d76", &(0x7f0000000100)="acaf7aee19d43e0bd9b03a7ec606228cd49943"}}, &(0x7f0000000180)=0x0) timer_getoverrun(r1) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:23:05 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x1000000000000, 0xffffffffffffffff, 0x0) 11:23:05 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x8008330e, 0x0) 11:23:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x1000000000000000}]) 11:23:05 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083313, 0x0) 11:23:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 67) 11:23:05 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2425.236095] FAULT_INJECTION: forcing a failure. [ 2425.236095] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.238701] CPU: 0 PID: 29771 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2425.238762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.238769] Call Trace: [ 2425.238792] dump_stack+0x107/0x167 [ 2425.238816] should_fail.cold+0x5/0xa [ 2425.238838] ? __pmd_alloc+0x94/0x5e0 [ 2425.238860] should_failslab+0x5/0x20 [ 2425.238878] kmem_cache_alloc+0x5b/0x310 [ 2425.238904] __pmd_alloc+0x94/0x5e0 [ 2425.238927] handle_mm_fault+0x1ac4/0x3500 [ 2425.238951] ? __lock_acquire+0x1657/0x5b00 11:23:05 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2425.238974] ? __pmd_alloc+0x5e0/0x5e0 [ 2425.239002] ? vmacache_find+0x55/0x2a0 [ 2425.239019] ? vmacache_update+0xce/0x140 [ 2425.239045] do_user_addr_fault+0x56e/0xc60 [ 2425.239074] exc_page_fault+0xa2/0x1a0 [ 2425.239095] asm_exc_page_fault+0x1e/0x30 [ 2425.239116] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2425.239135] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f [ 2425.239146] RSP: 0018:ffff888044497b98 EFLAGS: 00050293 [ 2425.239164] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2425.239176] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff88805624d7f8 [ 2425.239187] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2425.239198] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2425.239209] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2425.239241] ? vt_ioctl+0x1ccb/0x2c90 [ 2425.239266] vt_ioctl+0x1d0b/0x2c90 [ 2425.239292] ? vt_waitactive+0x3a0/0x3a0 [ 2425.239317] ? __lock_acquire+0xbb1/0x5b00 [ 2425.239353] ? perf_trace_lock+0xac/0x490 [ 2425.239377] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2425.239399] ? vt_waitactive+0x3a0/0x3a0 [ 2425.239427] tty_ioctl+0x862/0x18b0 [ 2425.239450] ? tty_fasync+0x390/0x390 [ 2425.239470] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2425.239487] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2425.239507] ? do_vfs_ioctl+0x283/0x10d0 [ 2425.239525] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2425.239543] ? generic_block_fiemap+0x60/0x60 [ 2425.239565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2425.239602] ? selinux_file_ioctl+0xb6/0x270 [ 2425.239626] ? tty_fasync+0x390/0x390 [ 2425.239647] __x64_sys_ioctl+0x19a/0x210 [ 2425.239672] do_syscall_64+0x33/0x40 [ 2425.239690] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.239702] RIP: 0033:0x7f359274eb19 [ 2425.239721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.239731] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2425.239751] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2425.239762] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2425.239773] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.239785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2425.239796] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 [ 2425.270458] FAULT_INJECTION: forcing a failure. [ 2425.270458] name failslab, interval 1, probability 0, space 0, times 0 [ 2425.270480] CPU: 1 PID: 29786 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2425.270492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2425.270499] Call Trace: [ 2425.270523] dump_stack+0x107/0x167 [ 2425.270548] should_fail.cold+0x5/0xa [ 2425.270576] should_failslab+0x5/0x20 [ 2425.270598] __kmalloc_node_track_caller+0x74/0x3b0 [ 2425.270615] ? ip_frag_next+0x11d/0x9e0 [ 2425.270633] ? __local_bh_enable_ip+0x9d/0x100 [ 2425.270658] __alloc_skb+0xb1/0x5b0 [ 2425.270682] ip_frag_next+0x11d/0x9e0 [ 2425.270711] ip_do_fragment+0x96b/0x1dd0 [ 2425.270730] ? ip_frag_next+0x9e0/0x9e0 [ 2425.270763] ? ip_finish_output2+0x21f0/0x21f0 [ 2425.270780] ? nf_hook+0x137/0x510 [ 2425.270801] ? lock_downgrade+0x6d0/0x6d0 [ 2425.270817] ? trace_hardirqs_on+0x5b/0x180 [ 2425.270841] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2425.270877] ip_fragment.constprop.0+0x174/0x240 [ 2425.270900] __ip_finish_output.part.0+0x3db/0xb50 [ 2425.270918] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 2425.270941] ? ip_fragment.constprop.0+0x240/0x240 [ 2425.270965] ? netif_rx_ni+0xe7/0x300 [ 2425.270991] ip_mc_output+0x401/0xa30 [ 2425.271016] ip_send_skb+0xdd/0x260 [ 2425.271040] udp_send_skb+0x6da/0x11d0 [ 2425.271072] udp_sendmsg+0x139a/0x2170 [ 2425.271090] ? mark_lock+0xf5/0x2df0 [ 2425.271110] ? ip_frag_init+0x350/0x350 [ 2425.271131] ? mark_lock+0xf5/0x2df0 [ 2425.271150] ? perf_trace_lock+0xac/0x490 [ 2425.271168] ? udp_setsockopt+0xc0/0xc0 [ 2425.271187] ? mark_lock+0xf5/0x2df0 [ 2425.271206] ? __lockdep_reset_lock+0x180/0x180 [ 2425.271232] ? mark_lock+0xf5/0x2df0 [ 2425.271254] ? mark_lock+0xf5/0x2df0 [ 2425.271273] ? lock_chain_count+0x20/0x20 [ 2425.271292] ? __lock_acquire+0xbb1/0x5b00 [ 2425.271313] ? lock_chain_count+0x20/0x20 [ 2425.271345] ? perf_trace_lock+0xac/0x490 [ 2425.271364] ? __lockdep_reset_lock+0x180/0x180 [ 2425.271393] udpv6_sendmsg+0x1bed/0x2af0 [ 2425.271433] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.271459] ? mark_lock+0xf5/0x2df0 [ 2425.271485] ? lock_acquire+0x197/0x470 [ 2425.271501] ? find_held_lock+0x2c/0x110 [ 2425.271526] ? __might_fault+0xd3/0x180 [ 2425.271545] ? lock_downgrade+0x6d0/0x6d0 [ 2425.271568] ? lock_downgrade+0x6d0/0x6d0 [ 2425.271593] ? sock_has_perm+0x1ea/0x280 [ 2425.271615] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2425.271639] ? _copy_from_user+0xfb/0x1b0 [ 2425.271670] ? __import_iovec+0x458/0x590 [ 2425.271689] ? udp_v6_push_pending_frames+0x360/0x360 [ 2425.271712] inet6_sendmsg+0x105/0x140 [ 2425.271732] ? inet6_compat_ioctl+0x320/0x320 [ 2425.271748] __sock_sendmsg+0xf2/0x190 [ 2425.271768] ____sys_sendmsg+0x70d/0x870 [ 2425.271790] ? sock_write_iter+0x3d0/0x3d0 [ 2425.271805] ? do_recvmmsg+0x6d0/0x6d0 [ 2425.271824] ? perf_trace_lock+0xac/0x490 [ 2425.271849] ? __lockdep_reset_lock+0x180/0x180 [ 2425.271865] ? perf_trace_lock+0xac/0x490 [ 2425.271891] ___sys_sendmsg+0xf3/0x170 [ 2425.271912] ? sendmsg_copy_msghdr+0x160/0x160 [ 2425.271937] ? lock_downgrade+0x6d0/0x6d0 [ 2425.271959] ? find_held_lock+0x2c/0x110 [ 2425.271988] ? __fget_files+0x296/0x4c0 [ 2425.272018] ? __fget_light+0xea/0x290 [ 2425.272046] __sys_sendmsg+0xe5/0x1b0 [ 2425.272065] ? __sys_sendmsg_sock+0x40/0x40 [ 2425.272082] ? rcu_read_lock_any_held+0x75/0xa0 [ 2425.272121] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2425.272141] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2425.272155] ? trace_hardirqs_on+0x5b/0x180 [ 2425.272180] do_syscall_64+0x33/0x40 [ 2425.272198] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2425.272211] RIP: 0033:0x7f9f7e251b19 [ 2425.272232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2425.272242] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2425.272264] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2425.272276] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2425.272287] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2425.272298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2425.272310] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2425.395194] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 11:23:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0x3f00000000000000}]) 11:23:21 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x8008330e, 0x0) 11:23:21 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x1, 0xff, 0x2, 0x0, 0x4, 0x4020, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x0, 0x9}, 0x0, 0x9, 0xfff, 0x3, 0x1000, 0x1, 0x8001, 0x0, 0x7, 0x0, 0x50e7}, 0x0, 0x6, r0, 0xb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:23:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 68) 11:23:21 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 3) 11:23:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80086601, 0x0) 11:23:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) 11:23:21 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2441.266075] FAULT_INJECTION: forcing a failure. [ 2441.266075] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.268476] CPU: 1 PID: 29799 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2441.269893] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.271615] Call Trace: [ 2441.272196] dump_stack+0x107/0x167 [ 2441.273006] should_fail.cold+0x5/0xa [ 2441.273784] ? create_object.isra.0+0x3a/0xa20 [ 2441.274733] should_failslab+0x5/0x20 [ 2441.275518] kmem_cache_alloc+0x5b/0x310 [ 2441.276363] create_object.isra.0+0x3a/0xa20 [ 2441.277271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2441.278336] kmem_cache_alloc+0x159/0x310 [ 2441.279180] __pmd_alloc+0x94/0x5e0 [ 2441.279921] handle_mm_fault+0x1ac4/0x3500 [ 2441.280781] ? __lock_acquire+0x1657/0x5b00 [ 2441.281658] ? __pmd_alloc+0x5e0/0x5e0 [ 2441.282464] ? vmacache_find+0x55/0x2a0 [ 2441.283266] ? vmacache_update+0xce/0x140 [ 2441.284112] do_user_addr_fault+0x56e/0xc60 [ 2441.284996] exc_page_fault+0xa2/0x1a0 [ 2441.285786] asm_exc_page_fault+0x1e/0x30 [ 2441.286644] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2441.287654] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f [ 2441.291431] RSP: 0018:ffff88804ddd7b98 EFLAGS: 00050293 [ 2441.292531] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2441.293998] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff888036c357f8 [ 2441.295472] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2441.296919] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2441.298377] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2441.299842] ? vt_ioctl+0x1ccb/0x2c90 [ 2441.300622] vt_ioctl+0x1d0b/0x2c90 [ 2441.301382] ? vt_waitactive+0x3a0/0x3a0 [ 2441.301407] ? __lock_acquire+0xbb1/0x5b00 [ 2441.301444] ? perf_trace_lock+0xac/0x490 [ 2441.301467] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2441.301489] ? vt_waitactive+0x3a0/0x3a0 [ 2441.301512] tty_ioctl+0x862/0x18b0 [ 2441.301534] ? tty_fasync+0x390/0x390 [ 2441.301554] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2441.301572] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2441.301591] ? do_vfs_ioctl+0x283/0x10d0 [ 2441.301608] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2441.301627] ? generic_block_fiemap+0x60/0x60 [ 2441.301649] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2441.301687] ? selinux_file_ioctl+0xb6/0x270 [ 2441.301714] ? tty_fasync+0x390/0x390 [ 2441.301735] __x64_sys_ioctl+0x19a/0x210 [ 2441.301760] do_syscall_64+0x33/0x40 [ 2441.301778] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2441.301790] RIP: 0033:0x7f359274eb19 [ 2441.301810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 11:23:21 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 69) 11:23:21 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e000040000000000000000000"], 0x14}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)=""/270, 0x10e}], 0x1, 0x0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000001740)={0x2, 0x4e21, @empty}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d2e2c4f4b4861777938e37cc6aa5e6317b632ef4fac2ae3a0bfa05063787f5f99462ff96073b36d0dfeec64c8612182a77458d9f01962ccf1fee60a7f2ca8ce21c049939c62508d63a620f81489d3173a184846ac17b880161bbed8d48d64550cd6802e3ba67c054c9fe640e32a3dbec96f8e7a2ed03feaaabb19f38ae4793f9886a30398e821982c8bb6e37ea10c78eb52c2a5ec2880fe0ebf0945ade0ab3646c04d11e50b13cd13972df1ac7cbe8a99950971"], 0xfdef) r3 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r4 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r3}) keyctl$chown(0x4, r3, 0xee01, r4) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x4, 0x3}, 0x6) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) fcntl$setown(r5, 0x8, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000140)={{}, {0x1, 0x1}, [{0x2, 0x3, 0xffffffffffffffff}, {0x2, 0x2, 0xffffffffffffffff}], {0x4, 0x6}, [{}, {0x8, 0x0, r4}, {0x8, 0x1}], {0x10, 0x2}, {0x20, 0x7}}, 0x4c, 0x2) unshare(0x48020200) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 11:23:21 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) 11:23:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80087601, 0x0) [ 2441.301820] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 11:23:21 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2441.301840] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2441.301852] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2441.301863] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.301874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2441.301885] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 [ 2441.303167] FAULT_INJECTION: forcing a failure. [ 2441.303167] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.303192] CPU: 0 PID: 29806 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2441.303205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.303213] Call Trace: [ 2441.303239] dump_stack+0x107/0x167 [ 2441.303267] should_fail.cold+0x5/0xa [ 2441.303288] ? lock_release+0x680/0x680 [ 2441.303309] ? skb_clone+0x14f/0x3d0 [ 2441.303335] should_failslab+0x5/0x20 11:23:21 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc0045878, 0x0) [ 2441.303356] kmem_cache_alloc+0x5b/0x310 [ 2441.303385] skb_clone+0x14f/0x3d0 [ 2441.303421] dev_queue_xmit_nit+0x3a7/0xb00 [ 2441.303459] dev_hard_start_xmit+0xab/0x6f0 [ 2441.303481] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2441.303509] __dev_queue_xmit+0x17ec/0x2710 [ 2441.303538] ? find_held_lock+0x2c/0x110 [ 2441.303565] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2441.303599] ? mark_held_locks+0x9e/0xe0 [ 2441.303627] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2441.303655] neigh_connected_output+0x382/0x4d0 [ 2441.303694] ip_finish_output2+0x6f1/0x21f0 [ 2441.303720] ? ip_copy_metadata+0x5f7/0xa40 [ 2441.303742] ? ip_frag_next+0x9e0/0x9e0 [ 2441.303763] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2441.303796] ip_do_fragment+0x189e/0x1dd0 [ 2441.303817] ? ip_frag_next+0x9e0/0x9e0 [ 2441.303855] ? ip_finish_output2+0x21f0/0x21f0 [ 2441.303874] ? nf_hook+0x137/0x510 [ 2441.303906] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2441.303930] ? nf_hook_slow+0xfc/0x1e0 [ 2441.303967] ip_fragment.constprop.0+0x174/0x240 [ 2441.303993] __ip_finish_output.part.0+0x3db/0xb50 [ 2441.304018] ? ip_fragment.constprop.0+0x240/0x240 [ 2441.304043] ? netif_rx_ni+0xe7/0x300 [ 2441.304072] ip_mc_output+0x401/0xa30 [ 2441.304101] ip_send_skb+0xdd/0x260 [ 2441.304127] udp_send_skb+0x6da/0x11d0 [ 2441.304164] udp_sendmsg+0x139a/0x2170 [ 2441.304185] ? mark_lock+0xf5/0x2df0 [ 2441.304207] ? ip_frag_init+0x350/0x350 [ 2441.304231] ? mark_lock+0xf5/0x2df0 [ 2441.304252] ? perf_trace_lock+0xac/0x490 [ 2441.304272] ? udp_setsockopt+0xc0/0xc0 [ 2441.304293] ? mark_lock+0xf5/0x2df0 [ 2441.304314] ? __lockdep_reset_lock+0x180/0x180 [ 2441.304343] ? mark_lock+0xf5/0x2df0 [ 2441.304369] ? mark_lock+0xf5/0x2df0 [ 2441.304391] ? lock_chain_count+0x20/0x20 [ 2441.304412] ? __lock_acquire+0xbb1/0x5b00 [ 2441.304434] ? lock_chain_count+0x20/0x20 [ 2441.304472] ? perf_trace_lock+0xac/0x490 [ 2441.304493] ? __lockdep_reset_lock+0x180/0x180 [ 2441.304525] udpv6_sendmsg+0x1bed/0x2af0 [ 2441.304567] ? udp_v6_push_pending_frames+0x360/0x360 [ 2441.304598] ? mark_lock+0xf5/0x2df0 [ 2441.304627] ? lock_acquire+0x197/0x470 [ 2441.304645] ? find_held_lock+0x2c/0x110 [ 2441.304673] ? __might_fault+0xd3/0x180 [ 2441.304694] ? lock_downgrade+0x6d0/0x6d0 [ 2441.304721] ? lock_downgrade+0x6d0/0x6d0 [ 2441.304749] ? sock_has_perm+0x1ea/0x280 [ 2441.304775] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2441.304801] ? _copy_from_user+0xfb/0x1b0 [ 2441.304838] ? __import_iovec+0x458/0x590 [ 2441.304860] ? udp_v6_push_pending_frames+0x360/0x360 [ 2441.304886] inet6_sendmsg+0x105/0x140 [ 2441.304908] ? inet6_compat_ioctl+0x320/0x320 [ 2441.304926] __sock_sendmsg+0xf2/0x190 [ 2441.304948] ____sys_sendmsg+0x70d/0x870 [ 2441.304973] ? sock_write_iter+0x3d0/0x3d0 [ 2441.304991] ? do_recvmmsg+0x6d0/0x6d0 [ 2441.305011] ? perf_trace_lock+0xac/0x490 [ 2441.305040] ? __lockdep_reset_lock+0x180/0x180 [ 2441.305058] ? perf_trace_lock+0xac/0x490 [ 2441.305088] ___sys_sendmsg+0xf3/0x170 [ 2441.305112] ? sendmsg_copy_msghdr+0x160/0x160 [ 2441.305141] ? lock_downgrade+0x6d0/0x6d0 [ 2441.305166] ? find_held_lock+0x2c/0x110 [ 2441.305200] ? __fget_files+0x296/0x4c0 [ 2441.305235] ? __fget_light+0xea/0x290 [ 2441.305267] __sys_sendmsg+0xe5/0x1b0 [ 2441.305288] ? __sys_sendmsg_sock+0x40/0x40 [ 2441.305308] ? rcu_read_lock_any_held+0x75/0xa0 [ 2441.305353] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2441.305375] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2441.305391] ? trace_hardirqs_on+0x5b/0x180 [ 2441.305419] do_syscall_64+0x33/0x40 [ 2441.305439] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2441.305453] RIP: 0033:0x7f9f7e251b19 [ 2441.305475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2441.305487] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.305511] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2441.305524] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2441.305536] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.305549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2441.305562] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2441.484476] FAULT_INJECTION: forcing a failure. [ 2441.484476] name failslab, interval 1, probability 0, space 0, times 0 [ 2441.484500] CPU: 0 PID: 29820 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2441.484512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2441.484520] Call Trace: [ 2441.484543] dump_stack+0x107/0x167 [ 2441.484570] should_fail.cold+0x5/0xa [ 2441.484594] ? create_object.isra.0+0x3a/0xa20 [ 2441.484617] should_failslab+0x5/0x20 [ 2441.484637] kmem_cache_alloc+0x5b/0x310 [ 2441.484658] ? lock_acquire+0x197/0x470 [ 2441.484683] create_object.isra.0+0x3a/0xa20 [ 2441.484704] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2441.484732] kmem_cache_alloc+0x159/0x310 [ 2441.484761] skb_clone+0x14f/0x3d0 [ 2441.484789] dev_queue_xmit_nit+0x3a7/0xb00 [ 2441.484827] dev_hard_start_xmit+0xab/0x6f0 [ 2441.484849] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2441.484877] __dev_queue_xmit+0x17ec/0x2710 [ 2441.484905] ? find_held_lock+0x2c/0x110 [ 2441.484931] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2441.484965] ? mark_held_locks+0x9e/0xe0 [ 2441.484992] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2441.485020] neigh_connected_output+0x382/0x4d0 [ 2441.485058] ip_finish_output2+0x6f1/0x21f0 [ 2441.485084] ? ip_copy_metadata+0x5f7/0xa40 [ 2441.485107] ? ip_frag_next+0x9e0/0x9e0 [ 2441.485130] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2441.485164] ip_do_fragment+0x189e/0x1dd0 [ 2441.485185] ? ip_frag_next+0x9e0/0x9e0 [ 2441.485222] ? ip_finish_output2+0x21f0/0x21f0 [ 2441.485241] ? nf_hook+0x137/0x510 [ 2441.485274] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2441.485297] ? nf_hook_slow+0xfc/0x1e0 [ 2441.485334] ip_fragment.constprop.0+0x174/0x240 [ 2441.485360] __ip_finish_output.part.0+0x3db/0xb50 [ 2441.485385] ? ip_fragment.constprop.0+0x240/0x240 [ 2441.485417] ? netif_rx_ni+0xe7/0x300 [ 2441.485445] ip_mc_output+0x401/0xa30 [ 2441.485474] ip_send_skb+0xdd/0x260 [ 2441.485500] udp_send_skb+0x6da/0x11d0 [ 2441.485536] udp_sendmsg+0x139a/0x2170 [ 2441.485556] ? mark_lock+0xf5/0x2df0 [ 2441.485578] ? ip_frag_init+0x350/0x350 [ 2441.485602] ? mark_lock+0xf5/0x2df0 [ 2441.485622] ? perf_trace_lock+0xac/0x490 [ 2441.485642] ? udp_setsockopt+0xc0/0xc0 [ 2441.485662] ? mark_lock+0xf5/0x2df0 [ 2441.485683] ? __lockdep_reset_lock+0x180/0x180 [ 2441.485712] ? mark_lock+0xf5/0x2df0 [ 2441.485737] ? mark_lock+0xf5/0x2df0 [ 2441.485757] ? lock_chain_count+0x20/0x20 [ 2441.485784] ? __lock_acquire+0xbb1/0x5b00 [ 2441.485806] ? lock_chain_count+0x20/0x20 [ 2441.485843] ? perf_trace_lock+0xac/0x490 [ 2441.485864] ? __lockdep_reset_lock+0x180/0x180 [ 2441.485896] udpv6_sendmsg+0x1bed/0x2af0 [ 2441.485937] ? udp_v6_push_pending_frames+0x360/0x360 [ 2441.485967] ? mark_lock+0xf5/0x2df0 [ 2441.485994] ? lock_acquire+0x197/0x470 [ 2441.486013] ? find_held_lock+0x2c/0x110 [ 2441.486041] ? __might_fault+0xd3/0x180 [ 2441.486062] ? lock_downgrade+0x6d0/0x6d0 [ 2441.486087] ? lock_downgrade+0x6d0/0x6d0 [ 2441.486115] ? sock_has_perm+0x1ea/0x280 [ 2441.486149] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2441.486175] ? _copy_from_user+0xfb/0x1b0 [ 2441.486212] ? __import_iovec+0x458/0x590 [ 2441.486233] ? udp_v6_push_pending_frames+0x360/0x360 [ 2441.486259] inet6_sendmsg+0x105/0x140 [ 2441.486281] ? inet6_compat_ioctl+0x320/0x320 [ 2441.486299] __sock_sendmsg+0xf2/0x190 [ 2441.486321] ____sys_sendmsg+0x70d/0x870 [ 2441.486346] ? sock_write_iter+0x3d0/0x3d0 [ 2441.486363] ? do_recvmmsg+0x6d0/0x6d0 [ 2441.486384] ? perf_trace_lock+0xac/0x490 [ 2441.486412] ? __lockdep_reset_lock+0x180/0x180 [ 2441.486430] ? perf_trace_lock+0xac/0x490 [ 2441.486459] ___sys_sendmsg+0xf3/0x170 [ 2441.486483] ? sendmsg_copy_msghdr+0x160/0x160 [ 2441.486512] ? lock_downgrade+0x6d0/0x6d0 [ 2441.486537] ? find_held_lock+0x2c/0x110 [ 2441.486569] ? __fget_files+0x296/0x4c0 [ 2441.486605] ? __fget_light+0xea/0x290 [ 2441.486636] __sys_sendmsg+0xe5/0x1b0 [ 2441.486657] ? __sys_sendmsg_sock+0x40/0x40 [ 2441.486677] ? rcu_read_lock_any_held+0x75/0xa0 [ 2441.486721] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2441.486742] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2441.486758] ? trace_hardirqs_on+0x5b/0x180 [ 2441.486785] do_syscall_64+0x33/0x40 [ 2441.486804] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2441.486819] RIP: 0033:0x7f9f7e251b19 [ 2441.486840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2441.486852] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2441.486876] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2441.486888] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2441.486901] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2441.486913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2441.486926] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:23:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xeffdffffffffffff}]) 11:23:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0) 11:23:36 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 4) 11:23:36 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) 11:23:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 70) 11:23:36 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc0045878, 0x0) 11:23:36 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) r1 = signalfd(r0, &(0x7f0000000100)={[0xffffffffffffff01]}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x9, 0x40, 0x9, 0x0, 0x94ad, 0xc0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext={0x0, 0x81}, 0x0, 0x3ff, 0xb8, 0x0, 0x4, 0x4800, 0x4, 0x0, 0xffff0000, 0x0, 0x1}, 0x0, 0xd, r1, 0x3) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:23:36 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='personality\x00') pread64(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/143, 0x8f}], 0x5) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xff, 0x1, 0xff, 0x2, 0x0, 0x4, 0x4020, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x2, @perf_config_ext={0x0, 0x9}, 0x0, 0x9, 0xfff, 0x3, 0x1000, 0x1, 0x8001, 0x0, 0x7, 0x0, 0x50e7}, 0x0, 0x6, r0, 0xb) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2456.880184] FAULT_INJECTION: forcing a failure. [ 2456.880184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2456.882058] CPU: 1 PID: 29842 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2456.883150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2456.884447] Call Trace: [ 2456.884858] dump_stack+0x107/0x167 [ 2456.885432] should_fail.cold+0x5/0xa [ 2456.886028] __alloc_pages_nodemask+0x182/0x600 [ 2456.886778] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2456.887648] ? find_held_lock+0x2c/0x110 [ 2456.888141] ? __pmd_alloc+0x2db/0x5e0 [ 2456.888616] ? lock_downgrade+0x6d0/0x6d0 [ 2456.889120] ? do_raw_spin_lock+0x121/0x260 [ 2456.889688] alloc_pages_current+0x187/0x280 [ 2456.890271] pte_alloc_one+0x16/0x1a0 [ 2456.890775] __pte_alloc+0x1d/0x330 [ 2456.891253] handle_mm_fault+0x287f/0x3500 [ 2456.891802] ? __lock_acquire+0x1657/0x5b00 [ 2456.892369] ? __pmd_alloc+0x5e0/0x5e0 [ 2456.892839] ? vmacache_find+0x55/0x2a0 [ 2456.893354] ? vmacache_update+0xce/0x140 [ 2456.893903] do_user_addr_fault+0x56e/0xc60 [ 2456.894464] exc_page_fault+0xa2/0x1a0 [ 2456.894972] asm_exc_page_fault+0x1e/0x30 [ 2456.895525] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2456.896175] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f [ 2456.898525] RSP: 0018:ffff8880502c7b98 EFLAGS: 00050293 [ 2456.899194] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2456.900081] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff888056c6d7f8 [ 2456.900972] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2456.901856] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2456.902745] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2456.903632] ? vt_ioctl+0x1ccb/0x2c90 [ 2456.904102] vt_ioctl+0x1d0b/0x2c90 [ 2456.904557] ? vt_waitactive+0x3a0/0x3a0 [ 2456.905062] ? __lock_acquire+0xbb1/0x5b00 [ 2456.905571] ? perf_trace_lock+0xac/0x490 [ 2456.906082] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2456.906705] ? vt_waitactive+0x3a0/0x3a0 [ 2456.907203] tty_ioctl+0x862/0x18b0 [ 2456.907658] ? tty_fasync+0x390/0x390 [ 2456.908132] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2456.908846] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2456.909483] ? do_vfs_ioctl+0x283/0x10d0 [ 2456.909982] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2456.910628] ? generic_block_fiemap+0x60/0x60 [ 2456.911178] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2456.911833] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2456.912501] ? trace_raw_output_preemptirq_template+0xab/0x130 [ 2456.913234] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2456.913913] ? selinux_file_ioctl+0xb6/0x270 [ 2456.914474] ? tty_fasync+0x390/0x390 [ 2456.914945] __x64_sys_ioctl+0x19a/0x210 [ 2456.915447] do_syscall_64+0x33/0x40 [ 2456.915900] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2456.916165] FAULT_INJECTION: forcing a failure. [ 2456.916165] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.916542] RIP: 0033:0x7f359274eb19 [ 2456.916555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.916561] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.922492] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2456.923369] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2456.924246] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.925111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2456.925945] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 [ 2456.926845] CPU: 0 PID: 29854 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2456.928285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2456.929987] Call Trace: 11:23:36 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x4000000000000000, 0xffffffffffffffff, 0x0) [ 2456.930547] dump_stack+0x107/0x167 [ 2456.931416] should_fail.cold+0x5/0xa [ 2456.932204] ? dst_alloc+0x9e/0x5d0 [ 2456.932960] should_failslab+0x5/0x20 [ 2456.933745] kmem_cache_alloc+0x5b/0x310 [ 2456.934608] ? fnhe_hashfun+0x79/0x130 [ 2456.935428] dst_alloc+0x9e/0x5d0 [ 2456.936153] rt_dst_alloc+0x73/0x440 [ 2456.936927] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2456.938022] ip_route_output_key_hash+0x18d/0x340 [ 2456.939029] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2456.940157] ? ip_mc_output+0x401/0xa30 [ 2456.940980] ? ip_send_skb+0xdd/0x260 [ 2456.941765] ? udp_send_skb+0x6da/0x11d0 [ 2456.942627] ? __sys_sendmsg+0xe5/0x1b0 [ 2456.943446] ? do_syscall_64+0x33/0x40 [ 2456.944247] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2456.945348] ? lock_acquire+0x197/0x470 [ 2456.946174] ip_route_output_flow+0x23/0x150 [ 2456.947112] ip_tunnel_xmit+0x70e/0x2f50 [ 2456.947962] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2456.949026] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2456.950245] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2456.951202] ? kmem_cache_free+0xa7/0x2d0 [ 2456.952070] ? perf_trace_lock+0xac/0x490 [ 2456.952925] ? kfree_skbmem+0xef/0x1b0 [ 2456.953738] ? kmem_cache_free+0x249/0x2d0 [ 2456.954648] sit_tunnel_xmit+0xef0/0x2960 [ 2456.955514] ? find_held_lock+0x2c/0x110 [ 2456.956374] ? ipip_rcv+0x4f0/0x4f0 [ 2456.957129] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2456.958113] ? lock_downgrade+0x6d0/0x6d0 [ 2456.958991] ? run_filter+0x4d0/0x4d0 [ 2456.959787] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2456.960746] dev_hard_start_xmit+0x1cb/0x6f0 [ 2456.961697] __dev_queue_xmit+0x17ec/0x2710 [ 2456.962624] ? find_held_lock+0x2c/0x110 [ 2456.963474] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2456.964436] ? mark_held_locks+0x9e/0xe0 [ 2456.965282] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2456.966377] neigh_connected_output+0x382/0x4d0 [ 2456.967367] ip_finish_output2+0x6f1/0x21f0 [ 2456.968264] ? ip_copy_metadata+0x5f7/0xa40 [ 2456.969163] ? ip_frag_next+0x9e0/0x9e0 [ 2456.969986] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2456.970967] ip_do_fragment+0x189e/0x1dd0 [ 2456.971825] ? ip_frag_next+0x9e0/0x9e0 [ 2456.972666] ? ip_finish_output2+0x21f0/0x21f0 [ 2456.973610] ? nf_hook+0x137/0x510 [ 2456.974371] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2456.975439] ? nf_hook_slow+0xfc/0x1e0 [ 2456.976278] ip_fragment.constprop.0+0x174/0x240 [ 2456.977284] __ip_finish_output.part.0+0x3db/0xb50 [ 2456.978305] ? ip_fragment.constprop.0+0x240/0x240 [ 2456.979349] ? netif_rx_ni+0xe7/0x300 [ 2456.980148] ip_mc_output+0x401/0xa30 [ 2456.980942] ip_send_skb+0xdd/0x260 [ 2456.981701] udp_send_skb+0x6da/0x11d0 [ 2456.982544] udp_sendmsg+0x139a/0x2170 [ 2456.983351] ? mark_lock+0xf5/0x2df0 [ 2456.984128] ? ip_frag_init+0x350/0x350 [ 2456.984963] ? mark_lock+0xf5/0x2df0 [ 2456.985738] ? perf_trace_lock+0xac/0x490 [ 2456.986616] ? udp_setsockopt+0xc0/0xc0 [ 2456.987479] ? mark_lock+0xf5/0x2df0 [ 2456.988252] ? __lockdep_reset_lock+0x180/0x180 [ 2456.989226] ? mark_lock+0xf5/0x2df0 [ 2456.990000] ? mark_lock+0xf5/0x2df0 [ 2456.990794] ? lock_chain_count+0x20/0x20 [ 2456.991651] ? __lock_acquire+0xbb1/0x5b00 [ 2456.992532] ? lock_chain_count+0x20/0x20 [ 2456.993407] ? perf_trace_lock+0xac/0x490 [ 2456.994267] ? __lockdep_reset_lock+0x180/0x180 [ 2456.995258] udpv6_sendmsg+0x1bed/0x2af0 [ 2456.996149] ? udp_v6_push_pending_frames+0x360/0x360 [ 2456.997227] ? mark_lock+0xf5/0x2df0 [ 2456.998010] ? lock_acquire+0x197/0x470 [ 2456.998845] ? find_held_lock+0x2c/0x110 [ 2456.999694] ? __might_fault+0xd3/0x180 [ 2457.000518] ? lock_downgrade+0x6d0/0x6d0 [ 2457.001380] ? lock_downgrade+0x6d0/0x6d0 [ 2457.002245] ? sock_has_perm+0x1ea/0x280 [ 2457.003111] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2457.004189] ? _copy_from_user+0xfb/0x1b0 [ 2457.005065] ? __import_iovec+0x458/0x590 [ 2457.005926] ? udp_v6_push_pending_frames+0x360/0x360 [ 2457.007011] inet6_sendmsg+0x105/0x140 [ 2457.007819] ? inet6_compat_ioctl+0x320/0x320 [ 2457.008745] __sock_sendmsg+0xf2/0x190 [ 2457.009553] ____sys_sendmsg+0x70d/0x870 [ 2457.010424] ? sock_write_iter+0x3d0/0x3d0 [ 2457.011298] ? do_recvmmsg+0x6d0/0x6d0 [ 2457.012103] ? perf_trace_lock+0xac/0x490 [ 2457.012970] ? __lockdep_reset_lock+0x180/0x180 [ 2457.013931] ? perf_trace_lock+0xac/0x490 [ 2457.014807] ___sys_sendmsg+0xf3/0x170 [ 2457.015619] ? sendmsg_copy_msghdr+0x160/0x160 [ 2457.016573] ? lock_downgrade+0x6d0/0x6d0 [ 2457.017441] ? find_held_lock+0x2c/0x110 [ 2457.018336] ? __fget_files+0x296/0x4c0 [ 2457.019179] ? __fget_light+0xea/0x290 [ 2457.020025] __sys_sendmsg+0xe5/0x1b0 [ 2457.020813] ? __sys_sendmsg_sock+0x40/0x40 [ 2457.021707] ? rcu_read_lock_any_held+0x75/0xa0 [ 2457.022703] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.023785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.024847] ? trace_hardirqs_on+0x5b/0x180 [ 2457.025745] do_syscall_64+0x33/0x40 [ 2457.026527] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.027588] RIP: 0033:0x7f9f7e251b19 [ 2457.028360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.032164] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2457.033739] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2457.035221] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2457.036733] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.038204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.039689] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:23:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x401, 0x2}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x4, 0x7f, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x6, 0x3ee5, 0x1, 0x32b7}) r1 = syz_open_dev$vcsn(&(0x7f0000000440), 0x2, 0x1) ioctl$RTC_AIE_ON(r1, 0x7001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)={0xcc, 0x83, 0xbd96, "76d988466f7c97a65a2f1740fe5b6d8186d104ec3d7fa4e7b07b02f5b9f644babdafb073cfc8e8bba86b4c3422c2654910b2ba35b6b388ab97146f6c7ee2c80d24d5adb451e621f53a44b25fe10b2f2cd36de082874e6d52849eb77d9b9b22bba66e62355fe62a8d95b5e25dd8e885e26cd7b93aa6521e1acd62214017406ae5c1208d0873cc665b82ccd1e5c47325345fa343f41a5938ad5c35a59f1a544ba44bcdb666c73e1bd578eb5465929c20e0bbd207113807f118d56e153d546feec3b177504c7596aacedef6f828"}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/19]) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8800) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) readv(0xffffffffffffffff, &(0x7f0000001300), 0x0) 11:23:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc0189436, 0x0) 11:23:37 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 5) 11:23:37 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfcfdffffffffffff}]) [ 2457.121097] FAULT_INJECTION: forcing a failure. [ 2457.121097] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.122455] CPU: 1 PID: 29866 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2457.123239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.124186] Call Trace: [ 2457.124495] dump_stack+0x107/0x167 [ 2457.124921] should_fail.cold+0x5/0xa [ 2457.125363] ? ptlock_alloc+0x1d/0x70 [ 2457.125810] should_failslab+0x5/0x20 [ 2457.126250] kmem_cache_alloc+0x5b/0x310 [ 2457.126735] ptlock_alloc+0x1d/0x70 [ 2457.127159] pte_alloc_one+0x68/0x1a0 [ 2457.127601] __pte_alloc+0x1d/0x330 [ 2457.128042] handle_mm_fault+0x287f/0x3500 [ 2457.128553] ? __lock_acquire+0x1657/0x5b00 [ 2457.129030] ? __pmd_alloc+0x5e0/0x5e0 [ 2457.129495] ? vmacache_find+0x55/0x2a0 [ 2457.129931] ? vmacache_update+0xce/0x140 [ 2457.130439] do_user_addr_fault+0x56e/0xc60 [ 2457.130917] exc_page_fault+0xa2/0x1a0 [ 2457.131379] asm_exc_page_fault+0x1e/0x30 [ 2457.131841] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2457.132426] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f [ 2457.134486] RSP: 0018:ffff88805630fb98 EFLAGS: 00050293 [ 2457.135077] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2457.135870] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff88804ff22378 [ 2457.136684] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2457.137496] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2457.138277] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2457.139109] ? vt_ioctl+0x1ccb/0x2c90 [ 2457.139539] vt_ioctl+0x1d0b/0x2c90 [ 2457.139958] ? vt_waitactive+0x3a0/0x3a0 [ 2457.140418] ? __lock_acquire+0xbb1/0x5b00 [ 2457.140916] ? perf_trace_lock+0xac/0x490 [ 2457.141383] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2457.141966] ? vt_waitactive+0x3a0/0x3a0 [ 2457.142444] tty_ioctl+0x862/0x18b0 [ 2457.142863] ? tty_fasync+0x390/0x390 [ 2457.143297] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2457.143958] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2457.144549] ? do_vfs_ioctl+0x283/0x10d0 [ 2457.145008] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2457.145610] ? generic_block_fiemap+0x60/0x60 [ 2457.146116] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2457.146683] ? selinux_file_ioctl+0xb6/0x270 [ 2457.147185] ? tty_fasync+0x390/0x390 [ 2457.147620] __x64_sys_ioctl+0x19a/0x210 [ 2457.148084] do_syscall_64+0x33/0x40 [ 2457.148505] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.149083] RIP: 0033:0x7f359274eb19 [ 2457.149506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.151616] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.152449] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2457.153265] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2457.154070] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.154844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2457.155651] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 11:23:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0xc020660b, 0x0) 11:23:37 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0xffffffff00000000, 0xffffffffffffffff, 0x0) 11:23:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 71) 11:23:37 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2457.216636] FAULT_INJECTION: forcing a failure. [ 2457.216636] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.218025] CPU: 1 PID: 29878 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2457.218781] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2457.219668] Call Trace: [ 2457.219958] dump_stack+0x107/0x167 [ 2457.220347] should_fail.cold+0x5/0xa [ 2457.220767] ? create_object.isra.0+0x3a/0xa20 [ 2457.221258] should_failslab+0x5/0x20 [ 2457.221669] kmem_cache_alloc+0x5b/0x310 [ 2457.222107] ? lock_acquire+0x197/0x470 [ 2457.222543] create_object.isra.0+0x3a/0xa20 11:23:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='ramfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000480)='./file0/file0\x00', 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='xfs\x00', 0x200, &(0x7f0000000180)='ramfs\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 2457.223023] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2457.223728] kmem_cache_alloc+0x159/0x310 [ 2457.224179] skb_clone+0x14f/0x3d0 [ 2457.224560] dev_queue_xmit_nit+0x3a7/0xb00 [ 2457.225035] dev_hard_start_xmit+0xab/0x6f0 [ 2457.225495] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2457.226059] __dev_queue_xmit+0x17ec/0x2710 [ 2457.226563] ? find_held_lock+0x2c/0x110 [ 2457.227018] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2457.227533] ? mark_held_locks+0x9e/0xe0 [ 2457.227986] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2457.228576] neigh_connected_output+0x382/0x4d0 [ 2457.229099] ip_finish_output2+0x6f1/0x21f0 [ 2457.229585] ? ip_copy_metadata+0x5f7/0xa40 [ 2457.230061] ? ip_frag_next+0x9e0/0x9e0 [ 2457.230519] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2457.231030] ip_do_fragment+0x189e/0x1dd0 [ 2457.231489] ? ip_frag_next+0x9e0/0x9e0 [ 2457.231939] ? ip_finish_output2+0x21f0/0x21f0 [ 2457.232442] ? nf_hook+0x137/0x510 [ 2457.232846] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2457.233421] ? nf_hook_slow+0xfc/0x1e0 [ 2457.233865] ip_fragment.constprop.0+0x174/0x240 [ 2457.234403] __ip_finish_output.part.0+0x3db/0xb50 [ 2457.234950] ? ip_fragment.constprop.0+0x240/0x240 [ 2457.235497] ? netif_rx_ni+0xe7/0x300 [ 2457.235923] ip_mc_output+0x401/0xa30 [ 2457.236347] ip_send_skb+0xdd/0x260 [ 2457.236754] udp_send_skb+0x6da/0x11d0 [ 2457.237195] udp_sendmsg+0x139a/0x2170 [ 2457.237628] ? mark_lock+0xf5/0x2df0 [ 2457.238037] ? ip_frag_init+0x350/0x350 [ 2457.238499] ? mark_lock+0xf5/0x2df0 [ 2457.238912] ? perf_trace_lock+0xac/0x490 [ 2457.239373] ? udp_setsockopt+0xc0/0xc0 [ 2457.239817] ? mark_lock+0xf5/0x2df0 [ 2457.240229] ? __lockdep_reset_lock+0x180/0x180 [ 2457.240748] ? mark_lock+0xf5/0x2df0 [ 2457.241161] ? mark_lock+0xf5/0x2df0 [ 2457.241574] ? lock_chain_count+0x20/0x20 [ 2457.242036] ? __lock_acquire+0xbb1/0x5b00 [ 2457.242518] ? lock_chain_count+0x20/0x20 [ 2457.242971] ? perf_trace_lock+0xac/0x490 [ 2457.243433] ? __lockdep_reset_lock+0x180/0x180 [ 2457.243954] udpv6_sendmsg+0x1bed/0x2af0 [ 2457.244412] ? udp_v6_push_pending_frames+0x360/0x360 [ 2457.244984] ? mark_lock+0xf5/0x2df0 [ 2457.245402] ? lock_acquire+0x197/0x470 [ 2457.245840] ? find_held_lock+0x2c/0x110 [ 2457.246292] ? __might_fault+0xd3/0x180 [ 2457.246750] ? lock_downgrade+0x6d0/0x6d0 [ 2457.247196] ? lock_downgrade+0x6d0/0x6d0 [ 2457.247668] ? sock_has_perm+0x1ea/0x280 [ 2457.248125] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2457.248701] ? _copy_from_user+0xfb/0x1b0 [ 2457.249168] ? __import_iovec+0x458/0x590 [ 2457.249630] ? udp_v6_push_pending_frames+0x360/0x360 [ 2457.250202] inet6_sendmsg+0x105/0x140 [ 2457.250642] ? inet6_compat_ioctl+0x320/0x320 [ 2457.251117] __sock_sendmsg+0xf2/0x190 [ 2457.251553] ____sys_sendmsg+0x70d/0x870 [ 2457.252008] ? sock_write_iter+0x3d0/0x3d0 [ 2457.252475] ? do_recvmmsg+0x6d0/0x6d0 [ 2457.252901] ? perf_trace_lock+0xac/0x490 [ 2457.253365] ? __lockdep_reset_lock+0x180/0x180 [ 2457.253880] ? perf_trace_lock+0xac/0x490 [ 2457.254353] ___sys_sendmsg+0xf3/0x170 [ 2457.254798] ? sendmsg_copy_msghdr+0x160/0x160 [ 2457.255306] ? lock_downgrade+0x6d0/0x6d0 [ 2457.255772] ? find_held_lock+0x2c/0x110 [ 2457.256229] ? __fget_files+0x296/0x4c0 [ 2457.256677] ? __fget_light+0xea/0x290 [ 2457.257113] __sys_sendmsg+0xe5/0x1b0 [ 2457.257534] ? __sys_sendmsg_sock+0x40/0x40 [ 2457.258012] ? rcu_read_lock_any_held+0x75/0xa0 [ 2457.258552] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2457.259132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2457.259699] ? trace_hardirqs_on+0x5b/0x180 [ 2457.260182] do_syscall_64+0x33/0x40 [ 2457.260595] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2457.261162] RIP: 0033:0x7f9f7e251b19 [ 2457.261577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.263619] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2457.264464] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2457.265262] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2457.266054] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.266857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.267650] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 11:23:37 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000000)) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '/dev/snapshot\x00'}, {}, {0x20, '/dev/snapshot\x00'}, {0x20, ',['}, {}, {0x20, '\x8c,/\\+-'}, {0x20, '/dev/sr0\x00'}, {0x20, '/dev/sr0\x00'}], 0xa, "7eeb761673a27d8399851f9f85fb21c4819cb26f4a0ccf0996c614dadd84c1b0520dd895834a82463bf4d0bd276b27389139dbde049ef7f9f285fdc9958631aac0da383cf43f98077ebc826668e65e11e0f9f02bb8d965bb2c515447334d4c1101ba578f38a4cc96f6bd4ad11d424b7779f70e027bad995fe3bf0ee72095de3aef590351db4d8cdaf5613596ebee78143fb42736e40a8d"}, 0xe0) [ 2457.351390] scsi_io_completion_action: 92 callbacks suppressed [ 2457.352102] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2457.353155] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2457.353943] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2457.354663] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 2457.355506] print_req_error: 259 callbacks suppressed [ 2457.355518] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 2457.357657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.358275] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.359748] buffer_io_error: 998 callbacks suppressed [ 2457.359763] Buffer I/O error on dev sr0, logical block 0, async page read [ 2457.361226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.361864] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.363096] Buffer I/O error on dev sr0, logical block 1, async page read [ 2457.364067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.364701] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.365826] Buffer I/O error on dev sr0, logical block 2, async page read [ 2457.366923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.367546] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.368667] Buffer I/O error on dev sr0, logical block 3, async page read [ 2457.369598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.370223] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.371385] Buffer I/O error on dev sr0, logical block 4, async page read [ 2457.372287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.372926] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.374056] Buffer I/O error on dev sr0, logical block 5, async page read [ 2457.374978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.375601] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.376718] Buffer I/O error on dev sr0, logical block 6, async page read [ 2457.377616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.378232] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.379375] Buffer I/O error on dev sr0, logical block 7, async page read [ 2457.380275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.380927] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2457.382033] Buffer I/O error on dev sr0, logical block 0, async page read [ 2457.382943] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.383566] Buffer I/O error on dev sr0, logical block 1, async page read [ 2457.384455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.385156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.385849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.386537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.387213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.387882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.388644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.389299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.389981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.392541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.393207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.393906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.394620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.395285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.396690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.398533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.399836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.401115] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.402568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.403852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.405154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.406531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.407851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.408934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.409623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.410370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.411237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.411990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.412785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.413539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.414310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.415694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.416976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.418274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.419654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.420997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.424256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.425572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.426913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.428421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.429437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.430446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.432986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.434006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.435065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.436049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.437116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.438476] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.439778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.441218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.441929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.442673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.443326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.444065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.444757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.445562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.446203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.447377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.448106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.448837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.449556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.450207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.450976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.451702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.452421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.453121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.453903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.454613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.455338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.456030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.456797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.457462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.458185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.458971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.460308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.461587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.463008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.464399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.465721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.467039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.468344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.469633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.470373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.471626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.472281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.473303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.474003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.474885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.475620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.476434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.477747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.479052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.481308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.482628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.483918] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.485228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.486571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.488080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.488839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.490028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.490716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.491427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.492126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.494350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.495344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.496098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.497457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.498735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.500033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.501609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.502921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.504245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.505586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.506961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.507717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.508852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.509571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.510255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.511051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.512227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.512931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.513831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.515183] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.516513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.518215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.519534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.520913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.522206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.523541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.524857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.526107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.526797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.527546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.528201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.530624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.531290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.532180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.533345] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.534833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.536150] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.537617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.538938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.540359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.541660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.542991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.544318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.545412] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.546100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.547106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.547790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.548548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.549218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.550049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.550837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.552130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.553972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.556605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.559052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.560471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.561773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.563250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.564791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.566120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.567506] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.568810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.570162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.571624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.573054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.574567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.575906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.577223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.578596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.579986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.581567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.582929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.584479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.585934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.587484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.588812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.590298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.591685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.592368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.593478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.595997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.597741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.600282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.601672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.603650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.605346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.606732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.608092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.609557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.610936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.612276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.613656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.615045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.616382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.617159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.618602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.620010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.621516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.622944] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.624321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.625683] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.629571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.631040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.632392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.633734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.635092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.636436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.637737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.639112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.640666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.642094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.643469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.644823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.646186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.648149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.649551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.650851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.652148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.655565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.656857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.658103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.659736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.661030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.662921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.664337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.665758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.667216] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.668606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.669917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.671270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.672600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.673969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.675327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.676645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.677866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.679386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.680773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.682147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.683475] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.684774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.686086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.687504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.688791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.690070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.690797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.691674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.692308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.692975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.693623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.694248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.694912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.695608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.696236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.699621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.700257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.701101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.701762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.702420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.703053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.704070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.705692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.707016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.708280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.709630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.711100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.712550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.713830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.715270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.715960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.716817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.717516] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.718198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.719489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.720157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.720858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.721762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.723149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.724686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.726034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.727458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.728741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.730047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.731342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.732617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.733261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.733936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.736134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.737098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.739511] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.740167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.740838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.741766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.743123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.744912] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.746311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.747655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.749060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.750351] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.751682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.752998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.754244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.754932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.755771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.756425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.757055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.757865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.758539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.759278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.760823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.762152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.763739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.765154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.766565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.767870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.769195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.770606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.771914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.773188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.774513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.775810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.777086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.778464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.779788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.781164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.781844] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.782744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.783375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.784046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.785096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.785762] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.786457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.787165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.787847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.788631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.789260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.789926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.790638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.791262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.791940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.792757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.794235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.795825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.797118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.798458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.799737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.801053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.802520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.803230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.803950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.804805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.805465] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.806096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.807136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.807806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.808514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.809158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.809843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.810617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.811251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.811923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.812609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.813233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.813886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.814643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.815314] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.815982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.816676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.817300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.817954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.818646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.819286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.819986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.820685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.821308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.821969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.822680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.823309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.823961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.824693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.825368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.826069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.826764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.827423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.828058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.828763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.829435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.830091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.830829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.831520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.832160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.832871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.833564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.834219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.834900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.835589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.836293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.837030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.837697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.838375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.839075] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.839769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.840460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.841122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.841803] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.842529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.843161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.843853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.844576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.845236] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.845941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.846679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.847423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.848127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.848865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.849562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.850195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.850937] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.851633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.852306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.853024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.853726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.854444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.855109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.855812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.856539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.857192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.857888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.858653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.859358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.860020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.860738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.861357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.862056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.862760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.863449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.864091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.864810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.865470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.866135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.866845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.867546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.868175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.868895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.869593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.870300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.871003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.871705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.872369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.873085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.873780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.874491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.875169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.875848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.876579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.877203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.877905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.878596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.879259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.879928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.880695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.881391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.882087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.882778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.883469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.884100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.884834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.885487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.886151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.886852] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.887551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.888172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.888882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.889545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.890210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.890904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.891650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.892311] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.893025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.893692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.894375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.895063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.895761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.896489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.897162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.897827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.898566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.899235] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.899933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.900660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.901294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.902004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.903946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.904686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.905353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.906069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.906786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.907625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.908290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.908956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.909687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.910315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.911040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.911759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.912458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.913099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.913818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.914535] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.915243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.915964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.916708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.917349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.918073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.918801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.919524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.920188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.920897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.921627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.922293] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.922998] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.923723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.924392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.925056] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.925773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.926544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.927223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.927946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.928604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.929290] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.929980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.930702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.931372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.948613] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2457.951085] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2457.952144] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2457.953159] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2457.970085] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2457.971471] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2457.972551] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2457.973586] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2457.974992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.975986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.977033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.978023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.979201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.979873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.980602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.981275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.982033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.982759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.983641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.984272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.985018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.985695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.986450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.987128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.987880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.988601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.989284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.989973] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.990719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.991391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.992097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.992796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.993529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.994203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.994964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.995675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.996391] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.997101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.997812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.998541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.999279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2457.999987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.000736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.001429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.002127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.002854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.003572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.004238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.006518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.007191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.007920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.008615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.009317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.010200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.010936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.011647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.012389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.013088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.013823] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.014529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.015231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.015952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.016685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.017355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.018129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.018846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.019591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.020224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.020942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.021622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.022321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.023023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.023810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.024479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.025176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.025889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.026631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.027307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.028060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.028771] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.029553] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.030226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.030964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.031715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.032437] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.033078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.033820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.034499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.035259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.035999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.036716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.037387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.038097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.038810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.039564] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.040252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.041017] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.041736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.042477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.043114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.043858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.044518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.045221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.045910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.046675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.047350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.048074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.048824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.049538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.050206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.050970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.051685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.052419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.053085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.053790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.054491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.055195] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.055922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.056640] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.057308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.058059] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.058783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.059531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.060161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.060878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.061570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.062265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.062940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.063741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.064451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.065148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.065884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.066620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.067285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.068029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.068736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.069532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.070179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.070919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.071636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.072346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.073038] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.073786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.074487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.075225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.075946] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.076623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.077287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.077982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.078705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.079447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.080121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.080878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.081593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.082251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.082960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.083701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.084444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.085147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.085878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.086652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.087365] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.088111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.088857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.089591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.090253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.090953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.091679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.092382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.093076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.093777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.094482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.095185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.095900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.096583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.097260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.098001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.098725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.099480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.100153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.100868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.101582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.102241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.102954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.103742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.104443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.105136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.105817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.106556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.108854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.109561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.110260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.111008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.111869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.112531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.113227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.113989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.114724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.115358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.116087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.116787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.117532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.118156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.118886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.119565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.120263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.120962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.121674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.122388] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.123074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.123790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.124477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.125146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.125851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.126560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.127264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.128013] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.129931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.130649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.131307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.132031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.132706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.133366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.134138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.134861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.135599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.136255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.136962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.137708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.138450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.139119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.139843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.140543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.141250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.141968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.142651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.143306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.144015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.144712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.145368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.146186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.146880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.147594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.148252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.148939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.149646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.150310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.151005] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.151899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.153253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.154841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.156123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.157518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.158867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.160131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.161481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.162888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.164340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.165644] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.166933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.184847] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.185890] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.186639] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.187326] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 2458.188280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.188962] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.189655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.190304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.191292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.192257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.193256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.194215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.195291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.196282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.197257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.198238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.199058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.199781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.200460] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.201151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.201914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.202663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.203327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.204000] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.204709] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.205369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.206082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.206800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.207917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.208621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.210934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.211667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.212332] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.213044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.213977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.214907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2458.305216] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.307580] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.309221] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.310809] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2458.438239] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.440613] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.442265] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.443857] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 06 00 00 02 00 [ 2458.604107] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.606478] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.608115] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.609689] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2458.690768] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.692250] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.693310] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.694390] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 06 00 00 02 00 [ 2458.724382] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.726535] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.727618] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.728650] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 2458.774106] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 2458.776485] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 2458.778125] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 2458.779418] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 06 00 00 02 00 [ 2459.041661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.043192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.044857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.047681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.049217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.050905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.052285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.053657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.055003] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.056333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.057710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.059199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.060641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.061910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.063247] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.064622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.065952] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.067041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.068897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.070234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.071596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.072816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.074054] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.075321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.076565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.077788] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.079146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.080458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.081676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.082930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.084178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.085445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.086760] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.088018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.089270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.090528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.091795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.093098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.094362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.095814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.097049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.098474] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.099741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.101019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.102282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.103599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.104898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.106151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.107495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.108743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.110021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.111189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.112514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.113731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.114977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.116217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.117456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.118682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.119933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.121242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.122619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.123871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.125087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.126308] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.127560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.128519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.129691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.130673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.134318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.135869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.137554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.138815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.140069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.141303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.142579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.143870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.144809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.146129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.147212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.148600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.149871] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.151180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.152427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.153666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.154945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.156211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.157577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.158793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.160157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.161753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.162898] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.164203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.165561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.166826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.168072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.169322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.170555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.171814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.173052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.173960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.175344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.176754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.178168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.179536] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.180768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.181987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.183234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.184520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.185765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.187007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.188252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.189578] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.190876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.192136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.193377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.194668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.195992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.197231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.198540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.199793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.201006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.202271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.203600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.204826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.206092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.207323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.208579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.209800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.211041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.212291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.213574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.214821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.216130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.217377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.218776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.220143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.221761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.223043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.224336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.225657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.226954] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.228244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.229561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.230836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.232109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.235906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.237175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.238874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.240243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.241611] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.242935] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.244233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.245570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.246863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.248152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.249464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.250809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.252049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.253696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.254585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.255449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.256277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.257570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.258467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.259288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.260336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.261288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.262736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.264019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.265274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.266573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.267882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.269154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.270542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.271919] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.273207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.274500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.275743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.277029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.278305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.279599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.280841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.282092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.283171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.284024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.285008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.286317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.287603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.288822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.290073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.291307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.292546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.293799] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.295164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.296392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.297649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.298880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.300096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.301307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.302608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.303838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.305121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.306369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.307684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.308903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.310121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.311356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.312613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.313795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.315096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.316512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.317747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.319384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.320678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.321947] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.323206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.324565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.325951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.327227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.329124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.330497] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.331756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.333046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.334331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.337724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.338958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.339999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.340826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.341917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.342752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.343981] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.344796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.345636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.346668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.348209] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.349671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.351241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.352737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.354257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.355561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.356821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.358058] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.359320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.360627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.361863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.363144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.364392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.365678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.366929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.368273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.369568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.370820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.372130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.373367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.374664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.375903] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.377141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.378440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.379692] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.380938] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.382213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.383603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.385300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.386620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.387955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.389289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.390565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.391829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.393064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.394396] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.395676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.396915] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.398152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.399450] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.400694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.401934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.403177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.404452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.405703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.406975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.408240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.409667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.410987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.412538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.413896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.415173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.416526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.417775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.419112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.420454] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.421710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.422995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.424274] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.425606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.426951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.428227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.429559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.430910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.432191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.433523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.434886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.436177] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.437526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.440775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.442081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.443355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.444609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.445868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.447453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.448724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.449985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.451316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.452671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.453941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.455219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.456543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.457821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.459107] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.460397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.461698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.462975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.463924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.464675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.465363] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.482519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.484106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.485759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.487493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.489118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.490759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.492208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.493613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.494899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.496298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.497674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.498980] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.500261] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.501678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.502951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.504244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.505652] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.507166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.508598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.509882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.511165] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.512498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.513876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.515144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.516466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.517723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.519101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.520379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.521633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.522908] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.524280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.525586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.526921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.528269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.529720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.531006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.532302] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.533577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.534863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.536120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.537467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.538744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.540007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.543745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.545016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.546577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.547824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.549162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.550637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.551963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.553243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.554557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.555804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.557095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.558358] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.559625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.560902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.562184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.563570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.564822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.566106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.567370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.568688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.569959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.571341] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.572666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.573972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.575253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.576572] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.577822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.579126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.580381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.581681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.582960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.584239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.585559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.586822] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.588101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.589353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.590635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.591974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.593361] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.594591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.595839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.597136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.598441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.599736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.600985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.602315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.603608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.604889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.606144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.607495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.608193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.609281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.610006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.610853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.612241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.613622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.614911] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.616300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.617680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.619083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.620532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.621895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.623305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.624687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.625891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.627187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.628187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.628905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.629923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.630756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.632145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.633582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.634880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.636227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.637648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.638932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.640330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.641780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.645215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.646731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.648233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.649686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.651061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.652491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.653843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.655282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.656707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.658106] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.659622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.660951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.662318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.663713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 2459.665082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 11:23:55 executing program 7: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5603, &(0x7f0000000000)) (fail_nth: 6) [ 2475.416118] FAULT_INJECTION: forcing a failure. [ 2475.416118] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.418646] CPU: 0 PID: 29901 Comm: syz-executor.7 Not tainted 5.10.209 #1 [ 2475.420088] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.421808] Call Trace: [ 2475.422363] dump_stack+0x107/0x167 [ 2475.423150] should_fail.cold+0x5/0xa [ 2475.423950] ? create_object.isra.0+0x3a/0xa20 [ 2475.424896] should_failslab+0x5/0x20 [ 2475.425700] kmem_cache_alloc+0x5b/0x310 [ 2475.426558] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2475.427818] create_object.isra.0+0x3a/0xa20 [ 2475.428740] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2475.429821] kmem_cache_alloc+0x159/0x310 [ 2475.430704] ptlock_alloc+0x1d/0x70 [ 2475.431469] pte_alloc_one+0x68/0x1a0 [ 2475.432266] __pte_alloc+0x1d/0x330 [ 2475.433029] handle_mm_fault+0x287f/0x3500 [ 2475.433922] ? __lock_acquire+0x1657/0x5b00 [ 2475.434846] ? __pmd_alloc+0x5e0/0x5e0 [ 2475.435698] ? vmacache_find+0x55/0x2a0 [ 2475.436561] ? vmacache_update+0xce/0x140 [ 2475.437433] do_user_addr_fault+0x56e/0xc60 [ 2475.438346] exc_page_fault+0xa2/0x1a0 [ 2475.439169] asm_exc_page_fault+0x1e/0x30 [ 2475.440035] RIP: 0010:__put_user_nocheck_2+0x3/0x11 [ 2475.441064] Code: 00 00 48 39 d9 73 74 0f 01 cb 88 01 31 c9 0f 01 ca e9 52 0f 1e 02 66 90 48 bb ff ef ff ff ff 7f 00 00 48 39 d9 73 54 0f 01 cb <66> 89 01 31 c9 0f 01 ca e9 31 0f 1e 02 90 48 bb fd ef ff ff ff 7f [ 2475.444891] RSP: 0018:ffff88804fa47b98 EFLAGS: 00050293 [ 2475.445986] RAX: 0000000000000007 RBX: 00007fffffffefff RCX: 0000000020000000 [ 2475.447475] RDX: 0000000000000004 RSI: ffffffff8228283b RDI: ffff8880088f8938 [ 2475.448946] RBP: ffff88804ec91000 R08: 0000000000000000 R09: 0000000000000000 [ 2475.450410] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000020000000 [ 2475.451888] R13: 0000000000000001 R14: 0000000000005603 R15: 0000000000005603 [ 2475.453389] ? vt_ioctl+0x1ccb/0x2c90 [ 2475.454184] vt_ioctl+0x1d0b/0x2c90 [ 2475.454959] ? vt_waitactive+0x3a0/0x3a0 [ 2475.455806] ? __lock_acquire+0xbb1/0x5b00 [ 2475.456702] ? perf_trace_lock+0xac/0x490 [ 2475.457565] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2475.458641] ? vt_waitactive+0x3a0/0x3a0 [ 2475.459491] tty_ioctl+0x862/0x18b0 [ 2475.460247] ? tty_fasync+0x390/0x390 [ 2475.461035] ? ioctl_has_perm.constprop.0.isra.0+0x29a/0x410 [ 2475.462227] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2475.463307] ? do_vfs_ioctl+0x283/0x10d0 [ 2475.464145] ? selinux_bprm_creds_for_exec+0xb60/0xb60 [ 2475.465232] ? generic_block_fiemap+0x60/0x60 [ 2475.466161] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2475.467185] ? selinux_file_ioctl+0xb6/0x270 [ 2475.468100] ? tty_fasync+0x390/0x390 [ 2475.468890] __x64_sys_ioctl+0x19a/0x210 [ 2475.469739] do_syscall_64+0x33/0x40 [ 2475.470511] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2475.471586] RIP: 0033:0x7f359274eb19 [ 2475.472359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.476172] RSP: 002b:00007f358fcc4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.477748] RAX: ffffffffffffffda RBX: 00007f3592861f60 RCX: 00007f359274eb19 [ 2475.479231] RDX: 0000000020000000 RSI: 0000000000005603 RDI: 0000000000000003 [ 2475.480710] RBP: 00007f358fcc41d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.482186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2475.483670] R13: 00007ffe1c8266ff R14: 00007f358fcc4300 R15: 0000000000022000 11:23:55 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000005, 0x10, r0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x50380, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) 11:23:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfefdffffffffffff}]) 11:23:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x101}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x287371f9478d28e8, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0xf, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0xb6}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3f}}]}, 0x34}}, 0x48000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8950}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4008050}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb8, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0xed}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1f}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x4}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x3ff}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x8000}, @NL80211_TXQ_ATTR_TXOP={0x6}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x5}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x1}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x270}, @NL80211_TXQ_ATTR_AIFS={0x5}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7f}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9}, @NL80211_TXQ_ATTR_QUEUE={0x5}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x18000000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x20008801) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:23:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 72) 11:23:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) 11:23:55 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000080)={0x1, 0x401, 0x2}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}], 0x4, 0x7f, 0x7) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x6, 0x3ee5, 0x1, 0x32b7}) r1 = syz_open_dev$vcsn(&(0x7f0000000440), 0x2, 0x1) ioctl$RTC_AIE_ON(r1, 0x7001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), 0x0, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000280)={0xcc, 0x83, 0xbd96, "76d988466f7c97a65a2f1740fe5b6d8186d104ec3d7fa4e7b07b02f5b9f644babdafb073cfc8e8bba86b4c3422c2654910b2ba35b6b388ab97146f6c7ee2c80d24d5adb451e621f53a44b25fe10b2f2cd36de082874e6d52849eb77d9b9b22bba66e62355fe62a8d95b5e25dd8e885e26cd7b93aa6521e1acd62214017406ae5c1208d0873cc665b82ccd1e5c47325345fa343f41a5938ad5c35a59f1a544ba44bcdb666c73e1bd578eb5465929c20e0bbd207113807f118d56e153d546feec3b177504c7596aacedef6f828"}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x408, 0x7}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/19]) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x8800) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x12f142, 0x15c) readv(0xffffffffffffffff, &(0x7f0000001300), 0x0) 11:23:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2475.498831] FAULT_INJECTION: forcing a failure. [ 2475.498831] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.500486] CPU: 1 PID: 29905 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2475.500494] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.500510] Call Trace: [ 2475.503509] dump_stack+0x107/0x167 [ 2475.503527] should_fail.cold+0x5/0xa [ 2475.503542] ? dst_alloc+0x9e/0x5d0 [ 2475.503559] should_failslab+0x5/0x20 [ 2475.503572] kmem_cache_alloc+0x5b/0x310 [ 2475.503586] ? fnhe_hashfun+0x79/0x130 [ 2475.503602] dst_alloc+0x9e/0x5d0 [ 2475.503621] rt_dst_alloc+0x73/0x440 [ 2475.503637] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2475.503659] ip_route_output_key_hash+0x18d/0x340 [ 2475.503672] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2475.503683] ? ip_mc_output+0x401/0xa30 [ 2475.503694] ? ip_send_skb+0xdd/0x260 [ 2475.503706] ? udp_send_skb+0x6da/0x11d0 [ 2475.503723] ? __sys_sendmsg+0xe5/0x1b0 [ 2475.503736] ? do_syscall_64+0x33/0x40 11:23:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_setup(0x3e3, &(0x7f0000000580)=0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0, 0xfffffffffffffdef}]) [ 2475.503748] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2475.503763] ? lock_acquire+0x197/0x470 [ 2475.503779] ip_route_output_flow+0x23/0x150 [ 2475.503795] ip_tunnel_xmit+0x70e/0x2f50 11:23:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) [ 2475.503815] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2475.503829] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2475.503843] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2475.503855] ? kmem_cache_free+0xa7/0x2d0 [ 2475.503878] ? perf_trace_lock+0xac/0x490 [ 2475.503888] ? kfree_skbmem+0xef/0x1b0 [ 2475.503902] ? kmem_cache_free+0x249/0x2d0 [ 2475.503919] sit_tunnel_xmit+0xef0/0x2960 11:23:55 executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000008000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f00000002c0)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000089094ab4200f4ffffff00e0f4655f0000000000000400048b0a8da45213b4", 0x24, 0x2100}], 0x0, &(0x7f0000000140)) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80080, 0x8) [ 2475.503938] ? find_held_lock+0x2c/0x110 [ 2475.503950] ? ipip_rcv+0x4f0/0x4f0 11:23:55 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) (fail_nth: 73) [ 2475.503966] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2475.503979] ? lock_downgrade+0x6d0/0x6d0 [ 2475.503993] ? run_filter+0x4d0/0x4d0 [ 2475.504006] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2475.504030] dev_hard_start_xmit+0x1cb/0x6f0 [ 2475.504050] __dev_queue_xmit+0x17ec/0x2710 [ 2475.504068] ? find_held_lock+0x2c/0x110 [ 2475.504084] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2475.504106] ? mark_held_locks+0x9e/0xe0 [ 2475.504123] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2475.504141] neigh_connected_output+0x382/0x4d0 [ 2475.504164] ip_finish_output2+0x6f1/0x21f0 [ 2475.504180] ? ip_copy_metadata+0x5f7/0xa40 [ 2475.504194] ? ip_frag_next+0x9e0/0x9e0 [ 2475.504207] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2475.504228] ip_do_fragment+0x189e/0x1dd0 [ 2475.504241] ? ip_frag_next+0x9e0/0x9e0 [ 2475.504265] ? ip_finish_output2+0x21f0/0x21f0 [ 2475.504277] ? nf_hook+0x137/0x510 [ 2475.504297] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2475.504313] ? nf_hook_slow+0xfc/0x1e0 [ 2475.504336] ip_fragment.constprop.0+0x174/0x240 [ 2475.504352] __ip_finish_output.part.0+0x3db/0xb50 [ 2475.504367] ? ip_fragment.constprop.0+0x240/0x240 [ 2475.504383] ? netif_rx_ni+0xe7/0x300 [ 2475.504402] ip_mc_output+0x401/0xa30 [ 2475.504420] ip_send_skb+0xdd/0x260 [ 2475.504436] udp_send_skb+0x6da/0x11d0 [ 2475.504459] udp_sendmsg+0x139a/0x2170 [ 2475.504471] ? mark_lock+0xf5/0x2df0 [ 2475.504485] ? ip_frag_init+0x350/0x350 [ 2475.504500] ? mark_lock+0xf5/0x2df0 [ 2475.504513] ? perf_trace_lock+0xac/0x490 [ 2475.504526] ? udp_setsockopt+0xc0/0xc0 [ 2475.504539] ? mark_lock+0xf5/0x2df0 [ 2475.504552] ? __lockdep_reset_lock+0x180/0x180 [ 2475.504571] ? mark_lock+0xf5/0x2df0 [ 2475.504587] ? mark_lock+0xf5/0x2df0 [ 2475.504600] ? lock_chain_count+0x20/0x20 [ 2475.504613] ? __lock_acquire+0xbb1/0x5b00 [ 2475.504627] ? lock_chain_count+0x20/0x20 [ 2475.504651] ? perf_trace_lock+0xac/0x490 [ 2475.504664] ? __lockdep_reset_lock+0x180/0x180 [ 2475.504684] udpv6_sendmsg+0x1bed/0x2af0 [ 2475.504710] ? udp_v6_push_pending_frames+0x360/0x360 [ 2475.504729] ? mark_lock+0xf5/0x2df0 [ 2475.504747] ? lock_acquire+0x197/0x470 [ 2475.504759] ? find_held_lock+0x2c/0x110 [ 2475.504776] ? __might_fault+0xd3/0x180 [ 2475.504790] ? lock_downgrade+0x6d0/0x6d0 [ 2475.504806] ? lock_downgrade+0x6d0/0x6d0 [ 2475.504825] ? sock_has_perm+0x1ea/0x280 [ 2475.504841] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2475.504858] ? _copy_from_user+0xfb/0x1b0 [ 2475.504881] ? __import_iovec+0x458/0x590 [ 2475.504895] ? udp_v6_push_pending_frames+0x360/0x360 [ 2475.504912] inet6_sendmsg+0x105/0x140 [ 2475.504926] ? inet6_compat_ioctl+0x320/0x320 [ 2475.504937] __sock_sendmsg+0xf2/0x190 [ 2475.504951] ____sys_sendmsg+0x70d/0x870 [ 2475.504966] ? sock_write_iter+0x3d0/0x3d0 [ 2475.504977] ? do_recvmmsg+0x6d0/0x6d0 [ 2475.504990] ? perf_trace_lock+0xac/0x490 [ 2475.505008] ? __lockdep_reset_lock+0x180/0x180 [ 2475.505019] ? perf_trace_lock+0xac/0x490 [ 2475.505038] ___sys_sendmsg+0xf3/0x170 [ 2475.505053] ? sendmsg_copy_msghdr+0x160/0x160 [ 2475.505071] ? lock_downgrade+0x6d0/0x6d0 [ 2475.505087] ? find_held_lock+0x2c/0x110 [ 2475.505108] ? __fget_files+0x296/0x4c0 [ 2475.505129] ? __fget_light+0xea/0x290 [ 2475.505149] __sys_sendmsg+0xe5/0x1b0 [ 2475.505162] ? __sys_sendmsg_sock+0x40/0x40 [ 2475.505175] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.505204] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.505216] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.505226] ? trace_hardirqs_on+0x5b/0x180 [ 2475.505243] do_syscall_64+0x33/0x40 [ 2475.505255] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2475.505264] RIP: 0033:0x7f9f7e251b19 [ 2475.505279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.505286] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2475.505301] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2475.505310] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2475.505317] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.505325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.505333] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2475.568385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 2475.651386] FAULT_INJECTION: forcing a failure. [ 2475.651386] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.651422] CPU: 1 PID: 29929 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2475.651430] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2475.651434] Call Trace: [ 2475.651452] dump_stack+0x107/0x167 [ 2475.651472] should_fail.cold+0x5/0xa [ 2475.651487] ? create_object.isra.0+0x3a/0xa20 [ 2475.651504] should_failslab+0x5/0x20 [ 2475.651517] kmem_cache_alloc+0x5b/0x310 [ 2475.651540] create_object.isra.0+0x3a/0xa20 [ 2475.651554] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2475.651576] kmem_cache_alloc+0x159/0x310 [ 2475.704606] ? fnhe_hashfun+0x79/0x130 [ 2475.704624] dst_alloc+0x9e/0x5d0 [ 2475.704640] rt_dst_alloc+0x73/0x440 [ 2475.704655] ip_route_output_key_hash_rcu+0x93d/0x2a90 [ 2475.704675] ip_route_output_key_hash+0x18d/0x340 [ 2475.704687] ? ip_route_output_key_hash_rcu+0x2a90/0x2a90 [ 2475.704697] ? ip_mc_output+0x401/0xa30 [ 2475.704708] ? ip_send_skb+0xdd/0x260 [ 2475.704721] ? udp_send_skb+0x6da/0x11d0 [ 2475.704737] ? __sys_sendmsg+0xe5/0x1b0 [ 2475.704750] ? do_syscall_64+0x33/0x40 [ 2475.704771] ? entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2475.711532] ? lock_acquire+0x197/0x470 [ 2475.711547] ip_route_output_flow+0x23/0x150 [ 2475.711569] ip_tunnel_xmit+0x70e/0x2f50 [ 2475.713480] ? lockdep_hardirqs_on_prepare+0x40/0x3e0 [ 2475.713493] ? trace_raw_output_preemptirq_template+0xa0/0x130 [ 2475.713507] ? ip_md_tunnel_xmit+0x1820/0x1820 [ 2475.713528] ? kmem_cache_free+0xa7/0x2d0 [ 2475.716450] ? perf_trace_lock+0xac/0x490 [ 2475.716460] ? kfree_skbmem+0xef/0x1b0 [ 2475.716472] ? kmem_cache_free+0x249/0x2d0 [ 2475.716493] sit_tunnel_xmit+0xef0/0x2960 [ 2475.718888] ? find_held_lock+0x2c/0x110 [ 2475.718901] ? ipip_rcv+0x4f0/0x4f0 [ 2475.718922] ? dev_queue_xmit_nit+0x7f5/0xb00 [ 2475.720761] ? lock_downgrade+0x6d0/0x6d0 [ 2475.720773] ? run_filter+0x4d0/0x4d0 [ 2475.720785] ? dev_queue_xmit_nit+0x80b/0xb00 [ 2475.720806] dev_hard_start_xmit+0x1cb/0x6f0 [ 2475.720823] __dev_queue_xmit+0x17ec/0x2710 [ 2475.720840] ? find_held_lock+0x2c/0x110 [ 2475.720870] ? netdev_core_pick_tx+0x2f0/0x2f0 [ 2475.724873] ? mark_held_locks+0x9e/0xe0 [ 2475.725410] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 [ 2475.726107] neigh_connected_output+0x382/0x4d0 [ 2475.726738] ip_finish_output2+0x6f1/0x21f0 [ 2475.727310] ? ip_copy_metadata+0x5f7/0xa40 [ 2475.727894] ? ip_frag_next+0x9e0/0x9e0 [ 2475.728429] ? ip_fraglist_prepare+0x38d/0x5a0 [ 2475.729039] ip_do_fragment+0x189e/0x1dd0 [ 2475.729597] ? ip_frag_next+0x9e0/0x9e0 [ 2475.730136] ? ip_finish_output2+0x21f0/0x21f0 [ 2475.730754] ? nf_hook+0x137/0x510 [ 2475.731229] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2475.731922] ? nf_hook_slow+0xfc/0x1e0 [ 2475.732441] ip_fragment.constprop.0+0x174/0x240 [ 2475.733068] __ip_finish_output.part.0+0x3db/0xb50 [ 2475.733721] ? ip_fragment.constprop.0+0x240/0x240 [ 2475.734375] ? netif_rx_ni+0xe7/0x300 [ 2475.734891] ip_mc_output+0x401/0xa30 [ 2475.735398] ip_send_skb+0xdd/0x260 [ 2475.735857] udp_send_skb+0x6da/0x11d0 [ 2475.736374] udp_sendmsg+0x139a/0x2170 [ 2475.736872] ? mark_lock+0xf5/0x2df0 [ 2475.737338] ? ip_frag_init+0x350/0x350 [ 2475.737849] ? mark_lock+0xf5/0x2df0 [ 2475.738326] ? perf_trace_lock+0xac/0x490 [ 2475.738870] ? udp_setsockopt+0xc0/0xc0 [ 2475.739381] ? mark_lock+0xf5/0x2df0 [ 2475.739847] ? __lockdep_reset_lock+0x180/0x180 [ 2475.740453] ? mark_lock+0xf5/0x2df0 [ 2475.740931] ? mark_lock+0xf5/0x2df0 [ 2475.741407] ? lock_chain_count+0x20/0x20 [ 2475.741937] ? __lock_acquire+0xbb1/0x5b00 [ 2475.742482] ? lock_chain_count+0x20/0x20 [ 2475.743028] ? perf_trace_lock+0xac/0x490 [ 2475.743563] ? __lockdep_reset_lock+0x180/0x180 [ 2475.744157] udpv6_sendmsg+0x1bed/0x2af0 [ 2475.744691] ? udp_v6_push_pending_frames+0x360/0x360 [ 2475.745356] ? mark_lock+0xf5/0x2df0 [ 2475.745833] ? lock_acquire+0x197/0x470 [ 2475.746330] ? find_held_lock+0x2c/0x110 [ 2475.746883] ? __might_fault+0xd3/0x180 [ 2475.747399] ? lock_downgrade+0x6d0/0x6d0 [ 2475.747932] ? lock_downgrade+0x6d0/0x6d0 [ 2475.748458] ? sock_has_perm+0x1ea/0x280 [ 2475.748983] ? selinux_socket_post_create+0x7f0/0x7f0 [ 2475.749670] ? _copy_from_user+0xfb/0x1b0 [ 2475.750215] ? __import_iovec+0x458/0x590 [ 2475.750760] ? udp_v6_push_pending_frames+0x360/0x360 [ 2475.751430] inet6_sendmsg+0x105/0x140 [ 2475.751936] ? inet6_compat_ioctl+0x320/0x320 [ 2475.752516] __sock_sendmsg+0xf2/0x190 [ 2475.753019] ____sys_sendmsg+0x70d/0x870 [ 2475.753560] ? sock_write_iter+0x3d0/0x3d0 [ 2475.754099] ? do_recvmmsg+0x6d0/0x6d0 [ 2475.754602] ? perf_trace_lock+0xac/0x490 [ 2475.755135] ? __lockdep_reset_lock+0x180/0x180 [ 2475.755741] ? perf_trace_lock+0xac/0x490 [ 2475.756269] ___sys_sendmsg+0xf3/0x170 [ 2475.756770] ? sendmsg_copy_msghdr+0x160/0x160 [ 2475.757365] ? lock_downgrade+0x6d0/0x6d0 [ 2475.757901] ? find_held_lock+0x2c/0x110 [ 2475.758427] ? __fget_files+0x296/0x4c0 [ 2475.758954] ? __fget_light+0xea/0x290 [ 2475.759459] __sys_sendmsg+0xe5/0x1b0 [ 2475.759954] ? __sys_sendmsg_sock+0x40/0x40 [ 2475.760502] ? rcu_read_lock_any_held+0x75/0xa0 [ 2475.761115] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2475.761791] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2475.762461] ? trace_hardirqs_on+0x5b/0x180 [ 2475.763027] do_syscall_64+0x33/0x40 [ 2475.763509] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2475.764176] RIP: 0033:0x7f9f7e251b19 [ 2475.764659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2475.767001] RSP: 002b:00007f9f7b7c7188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2475.767985] RAX: ffffffffffffffda RBX: 00007f9f7e364f60 RCX: 00007f9f7e251b19 [ 2475.768829] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000004 [ 2475.769637] RBP: 00007f9f7b7c71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2475.770546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2475.771476] R13: 00007fffe35bfd1f R14: 00007f9f7b7c7300 R15: 0000000000022000 [ 2475.861937] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue VM DIAGNOSIS: 11:29:02 Registers: info registers vcpu 0 RAX=ffffffff83e605a0 RBX=0000000000000000 RCX=ffffffff83e4865c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e60ba8 RBP=fffffbfff09c6450 RSP=ffffffff84e07e38 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff856727c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e605ae RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe2d00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f72fd637010 CR3=000000001728a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041851d3f00000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e605a0 RBX=0000000000000001 RCX=ffffffff83e4865c RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e60ba8 RBP=ffffed100112f000 RSP=ffff888008987e70 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff856727c8 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e605ae RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005641ed343678 CR3=000000001728a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00eb02fe016c6c6f502e726567616e61 XMM02=696e696d20636578650d0a0100010101 XMM03=6873616d7320636578650a00657a696d XMM04=7865110073746e696820636578650a00 XMM05=00737472617473657220726f74756365 XMM06=636578650b007a7a7566206365786509 XMM07=657320636578650a0065676169727420 XMM08=20636578650a00657a696d696e696d20 XMM09=746e696820636578650a006873616d73 XMM10=7473657220726f747563657865110073 XMM11=007a7a75662063657865090073747261 XMM12=78650a0065676169727420636578650b XMM13=7420636578650a007364656573206365 XMM14=0e006e6567206365786508006c61746f XMM15=00006574616469646e61632063657865